diff --git a/common/config/rush/pnpm-lock.yaml b/common/config/rush/pnpm-lock.yaml index 14cd0cf2ff92..0e1de0880ee2 100644 --- a/common/config/rush/pnpm-lock.yaml +++ b/common/config/rush/pnpm-lock.yaml @@ -734,6 +734,7 @@ packages: /@azure/ai-form-recognizer/3.1.0-beta.3: resolution: {integrity: sha512-+4QtFKNyxAmdqpcYjuAtmWKm/MuOe9kZsbpS9jA9h0YHzngNj5gc67AA4egV9BXOq9x+1phjYTNC/rxiOUr1uQ==} engines: {node: '>=8.0.0'} + deprecated: Please migrate to a supported (non-beta) version of this package dependencies: '@azure/core-auth': 1.4.0 '@azure/core-http': 1.2.6 @@ -14606,7 +14607,7 @@ packages: dev: false file:projects/arm-securityinsight.tgz: - resolution: {integrity: sha512-EGJtHHI56L+yUltRwDYq/toy0a6WqvIypC88WhojX/XJXuLsEwO/Cyn7ryo/bXD9BQKdsF7BjQCEIPhQbBN3RQ==, tarball: file:projects/arm-securityinsight.tgz} + resolution: {integrity: sha512-siy2bX/cICza7AI6UkGPZoGm8rAdexoeXY4HtHb/jnkFwUJt9cNWOU0APs0+ZIbX56au0JKEXfrkFy39hehrJQ==, tarball: file:projects/arm-securityinsight.tgz} name: '@rush-temp/arm-securityinsight' version: 0.0.0 dependencies: @@ -14620,8 +14621,8 @@ packages: '@types/node': 14.18.42 chai: 4.3.7 cross-env: 7.0.3 - dotenv: 8.6.0 - mkdirp: 1.0.4 + dotenv: 16.0.3 + mkdirp: 2.1.6 mocha: 7.2.0 rimraf: 3.0.2 rollup: 2.79.1 @@ -17171,7 +17172,7 @@ packages: dev: false file:projects/eventgrid.tgz: - resolution: {integrity: sha512-55L6D3Zr5nZu7iJ/bEuLzhKZ2AG4xeZ3aqkU2H9n3h1/bCp8g9Z4IhCZ3zBj5tSyZolhXot3cbINTIHlvDZZtA==, tarball: file:projects/eventgrid.tgz} + resolution: {integrity: sha512-/v2/2q6QmBLAy9IctuvCXDMjEedZw7eU0nNBrsQYr1zZqFHDyQRVJXLYYZVsIjWpuYTb6c/o7fkUhfe8YIuFAg==, tarball: file:projects/eventgrid.tgz} name: '@rush-temp/eventgrid' version: 0.0.0 dependencies: @@ -18744,7 +18745,7 @@ packages: dev: false file:projects/perf-service-bus.tgz: - resolution: {integrity: sha512-X1NvwwnX9KW680X8qYAvWSab7HtqQCZXw/alWYUXwIV5glv3ivLmPYQ5Piid4yK4GyhBRMmd1zmgHk+MHPXiOQ==, tarball: file:projects/perf-service-bus.tgz} + resolution: {integrity: sha512-wioVHbwMitD5Oi7RoiJr6nKap7VrDmz+QfijZnl1FWfCgRdtrCyIpYp2oC+VDnmCiPQavSFrLpW+6qmzGR1jrg==, tarball: file:projects/perf-service-bus.tgz} name: '@rush-temp/perf-service-bus' version: 0.0.0 dependencies: diff --git a/sdk/securityinsight/arm-securityinsight/CHANGELOG.md b/sdk/securityinsight/arm-securityinsight/CHANGELOG.md index 7e10d8fce8ba..e42604030404 100644 --- a/sdk/securityinsight/arm-securityinsight/CHANGELOG.md +++ b/sdk/securityinsight/arm-securityinsight/CHANGELOG.md @@ -1,15 +1,415 @@ # Release History + +## 1.0.0-beta.7 (2023-04-06) + +**Features** -## 1.0.0-beta.7 (Unreleased) - -### Features Added - -### Breaking Changes - -### Bugs Fixed + - Added operation group AlertRuleOperations + - Added operation group ContentPackage + - Added operation group ContentPackages + - Added operation group ContentTemplate + - Added operation group ContentTemplates + - Added operation group Get + - Added operation group GetRecommendations + - Added operation group GetTriggeredAnalyticsRuleRuns + - Added operation group HuntComments + - Added operation group HuntRelations + - Added operation group Hunts + - Added operation group IncidentTasks + - Added operation group ProductPackage + - Added operation group ProductPackages + - Added operation group ProductTemplate + - Added operation group ProductTemplates + - Added operation group TriggeredAnalyticsRuleRunOperations + - Added operation group Update + - Added operation group WorkspaceManagerAssignmentJobs + - Added operation group WorkspaceManagerAssignments + - Added operation group WorkspaceManagerConfigurations + - Added operation group WorkspaceManagerGroups + - Added operation group WorkspaceManagerMembers + - Added operation Entities.runPlaybook + - Added Interface AddIncidentTaskActionProperties + - Added Interface AlertPropertyMapping + - Added Interface AlertRuleTriggerRuleRunHeaders + - Added Interface AlertRuleTriggerRuleRunOptionalParams + - Added Interface AnalyticsRuleRunTrigger + - Added Interface AssignmentItem + - Added Interface AutomationRuleAddIncidentTaskAction + - Added Interface AzureEntityResource + - Added Interface Content + - Added Interface ContentPackageInstallOptionalParams + - Added Interface ContentPackagesGetOptionalParams + - Added Interface ContentPackagesListNextOptionalParams + - Added Interface ContentPackagesListOptionalParams + - Added Interface ContentPackageUninstallOptionalParams + - Added Interface ContentTemplateDeleteOptionalParams + - Added Interface ContentTemplateGetOptionalParams + - Added Interface ContentTemplateInstallOptionalParams + - Added Interface ContentTemplatesListNextOptionalParams + - Added Interface ContentTemplatesListOptionalParams + - Added Interface EntitiesRunPlaybookOptionalParams + - Added Interface EntityManualTriggerRequestBody + - Added Interface ErrorAdditionalInfo + - Added Interface ErrorDetail + - Added Interface ErrorModel + - Added Interface ErrorResponse + - Added Interface GetRecommendationsListOptionalParams + - Added Interface GetSingleRecommendationOptionalParams + - Added Interface GetTriggeredAnalyticsRuleRunsListNextOptionalParams + - Added Interface GetTriggeredAnalyticsRuleRunsListOptionalParams + - Added Interface Hunt + - Added Interface HuntComment + - Added Interface HuntCommentList + - Added Interface HuntCommentsCreateOrUpdateOptionalParams + - Added Interface HuntCommentsDeleteOptionalParams + - Added Interface HuntCommentsGetOptionalParams + - Added Interface HuntCommentsListNextOptionalParams + - Added Interface HuntCommentsListOptionalParams + - Added Interface HuntList + - Added Interface HuntOwner + - Added Interface HuntRelation + - Added Interface HuntRelationList + - Added Interface HuntRelationsCreateOrUpdateOptionalParams + - Added Interface HuntRelationsDeleteOptionalParams + - Added Interface HuntRelationsGetOptionalParams + - Added Interface HuntRelationsListNextOptionalParams + - Added Interface HuntRelationsListOptionalParams + - Added Interface HuntsCreateOrUpdateOptionalParams + - Added Interface HuntsDeleteOptionalParams + - Added Interface HuntsGetOptionalParams + - Added Interface HuntsListNextOptionalParams + - Added Interface HuntsListOptionalParams + - Added Interface IncidentTask + - Added Interface IncidentTaskList + - Added Interface IncidentTasksCreateOrUpdateOptionalParams + - Added Interface IncidentTasksDeleteOptionalParams + - Added Interface IncidentTasksGetOptionalParams + - Added Interface IncidentTasksListNextOptionalParams + - Added Interface IncidentTasksListOptionalParams + - Added Interface Instructions + - Added Interface Job + - Added Interface JobItem + - Added Interface JobList + - Added Interface MetadataDependenciesAutoGenerated + - Added Interface MetadataDependenciesAutoGenerated2 + - Added Interface MicrosoftPurviewInformationProtectionCheckRequirements + - Added Interface MicrosoftPurviewInformationProtectionCheckRequirementsProperties + - Added Interface MicrosoftPurviewInformationProtectionConnectorDataTypes + - Added Interface MicrosoftPurviewInformationProtectionConnectorDataTypesLogs + - Added Interface MicrosoftPurviewInformationProtectionDataConnector + - Added Interface MicrosoftPurviewInformationProtectionDataConnectorProperties + - Added Interface MTPDataConnectorDataTypesAlerts + - Added Interface MtpFilteredProviders + - Added Interface PackageList + - Added Interface PackageListAutoGenerated + - Added Interface PackageModel + - Added Interface PackageModelAutoGenerated + - Added Interface ProductPackageGetOptionalParams + - Added Interface ProductPackagesListNextOptionalParams + - Added Interface ProductPackagesListOptionalParams + - Added Interface ProductTemplateGetOptionalParams + - Added Interface ProductTemplatesListNextOptionalParams + - Added Interface ProductTemplatesListOptionalParams + - Added Interface Recommendation + - Added Interface RecommendationList + - Added Interface RecommendationPatch + - Added Interface RecommendedAction + - Added Interface SentinelEntityMapping + - Added Interface TemplateList + - Added Interface TemplateListAutoGenerated + - Added Interface TemplateModel + - Added Interface TemplateModelAutoGenerated + - Added Interface TriggeredAnalyticsRuleRun + - Added Interface TriggeredAnalyticsRuleRunGetOptionalParams + - Added Interface TriggeredAnalyticsRuleRuns + - Added Interface UpdateRecommendationOptionalParams + - Added Interface WorkspaceManagerAssignment + - Added Interface WorkspaceManagerAssignmentJobsCreateOptionalParams + - Added Interface WorkspaceManagerAssignmentJobsDeleteOptionalParams + - Added Interface WorkspaceManagerAssignmentJobsGetOptionalParams + - Added Interface WorkspaceManagerAssignmentJobsListNextOptionalParams + - Added Interface WorkspaceManagerAssignmentJobsListOptionalParams + - Added Interface WorkspaceManagerAssignmentList + - Added Interface WorkspaceManagerAssignmentsCreateOrUpdateOptionalParams + - Added Interface WorkspaceManagerAssignmentsDeleteOptionalParams + - Added Interface WorkspaceManagerAssignmentsGetOptionalParams + - Added Interface WorkspaceManagerAssignmentsListNextOptionalParams + - Added Interface WorkspaceManagerAssignmentsListOptionalParams + - Added Interface WorkspaceManagerConfiguration + - Added Interface WorkspaceManagerConfigurationList + - Added Interface WorkspaceManagerConfigurationsCreateOrUpdateOptionalParams + - Added Interface WorkspaceManagerConfigurationsDeleteOptionalParams + - Added Interface WorkspaceManagerConfigurationsGetOptionalParams + - Added Interface WorkspaceManagerConfigurationsListNextOptionalParams + - Added Interface WorkspaceManagerConfigurationsListOptionalParams + - Added Interface WorkspaceManagerGroup + - Added Interface WorkspaceManagerGroupList + - Added Interface WorkspaceManagerGroupsCreateOrUpdateOptionalParams + - Added Interface WorkspaceManagerGroupsDeleteOptionalParams + - Added Interface WorkspaceManagerGroupsGetOptionalParams + - Added Interface WorkspaceManagerGroupsListNextOptionalParams + - Added Interface WorkspaceManagerGroupsListOptionalParams + - Added Interface WorkspaceManagerMember + - Added Interface WorkspaceManagerMembersCreateOrUpdateOptionalParams + - Added Interface WorkspaceManagerMembersDeleteOptionalParams + - Added Interface WorkspaceManagerMembersGetOptionalParams + - Added Interface WorkspaceManagerMembersList + - Added Interface WorkspaceManagerMembersListNextOptionalParams + - Added Interface WorkspaceManagerMembersListOptionalParams + - Added Type Alias AlertProperty + - Added Type Alias AlertRuleTriggerRuleRunResponse + - Added Type Alias Category + - Added Type Alias ContentPackageInstallResponse + - Added Type Alias ContentPackagesGetResponse + - Added Type Alias ContentPackagesListNextResponse + - Added Type Alias ContentPackagesListResponse + - Added Type Alias ContentTemplateGetResponse + - Added Type Alias ContentTemplateInstallResponse + - Added Type Alias ContentTemplatesListNextResponse + - Added Type Alias ContentTemplatesListResponse + - Added Type Alias Context + - Added Type Alias EntityKindEnum + - Added Type Alias Enum19 + - Added Type Alias Flag + - Added Type Alias GetRecommendationsListResponse + - Added Type Alias GetSingleRecommendationResponse + - Added Type Alias GetTriggeredAnalyticsRuleRunsListNextResponse + - Added Type Alias GetTriggeredAnalyticsRuleRunsListResponse + - Added Type Alias HuntCommentsCreateOrUpdateResponse + - Added Type Alias HuntCommentsGetResponse + - Added Type Alias HuntCommentsListNextResponse + - Added Type Alias HuntCommentsListResponse + - Added Type Alias HuntRelationsCreateOrUpdateResponse + - Added Type Alias HuntRelationsGetResponse + - Added Type Alias HuntRelationsListNextResponse + - Added Type Alias HuntRelationsListResponse + - Added Type Alias HuntsCreateOrUpdateResponse + - Added Type Alias HuntsGetResponse + - Added Type Alias HuntsListNextResponse + - Added Type Alias HuntsListResponse + - Added Type Alias HypothesisStatus + - Added Type Alias IncidentTasksCreateOrUpdateResponse + - Added Type Alias IncidentTasksGetResponse + - Added Type Alias IncidentTasksListNextResponse + - Added Type Alias IncidentTasksListResponse + - Added Type Alias IncidentTaskStatus + - Added Type Alias Mode + - Added Type Alias MtpProvider + - Added Type Alias PackageKind + - Added Type Alias Priority + - Added Type Alias ProductPackageGetResponse + - Added Type Alias ProductPackagesListNextResponse + - Added Type Alias ProductPackagesListResponse + - Added Type Alias ProductTemplateGetResponse + - Added Type Alias ProductTemplatesListNextResponse + - Added Type Alias ProductTemplatesListResponse + - Added Type Alias ProvisioningState + - Added Type Alias State + - Added Type Alias Status + - Added Type Alias ThreatIntelligenceResourceInnerKind + - Added Type Alias ThreatIntelligenceSortingOrder + - Added Type Alias TriggeredAnalyticsRuleRunGetResponse + - Added Type Alias UpdateRecommendationResponse + - Added Type Alias WorkspaceManagerAssignmentJobsCreateResponse + - Added Type Alias WorkspaceManagerAssignmentJobsGetResponse + - Added Type Alias WorkspaceManagerAssignmentJobsListNextResponse + - Added Type Alias WorkspaceManagerAssignmentJobsListResponse + - Added Type Alias WorkspaceManagerAssignmentsCreateOrUpdateResponse + - Added Type Alias WorkspaceManagerAssignmentsGetResponse + - Added Type Alias WorkspaceManagerAssignmentsListNextResponse + - Added Type Alias WorkspaceManagerAssignmentsListResponse + - Added Type Alias WorkspaceManagerConfigurationsCreateOrUpdateResponse + - Added Type Alias WorkspaceManagerConfigurationsGetResponse + - Added Type Alias WorkspaceManagerConfigurationsListNextResponse + - Added Type Alias WorkspaceManagerConfigurationsListResponse + - Added Type Alias WorkspaceManagerGroupsCreateOrUpdateResponse + - Added Type Alias WorkspaceManagerGroupsGetResponse + - Added Type Alias WorkspaceManagerGroupsListNextResponse + - Added Type Alias WorkspaceManagerGroupsListResponse + - Added Type Alias WorkspaceManagerMembersCreateOrUpdateResponse + - Added Type Alias WorkspaceManagerMembersGetResponse + - Added Type Alias WorkspaceManagerMembersListNextResponse + - Added Type Alias WorkspaceManagerMembersListResponse + - Interface AlertDetailsOverride has a new optional parameter alertDynamicProperties + - Interface MTPDataConnector has a new optional parameter filteredProviders + - Interface MTPDataConnectorDataTypes has a new optional parameter alerts + - Interface MTPDataConnectorProperties has a new optional parameter filteredProviders + - Interface NrtAlertRule has a new optional parameter sentinelEntitiesMappings + - Interface NrtAlertRuleTemplate has a new optional parameter sentinelEntitiesMappings + - Interface QueryBasedAlertRuleTemplateProperties has a new optional parameter sentinelEntitiesMappings + - Interface ScheduledAlertRule has a new optional parameter sentinelEntitiesMappings + - Interface ScheduledAlertRuleCommonProperties has a new optional parameter sentinelEntitiesMappings + - Interface ScheduledAlertRuleTemplate has a new optional parameter sentinelEntitiesMappings + - Interface SecurityAlertTimelineItem has a new optional parameter intent + - Interface SecurityAlertTimelineItem has a new optional parameter techniques + - Type of parameter actionType of interface AutomationRuleAction is changed from "ModifyProperties" | "RunPlaybook" to "AddIncidentTask" | "ModifyProperties" | "RunPlaybook" + - Type of parameter kind of interface DataConnectorsCheckRequirements is changed from "AzureActiveDirectory" | "AzureAdvancedThreatProtection" | "AzureSecurityCenter" | "AmazonWebServicesCloudTrail" | "AmazonWebServicesS3" | "Dynamics365" | "MicrosoftCloudAppSecurity" | "MicrosoftDefenderAdvancedThreatProtection" | "MicrosoftThreatIntelligence" | "MicrosoftThreatProtection" | "OfficeATP" | "OfficeIRM" | "Office365Project" | "OfficePowerBI" | "ThreatIntelligence" | "ThreatIntelligenceTaxii" | "IOT" to "AzureActiveDirectory" | "AzureAdvancedThreatProtection" | "AzureSecurityCenter" | "AmazonWebServicesCloudTrail" | "AmazonWebServicesS3" | "Dynamics365" | "MicrosoftCloudAppSecurity" | "MicrosoftDefenderAdvancedThreatProtection" | "MicrosoftThreatIntelligence" | "MicrosoftThreatProtection" | "OfficeATP" | "OfficeIRM" | "MicrosoftPurviewInformationProtection" | "Office365Project" | "OfficePowerBI" | "ThreatIntelligence" | "ThreatIntelligenceTaxii" | "IOT" + - Added Enum KnownAlertProperty + - Added Enum KnownCategory + - Added Enum KnownContext + - Added Enum KnownEntityKindEnum + - Added Enum KnownEnum19 + - Added Enum KnownFlag + - Added Enum KnownHypothesisStatus + - Added Enum KnownIncidentTaskStatus + - Added Enum KnownMode + - Added Enum KnownMtpProvider + - Added Enum KnownPackageKind + - Added Enum KnownPriority + - Added Enum KnownProvisioningState + - Added Enum KnownState + - Added Enum KnownStatus + - Added Enum KnownThreatIntelligenceResourceInnerKind + - Added Enum KnownThreatIntelligenceSortingOrder + - Enum KnownActionType has a new value AddIncidentTask + - Enum KnownDataConnectorKind has a new value MicrosoftPurviewInformationProtection -### Other Changes +**Breaking Changes** + - Operation Incidents.createTeam has a new signature + - Interface MstiDataConnectorDataTypes no longer has parameter bingSafetyPhishingURL + - Parameter logicAppResourceId of interface PlaybookActionProperties is now required + - Type of parameter additionalData of interface AccountEntity is changed from { + [propertyName: string]: Record; + } to { + [propertyName: string]: any; + } + - Type of parameter additionalData of interface AzureResourceEntity is changed from { + [propertyName: string]: Record; + } to { + [propertyName: string]: any; + } + - Type of parameter additionalData of interface CloudApplicationEntity is changed from { + [propertyName: string]: Record; + } to { + [propertyName: string]: any; + } + - Type of parameter additionalData of interface DnsEntity is changed from { + [propertyName: string]: Record; + } to { + [propertyName: string]: any; + } + - Type of parameter kind of interface Entity is changed from EntityKind to EntityKindEnum + - Type of parameter additionalData of interface EntityCommonProperties is changed from { + [propertyName: string]: Record; + } to { + [propertyName: string]: any; + } + - Type of parameter additionalData of interface EntityEdges is changed from { + [propertyName: string]: Record; + } to { + [propertyName: string]: any; + } + - Type of parameter kind of interface EntityQueriesListOptionalParams is changed from Enum13 to Enum19 + - Type of parameter entityKind of interface ExpansionResultAggregation is changed from EntityKind to EntityKindEnum + - Type of parameter additionalData of interface FileEntity is changed from { + [propertyName: string]: Record; + } to { + [propertyName: string]: any; + } + - Type of parameter additionalData of interface FileHashEntity is changed from { + [propertyName: string]: Record; + } to { + [propertyName: string]: any; + } + - Type of parameter additionalData of interface HostEntity is changed from { + [propertyName: string]: Record; + } to { + [propertyName: string]: any; + } + - Type of parameter additionalData of interface HuntingBookmark is changed from { + [propertyName: string]: Record; + } to { + [propertyName: string]: any; + } + - Type of parameter entityKind of interface IncidentEntitiesResultsMetadata is changed from EntityKind to EntityKindEnum + - Type of parameter additionalData of interface IoTDeviceEntity is changed from { + [propertyName: string]: Record; + } to { + [propertyName: string]: any; + } + - Type of parameter additionalData of interface IpEntity is changed from { + [propertyName: string]: Record; + } to { + [propertyName: string]: any; + } + - Type of parameter additionalData of interface MailboxEntity is changed from { + [propertyName: string]: Record; + } to { + [propertyName: string]: any; + } + - Type of parameter additionalData of interface MailClusterEntity is changed from { + [propertyName: string]: Record; + } to { + [propertyName: string]: any; + } + - Type of parameter additionalData of interface MailMessageEntity is changed from { + [propertyName: string]: Record; + } to { + [propertyName: string]: any; + } + - Type of parameter additionalData of interface MalwareEntity is changed from { + [propertyName: string]: Record; + } to { + [propertyName: string]: any; + } + - Type of parameter dependencies of interface MetadataModel is changed from MetadataDependencies to MetadataDependenciesAutoGenerated + - Type of parameter kind of interface MetadataModel is changed from Kind to string + - Type of parameter dependencies of interface MetadataPatch is changed from MetadataDependencies to MetadataDependenciesAutoGenerated + - Type of parameter kind of interface MetadataPatch is changed from Kind to string + - Type of parameter additionalData of interface NicEntity is changed from { + [propertyName: string]: Record; + } to { + [propertyName: string]: any; + } + - Type of parameter additionalData of interface ProcessEntity is changed from { + [propertyName: string]: Record; + } to { + [propertyName: string]: any; + } + - Type of parameter additionalData of interface RegistryKeyEntity is changed from { + [propertyName: string]: Record; + } to { + [propertyName: string]: any; + } + - Type of parameter additionalData of interface RegistryValueEntity is changed from { + [propertyName: string]: Record; + } to { + [propertyName: string]: any; + } + - Type of parameter additionalData of interface SecurityAlert is changed from { + [propertyName: string]: Record; + } to { + [propertyName: string]: any; + } + - Type of parameter additionalData of interface SecurityGroupEntity is changed from { + [propertyName: string]: Record; + } to { + [propertyName: string]: any; + } + - Type of parameter additionalData of interface SubmissionMailEntity is changed from { + [propertyName: string]: Record; + } to { + [propertyName: string]: any; + } + - Type of parameter additionalData of interface ThreatIntelligenceIndicatorModel is changed from { + [propertyName: string]: Record; + } to { + [propertyName: string]: any; + } + - Type of parameter kind of interface ThreatIntelligenceInformation is changed from ThreatIntelligenceResourceKindEnum to ThreatIntelligenceResourceInnerKind + - Type of parameter sortOrder of interface ThreatIntelligenceSortingCriteria is changed from ThreatIntelligenceSortingCriteriaEnum to ThreatIntelligenceSortingOrder + - Type of parameter additionalData of interface UrlEntity is changed from { + [propertyName: string]: Record; + } to { + [propertyName: string]: any; + } + - Removed Enum KnownEntityKind + - Removed Enum KnownEnum13 + - Removed Enum KnownThreatIntelligenceResourceKindEnum + - Removed Enum KnownThreatIntelligenceSortingCriteriaEnum + + ## 1.0.0-beta.6 (2023-02-03) **Features** diff --git a/sdk/securityinsight/arm-securityinsight/_meta.json b/sdk/securityinsight/arm-securityinsight/_meta.json index 46308dd072f2..86d9840ab1fb 100644 --- a/sdk/securityinsight/arm-securityinsight/_meta.json +++ b/sdk/securityinsight/arm-securityinsight/_meta.json @@ -1,8 +1,8 @@ { - "commit": "b41f929626289b59e31be8a1091c99994864b096", - "readme": "specification\\securityinsights\\resource-manager\\readme.md", - "autorest_command": "autorest --version=3.9.3 --typescript --modelerfour.lenient-model-deduplication --azure-arm --head-as-boolean=true --license-header=MICROSOFT_MIT_NO_VERSION --generate-test --typescript-sdks-folder=F:\\azure-sdk-for-js ..\\azure-rest-api-specs\\specification\\securityinsights\\resource-manager\\readme.md --use=@autorest/typescript@6.0.0-rc.7 --generate-sample=true", + "commit": "be043a44044aec2ed175cb6624326b8154f5ad2b", + "readme": "specification/securityinsights/resource-manager/readme.md", + "autorest_command": "autorest --version=3.9.3 --typescript --modelerfour.lenient-model-deduplication --azure-arm --head-as-boolean=true --license-header=MICROSOFT_MIT_NO_VERSION --generate-test --typescript-sdks-folder=/mnt/vss/_work/1/s/azure-sdk-for-js ../azure-rest-api-specs/specification/securityinsights/resource-manager/readme.md --use=@autorest/typescript@6.0.0-rc.10", "repository_url": "https://github.com/Azure/azure-rest-api-specs.git", - "release_tool": "@azure-tools/js-sdk-release-tools@2.6.0", - "use": "@autorest/typescript@6.0.0-rc.7" + "release_tool": "@azure-tools/js-sdk-release-tools@2.7.0", + "use": "@autorest/typescript@6.0.0-rc.10" } \ No newline at end of file diff --git a/sdk/securityinsight/arm-securityinsight/package.json b/sdk/securityinsight/arm-securityinsight/package.json index 07c0c7cf6b37..215ce59112e9 100644 --- a/sdk/securityinsight/arm-securityinsight/package.json +++ b/sdk/securityinsight/arm-securityinsight/package.json @@ -8,10 +8,10 @@ "node": ">=14.0.0" }, "dependencies": { - "@azure/core-lro": "^2.2.0", + "@azure/core-lro": "^2.5.0", "@azure/abort-controller": "^1.0.0", "@azure/core-paging": "^1.2.0", - "@azure/core-client": "^1.6.1", + "@azure/core-client": "^1.7.0", "@azure/core-auth": "^1.3.0", "@azure/core-rest-pipeline": "^1.8.0", "tslib": "^2.2.0" @@ -33,13 +33,13 @@ "@rollup/plugin-json": "^6.0.0", "@rollup/plugin-multi-entry": "^6.0.0", "@rollup/plugin-node-resolve": "^13.1.3", - "mkdirp": "^1.0.4", + "mkdirp": "^2.1.2", "rollup": "^2.66.1", "rollup-plugin-sourcemaps": "^0.6.3", "typescript": "~4.8.0", "uglify-js": "^3.4.9", "rimraf": "^3.0.0", - "dotenv": "^8.2.0", + "dotenv": "^16.0.0", "@azure/identity": "^2.0.1", "@azure-tools/test-recorder": "^3.0.0", "@azure-tools/test-credential": "^1.0.0", @@ -111,13 +111,5 @@ ] }, "autoPublish": true, - "homepage": "https://github.com/Azure/azure-sdk-for-js/tree/main/sdk/securityinsight/arm-securityinsight", - "//sampleConfiguration": { - "productName": "", - "productSlugs": [ - "azure" - ], - "disableDocsMs": true, - "apiRefLink": "https://docs.microsoft.com/javascript/api/@azure/arm-securityinsight?view=azure-node-preview" - } -} + "homepage": "https://github.com/Azure/azure-sdk-for-js/tree/main/sdk/securityinsight/arm-securityinsight" +} \ No newline at end of file diff --git a/sdk/securityinsight/arm-securityinsight/review/arm-securityinsight.api.md b/sdk/securityinsight/arm-securityinsight/review/arm-securityinsight.api.md index 96c4b0c5595f..8737577d9bfc 100644 --- a/sdk/securityinsight/arm-securityinsight/review/arm-securityinsight.api.md +++ b/sdk/securityinsight/arm-securityinsight/review/arm-securityinsight.api.md @@ -6,9 +6,9 @@ import * as coreAuth from '@azure/core-auth'; import * as coreClient from '@azure/core-client'; +import { OperationState } from '@azure/core-lro'; import { PagedAsyncIterableIterator } from '@azure/core-paging'; -import { PollerLike } from '@azure/core-lro'; -import { PollOperationState } from '@azure/core-lro'; +import { SimplePollerLike } from '@azure/core-lro'; // @public export interface AADCheckRequirements extends DataConnectorsCheckRequirements { @@ -58,7 +58,7 @@ export interface AccountEntity extends Entity { readonly aadUserId?: string; readonly accountName?: string; readonly additionalData?: { - [propertyName: string]: Record; + [propertyName: string]: any; }; readonly displayName?: string; readonly dnsDomain?: string; @@ -239,6 +239,12 @@ export interface ActivityTimelineItem extends EntityTimelineItem { title: string; } +// @public (undocumented) +export interface AddIncidentTaskActionProperties { + description?: string; + title: string; +} + // @public export type AlertDetail = string; @@ -246,10 +252,20 @@ export type AlertDetail = string; export interface AlertDetailsOverride { alertDescriptionFormat?: string; alertDisplayNameFormat?: string; + alertDynamicProperties?: AlertPropertyMapping[]; alertSeverityColumnName?: string; alertTacticsColumnName?: string; } +// @public +export type AlertProperty = string; + +// @public +export interface AlertPropertyMapping { + alertProperty?: AlertProperty; + value?: string; +} + // @public export interface AlertRule extends ResourceWithEtag { kind: AlertRuleKind; @@ -258,6 +274,12 @@ export interface AlertRule extends ResourceWithEtag { // @public export type AlertRuleKind = string; +// @public +export interface AlertRuleOperations { + beginTriggerRuleRun(resourceGroupName: string, workspaceName: string, ruleId: string, analyticsRuleRunTriggerParameter: AnalyticsRuleRunTrigger, options?: AlertRuleTriggerRuleRunOptionalParams): Promise, AlertRuleTriggerRuleRunResponse>>; + beginTriggerRuleRunAndWait(resourceGroupName: string, workspaceName: string, ruleId: string, analyticsRuleRunTriggerParameter: AnalyticsRuleRunTrigger, options?: AlertRuleTriggerRuleRunOptionalParams): Promise; +} + // @public export interface AlertRules { createOrUpdate(resourceGroupName: string, workspaceName: string, ruleId: string, alertRule: AlertRuleUnion, options?: AlertRulesCreateOrUpdateOptionalParams): Promise; @@ -368,6 +390,21 @@ export interface AlertRuleTemplateWithMitreProperties extends AlertRuleTemplateP techniques?: string[]; } +// @public +export interface AlertRuleTriggerRuleRunHeaders { + // (undocumented) + location?: string; +} + +// @public +export interface AlertRuleTriggerRuleRunOptionalParams extends coreClient.OperationOptions { + resumeFrom?: string; + updateIntervalInMs?: number; +} + +// @public +export type AlertRuleTriggerRuleRunResponse = AlertRuleTriggerRuleRunHeaders; + // @public (undocumented) export type AlertRuleUnion = AlertRule | MLBehaviorAnalyticsAlertRule | FusionAlertRule | ThreatIntelligenceAlertRule | MicrosoftSecurityIncidentCreationAlertRule | ScheduledAlertRule | NrtAlertRule; @@ -382,6 +419,12 @@ export type AlertSeverity = string; // @public export type AlertStatus = string; +// @public +export interface AnalyticsRuleRunTrigger { + // (undocumented) + executionTimeUtc: Date; +} + // @public export interface Anomalies extends Settings { readonly isEnabled?: boolean; @@ -444,6 +487,11 @@ export interface ASCDataConnectorProperties extends DataConnectorWithAlertsPrope subscriptionId?: string; } +// @public +export interface AssignmentItem { + resourceId?: string; +} + // @public export type AttackTactic = string; @@ -461,13 +509,20 @@ export interface AutomationRule extends ResourceWithEtag { // @public export interface AutomationRuleAction { - actionType: "ModifyProperties" | "RunPlaybook"; + actionType: "AddIncidentTask" | "ModifyProperties" | "RunPlaybook"; // (undocumented) order: number; } // @public (undocumented) -export type AutomationRuleActionUnion = AutomationRuleAction | AutomationRuleModifyPropertiesAction | AutomationRuleRunPlaybookAction; +export type AutomationRuleActionUnion = AutomationRuleAction | AutomationRuleAddIncidentTaskAction | AutomationRuleModifyPropertiesAction | AutomationRuleRunPlaybookAction; + +// @public +export interface AutomationRuleAddIncidentTaskAction extends AutomationRuleAction { + // (undocumented) + actionConfiguration?: AddIncidentTaskActionProperties; + actionType: "AddIncidentTask"; +} // @public (undocumented) export interface AutomationRuleBooleanCondition { @@ -684,10 +739,15 @@ export interface AzureDevOpsResourceInfo { serviceConnectionId?: string; } +// @public +export interface AzureEntityResource extends Resource { + readonly etag?: string; +} + // @public export interface AzureResourceEntity extends Entity { readonly additionalData?: { - [propertyName: string]: Record; + [propertyName: string]: any; }; readonly friendlyName?: string; kind: "AzureResource"; @@ -868,6 +928,9 @@ export interface BooleanConditionProperties extends AutomationRuleCondition { conditionType: "Boolean"; } +// @public +export type Category = string; + // @public export interface ClientInfo { email?: string; @@ -879,7 +942,7 @@ export interface ClientInfo { // @public export interface CloudApplicationEntity extends Entity { readonly additionalData?: { - [propertyName: string]: Record; + [propertyName: string]: any; }; readonly appId?: number; readonly appName?: string; @@ -1051,15 +1114,120 @@ export interface ConnectorInstructionModelBase { type: SettingType; } +// @public +export interface Content { + description: string; + title: string; +} + +// @public +export interface ContentPackage { + install(resourceGroupName: string, workspaceName: string, packageId: string, packageInstallationProperties: PackageModel, options?: ContentPackageInstallOptionalParams): Promise; + uninstall(resourceGroupName: string, workspaceName: string, packageId: string, options?: ContentPackageUninstallOptionalParams): Promise; +} + +// @public +export interface ContentPackageInstallOptionalParams extends coreClient.OperationOptions { +} + +// @public +export type ContentPackageInstallResponse = PackageModel; + +// @public +export interface ContentPackages { + get(resourceGroupName: string, workspaceName: string, packageId: string, options?: ContentPackagesGetOptionalParams): Promise; + list(resourceGroupName: string, workspaceName: string, options?: ContentPackagesListOptionalParams): PagedAsyncIterableIterator; +} + +// @public +export interface ContentPackagesGetOptionalParams extends coreClient.OperationOptions { +} + +// @public +export type ContentPackagesGetResponse = PackageModel; + +// @public +export interface ContentPackagesListNextOptionalParams extends coreClient.OperationOptions { +} + +// @public +export type ContentPackagesListNextResponse = PackageList; + +// @public +export interface ContentPackagesListOptionalParams extends coreClient.OperationOptions { + filter?: string; + orderby?: string; + skipToken?: string; + top?: number; +} + +// @public +export type ContentPackagesListResponse = PackageList; + +// @public +export interface ContentPackageUninstallOptionalParams extends coreClient.OperationOptions { +} + // @public export interface ContentPathMap { contentType?: ContentType; path?: string; } +// @public +export interface ContentTemplate { + delete(resourceGroupName: string, workspaceName: string, templateId: string, options?: ContentTemplateDeleteOptionalParams): Promise; + get(resourceGroupName: string, workspaceName: string, templateId: string, options?: ContentTemplateGetOptionalParams): Promise; + install(resourceGroupName: string, workspaceName: string, templateId: string, templateInstallationProperties: TemplateModelAutoGenerated, options?: ContentTemplateInstallOptionalParams): Promise; +} + +// @public +export interface ContentTemplateDeleteOptionalParams extends coreClient.OperationOptions { +} + +// @public +export interface ContentTemplateGetOptionalParams extends coreClient.OperationOptions { +} + +// @public +export type ContentTemplateGetResponse = TemplateModelAutoGenerated; + +// @public +export interface ContentTemplateInstallOptionalParams extends coreClient.OperationOptions { +} + +// @public +export type ContentTemplateInstallResponse = TemplateModelAutoGenerated; + +// @public +export interface ContentTemplates { + list(resourceGroupName: string, workspaceName: string, options?: ContentTemplatesListOptionalParams): PagedAsyncIterableIterator; +} + +// @public +export interface ContentTemplatesListNextOptionalParams extends coreClient.OperationOptions { +} + +// @public +export type ContentTemplatesListNextResponse = TemplateListAutoGenerated; + +// @public +export interface ContentTemplatesListOptionalParams extends coreClient.OperationOptions { + filter?: string; + orderby?: string; + skipToken?: string; + top?: number; +} + +// @public +export type ContentTemplatesListResponse = TemplateListAutoGenerated; + // @public export type ContentType = string; +// @public +export type Context = string; + // @public export type CreatedByType = string; @@ -1143,7 +1311,7 @@ export interface DataConnectors { // @public export interface DataConnectorsCheckRequirements { - kind: "AzureActiveDirectory" | "AzureAdvancedThreatProtection" | "AzureSecurityCenter" | "AmazonWebServicesCloudTrail" | "AmazonWebServicesS3" | "Dynamics365" | "MicrosoftCloudAppSecurity" | "MicrosoftDefenderAdvancedThreatProtection" | "MicrosoftThreatIntelligence" | "MicrosoftThreatProtection" | "OfficeATP" | "OfficeIRM" | "Office365Project" | "OfficePowerBI" | "ThreatIntelligence" | "ThreatIntelligenceTaxii" | "IOT"; + kind: "AzureActiveDirectory" | "AzureAdvancedThreatProtection" | "AzureSecurityCenter" | "AmazonWebServicesCloudTrail" | "AmazonWebServicesS3" | "Dynamics365" | "MicrosoftCloudAppSecurity" | "MicrosoftDefenderAdvancedThreatProtection" | "MicrosoftThreatIntelligence" | "MicrosoftThreatProtection" | "OfficeATP" | "OfficeIRM" | "MicrosoftPurviewInformationProtection" | "Office365Project" | "OfficePowerBI" | "ThreatIntelligence" | "ThreatIntelligenceTaxii" | "IOT"; } // @public @@ -1159,7 +1327,7 @@ export interface DataConnectorsCheckRequirementsPostOptionalParams extends coreC export type DataConnectorsCheckRequirementsPostResponse = DataConnectorRequirementsState; // @public (undocumented) -export type DataConnectorsCheckRequirementsUnion = DataConnectorsCheckRequirements | AADCheckRequirements | AatpCheckRequirements | ASCCheckRequirements | AwsCloudTrailCheckRequirements | AwsS3CheckRequirements | Dynamics365CheckRequirements | McasCheckRequirements | MdatpCheckRequirements | MstiCheckRequirements | MtpCheckRequirements | OfficeATPCheckRequirements | OfficeIRMCheckRequirements | Office365ProjectCheckRequirements | OfficePowerBICheckRequirements | TICheckRequirements | TiTaxiiCheckRequirements | IoTCheckRequirements; +export type DataConnectorsCheckRequirementsUnion = DataConnectorsCheckRequirements | AADCheckRequirements | AatpCheckRequirements | ASCCheckRequirements | AwsCloudTrailCheckRequirements | AwsS3CheckRequirements | Dynamics365CheckRequirements | McasCheckRequirements | MdatpCheckRequirements | MstiCheckRequirements | MtpCheckRequirements | OfficeATPCheckRequirements | OfficeIRMCheckRequirements | MicrosoftPurviewInformationProtectionCheckRequirements | Office365ProjectCheckRequirements | OfficePowerBICheckRequirements | TICheckRequirements | TiTaxiiCheckRequirements | IoTCheckRequirements; // @public export interface DataConnectorsConnectOptionalParams extends coreClient.OperationOptions { @@ -1207,7 +1375,7 @@ export interface DataConnectorTenantId { } // @public (undocumented) -export type DataConnectorUnion = DataConnector | AADDataConnector | MstiDataConnector | MTPDataConnector | AatpDataConnector | ASCDataConnector | AwsCloudTrailDataConnector | AwsS3DataConnector | McasDataConnector | Dynamics365DataConnector | OfficeATPDataConnector | Office365ProjectDataConnector | OfficePowerBIDataConnector | OfficeIRMDataConnector | MdatpDataConnector | OfficeDataConnector | TIDataConnector | TiTaxiiDataConnector | IoTDataConnector | CodelessUiDataConnector | CodelessApiPollingDataConnector; +export type DataConnectorUnion = DataConnector | AADDataConnector | MstiDataConnector | MTPDataConnector | AatpDataConnector | ASCDataConnector | AwsCloudTrailDataConnector | AwsS3DataConnector | McasDataConnector | Dynamics365DataConnector | OfficeATPDataConnector | MicrosoftPurviewInformationProtectionDataConnector | Office365ProjectDataConnector | OfficePowerBIDataConnector | OfficeIRMDataConnector | MdatpDataConnector | OfficeDataConnector | TIDataConnector | TiTaxiiDataConnector | IoTDataConnector | CodelessUiDataConnector | CodelessApiPollingDataConnector; // @public export interface DataConnectorWithAlertsProperties { @@ -1262,7 +1430,7 @@ export type DeviceImportance = string; // @public export interface DnsEntity extends Entity { readonly additionalData?: { - [propertyName: string]: Record; + [propertyName: string]: any; }; readonly dnsServerIpEntityId?: string; readonly domainName?: string; @@ -1404,6 +1572,7 @@ export interface Entities { getInsights(resourceGroupName: string, workspaceName: string, entityId: string, parameters: EntityGetInsightsParameters, options?: EntitiesGetInsightsOptionalParams): Promise; list(resourceGroupName: string, workspaceName: string, options?: EntitiesListOptionalParams): PagedAsyncIterableIterator; queries(resourceGroupName: string, workspaceName: string, entityId: string, kind: EntityItemQueryKind, options?: EntitiesQueriesOptionalParams): Promise; + runPlaybook(resourceGroupName: string, workspaceName: string, entityIdentifier: string, options?: EntitiesRunPlaybookOptionalParams): Promise; } // @public @@ -1483,9 +1652,14 @@ export interface EntitiesRelationsListOptionalParams extends coreClient.Operatio // @public export type EntitiesRelationsListResponse = RelationList; +// @public +export interface EntitiesRunPlaybookOptionalParams extends coreClient.OperationOptions { + requestBody?: EntityManualTriggerRequestBody; +} + // @public export interface Entity extends Resource { - kind: EntityKind; + kind: EntityKindEnum; } // @public @@ -1497,7 +1671,7 @@ export interface EntityAnalytics extends Settings { // @public export interface EntityCommonProperties { readonly additionalData?: { - [propertyName: string]: Record; + [propertyName: string]: any; }; readonly friendlyName?: string; } @@ -1505,7 +1679,7 @@ export interface EntityCommonProperties { // @public export interface EntityEdges { additionalData?: { - [propertyName: string]: Record; + [propertyName: string]: any; }; targetEntityId?: string; } @@ -1567,7 +1741,7 @@ export interface EntityInsightItemQueryTimeInterval { export type EntityItemQueryKind = string; // @public -export type EntityKind = string; +export type EntityKindEnum = string; // @public export interface EntityList { @@ -1575,6 +1749,13 @@ export interface EntityList { value: EntityUnion[]; } +// @public +export interface EntityManualTriggerRequestBody { + incidentArmId?: string; + logicAppsResourceId: string; + tenantId?: string; +} + // @public export interface EntityMapping { entityType?: EntityMappingType; @@ -1622,7 +1803,7 @@ export type EntityQueriesListNextResponse = EntityQueryList; // @public export interface EntityQueriesListOptionalParams extends coreClient.OperationOptions { - kind?: Enum13; + kind?: Enum19; } // @public @@ -1757,7 +1938,33 @@ export type EntityType = string; export type EntityUnion = Entity | SecurityAlert | HuntingBookmark | AccountEntity | AzureResourceEntity | CloudApplicationEntity | DnsEntity | FileEntity | FileHashEntity | HostEntity | IoTDeviceEntity | IpEntity | MailboxEntity | MailClusterEntity | MailMessageEntity | MalwareEntity | ProcessEntity | RegistryKeyEntity | RegistryValueEntity | SecurityGroupEntity | SubmissionMailEntity | UrlEntity | NicEntity; // @public -export type Enum13 = string; +export type Enum19 = string; + +// @public +export interface ErrorAdditionalInfo { + readonly info?: Record; + readonly type?: string; +} + +// @public +export interface ErrorDetail { + readonly additionalInfo?: ErrorAdditionalInfo[]; + readonly code?: string; + readonly details?: ErrorDetail[]; + readonly message?: string; + readonly target?: string; +} + +// @public +export interface ErrorModel { + errorMessage: string; + memberResourceName: string; +} + +// @public +export interface ErrorResponse { + error?: ErrorDetail; +} // @public export type EventGroupingAggregationKind = string; @@ -1783,7 +1990,7 @@ export interface ExpansionResultAggregation { aggregationType?: string; count: number; displayName?: string; - entityKind: EntityKind; + entityKind: EntityKindEnum; } // @public @@ -1806,7 +2013,7 @@ export interface FieldMapping { // @public export interface FileEntity extends Entity { readonly additionalData?: { - [propertyName: string]: Record; + [propertyName: string]: any; }; readonly directory?: string; readonly fileHashEntityIds?: string[]; @@ -1833,7 +2040,7 @@ export type FileHashAlgorithm = string; // @public export interface FileHashEntity extends Entity { readonly additionalData?: { - [propertyName: string]: Record; + [propertyName: string]: any; }; readonly algorithm?: FileHashAlgorithm; readonly friendlyName?: string; @@ -1875,7 +2082,7 @@ export interface FileImportList { // @public export interface FileImports { - beginDelete(resourceGroupName: string, workspaceName: string, fileImportId: string, options?: FileImportsDeleteOptionalParams): Promise, FileImportsDeleteResponse>>; + beginDelete(resourceGroupName: string, workspaceName: string, fileImportId: string, options?: FileImportsDeleteOptionalParams): Promise, FileImportsDeleteResponse>>; beginDeleteAndWait(resourceGroupName: string, workspaceName: string, fileImportId: string, options?: FileImportsDeleteOptionalParams): Promise; create(resourceGroupName: string, workspaceName: string, fileImportId: string, fileImport: FileImport, options?: FileImportsCreateOptionalParams): Promise; get(resourceGroupName: string, workspaceName: string, fileImportId: string, options?: FileImportsGetOptionalParams): Promise; @@ -1935,6 +2142,9 @@ export interface FileMetadata { fileSize?: number; } +// @public +export type Flag = string; + // @public export interface FusionAlertRule extends AlertRule { alertRuleTemplateName?: string; @@ -2029,6 +2239,11 @@ export interface GeoLocation { readonly state?: string; } +// @public +export interface Get { + singleRecommendation(resourceGroupName: string, workspaceName: string, recommendationId: string, options?: GetSingleRecommendationOptionalParams): Promise; +} + // @public export function getContinuationToken(page: unknown): string | undefined; @@ -2053,6 +2268,44 @@ export interface GetQueriesResponse { value?: EntityQueryItemUnion[]; } +// @public +export interface GetRecommendations { + list(resourceGroupName: string, workspaceName: string, options?: GetRecommendationsListOptionalParams): Promise; +} + +// @public +export interface GetRecommendationsListOptionalParams extends coreClient.OperationOptions { +} + +// @public +export type GetRecommendationsListResponse = RecommendationList; + +// @public +export interface GetSingleRecommendationOptionalParams extends coreClient.OperationOptions { +} + +// @public +export type GetSingleRecommendationResponse = Recommendation; + +// @public +export interface GetTriggeredAnalyticsRuleRuns { + list(resourceGroupName: string, workspaceName: string, options?: GetTriggeredAnalyticsRuleRunsListOptionalParams): PagedAsyncIterableIterator; +} + +// @public +export interface GetTriggeredAnalyticsRuleRunsListNextOptionalParams extends coreClient.OperationOptions { +} + +// @public +export type GetTriggeredAnalyticsRuleRunsListNextResponse = TriggeredAnalyticsRuleRuns; + +// @public +export interface GetTriggeredAnalyticsRuleRunsListOptionalParams extends coreClient.OperationOptions { +} + +// @public +export type GetTriggeredAnalyticsRuleRunsListResponse = TriggeredAnalyticsRuleRuns; + // @public export interface GitHubResourceInfo { appInstallationId?: string; @@ -2079,7 +2332,7 @@ export interface GroupingConfiguration { // @public export interface HostEntity extends Entity { readonly additionalData?: { - [propertyName: string]: Record; + [propertyName: string]: any; }; readonly azureID?: string; readonly dnsDomain?: string; @@ -2107,10 +2360,77 @@ export interface HostEntityProperties extends EntityCommonProperties { readonly osVersion?: string; } +// @public +export interface Hunt extends ResourceWithEtag { + attackTactics?: AttackTactic[]; + attackTechniques?: string[]; + description?: string; + displayName?: string; + hypothesisStatus?: HypothesisStatus; + labels?: string[]; + owner?: HuntOwner; + status?: Status; +} + +// @public +export interface HuntComment extends ResourceWithEtag { + message?: string; +} + +// @public +export interface HuntCommentList { + readonly nextLink?: string; + value: HuntComment[]; +} + +// @public +export interface HuntComments { + createOrUpdate(resourceGroupName: string, workspaceName: string, huntId: string, huntCommentId: string, huntComment: HuntComment, options?: HuntCommentsCreateOrUpdateOptionalParams): Promise; + delete(resourceGroupName: string, workspaceName: string, huntId: string, huntCommentId: string, options?: HuntCommentsDeleteOptionalParams): Promise; + get(resourceGroupName: string, workspaceName: string, huntId: string, huntCommentId: string, options?: HuntCommentsGetOptionalParams): Promise; + list(resourceGroupName: string, workspaceName: string, huntId: string, options?: HuntCommentsListOptionalParams): PagedAsyncIterableIterator; +} + +// @public +export interface HuntCommentsCreateOrUpdateOptionalParams extends coreClient.OperationOptions { +} + +// @public +export type HuntCommentsCreateOrUpdateResponse = HuntComment; + +// @public +export interface HuntCommentsDeleteOptionalParams extends coreClient.OperationOptions { +} + +// @public +export interface HuntCommentsGetOptionalParams extends coreClient.OperationOptions { +} + +// @public +export type HuntCommentsGetResponse = HuntComment; + +// @public +export interface HuntCommentsListNextOptionalParams extends coreClient.OperationOptions { +} + +// @public +export type HuntCommentsListNextResponse = HuntCommentList; + +// @public +export interface HuntCommentsListOptionalParams extends coreClient.OperationOptions { + filter?: string; + orderby?: string; + skipToken?: string; + top?: number; +} + +// @public +export type HuntCommentsListResponse = HuntCommentList; + // @public export interface HuntingBookmark extends Entity { readonly additionalData?: { - [propertyName: string]: Record; + [propertyName: string]: any; }; created?: Date; createdBy?: UserInfo; @@ -2143,42 +2463,163 @@ export interface HuntingBookmarkProperties extends EntityCommonProperties { } // @public -export interface Incident extends ResourceWithEtag { - readonly additionalData?: IncidentAdditionalData; - classification?: IncidentClassification; - classificationComment?: string; - classificationReason?: IncidentClassificationReason; - readonly createdTimeUtc?: Date; - description?: string; - firstActivityTimeUtc?: Date; - readonly incidentNumber?: number; - readonly incidentUrl?: string; - labels?: IncidentLabel[]; - lastActivityTimeUtc?: Date; - readonly lastModifiedTimeUtc?: Date; - owner?: IncidentOwnerInfo; - providerIncidentId?: string; - providerName?: string; - readonly relatedAnalyticRuleIds?: string[]; - severity?: IncidentSeverity; - status?: IncidentStatus; - teamInformation?: TeamInformation; - title?: string; +export interface HuntList { + readonly nextLink?: string; + value: Hunt[]; } // @public -export interface IncidentAdditionalData { - readonly alertProductNames?: string[]; - readonly alertsCount?: number; - readonly bookmarksCount?: number; - readonly commentsCount?: number; - readonly providerIncidentUrl?: string; - readonly tactics?: AttackTactic[]; - readonly techniques?: string[]; +export interface HuntOwner { + assignedTo?: string; + email?: string; + objectId?: string; + ownerType?: OwnerType; + userPrincipalName?: string; } // @public -export interface IncidentAlertList { +export interface HuntRelation extends ResourceWithEtag { + labels?: string[]; + relatedResourceId?: string; + readonly relatedResourceKind?: string; + readonly relatedResourceName?: string; + readonly relationType?: string; +} + +// @public +export interface HuntRelationList { + readonly nextLink?: string; + value: HuntRelation[]; +} + +// @public +export interface HuntRelations { + createOrUpdate(resourceGroupName: string, workspaceName: string, huntId: string, huntRelationId: string, huntRelation: HuntRelation, options?: HuntRelationsCreateOrUpdateOptionalParams): Promise; + delete(resourceGroupName: string, workspaceName: string, huntId: string, huntRelationId: string, options?: HuntRelationsDeleteOptionalParams): Promise; + get(resourceGroupName: string, workspaceName: string, huntId: string, huntRelationId: string, options?: HuntRelationsGetOptionalParams): Promise; + list(resourceGroupName: string, workspaceName: string, huntId: string, options?: HuntRelationsListOptionalParams): PagedAsyncIterableIterator; +} + +// @public +export interface HuntRelationsCreateOrUpdateOptionalParams extends coreClient.OperationOptions { +} + +// @public +export type HuntRelationsCreateOrUpdateResponse = HuntRelation; + +// @public +export interface HuntRelationsDeleteOptionalParams extends coreClient.OperationOptions { +} + +// @public +export interface HuntRelationsGetOptionalParams extends coreClient.OperationOptions { +} + +// @public +export type HuntRelationsGetResponse = HuntRelation; + +// @public +export interface HuntRelationsListNextOptionalParams extends coreClient.OperationOptions { +} + +// @public +export type HuntRelationsListNextResponse = HuntRelationList; + +// @public +export interface HuntRelationsListOptionalParams extends coreClient.OperationOptions { + filter?: string; + orderby?: string; + skipToken?: string; + top?: number; +} + +// @public +export type HuntRelationsListResponse = HuntRelationList; + +// @public +export interface Hunts { + createOrUpdate(resourceGroupName: string, workspaceName: string, huntId: string, hunt: Hunt, options?: HuntsCreateOrUpdateOptionalParams): Promise; + delete(resourceGroupName: string, workspaceName: string, huntId: string, options?: HuntsDeleteOptionalParams): Promise; + get(resourceGroupName: string, workspaceName: string, huntId: string, options?: HuntsGetOptionalParams): Promise; + list(resourceGroupName: string, workspaceName: string, options?: HuntsListOptionalParams): PagedAsyncIterableIterator; +} + +// @public +export interface HuntsCreateOrUpdateOptionalParams extends coreClient.OperationOptions { +} + +// @public +export type HuntsCreateOrUpdateResponse = Hunt; + +// @public +export interface HuntsDeleteOptionalParams extends coreClient.OperationOptions { +} + +// @public +export interface HuntsGetOptionalParams extends coreClient.OperationOptions { +} + +// @public +export type HuntsGetResponse = Hunt; + +// @public +export interface HuntsListNextOptionalParams extends coreClient.OperationOptions { +} + +// @public +export type HuntsListNextResponse = HuntList; + +// @public +export interface HuntsListOptionalParams extends coreClient.OperationOptions { + filter?: string; + orderby?: string; + skipToken?: string; + top?: number; +} + +// @public +export type HuntsListResponse = HuntList; + +// @public +export type HypothesisStatus = string; + +// @public (undocumented) +export interface Incident extends ResourceWithEtag { + readonly additionalData?: IncidentAdditionalData; + classification?: IncidentClassification; + classificationComment?: string; + classificationReason?: IncidentClassificationReason; + readonly createdTimeUtc?: Date; + description?: string; + firstActivityTimeUtc?: Date; + readonly incidentNumber?: number; + readonly incidentUrl?: string; + labels?: IncidentLabel[]; + lastActivityTimeUtc?: Date; + readonly lastModifiedTimeUtc?: Date; + owner?: IncidentOwnerInfo; + readonly providerIncidentId?: string; + readonly providerName?: string; + readonly relatedAnalyticRuleIds?: string[]; + severity?: IncidentSeverity; + status?: IncidentStatus; + teamInformation?: TeamInformation; + title?: string; +} + +// @public +export interface IncidentAdditionalData { + readonly alertProductNames?: string[]; + readonly alertsCount?: number; + readonly bookmarksCount?: number; + readonly commentsCount?: number; + readonly providerIncidentUrl?: string; + readonly tactics?: AttackTactic[]; + readonly techniques?: string[]; +} + +// @public +export interface IncidentAlertList { value: SecurityAlert[]; } @@ -2201,9 +2642,10 @@ export interface IncidentComment extends ResourceWithEtag { message?: string; } -// @public +// @public (undocumented) export interface IncidentCommentList { readonly nextLink?: string; + // (undocumented) value: IncidentComment[]; } @@ -2266,7 +2708,7 @@ export interface IncidentEntitiesResponse { // @public export interface IncidentEntitiesResultsMetadata { count: number; - entityKind: EntityKind; + entityKind: EntityKindEnum; } // @public @@ -2289,6 +2731,7 @@ export type IncidentLabelType = string; // @public export interface IncidentList { readonly nextLink?: string; + // (undocumented) value: Incident[]; } @@ -2359,7 +2802,7 @@ export type IncidentRelationsListResponse = RelationList; // @public export interface Incidents { createOrUpdate(resourceGroupName: string, workspaceName: string, incidentId: string, incident: Incident, options?: IncidentsCreateOrUpdateOptionalParams): Promise; - createTeam(resourceGroupName: string, workspaceName: string, incidentId: string, teamProperties: TeamProperties, options?: IncidentsCreateTeamOptionalParams): Promise; + createTeam(resourceGroupName: string, workspaceName: string, incidentId: string, teamProperties: TeamInformation, options?: IncidentsCreateTeamOptionalParams): Promise; delete(resourceGroupName: string, workspaceName: string, incidentId: string, options?: IncidentsDeleteOptionalParams): Promise; get(resourceGroupName: string, workspaceName: string, incidentId: string, options?: IncidentsGetOptionalParams): Promise; list(resourceGroupName: string, workspaceName: string, options?: IncidentsListOptionalParams): PagedAsyncIterableIterator; @@ -2448,6 +2891,69 @@ export type IncidentsRunPlaybookResponse = Record; // @public export type IncidentStatus = string; +// @public (undocumented) +export interface IncidentTask extends ResourceWithEtag { + createdBy?: ClientInfo; + readonly createdTimeUtc?: Date; + description?: string; + lastModifiedBy?: ClientInfo; + readonly lastModifiedTimeUtc?: Date; + // (undocumented) + status: IncidentTaskStatus; + title: string; +} + +// @public (undocumented) +export interface IncidentTaskList { + // (undocumented) + nextLink?: string; + // (undocumented) + value?: IncidentTask[]; +} + +// @public +export interface IncidentTasks { + createOrUpdate(resourceGroupName: string, workspaceName: string, incidentId: string, incidentTaskId: string, incidentTask: IncidentTask, options?: IncidentTasksCreateOrUpdateOptionalParams): Promise; + delete(resourceGroupName: string, workspaceName: string, incidentId: string, incidentTaskId: string, options?: IncidentTasksDeleteOptionalParams): Promise; + get(resourceGroupName: string, workspaceName: string, incidentId: string, incidentTaskId: string, options?: IncidentTasksGetOptionalParams): Promise; + list(resourceGroupName: string, workspaceName: string, incidentId: string, options?: IncidentTasksListOptionalParams): PagedAsyncIterableIterator; +} + +// @public +export interface IncidentTasksCreateOrUpdateOptionalParams extends coreClient.OperationOptions { +} + +// @public +export type IncidentTasksCreateOrUpdateResponse = IncidentTask; + +// @public +export interface IncidentTasksDeleteOptionalParams extends coreClient.OperationOptions { +} + +// @public +export interface IncidentTasksGetOptionalParams extends coreClient.OperationOptions { +} + +// @public +export type IncidentTasksGetResponse = IncidentTask; + +// @public +export interface IncidentTasksListNextOptionalParams extends coreClient.OperationOptions { +} + +// @public +export type IncidentTasksListNextResponse = IncidentTaskList; + +// @public +export interface IncidentTasksListOptionalParams extends coreClient.OperationOptions { +} + +// @public +export type IncidentTasksListResponse = IncidentTaskList; + +// @public +export type IncidentTaskStatus = string; + // @public export type IngestionMode = string; @@ -2525,6 +3031,13 @@ export interface InsightsTableResultColumnsItem { type?: string; } +// @public +export interface Instructions { + actionsToBePerformed: string; + howToPerformActionDetails?: string; + recommendationImportance: string; +} + // @public export interface InstructionSteps { description?: string; @@ -2557,7 +3070,7 @@ export interface IoTDataConnectorProperties extends DataConnectorWithAlertsPrope // @public export interface IoTDeviceEntity extends Entity { readonly additionalData?: { - [propertyName: string]: Record; + [propertyName: string]: any; }; readonly deviceId?: string; readonly deviceName?: string; @@ -2626,7 +3139,7 @@ export interface IoTDeviceEntityProperties extends EntityCommonProperties { // @public export interface IpEntity extends Entity { readonly additionalData?: { - [propertyName: string]: Record; + [propertyName: string]: any; }; readonly address?: string; readonly friendlyName?: string; @@ -2654,6 +3167,29 @@ export interface IPGeodataGetOptionalParams extends coreClient.OperationOptions // @public export type IPGeodataGetResponse = EnrichmentIpGeodata; +// @public +export interface Job extends ResourceWithEtag { + readonly endTime?: Date; + readonly errorMessage?: string; + items?: JobItem[]; + readonly provisioningState?: ProvisioningState; + readonly startTime?: Date; +} + +// @public +export interface JobItem { + errors?: ErrorModel[]; + readonly executionTime?: Date; + resourceId?: string; + readonly status?: Status; +} + +// @public +export interface JobList { + readonly nextLink?: string; + value: Job[]; +} + // @public export type KillChainIntent = string; @@ -2662,6 +3198,7 @@ export type Kind = string; // @public export enum KnownActionType { + AddIncidentTask = "AddIncidentTask", ModifyProperties = "ModifyProperties", RunPlaybook = "RunPlaybook" } @@ -2672,6 +3209,19 @@ export enum KnownAlertDetail { Severity = "Severity" } +// @public +export enum KnownAlertProperty { + AlertLink = "AlertLink", + ConfidenceLevel = "ConfidenceLevel", + ConfidenceScore = "ConfidenceScore", + ExtendedLinks = "ExtendedLinks", + ProductComponentName = "ProductComponentName", + ProductName = "ProductName", + ProviderName = "ProviderName", + RemediationSteps = "RemediationSteps", + Techniques = "Techniques" +} + // @public export enum KnownAlertRuleKind { Fusion = "Fusion", @@ -2845,6 +3395,15 @@ export enum KnownAutomationRulePropertyConditionSupportedProperty { Url = "Url" } +// @public +export enum KnownCategory { + CostOptimization = "CostOptimization", + Demo = "Demo", + NewFeature = "NewFeature", + Onboarding = "Onboarding", + SocEfficiency = "SocEfficiency" +} + // @public export enum KnownConditionType { Boolean = "Boolean", @@ -2887,6 +3446,14 @@ export enum KnownContentType { Workbook = "Workbook" } +// @public +export enum KnownContext { + Analytics = "Analytics", + Incidents = "Incidents", + None = "None", + Overview = "Overview" +} + // @public export enum KnownCreatedByType { Application = "Application", @@ -2919,6 +3486,7 @@ export enum KnownDataConnectorKind { IOT = "IOT", MicrosoftCloudAppSecurity = "MicrosoftCloudAppSecurity", MicrosoftDefenderAdvancedThreatProtection = "MicrosoftDefenderAdvancedThreatProtection", + MicrosoftPurviewInformationProtection = "MicrosoftPurviewInformationProtection", MicrosoftThreatIntelligence = "MicrosoftThreatIntelligence", MicrosoftThreatProtection = "MicrosoftThreatProtection", Office365 = "Office365", @@ -2986,7 +3554,7 @@ export enum KnownEntityItemQueryKind { } // @public -export enum KnownEntityKind { +export enum KnownEntityKindEnum { Account = "Account", AzureResource = "AzureResource", Bookmark = "Bookmark", @@ -3086,7 +3654,7 @@ export enum KnownEntityType { } // @public -export enum KnownEnum13 { +export enum KnownEnum19 { Activity = "Activity", Expansion = "Expansion" } @@ -3131,11 +3699,24 @@ export enum KnownFileImportState { WaitingForUpload = "WaitingForUpload" } +// @public +export enum KnownFlag { + False = "false", + True = "true" +} + // @public export enum KnownGetInsightsError { Insight = "Insight" } +// @public +export enum KnownHypothesisStatus { + Invalidated = "Invalidated", + Unknown = "Unknown", + Validated = "Validated" +} + // @public export enum KnownIncidentClassification { BenignPositive = "BenignPositive", @@ -3173,6 +3754,12 @@ export enum KnownIncidentStatus { New = "New" } +// @public +export enum KnownIncidentTaskStatus { + Completed = "Completed", + New = "New" +} + // @public export enum KnownIngestionMode { IngestAnyValidRecords = "IngestAnyValidRecords", @@ -3237,6 +3824,18 @@ export enum KnownMicrosoftSecurityProductName { Office365AdvancedThreatProtection = "Office 365 Advanced Threat Protection" } +// @public +export enum KnownMode { + Disabled = "Disabled", + Enabled = "Enabled" +} + +// @public +export enum KnownMtpProvider { + MicrosoftDefenderForCloudApps = "microsoftDefenderForCloudApps", + MicrosoftDefenderForIdentity = "microsoftDefenderForIdentity" +} + // @public export enum KnownOperator { AND = "AND", @@ -3258,6 +3857,12 @@ export enum KnownOwnerType { User = "User" } +// @public +export enum KnownPackageKind { + Solution = "Solution", + Standalone = "Standalone" +} + // @public export enum KnownPermissionProviderScope { ResourceGroup = "ResourceGroup", @@ -3272,6 +3877,13 @@ export enum KnownPollingFrequency { OnceAnHour = "OnceAnHour" } +// @public +export enum KnownPriority { + High = "High", + Low = "Low", + Medium = "Medium" +} + // @public export enum KnownProviderName { MicrosoftAadiamDiagnosticSettings = "microsoft.aadiam/diagnosticSettings", @@ -3282,6 +3894,15 @@ export enum KnownProviderName { MicrosoftOperationalInsightsWorkspacesSharedKeys = "Microsoft.OperationalInsights/workspaces/sharedKeys" } +// @public +export enum KnownProvisioningState { + Accepted = "Accepted", + Canceled = "Canceled", + Failed = "Failed", + InProgress = "InProgress", + Succeeded = "Succeeded" +} + // @public export enum KnownRegistryHive { HkeyA = "HKEY_A", @@ -3354,6 +3975,25 @@ export enum KnownSourceType { RemoteStorage = "Remote storage" } +// @public +export enum KnownState { + Active = "Active", + CompletedByAction = "CompletedByAction", + CompletedByUser = "CompletedByUser", + Disabled = "Disabled", + Hidden = "Hidden" +} + +// @public +export enum KnownStatus { + Active = "Active", + Closed = "Closed", + Failed = "Failed", + InProgress = "InProgress", + New = "New", + Succeeded = "Succeeded" +} + // @public export enum KnownSupportTier { Community = "Community", @@ -3369,12 +4009,12 @@ export enum KnownTemplateStatus { } // @public -export enum KnownThreatIntelligenceResourceKindEnum { +export enum KnownThreatIntelligenceResourceInnerKind { Indicator = "indicator" } // @public -export enum KnownThreatIntelligenceSortingCriteriaEnum { +export enum KnownThreatIntelligenceSortingOrder { Ascending = "ascending", Descending = "descending", Unsorted = "unsorted" @@ -3415,7 +4055,7 @@ export interface LastDataReceivedDataType { // @public export interface MailboxEntity extends Entity { readonly additionalData?: { - [propertyName: string]: Record; + [propertyName: string]: any; }; readonly displayName?: string; readonly externalDirectoryObjectId?: string; @@ -3436,7 +4076,7 @@ export interface MailboxEntityProperties extends EntityCommonProperties { // @public export interface MailClusterEntity extends Entity { readonly additionalData?: { - [propertyName: string]: Record; + [propertyName: string]: any; }; readonly clusterGroup?: string; readonly clusterQueryEndTime?: Date; @@ -3479,7 +4119,7 @@ export interface MailClusterEntityProperties extends EntityCommonProperties { // @public export interface MailMessageEntity extends Entity { readonly additionalData?: { - [propertyName: string]: Record; + [propertyName: string]: any; }; antispamDirection?: AntispamMailDirection; bodyFingerprintBin1?: number; @@ -3542,7 +4182,7 @@ export interface MailMessageEntityProperties extends EntityCommonProperties { // @public export interface MalwareEntity extends Entity { readonly additionalData?: { - [propertyName: string]: Record; + [propertyName: string]: any; }; readonly category?: string; readonly fileEntityIds?: string[]; @@ -3662,6 +4302,26 @@ export interface MetadataDependencies { version?: string; } +// @public +export interface MetadataDependenciesAutoGenerated { + contentId?: string; + criteria?: MetadataDependenciesAutoGenerated[]; + kind?: string; + name?: string; + operator?: Operator; + version?: string; +} + +// @public +export interface MetadataDependenciesAutoGenerated2 { + contentId?: string; + criteria?: MetadataDependenciesAutoGenerated2[]; + kind?: Kind; + name?: string; + operator?: Operator; + version?: string; +} + // @public export interface MetadataGetOptionalParams extends coreClient.OperationOptions { } @@ -3700,10 +4360,10 @@ export interface MetadataModel extends ResourceWithEtag { contentId?: string; contentSchemaVersion?: string; customVersion?: string; - dependencies?: MetadataDependencies; + dependencies?: MetadataDependenciesAutoGenerated; firstPublishDate?: Date; icon?: string; - kind?: Kind; + kind?: string; lastPublishDate?: Date; parentId?: string; previewImages?: string[]; @@ -3723,10 +4383,10 @@ export interface MetadataPatch extends ResourceWithEtag { contentId?: string; contentSchemaVersion?: string; customVersion?: string; - dependencies?: MetadataDependencies; + dependencies?: MetadataDependenciesAutoGenerated; firstPublishDate?: Date; icon?: string; - kind?: Kind; + kind?: string; lastPublishDate?: Date; parentId?: string; previewImages?: string[]; @@ -3762,11 +4422,42 @@ export interface MetadataUpdateOptionalParams extends coreClient.OperationOption export type MetadataUpdateResponse = MetadataModel; // @public -export interface MicrosoftSecurityIncidentCreationAlertRule extends AlertRule { - alertRuleTemplateName?: string; - description?: string; - displayName?: string; - displayNamesExcludeFilter?: string[]; +export interface MicrosoftPurviewInformationProtectionCheckRequirements extends DataConnectorsCheckRequirements { + kind: "MicrosoftPurviewInformationProtection"; + tenantId?: string; +} + +// @public +export interface MicrosoftPurviewInformationProtectionCheckRequirementsProperties extends DataConnectorTenantId { +} + +// @public +export interface MicrosoftPurviewInformationProtectionConnectorDataTypes { + logs: MicrosoftPurviewInformationProtectionConnectorDataTypesLogs; +} + +// @public +export interface MicrosoftPurviewInformationProtectionConnectorDataTypesLogs extends DataConnectorDataTypeCommon { +} + +// @public +export interface MicrosoftPurviewInformationProtectionDataConnector extends DataConnector { + dataTypes?: MicrosoftPurviewInformationProtectionConnectorDataTypes; + kind: "MicrosoftPurviewInformationProtection"; + tenantId?: string; +} + +// @public +export interface MicrosoftPurviewInformationProtectionDataConnectorProperties extends DataConnectorTenantId { + dataTypes: MicrosoftPurviewInformationProtectionConnectorDataTypes; +} + +// @public +export interface MicrosoftSecurityIncidentCreationAlertRule extends AlertRule { + alertRuleTemplateName?: string; + description?: string; + displayName?: string; + displayNamesExcludeFilter?: string[]; displayNamesFilter?: string[]; enabled?: boolean; kind: "MicrosoftSecurityIncidentCreation"; @@ -3852,6 +4543,9 @@ export interface MLBehaviorAnalyticsAlertRuleTemplateProperties extends AlertRul severity: AlertSeverity; } +// @public +export type Mode = string; + // @public export interface MstiCheckRequirements extends DataConnectorsCheckRequirements { kind: "MicrosoftThreatIntelligence"; @@ -3871,15 +4565,9 @@ export interface MstiDataConnector extends DataConnector { // @public export interface MstiDataConnectorDataTypes { - bingSafetyPhishingURL: MstiDataConnectorDataTypesBingSafetyPhishingURL; microsoftEmergingThreatFeed: MstiDataConnectorDataTypesMicrosoftEmergingThreatFeed; } -// @public -export interface MstiDataConnectorDataTypesBingSafetyPhishingURL extends DataConnectorDataTypeCommon { - lookbackPeriod: string; -} - // @public export interface MstiDataConnectorDataTypesMicrosoftEmergingThreatFeed extends DataConnectorDataTypeCommon { lookbackPeriod: string; @@ -3903,15 +4591,21 @@ export interface MTPCheckRequirementsProperties extends DataConnectorTenantId { // @public export interface MTPDataConnector extends DataConnector { dataTypes?: MTPDataConnectorDataTypes; + filteredProviders?: MtpFilteredProviders; kind: "MicrosoftThreatProtection"; tenantId?: string; } // @public export interface MTPDataConnectorDataTypes { + alerts?: MTPDataConnectorDataTypesAlerts; incidents: MTPDataConnectorDataTypesIncidents; } +// @public +export interface MTPDataConnectorDataTypesAlerts extends DataConnectorDataTypeCommon { +} + // @public export interface MTPDataConnectorDataTypesIncidents extends DataConnectorDataTypeCommon { } @@ -3919,12 +4613,21 @@ export interface MTPDataConnectorDataTypesIncidents extends DataConnectorDataTyp // @public export interface MTPDataConnectorProperties extends DataConnectorTenantId { dataTypes: MTPDataConnectorDataTypes; + filteredProviders?: MtpFilteredProviders; +} + +// @public +export interface MtpFilteredProviders { + alerts: MtpProvider[]; } +// @public +export type MtpProvider = string; + // @public export interface NicEntity extends Entity { readonly additionalData?: { - [propertyName: string]: Record; + [propertyName: string]: any; }; readonly friendlyName?: string; readonly ipAddressEntityId?: string; @@ -3956,6 +4659,7 @@ export interface NrtAlertRule extends AlertRule { kind: "NRT"; readonly lastModifiedUtc?: Date; query?: string; + sentinelEntitiesMappings?: SentinelEntityMapping[]; severity?: AlertSeverity; suppressionDuration?: string; suppressionEnabled?: boolean; @@ -3980,6 +4684,7 @@ export interface NrtAlertRuleTemplate extends AlertRuleTemplate { readonly lastUpdatedDateUTC?: Date; query?: string; requiredDataConnectors?: AlertRuleTemplateDataSource[]; + sentinelEntitiesMappings?: SentinelEntityMapping[]; severity?: AlertSeverity; status?: TemplateStatus; tactics?: AttackTactic[]; @@ -4223,6 +4928,74 @@ export type OutputType = string; // @public export type OwnerType = string; +// @public +export type PackageKind = string; + +// @public +export interface PackageList { + readonly nextLink?: string; + value: PackageModel[]; +} + +// @public +export interface PackageListAutoGenerated { + readonly nextLink?: string; + value: PackageModelAutoGenerated[]; +} + +// @public +export interface PackageModel extends ResourceWithEtag { + author?: MetadataAuthor; + categories?: MetadataCategories; + contentId?: string; + contentKind?: PackageKind; + contentSchemaVersion?: string; + dependencies?: MetadataDependencies; + description?: string; + displayName?: string; + firstPublishDate?: Date; + icon?: string; + isFeatured?: Flag; + isNew?: Flag; + isPreview?: Flag; + lastPublishDate?: Date; + providers?: string[]; + publisherDisplayName?: string; + source?: MetadataSource; + support?: MetadataSupport; + threatAnalysisTactics?: string[]; + threatAnalyticsTechniques?: string[]; + version?: string; +} + +// @public +export interface PackageModelAutoGenerated extends ResourceWithEtag { + author?: MetadataAuthor; + categories?: MetadataCategories; + contentId?: string; + contentKind?: PackageKind; + contentSchemaVersion?: string; + dependencies?: MetadataDependencies; + description?: string; + displayName?: string; + firstPublishDate?: Date; + icon?: string; + installedVersion?: string; + isFeatured?: Flag; + isNew?: Flag; + isPreview?: Flag; + lastPublishDate?: Date; + packagedContent?: Record; + providers?: string[]; + publisherDisplayName?: string; + resourceId?: string; + source?: MetadataSource; + support?: MetadataSupport; + threatAnalysisTactics?: string[]; + threatAnalyticsTechniques?: string[]; + version?: string; +} + // @public export type PermissionProviderScope = string; @@ -4243,18 +5016,21 @@ export interface PermissionsResourceProviderItem extends ResourceProvider { // @public (undocumented) export interface PlaybookActionProperties { - logicAppResourceId?: string; + logicAppResourceId: string; tenantId?: string; } // @public export type PollingFrequency = string; +// @public +export type Priority = string; + // @public export interface ProcessEntity extends Entity { readonly accountEntityId?: string; readonly additionalData?: { - [propertyName: string]: Record; + [propertyName: string]: any; }; readonly commandLine?: string; readonly creationTimeUtc?: Date; @@ -4281,6 +5057,41 @@ export interface ProcessEntityProperties extends EntityCommonProperties { readonly processId?: string; } +// @public +export interface ProductPackage { + get(resourceGroupName: string, workspaceName: string, packageId: string, options?: ProductPackageGetOptionalParams): Promise; +} + +// @public +export interface ProductPackageGetOptionalParams extends coreClient.OperationOptions { +} + +// @public +export type ProductPackageGetResponse = PackageModelAutoGenerated; + +// @public +export interface ProductPackages { + list(resourceGroupName: string, workspaceName: string, options?: ProductPackagesListOptionalParams): PagedAsyncIterableIterator; +} + +// @public +export interface ProductPackagesListNextOptionalParams extends coreClient.OperationOptions { +} + +// @public +export type ProductPackagesListNextResponse = PackageListAutoGenerated; + +// @public +export interface ProductPackagesListOptionalParams extends coreClient.OperationOptions { + filter?: string; + orderby?: string; + skipToken?: string; + top?: number; +} + +// @public +export type ProductPackagesListResponse = PackageListAutoGenerated; + // @public export interface ProductSettings { delete(resourceGroupName: string, workspaceName: string, settingsName: string, options?: ProductSettingsDeleteOptionalParams): Promise; @@ -4314,6 +5125,41 @@ export interface ProductSettingsUpdateOptionalParams extends coreClient.Operatio // @public export type ProductSettingsUpdateResponse = SettingsUnion; +// @public +export interface ProductTemplate { + get(resourceGroupName: string, workspaceName: string, templateId: string, options?: ProductTemplateGetOptionalParams): Promise; +} + +// @public +export interface ProductTemplateGetOptionalParams extends coreClient.OperationOptions { +} + +// @public +export type ProductTemplateGetResponse = TemplateModel; + +// @public +export interface ProductTemplates { + list(resourceGroupName: string, workspaceName: string, options?: ProductTemplatesListOptionalParams): PagedAsyncIterableIterator; +} + +// @public +export interface ProductTemplatesListNextOptionalParams extends coreClient.OperationOptions { +} + +// @public +export type ProductTemplatesListNextResponse = TemplateList; + +// @public +export interface ProductTemplatesListOptionalParams extends coreClient.OperationOptions { + filter?: string; + orderby?: string; + skipToken?: string; + top?: number; +} + +// @public +export type ProductTemplatesListResponse = TemplateList; + // @public export interface PropertyArrayChangedConditionProperties extends AutomationRuleCondition { // (undocumented) @@ -4345,6 +5191,9 @@ export interface PropertyConditionProperties extends AutomationRuleCondition { // @public export type ProviderName = string; +// @public +export type ProvisioningState = string; + // @public export interface QueryBasedAlertRuleTemplateProperties { alertDetailsOverride?: AlertDetailsOverride; @@ -4354,17 +5203,61 @@ export interface QueryBasedAlertRuleTemplateProperties { entityMappings?: EntityMapping[]; eventGroupingSettings?: EventGroupingSettings; query?: string; + sentinelEntitiesMappings?: SentinelEntityMapping[]; severity?: AlertSeverity; version?: string; } +// @public +export interface Recommendation { + actions: RecommendedAction[]; + additionalProperties?: { + [propertyName: string]: string; + }; + category: Category; + content?: Content; + context: Context; + description: string; + displayUntilTimeUtc?: Date; + hideUntilTimeUtc?: Date; + id: string; + instructions: Instructions; + lastEvaluatedTimeUtc: Date; + priority: Priority; + recommendationTypeId: string; + recommendationTypeTitle: string; + resourceId?: string; + state: State; + title: string; + visible?: boolean; + workspaceId: string; +} + +// @public +export interface RecommendationList { + value?: Recommendation[]; +} + +// @public +export interface RecommendationPatch { + hideUntilTimeUtc?: Date; + state?: State; +} + +// @public +export interface RecommendedAction { + linkText: string; + linkUrl: string; + state?: Priority; +} + // @public export type RegistryHive = string; // @public export interface RegistryKeyEntity extends Entity { readonly additionalData?: { - [propertyName: string]: Record; + [propertyName: string]: any; }; readonly friendlyName?: string; readonly hive?: RegistryHive; @@ -4381,7 +5274,7 @@ export interface RegistryKeyEntityProperties extends EntityCommonProperties { // @public export interface RegistryValueEntity extends Entity { readonly additionalData?: { - [propertyName: string]: Record; + [propertyName: string]: any; }; readonly friendlyName?: string; readonly keyEntityId?: string; @@ -4502,6 +5395,7 @@ export interface ScheduledAlertRule extends AlertRule { query?: string; queryFrequency?: string; queryPeriod?: string; + sentinelEntitiesMappings?: SentinelEntityMapping[]; severity?: AlertSeverity; suppressionDuration?: string; suppressionEnabled?: boolean; @@ -4523,6 +5417,7 @@ export interface ScheduledAlertRuleCommonProperties { query?: string; queryFrequency?: string; queryPeriod?: string; + sentinelEntitiesMappings?: SentinelEntityMapping[]; severity?: AlertSeverity; triggerOperator?: TriggerOperator; triggerThreshold?: number; @@ -4561,6 +5456,7 @@ export interface ScheduledAlertRuleTemplate extends AlertRuleTemplate { queryFrequency?: string; queryPeriod?: string; requiredDataConnectors?: AlertRuleTemplateDataSource[]; + sentinelEntitiesMappings?: SentinelEntityMapping[]; severity?: AlertSeverity; status?: TemplateStatus; tactics?: AttackTactic[]; @@ -4573,7 +5469,7 @@ export interface ScheduledAlertRuleTemplate extends AlertRuleTemplate { // @public export interface SecurityAlert extends Entity { readonly additionalData?: { - [propertyName: string]: Record; + [propertyName: string]: any; }; readonly alertDisplayName?: string; readonly alertLink?: string; @@ -4646,17 +5542,19 @@ export interface SecurityAlertTimelineItem extends EntityTimelineItem { description?: string; displayName: string; endTimeUtc: Date; + readonly intent?: KillChainIntent; kind: "SecurityAlert"; productName?: string; severity: AlertSeverity; startTimeUtc: Date; + techniques?: string[]; timeGenerated: Date; } // @public export interface SecurityGroupEntity extends Entity { readonly additionalData?: { - [propertyName: string]: Record; + [propertyName: string]: any; }; readonly distinguishedName?: string; readonly friendlyName?: string; @@ -4680,6 +5578,8 @@ export class SecurityInsights extends coreClient.ServiceClient { // (undocumented) actions: Actions; // (undocumented) + alertRuleOperations: AlertRuleOperations; + // (undocumented) alertRules: AlertRules; // (undocumented) alertRuleTemplates: AlertRuleTemplates; @@ -4694,6 +5594,14 @@ export class SecurityInsights extends coreClient.ServiceClient { // (undocumented) bookmarks: Bookmarks; // (undocumented) + contentPackage: ContentPackage; + // (undocumented) + contentPackages: ContentPackages; + // (undocumented) + contentTemplate: ContentTemplate; + // (undocumented) + contentTemplates: ContentTemplates; + // (undocumented) dataConnectors: DataConnectors; // (undocumented) dataConnectorsCheckRequirementsOperations: DataConnectorsCheckRequirementsOperations; @@ -4714,12 +5622,26 @@ export class SecurityInsights extends coreClient.ServiceClient { // (undocumented) fileImports: FileImports; // (undocumented) + get: Get; + // (undocumented) + getRecommendations: GetRecommendations; + // (undocumented) + getTriggeredAnalyticsRuleRuns: GetTriggeredAnalyticsRuleRuns; + // (undocumented) + huntComments: HuntComments; + // (undocumented) + huntRelations: HuntRelations; + // (undocumented) + hunts: Hunts; + // (undocumented) incidentComments: IncidentComments; // (undocumented) incidentRelations: IncidentRelations; // (undocumented) incidents: Incidents; // (undocumented) + incidentTasks: IncidentTasks; + // (undocumented) iPGeodata: IPGeodata; // (undocumented) metadata: Metadata; @@ -4728,8 +5650,16 @@ export class SecurityInsights extends coreClient.ServiceClient { // (undocumented) operations: Operations; // (undocumented) + productPackage: ProductPackage; + // (undocumented) + productPackages: ProductPackages; + // (undocumented) productSettings: ProductSettings; // (undocumented) + productTemplate: ProductTemplate; + // (undocumented) + productTemplates: ProductTemplates; + // (undocumented) securityMLAnalyticsSettings: SecurityMLAnalyticsSettings; // (undocumented) sentinelOnboardingStates: SentinelOnboardingStates; @@ -4746,9 +5676,23 @@ export class SecurityInsights extends coreClient.ServiceClient { // (undocumented) threatIntelligenceIndicators: ThreatIntelligenceIndicators; // (undocumented) + triggeredAnalyticsRuleRunOperations: TriggeredAnalyticsRuleRunOperations; + // (undocumented) + update: Update; + // (undocumented) watchlistItems: WatchlistItems; // (undocumented) watchlists: Watchlists; + // (undocumented) + workspaceManagerAssignmentJobs: WorkspaceManagerAssignmentJobs; + // (undocumented) + workspaceManagerAssignments: WorkspaceManagerAssignments; + // (undocumented) + workspaceManagerConfigurations: WorkspaceManagerConfigurations; + // (undocumented) + workspaceManagerGroups: WorkspaceManagerGroups; + // (undocumented) + workspaceManagerMembers: WorkspaceManagerMembers; } // @public @@ -4821,6 +5765,11 @@ export type SecurityMLAnalyticsSettingsListResponse = SecurityMLAnalyticsSetting // @public (undocumented) export type SecurityMLAnalyticsSettingUnion = SecurityMLAnalyticsSetting | AnomalySecurityMLAnalyticsSettings; +// @public +export interface SentinelEntityMapping { + columnName?: string; +} + // @public export interface SentinelOnboardingState extends ResourceWithEtag { customerManagedKey?: boolean; @@ -4971,10 +5920,16 @@ export type SourceKind = string; // @public export type SourceType = string; +// @public +export type State = string; + +// @public +export type Status = string; + // @public export interface SubmissionMailEntity extends Entity { readonly additionalData?: { - [propertyName: string]: Record; + [propertyName: string]: any; }; readonly friendlyName?: string; kind: "SubmissionMail"; @@ -5034,6 +5989,73 @@ export interface TeamProperties { teamName: string; } +// @public +export interface TemplateList { + readonly nextLink?: string; + value: TemplateModel[]; +} + +// @public +export interface TemplateListAutoGenerated { + readonly nextLink?: string; + value: TemplateModelAutoGenerated[]; +} + +// @public +export interface TemplateModel extends ResourceWithEtag { + author?: MetadataAuthor; + categories?: MetadataCategories; + contentId?: string; + contentKind?: Kind; + contentSchemaVersion?: string; + customVersion?: string; + dependencies?: MetadataDependencies; + displayName?: string; + firstPublishDate?: Date; + icon?: string; + lastPublishDate?: Date; + packagedContent?: Record; + packageId?: string; + packageKind?: PackageKind; + packageName?: string; + parentId?: string; + previewImages?: string[]; + previewImagesDark?: string[]; + providers?: string[]; + source?: MetadataSource; + support?: MetadataSupport; + threatAnalysisTactics?: string[]; + threatAnalysisTechniques?: string[]; + version?: string; +} + +// @public +export interface TemplateModelAutoGenerated extends ResourceWithEtag { + author?: MetadataAuthor; + categories?: MetadataCategories; + contentId?: string; + contentKind?: Kind; + contentSchemaVersion?: string; + customVersion?: string; + dependencies?: MetadataDependencies; + displayName?: string; + firstPublishDate?: Date; + icon?: string; + lastPublishDate?: Date; + mainTemplate?: Record; + packageId?: string; + packageKind?: PackageKind; + packageName?: string; + previewImages?: string[]; + previewImagesDark?: string[]; + providers?: string[]; + source?: MetadataSource; + support?: MetadataSupport; + threatAnalysisTactics?: string[]; + threatAnalysisTechniques?: string[]; + version?: string; +} + // @public export type TemplateStatus = string; @@ -5175,7 +6197,7 @@ export type ThreatIntelligenceIndicatorMetricsListResponse = ThreatIntelligenceM // @public export interface ThreatIntelligenceIndicatorModel extends ThreatIntelligenceInformation { readonly additionalData?: { - [propertyName: string]: Record; + [propertyName: string]: any; }; confidence?: number; created?: string; @@ -5291,7 +6313,7 @@ export type ThreatIntelligenceIndicatorsListResponse = ThreatIntelligenceInforma // @public export interface ThreatIntelligenceInformation extends ResourceWithEtag { - kind: ThreatIntelligenceResourceKindEnum; + kind: ThreatIntelligenceResourceInnerKind; } // @public @@ -5346,16 +6368,16 @@ export interface ThreatIntelligenceParsedPatternTypeValue { } // @public -export type ThreatIntelligenceResourceKindEnum = string; +export type ThreatIntelligenceResourceInnerKind = string; // @public export interface ThreatIntelligenceSortingCriteria { itemKey?: string; - sortOrder?: ThreatIntelligenceSortingCriteriaEnum; + sortOrder?: ThreatIntelligenceSortingOrder; } // @public -export type ThreatIntelligenceSortingCriteriaEnum = string; +export type ThreatIntelligenceSortingOrder = string; // @public export interface TICheckRequirements extends DataConnectorsCheckRequirements { @@ -5457,6 +6479,39 @@ export interface TiTaxiiDataConnectorProperties extends DataConnectorTenantId { workspaceId?: string; } +// @public +export interface TriggeredAnalyticsRuleRun extends ResourceWithEtag { + // (undocumented) + executionTimeUtc: Date; + provisioningState: ProvisioningState; + // (undocumented) + ruleId: string; + ruleRunAdditionalData?: { + [propertyName: string]: any; + }; + // (undocumented) + triggeredAnalyticsRuleRunId: string; +} + +// @public +export interface TriggeredAnalyticsRuleRunGetOptionalParams extends coreClient.OperationOptions { +} + +// @public +export type TriggeredAnalyticsRuleRunGetResponse = TriggeredAnalyticsRuleRun; + +// @public +export interface TriggeredAnalyticsRuleRunOperations { + get(resourceGroupName: string, workspaceName: string, ruleRunId: string, options?: TriggeredAnalyticsRuleRunGetOptionalParams): Promise; +} + +// @public +export interface TriggeredAnalyticsRuleRuns { + readonly nextLink?: string; + // (undocumented) + value: TriggeredAnalyticsRuleRun[]; +} + // @public export type TriggerOperator = "GreaterThan" | "LessThan" | "Equal" | "NotEqual"; @@ -5475,10 +6530,25 @@ export interface Ueba extends Settings { // @public export type UebaDataSources = string; +// @public +export interface Update { + beginRecommendation(resourceGroupName: string, workspaceName: string, recommendationId: string, recommendationPatch: RecommendationPatch[], options?: UpdateRecommendationOptionalParams): Promise, UpdateRecommendationResponse>>; + beginRecommendationAndWait(resourceGroupName: string, workspaceName: string, recommendationId: string, recommendationPatch: RecommendationPatch[], options?: UpdateRecommendationOptionalParams): Promise; +} + +// @public +export interface UpdateRecommendationOptionalParams extends coreClient.OperationOptions { + resumeFrom?: string; + updateIntervalInMs?: number; +} + +// @public +export type UpdateRecommendationResponse = Recommendation; + // @public export interface UrlEntity extends Entity { readonly additionalData?: { - [propertyName: string]: Record; + [propertyName: string]: any; }; readonly friendlyName?: string; kind: "Url"; @@ -5664,6 +6734,271 @@ export interface Webhook { webhookUrl?: string; } +// @public +export interface WorkspaceManagerAssignment extends AzureEntityResource { + items?: AssignmentItem[]; + readonly lastJobEndTime?: Date; + readonly lastJobProvisioningState?: ProvisioningState; + targetResourceName?: string; +} + +// @public +export interface WorkspaceManagerAssignmentJobs { + create(resourceGroupName: string, workspaceName: string, workspaceManagerAssignmentName: string, options?: WorkspaceManagerAssignmentJobsCreateOptionalParams): Promise; + delete(resourceGroupName: string, workspaceName: string, workspaceManagerAssignmentName: string, jobName: string, options?: WorkspaceManagerAssignmentJobsDeleteOptionalParams): Promise; + get(resourceGroupName: string, workspaceName: string, workspaceManagerAssignmentName: string, jobName: string, options?: WorkspaceManagerAssignmentJobsGetOptionalParams): Promise; + list(resourceGroupName: string, workspaceName: string, workspaceManagerAssignmentName: string, options?: WorkspaceManagerAssignmentJobsListOptionalParams): PagedAsyncIterableIterator; +} + +// @public +export interface WorkspaceManagerAssignmentJobsCreateOptionalParams extends coreClient.OperationOptions { +} + +// @public +export type WorkspaceManagerAssignmentJobsCreateResponse = Job; + +// @public +export interface WorkspaceManagerAssignmentJobsDeleteOptionalParams extends coreClient.OperationOptions { +} + +// @public +export interface WorkspaceManagerAssignmentJobsGetOptionalParams extends coreClient.OperationOptions { +} + +// @public +export type WorkspaceManagerAssignmentJobsGetResponse = Job; + +// @public +export interface WorkspaceManagerAssignmentJobsListNextOptionalParams extends coreClient.OperationOptions { +} + +// @public +export type WorkspaceManagerAssignmentJobsListNextResponse = JobList; + +// @public +export interface WorkspaceManagerAssignmentJobsListOptionalParams extends coreClient.OperationOptions { + orderby?: string; + skipToken?: string; + top?: number; +} + +// @public +export type WorkspaceManagerAssignmentJobsListResponse = JobList; + +// @public +export interface WorkspaceManagerAssignmentList { + readonly nextLink?: string; + value: WorkspaceManagerAssignment[]; +} + +// @public +export interface WorkspaceManagerAssignments { + createOrUpdate(resourceGroupName: string, workspaceName: string, workspaceManagerAssignmentName: string, workspaceManagerAssignment: WorkspaceManagerAssignment, options?: WorkspaceManagerAssignmentsCreateOrUpdateOptionalParams): Promise; + delete(resourceGroupName: string, workspaceName: string, workspaceManagerAssignmentName: string, options?: WorkspaceManagerAssignmentsDeleteOptionalParams): Promise; + get(resourceGroupName: string, workspaceName: string, workspaceManagerAssignmentName: string, options?: WorkspaceManagerAssignmentsGetOptionalParams): Promise; + list(resourceGroupName: string, workspaceName: string, options?: WorkspaceManagerAssignmentsListOptionalParams): PagedAsyncIterableIterator; +} + +// @public +export interface WorkspaceManagerAssignmentsCreateOrUpdateOptionalParams extends coreClient.OperationOptions { +} + +// @public +export type WorkspaceManagerAssignmentsCreateOrUpdateResponse = WorkspaceManagerAssignment; + +// @public +export interface WorkspaceManagerAssignmentsDeleteOptionalParams extends coreClient.OperationOptions { +} + +// @public +export interface WorkspaceManagerAssignmentsGetOptionalParams extends coreClient.OperationOptions { +} + +// @public +export type WorkspaceManagerAssignmentsGetResponse = WorkspaceManagerAssignment; + +// @public +export interface WorkspaceManagerAssignmentsListNextOptionalParams extends coreClient.OperationOptions { +} + +// @public +export type WorkspaceManagerAssignmentsListNextResponse = WorkspaceManagerAssignmentList; + +// @public +export interface WorkspaceManagerAssignmentsListOptionalParams extends coreClient.OperationOptions { + orderby?: string; + skipToken?: string; + top?: number; +} + +// @public +export type WorkspaceManagerAssignmentsListResponse = WorkspaceManagerAssignmentList; + +// @public +export interface WorkspaceManagerConfiguration extends AzureEntityResource { + mode?: Mode; +} + +// @public +export interface WorkspaceManagerConfigurationList { + readonly nextLink?: string; + value: WorkspaceManagerConfiguration[]; +} + +// @public +export interface WorkspaceManagerConfigurations { + createOrUpdate(resourceGroupName: string, workspaceName: string, workspaceManagerConfigurationName: string, workspaceManagerConfiguration: WorkspaceManagerConfiguration, options?: WorkspaceManagerConfigurationsCreateOrUpdateOptionalParams): Promise; + delete(resourceGroupName: string, workspaceName: string, workspaceManagerConfigurationName: string, options?: WorkspaceManagerConfigurationsDeleteOptionalParams): Promise; + get(resourceGroupName: string, workspaceName: string, workspaceManagerConfigurationName: string, options?: WorkspaceManagerConfigurationsGetOptionalParams): Promise; + list(resourceGroupName: string, workspaceName: string, options?: WorkspaceManagerConfigurationsListOptionalParams): PagedAsyncIterableIterator; +} + +// @public +export interface WorkspaceManagerConfigurationsCreateOrUpdateOptionalParams extends coreClient.OperationOptions { +} + +// @public +export type WorkspaceManagerConfigurationsCreateOrUpdateResponse = WorkspaceManagerConfiguration; + +// @public +export interface WorkspaceManagerConfigurationsDeleteOptionalParams extends coreClient.OperationOptions { +} + +// @public +export interface WorkspaceManagerConfigurationsGetOptionalParams extends coreClient.OperationOptions { +} + +// @public +export type WorkspaceManagerConfigurationsGetResponse = WorkspaceManagerConfiguration; + +// @public +export interface WorkspaceManagerConfigurationsListNextOptionalParams extends coreClient.OperationOptions { +} + +// @public +export type WorkspaceManagerConfigurationsListNextResponse = WorkspaceManagerConfigurationList; + +// @public +export interface WorkspaceManagerConfigurationsListOptionalParams extends coreClient.OperationOptions { + orderby?: string; + skipToken?: string; + top?: number; +} + +// @public +export type WorkspaceManagerConfigurationsListResponse = WorkspaceManagerConfigurationList; + +// @public +export interface WorkspaceManagerGroup extends AzureEntityResource { + description?: string; + displayName?: string; + memberResourceNames?: string[]; +} + +// @public +export interface WorkspaceManagerGroupList { + readonly nextLink?: string; + value: WorkspaceManagerGroup[]; +} + +// @public +export interface WorkspaceManagerGroups { + createOrUpdate(resourceGroupName: string, workspaceName: string, workspaceManagerGroupName: string, workspaceManagerGroup: WorkspaceManagerGroup, options?: WorkspaceManagerGroupsCreateOrUpdateOptionalParams): Promise; + delete(resourceGroupName: string, workspaceName: string, workspaceManagerGroupName: string, options?: WorkspaceManagerGroupsDeleteOptionalParams): Promise; + get(resourceGroupName: string, workspaceName: string, workspaceManagerGroupName: string, options?: WorkspaceManagerGroupsGetOptionalParams): Promise; + list(resourceGroupName: string, workspaceName: string, options?: WorkspaceManagerGroupsListOptionalParams): PagedAsyncIterableIterator; +} + +// @public +export interface WorkspaceManagerGroupsCreateOrUpdateOptionalParams extends coreClient.OperationOptions { +} + +// @public +export type WorkspaceManagerGroupsCreateOrUpdateResponse = WorkspaceManagerGroup; + +// @public +export interface WorkspaceManagerGroupsDeleteOptionalParams extends coreClient.OperationOptions { +} + +// @public +export interface WorkspaceManagerGroupsGetOptionalParams extends coreClient.OperationOptions { +} + +// @public +export type WorkspaceManagerGroupsGetResponse = WorkspaceManagerGroup; + +// @public +export interface WorkspaceManagerGroupsListNextOptionalParams extends coreClient.OperationOptions { +} + +// @public +export type WorkspaceManagerGroupsListNextResponse = WorkspaceManagerGroupList; + +// @public +export interface WorkspaceManagerGroupsListOptionalParams extends coreClient.OperationOptions { + orderby?: string; + skipToken?: string; + top?: number; +} + +// @public +export type WorkspaceManagerGroupsListResponse = WorkspaceManagerGroupList; + +// @public +export interface WorkspaceManagerMember extends AzureEntityResource { + targetWorkspaceId?: string; + targetWorkspaceTenantId?: string; +} + +// @public +export interface WorkspaceManagerMembers { + createOrUpdate(resourceGroupName: string, workspaceName: string, workspaceManagerMemberName: string, workspaceManagerMember: WorkspaceManagerMember, options?: WorkspaceManagerMembersCreateOrUpdateOptionalParams): Promise; + delete(resourceGroupName: string, workspaceName: string, workspaceManagerMemberName: string, options?: WorkspaceManagerMembersDeleteOptionalParams): Promise; + get(resourceGroupName: string, workspaceName: string, workspaceManagerMemberName: string, options?: WorkspaceManagerMembersGetOptionalParams): Promise; + list(resourceGroupName: string, workspaceName: string, options?: WorkspaceManagerMembersListOptionalParams): PagedAsyncIterableIterator; +} + +// @public +export interface WorkspaceManagerMembersCreateOrUpdateOptionalParams extends coreClient.OperationOptions { +} + +// @public +export type WorkspaceManagerMembersCreateOrUpdateResponse = WorkspaceManagerMember; + +// @public +export interface WorkspaceManagerMembersDeleteOptionalParams extends coreClient.OperationOptions { +} + +// @public +export interface WorkspaceManagerMembersGetOptionalParams extends coreClient.OperationOptions { +} + +// @public +export type WorkspaceManagerMembersGetResponse = WorkspaceManagerMember; + +// @public +export interface WorkspaceManagerMembersList { + readonly nextLink?: string; + value: WorkspaceManagerMember[]; +} + +// @public +export interface WorkspaceManagerMembersListNextOptionalParams extends coreClient.OperationOptions { +} + +// @public +export type WorkspaceManagerMembersListNextResponse = WorkspaceManagerMembersList; + +// @public +export interface WorkspaceManagerMembersListOptionalParams extends coreClient.OperationOptions { + orderby?: string; + skipToken?: string; + top?: number; +} + +// @public +export type WorkspaceManagerMembersListResponse = WorkspaceManagerMembersList; + // (No @packageDocumentation comment for this package) ``` diff --git a/sdk/securityinsight/arm-securityinsight/src/lroImpl.ts b/sdk/securityinsight/arm-securityinsight/src/lroImpl.ts index 518d5f053b4e..dd803cd5e28c 100644 --- a/sdk/securityinsight/arm-securityinsight/src/lroImpl.ts +++ b/sdk/securityinsight/arm-securityinsight/src/lroImpl.ts @@ -6,29 +6,37 @@ * Changes may cause incorrect behavior and will be lost if the code is regenerated. */ +// Copyright (c) Microsoft Corporation. +// Licensed under the MIT license. + +import { AbortSignalLike } from "@azure/abort-controller"; import { LongRunningOperation, LroResponse } from "@azure/core-lro"; -export class LroImpl implements LongRunningOperation { - constructor( - private sendOperationFn: (args: any, spec: any) => Promise>, - private args: Record, - private spec: { - readonly requestBody?: unknown; - readonly path?: string; - readonly httpMethod: string; - } & Record, - public requestPath: string = spec.path!, - public requestMethod: string = spec.httpMethod - ) {} - public async sendInitialRequest(): Promise> { - return this.sendOperationFn(this.args, this.spec); - } - public async sendPollRequest(path: string): Promise> { - const { requestBody, ...restSpec } = this.spec; - return this.sendOperationFn(this.args, { - ...restSpec, - path, - httpMethod: "GET" - }); - } +export function createLroSpec(inputs: { + sendOperationFn: (args: any, spec: any) => Promise>; + args: Record; + spec: { + readonly requestBody?: unknown; + readonly path?: string; + readonly httpMethod: string; + } & Record; +}): LongRunningOperation { + const { args, spec, sendOperationFn } = inputs; + return { + requestMethod: spec.httpMethod, + requestPath: spec.path!, + sendInitialRequest: () => sendOperationFn(args, spec), + sendPollRequest: ( + path: string, + options?: { abortSignal?: AbortSignalLike } + ) => { + const { requestBody, ...restSpec } = spec; + return sendOperationFn(args, { + ...restSpec, + httpMethod: "GET", + path, + abortSignal: options?.abortSignal + }); + } + }; } diff --git a/sdk/securityinsight/arm-securityinsight/src/models/index.ts b/sdk/securityinsight/arm-securityinsight/src/models/index.ts index ce2c0ea1f1ab..39805970e40e 100644 --- a/sdk/securityinsight/arm-securityinsight/src/models/index.ts +++ b/sdk/securityinsight/arm-securityinsight/src/models/index.ts @@ -17,6 +17,7 @@ export type AutomationRuleConditionUnion = | PropertyConditionProperties; export type AutomationRuleActionUnion = | AutomationRuleAction + | AutomationRuleAddIncidentTaskAction | AutomationRuleModifyPropertiesAction | AutomationRuleRunPlaybookAction; export type EntityTimelineItemUnion = @@ -40,6 +41,7 @@ export type DataConnectorsCheckRequirementsUnion = | MtpCheckRequirements | OfficeATPCheckRequirements | OfficeIRMCheckRequirements + | MicrosoftPurviewInformationProtectionCheckRequirements | Office365ProjectCheckRequirements | OfficePowerBICheckRequirements | TICheckRequirements @@ -119,6 +121,7 @@ export type DataConnectorUnion = | McasDataConnector | Dynamics365DataConnector | OfficeATPDataConnector + | MicrosoftPurviewInformationProtectionDataConnector | Office365ProjectDataConnector | OfficePowerBIDataConnector | OfficeIRMDataConnector @@ -255,7 +258,7 @@ export interface AutomationRuleCondition { /** Describes an automation rule action. */ export interface AutomationRuleAction { /** Polymorphic discriminator, which specifies the different types this object can be */ - actionType: "ModifyProperties" | "RunPlaybook"; + actionType: "AddIncidentTask" | "ModifyProperties" | "RunPlaybook"; order: number; } @@ -276,6 +279,16 @@ export interface AutomationRulesList { nextLink?: string; } +/** Describes the request body for triggering a playbook on an entity. */ +export interface EntityManualTriggerRequestBody { + /** Incident ARM id. */ + incidentArmId?: string; + /** The tenant id of the playbook resource. */ + tenantId?: string; + /** The resource id of the playbook resource. */ + logicAppsResourceId: string; +} + export interface ManualTriggerRequestBody { tenantId?: string; logicAppsResourceId: string; @@ -380,7 +393,7 @@ export interface ExpansionResultAggregation { /** The display name of the aggregation by type. */ displayName?: string; /** The kind of the aggregated entity. */ - entityKind: EntityKind; + entityKind: EntityKindEnum; } /** The expansion result values. */ @@ -399,6 +412,106 @@ export interface ConnectedEntity { additionalData?: Record; } +/** List available packages. */ +export interface PackageList { + /** + * URL to fetch the next set of packages. + * NOTE: This property will not be serialized. It can only be populated by the server. + */ + readonly nextLink?: string; + /** Array of packages. */ + value: PackageModel[]; +} + +/** The original source of the content item, where it comes from. */ +export interface MetadataSource { + /** Source type of the content */ + kind: SourceKind; + /** Name of the content source. The repo name, solution name, LA workspace name etc. */ + name?: string; + /** ID of the content source. The solution ID, workspace ID, etc */ + sourceId?: string; +} + +/** Publisher or creator of the content item. */ +export interface MetadataAuthor { + /** Name of the author. Company or person. */ + name?: string; + /** Email of author contact */ + email?: string; + /** Link for author/vendor page */ + link?: string; +} + +/** Support information for the content item. */ +export interface MetadataSupport { + /** Type of support for content item */ + tier: SupportTier; + /** Name of the support contact. Company or person. */ + name?: string; + /** Email of support contact */ + email?: string; + /** Link for support help, like to support page to open a ticket etc. */ + link?: string; +} + +/** Dependencies for the content item, what other content items it requires to work. Can describe more complex dependencies using a recursive/nested structure. For a single dependency an id/kind/version can be supplied or operator/criteria for complex dependencies. */ +export interface MetadataDependencies { + /** Id of the content item we depend on */ + contentId?: string; + /** Type of the content item we depend on */ + kind?: Kind; + /** Version of the the content item we depend on. Can be blank, * or missing to indicate any version fulfills the dependency. If version does not match our defined numeric format then an exact match is required. */ + version?: string; + /** Name of the content item */ + name?: string; + /** Operator used for list of dependencies in criteria array. */ + operator?: Operator; + /** This is the list of dependencies we must fulfill, according to the AND/OR operator */ + criteria?: MetadataDependencies[]; +} + +/** ies for the solution content item */ +export interface MetadataCategories { + /** domain for the solution content item */ + domains?: string[]; + /** Industry verticals for the solution content item */ + verticals?: string[]; +} + +/** List available packages. */ +export interface PackageListAutoGenerated { + /** + * URL to fetch the next set of packages. + * NOTE: This property will not be serialized. It can only be populated by the server. + */ + readonly nextLink?: string; + /** Array of packages. */ + value: PackageModelAutoGenerated[]; +} + +/** List of all the template. */ +export interface TemplateList { + /** Array of templates. */ + value: TemplateModel[]; + /** + * URL to fetch the next page of template. + * NOTE: This property will not be serialized. It can only be populated by the server. + */ + readonly nextLink?: string; +} + +/** List of all the template. */ +export interface TemplateListAutoGenerated { + /** Array of templates. */ + value: TemplateModelAutoGenerated[]; + /** + * URL to fetch the next page of template. + * NOTE: This property will not be serialized. It can only be populated by the server. + */ + readonly nextLink?: string; +} + /** Geodata information for a given IP address */ export interface EnrichmentIpGeodata { /** The autonomous system number associated with this IP address */ @@ -559,7 +672,7 @@ export interface EntityEdges { /** The target entity Id. */ targetEntityId?: string; /** A bag of custom fields that should be part of the entity and will be presented to the user. */ - additionalData?: { [propertyName: string]: Record }; + additionalData?: { [propertyName: string]: any }; } /** The parameters required to execute s timeline operation on the given entity. */ @@ -774,15 +887,86 @@ export interface ValidationError { readonly errorMessages?: string[]; } +/** List all the hunts. */ +export interface HuntList { + /** + * URL to fetch the next set of hunts. + * NOTE: This property will not be serialized. It can only be populated by the server. + */ + readonly nextLink?: string; + /** Array of hunts. */ + value: Hunt[]; +} + +/** Describes a user that the hunt is assigned to */ +export interface HuntOwner { + /** The email of the user the hunt is assigned to. */ + email?: string; + /** The name of the user the hunt is assigned to. */ + assignedTo?: string; + /** The object id of the user the hunt is assigned to. */ + objectId?: string; + /** The user principal name of the user the hunt is assigned to. */ + userPrincipalName?: string; + /** The type of the owner the hunt is assigned to. */ + ownerType?: OwnerType; +} + +/** List of all the hunt relations */ +export interface HuntRelationList { + /** + * URL to fetch the next set of hunt relations. + * NOTE: This property will not be serialized. It can only be populated by the server. + */ + readonly nextLink?: string; + /** Array of hunt relations */ + value: HuntRelation[]; +} + +/** List of all hunt comments */ +export interface HuntCommentList { + /** + * URL to fetch the next set of hunt comments. + * NOTE: This property will not be serialized. It can only be populated by the server. + */ + readonly nextLink?: string; + /** Array of hunt comments */ + value: HuntComment[]; +} + /** List all the incidents. */ export interface IncidentList { + value: Incident[]; /** * URL to fetch the next set of incidents. * NOTE: This property will not be serialized. It can only be populated by the server. */ readonly nextLink?: string; - /** Array of incidents. */ - value: Incident[]; +} + +/** Information on the user an incident is assigned to */ +export interface IncidentOwnerInfo { + /** The email of the user the incident is assigned to. */ + email?: string; + /** The name of the user the incident is assigned to. */ + assignedTo?: string; + /** The object id of the user the incident is assigned to. */ + objectId?: string; + /** The user principal name of the user the incident is assigned to. */ + userPrincipalName?: string; + /** The type of the owner the incident is assigned to. */ + ownerType?: OwnerType; +} + +/** Represents an incident label */ +export interface IncidentLabel { + /** The name of the label */ + labelName: string; + /** + * The type of the label + * NOTE: This property will not be serialized. It can only be populated by the server. + */ + readonly labelType?: IncidentLabelType; } /** Incident additional data property bag. */ @@ -807,46 +991,21 @@ export interface IncidentAdditionalData { * NOTE: This property will not be serialized. It can only be populated by the server. */ readonly alertProductNames?: string[]; - /** - * The provider incident url to the incident in Microsoft 365 Defender portal - * NOTE: This property will not be serialized. It can only be populated by the server. - */ - readonly providerIncidentUrl?: string; /** * The tactics associated with incident * NOTE: This property will not be serialized. It can only be populated by the server. */ readonly tactics?: AttackTactic[]; /** - * The techniques associated with incident's tactics' + * The techniques associated with incident's tactics * NOTE: This property will not be serialized. It can only be populated by the server. */ readonly techniques?: string[]; -} - -/** Represents an incident label */ -export interface IncidentLabel { - /** The name of the label */ - labelName: string; /** - * The type of the label + * The provider incident url to the incident in Microsoft 365 Defender portal * NOTE: This property will not be serialized. It can only be populated by the server. */ - readonly labelType?: IncidentLabelType; -} - -/** Information on the user an incident is assigned to */ -export interface IncidentOwnerInfo { - /** The email of the user the incident is assigned to. */ - email?: string; - /** The name of the user the incident is assigned to. */ - assignedTo?: string; - /** The object id of the user the incident is assigned to. */ - objectId?: string; - /** The user principal name of the user the incident is assigned to. */ - userPrincipalName?: string; - /** The type of the owner the incident is assigned to. */ - ownerType?: OwnerType; + readonly providerIncidentUrl?: string; } /** Describes team information */ @@ -878,18 +1037,6 @@ export interface TeamInformation { readonly description?: string; } -/** Describes team properties */ -export interface TeamProperties { - /** The name of the team */ - teamName: string; - /** The description of the team */ - teamDescription?: string; - /** List of member IDs to add to the team */ - memberIds?: string[]; - /** List of group IDs to add their members to the team */ - groupIds?: string[]; -} - /** List of incident alerts. */ export interface IncidentAlertList { /** Array of incident alerts. */ @@ -916,7 +1063,7 @@ export interface EntityCommonProperties { * A bag of custom fields that should be part of the entity and will be presented to the user. * NOTE: This property will not be serialized. It can only be populated by the server. */ - readonly additionalData?: { [propertyName: string]: Record }; + readonly additionalData?: { [propertyName: string]: any }; /** * The graph item display name which is a short humanly readable description of the graph item instance. This property is optional and might be system generated. * NOTE: This property will not be serialized. It can only be populated by the server. @@ -930,15 +1077,10 @@ export interface IncidentBookmarkList { value: HuntingBookmark[]; } -/** List of incident comments. */ export interface IncidentCommentList { - /** - * URL to fetch the next set of comments. - * NOTE: This property will not be serialized. It can only be populated by the server. - */ - readonly nextLink?: string; - /** Array of comments. */ value: IncidentComment[]; + /** NOTE: This property will not be serialized. It can only be populated by the server. */ + readonly nextLink?: string; } /** The incident related entities response. */ @@ -951,10 +1093,15 @@ export interface IncidentEntitiesResponse { /** Information of a specific aggregation in the incident related entities result. */ export interface IncidentEntitiesResultsMetadata { + /** The kind of the aggregated entity. */ + entityKind: EntityKindEnum; /** Total number of aggregations of the given kind in the incident related entities result. */ count: number; - /** The kind of the aggregated entity. */ - entityKind: EntityKind; +} + +export interface IncidentTaskList { + value?: IncidentTask[]; + nextLink?: string; } /** List of all the metadata. */ @@ -968,44 +1115,12 @@ export interface MetadataList { readonly nextLink?: string; } -/** The original source of the content item, where it comes from. */ -export interface MetadataSource { - /** Source type of the content */ - kind: SourceKind; - /** Name of the content source. The repo name, solution name, LA workspace name etc. */ - name?: string; - /** ID of the content source. The solution ID, workspace ID, etc */ - sourceId?: string; -} - -/** Publisher or creator of the content item. */ -export interface MetadataAuthor { - /** Name of the author. Company or person. */ - name?: string; - /** Email of author contact */ - email?: string; - /** Link for author/vendor page */ - link?: string; -} - -/** Support information for the content item. */ -export interface MetadataSupport { - /** Type of support for content item */ - tier: SupportTier; - /** Name of the support contact. Company or person. */ - name?: string; - /** Email of support contact */ - email?: string; - /** Link for support help, like to support page to open a ticket etc. */ - link?: string; -} - /** Dependencies for the content item, what other content items it requires to work. Can describe more complex dependencies using a recursive/nested structure. For a single dependency an id/kind/version can be supplied or operator/criteria for complex dependencies. */ -export interface MetadataDependencies { +export interface MetadataDependenciesAutoGenerated { /** Id of the content item we depend on */ contentId?: string; /** Type of the content item we depend on */ - kind?: Kind; + kind?: string; /** Version of the the content item we depend on. Can be blank, * or missing to indicate any version fulfills the dependency. If version does not match our defined numeric format then an exact match is required. */ version?: string; /** Name of the content item */ @@ -1013,15 +1128,7 @@ export interface MetadataDependencies { /** Operator used for list of dependencies in criteria array. */ operator?: Operator; /** This is the list of dependencies we must fulfill, according to the AND/OR operator */ - criteria?: MetadataDependencies[]; -} - -/** ies for the solution content item */ -export interface MetadataCategories { - /** domain for the solution content item */ - domains?: string[]; - /** Industry verticals for the solution content item */ - verticals?: string[]; + criteria?: MetadataDependenciesAutoGenerated[]; } /** List of all the office365 consents. */ @@ -1041,6 +1148,90 @@ export interface SentinelOnboardingStatesList { value: SentinelOnboardingState[]; } +/** A list of recommendations */ +export interface RecommendationList { + /** An list of recommendations */ + value?: Recommendation[]; +} + +/** Recommendation object. */ +export interface Recommendation { + /** id of recommendation. */ + id: string; + /** Instructions of the recommendation. */ + instructions: Instructions; + /** Content of the recommendation. */ + content?: Content; + /** Id of the resource this recommendation refers to. */ + resourceId?: string; + /** Collection of additional properties for the recommendation. */ + additionalProperties?: { [propertyName: string]: string }; + /** Title of the recommendation. */ + title: string; + /** Description of the recommendation. */ + description: string; + /** Title of the recommendation type. */ + recommendationTypeTitle: string; + /** Id of the recommendation type. */ + recommendationTypeId: string; + /** Category of the recommendation. */ + category: Category; + /** Context of the recommendation. */ + context: Context; + /** Id of the workspace this recommendation refers to. */ + workspaceId: string; + /** List of actions to take for this recommendation. */ + actions: RecommendedAction[]; + /** State of the recommendation. */ + state: State; + /** Priority of the recommendation. */ + priority: Priority; + /** The time stamp (UTC) when the recommendation was last evaluated. */ + lastEvaluatedTimeUtc: Date; + /** The time stamp (UTC) when the recommendation should be displayed again. */ + hideUntilTimeUtc?: Date; + /** The timestamp (UTC) after which the recommendation should not be displayed anymore. */ + displayUntilTimeUtc?: Date; + /** Value indicating if the recommendation should be displayed or not. */ + visible?: boolean; +} + +/** Instructions section of a recommendation. */ +export interface Instructions { + /** What actions should be taken to complete the recommendation. */ + actionsToBePerformed: string; + /** Explains why the recommendation is important. */ + recommendationImportance: string; + /** How should the user complete the recommendation. */ + howToPerformActionDetails?: string; +} + +/** Content section of the recommendation. */ +export interface Content { + /** Title of the content. */ + title: string; + /** Description of the content. */ + description: string; +} + +/** What actions should be taken to complete the recommendation. */ +export interface RecommendedAction { + /** Text of the link to complete the action. */ + linkText: string; + /** The Link to complete the action. */ + linkUrl: string; + /** The state of the action. */ + state?: Priority; +} + +/** Recommendation Fields to update. */ +export interface RecommendationPatch { + /** State of the recommendation. */ + state?: State; + /** The time stamp (UTC) when the recommendation should be displayed again. */ + hideUntilTimeUtc?: Date; +} + /** List all the SecurityMLAnalyticsSettings */ export interface SecurityMLAnalyticsSettingsList { /** @@ -1266,7 +1457,7 @@ export interface ThreatIntelligenceSortingCriteria { /** Column name */ itemKey?: string; /** Sorting order (ascending/descending/unsorted). */ - sortOrder?: ThreatIntelligenceSortingCriteriaEnum; + sortOrder?: ThreatIntelligenceSortingOrder; } /** List of all the threat intelligence metric fields (type/threat type/source). */ @@ -1307,6 +1498,18 @@ export interface ThreatIntelligenceAppendTags { threatIntelligenceTags?: string[]; } +/** The triggered analytics rule run array */ +export interface TriggeredAnalyticsRuleRuns { + value: TriggeredAnalyticsRuleRun[]; + /** NOTE: This property will not be serialized. It can only be populated by the server. */ + readonly nextLink?: string; +} + +/** Analytics Rule Run Trigger request */ +export interface AnalyticsRuleRunTrigger { + executionTimeUtc: Date; +} + /** List all the watchlists. */ export interface WatchlistList { /** @@ -1329,23 +1532,159 @@ export interface WatchlistItemList { value: WatchlistItem[]; } -/** List all the data connectors. */ -export interface DataConnectorList { +/** List of all the workspace manager groups. */ +export interface WorkspaceManagerGroupList { /** - * URL to fetch the next set of data connectors. + * URL to fetch the next set of workspace manager groups. * NOTE: This property will not be serialized. It can only be populated by the server. */ readonly nextLink?: string; - /** Array of data connectors. */ - value: DataConnectorUnion[]; + /** Array of workspace manager groups. */ + value: WorkspaceManagerGroup[]; } -/** Represents Codeless API Polling data connector. */ -export interface DataConnectorConnectBody { - /** The authentication kind used to poll the data */ - kind?: ConnectAuthKind; - /** The API key of the audit server. */ - apiKey?: string; +/** Common error response for all Azure Resource Manager APIs to return error details for failed operations. (This also follows the OData error response format.). */ +export interface ErrorResponse { + /** The error object. */ + error?: ErrorDetail; +} + +/** The error detail. */ +export interface ErrorDetail { + /** + * The error code. + * NOTE: This property will not be serialized. It can only be populated by the server. + */ + readonly code?: string; + /** + * The error message. + * NOTE: This property will not be serialized. It can only be populated by the server. + */ + readonly message?: string; + /** + * The error target. + * NOTE: This property will not be serialized. It can only be populated by the server. + */ + readonly target?: string; + /** + * The error details. + * NOTE: This property will not be serialized. It can only be populated by the server. + */ + readonly details?: ErrorDetail[]; + /** + * The error additional info. + * NOTE: This property will not be serialized. It can only be populated by the server. + */ + readonly additionalInfo?: ErrorAdditionalInfo[]; +} + +/** The resource management error additional info. */ +export interface ErrorAdditionalInfo { + /** + * The additional info type. + * NOTE: This property will not be serialized. It can only be populated by the server. + */ + readonly type?: string; + /** + * The additional info. + * NOTE: This property will not be serialized. It can only be populated by the server. + */ + readonly info?: Record; +} + +/** List of all the workspace manager assignments. */ +export interface WorkspaceManagerAssignmentList { + /** + * URL to fetch the next set of workspace manager assignments. + * NOTE: This property will not be serialized. It can only be populated by the server. + */ + readonly nextLink?: string; + /** Array of workspace manager assignments. */ + value: WorkspaceManagerAssignment[]; +} + +/** An entity describing a content item. */ +export interface AssignmentItem { + /** The resource id of the content item */ + resourceId?: string; +} + +/** List of all the jobs */ +export interface JobList { + /** + * URL to fetch the next set of jobs. + * NOTE: This property will not be serialized. It can only be populated by the server. + */ + readonly nextLink?: string; + /** Array of jobs. */ + value: Job[]; +} + +/** An entity describing the publish status of a content item. */ +export interface JobItem { + /** The resource id of the content item */ + resourceId?: string; + /** + * Status of the item publication + * NOTE: This property will not be serialized. It can only be populated by the server. + */ + readonly status?: Status; + /** + * The time the item publishing was completed + * NOTE: This property will not be serialized. It can only be populated by the server. + */ + readonly executionTime?: Date; + /** The list of error descriptions if the item publication fails. */ + errors?: ErrorModel[]; +} + +/** The error description for why a publication failed */ +export interface ErrorModel { + /** The member resource name for which the publication error occured */ + memberResourceName: string; + /** The error message */ + errorMessage: string; +} + +/** List all the workspace manager configurations for the workspace. */ +export interface WorkspaceManagerConfigurationList { + /** + * URL to fetch the next set of workspace manager configurations. + * NOTE: This property will not be serialized. It can only be populated by the server. + */ + readonly nextLink?: string; + /** Array of workspace manager configurations. */ + value: WorkspaceManagerConfiguration[]; +} + +/** List of workspace manager members */ +export interface WorkspaceManagerMembersList { + /** + * URL to fetch the next set of workspace manager members + * NOTE: This property will not be serialized. It can only be populated by the server. + */ + readonly nextLink?: string; + /** Array of workspace manager members */ + value: WorkspaceManagerMember[]; +} + +/** List all the data connectors. */ +export interface DataConnectorList { + /** + * URL to fetch the next set of data connectors. + * NOTE: This property will not be serialized. It can only be populated by the server. + */ + readonly nextLink?: string; + /** Array of data connectors. */ + value: DataConnectorUnion[]; +} + +/** Represents Codeless API Polling data connector. */ +export interface DataConnectorConnectBody { + /** The authentication kind used to poll the data */ + kind?: ConnectAuthKind; + /** The API key of the audit server. */ + apiKey?: string; /** Used in v2 logs connector. Represents the data collection ingestion endpoint in log analytics. */ dataCollectionEndpoint?: string; /** Used in v2 logs connector. The data collection rule immutable id, the rule defines the transformation and data destination. */ @@ -1381,6 +1720,7 @@ export interface DataConnectorsCheckRequirements { | "MicrosoftThreatProtection" | "OfficeATP" | "OfficeIRM" + | "MicrosoftPurviewInformationProtection" | "Office365Project" | "OfficePowerBI" | "ThreatIntelligence" @@ -1479,6 +1819,8 @@ export interface QueryBasedAlertRuleTemplateProperties { alertDetailsOverride?: AlertDetailsOverride; /** The event grouping settings. */ eventGroupingSettings?: EventGroupingSettings; + /** Array of the sentinel entity mappings of the alert rule */ + sentinelEntitiesMappings?: SentinelEntityMapping[]; } /** Single entity mapping for the alert rule */ @@ -1507,6 +1849,16 @@ export interface AlertDetailsOverride { alertTacticsColumnName?: string; /** the column name to take the alert severity from */ alertSeverityColumnName?: string; + /** List of additional dynamic properties to override */ + alertDynamicProperties?: AlertPropertyMapping[]; +} + +/** A single alert property mapping to override */ +export interface AlertPropertyMapping { + /** The V3 alert property */ + alertProperty?: AlertProperty; + /** the column name to use to override this property */ + value?: string; } /** Event grouping settings property bag. */ @@ -1515,6 +1867,12 @@ export interface EventGroupingSettings { aggregationKind?: EventGroupingAggregationKind; } +/** A single sentinel entity mapping */ +export interface SentinelEntityMapping { + /** the column name to be mapped to the SentinelEntities */ + columnName?: string; +} + /** Represents a supported source signal configuration in Fusion detection. */ export interface FusionSourceSettings { /** Determines whether this source signal is enabled or disabled in Fusion detection. */ @@ -1656,6 +2014,15 @@ export interface ScheduledAlertRuleCommonProperties { entityMappings?: EntityMapping[]; /** The alert details override settings */ alertDetailsOverride?: AlertDetailsOverride; + /** Array of the sentinel entity mappings of the alert rule */ + sentinelEntitiesMappings?: SentinelEntityMapping[]; +} + +export interface AddIncidentTaskActionProperties { + /** The title of the task. */ + title: string; + /** The description of the task. */ + description?: string; } export interface AutomationRuleBooleanCondition { @@ -1707,11 +2074,27 @@ export interface AutomationRulePropertyValuesCondition { export interface PlaybookActionProperties { /** The resource id of the playbook resource. */ - logicAppResourceId?: string; + logicAppResourceId: string; /** The tenant id of the playbook resource. */ tenantId?: string; } +/** Dependencies for the content item, what other content items it requires to work. Can describe more complex dependencies using a recursive/nested structure. For a single dependency an id/kind/version can be supplied or operator/criteria for complex dependencies. */ +export interface MetadataDependenciesAutoGenerated2 { + /** Id of the content item we depend on */ + contentId?: string; + /** Type of the content item we depend on */ + kind?: Kind; + /** Version of the the content item we depend on. Can be blank, * or missing to indicate any version fulfills the dependency. If version does not match our defined numeric format then an exact match is required. */ + version?: string; + /** Name of the content item */ + name?: string; + /** Operator used for list of dependencies in criteria array. */ + operator?: Operator; + /** This is the list of dependencies we must fulfill, according to the AND/OR operator */ + criteria?: MetadataDependenciesAutoGenerated2[]; +} + /** An properties abstract Query item for entity */ export interface EntityQueryItemProperties { /** Data types for template */ @@ -1806,6 +2189,18 @@ export interface DataTypeDefinitions { dataType?: string; } +/** Describes team properties */ +export interface TeamProperties { + /** The name of the team */ + teamName: string; + /** The description of the team */ + teamDescription?: string; + /** List of group IDs to add their members to the team */ + groupIds?: string[]; + /** List of member IDs to add to the team */ + memberIds?: string[]; +} + /** security ml analytics settings data sources */ export interface SecurityMLAnalyticsSettingsDataSource { /** The connector id that provides the following data types */ @@ -1840,16 +2235,22 @@ export interface DataConnectorDataTypeCommon { /** The available data types for Microsoft Threat Intelligence Platforms data connector. */ export interface MstiDataConnectorDataTypes { - /** Data type for Microsoft Threat Intelligence Platforms data connector. */ - bingSafetyPhishingURL: MstiDataConnectorDataTypesBingSafetyPhishingURL; /** Data type for Microsoft Threat Intelligence Platforms data connector. */ microsoftEmergingThreatFeed: MstiDataConnectorDataTypesMicrosoftEmergingThreatFeed; } /** The available data types for Microsoft Threat Protection Platforms data connector. */ export interface MTPDataConnectorDataTypes { - /** Data type for Microsoft Threat Protection Platforms data connector. */ + /** Incidents data type for Microsoft Threat Protection Platforms data connector. */ incidents: MTPDataConnectorDataTypesIncidents; + /** Alerts data type for Microsoft Threat Protection Platforms data connector. */ + alerts?: MTPDataConnectorDataTypesAlerts; +} + +/** Represents the connector's Filtered providers */ +export interface MtpFilteredProviders { + /** Alerts filtered providers. When filters are not applied, all alerts will stream through the MTP pipeline, still in private preview for all products EXCEPT MDA and MDI, which are in GA state. */ + alerts: MtpProvider[]; } /** The available data types for Amazon Web Services CloudTrail data connector. */ @@ -1870,6 +2271,12 @@ export interface Dynamics365DataConnectorDataTypes { dynamics365CdsActivities: Dynamics365DataConnectorDataTypesDynamics365CdsActivities; } +/** The available data types for Microsoft Purview Information Protection data connector. */ +export interface MicrosoftPurviewInformationProtectionConnectorDataTypes { + /** Logs data type. */ + logs: MicrosoftPurviewInformationProtectionConnectorDataTypesLogs; +} + /** The available data types for Office Microsoft Project data connector. */ export interface Office365ProjectConnectorDataTypes { /** Logs data type. */ @@ -2197,12 +2604,12 @@ export interface GeoLocation { */ readonly countryName?: string; /** - * The longitude of the identified location, expressed as a floating point number with range of -180 to 180, with positive numbers representing East and negative numbers representing West. Latitude and longitude are derived from the city or postal code. + * The latitude of the identified location, expressed as a floating point number with range of - 90 to 90. Latitude and longitude are derived from the city or postal code. * NOTE: This property will not be serialized. It can only be populated by the server. */ readonly latitude?: number; /** - * The latitude of the identified location, expressed as a floating point number with range of - 90 to 90, with positive numbers representing North and negative numbers representing South. Latitude and longitude are derived from the city or postal code. + * The longitude of the identified location, expressed as a floating point number with range of -180 to 180. Latitude and longitude are derived from the city or postal code. * NOTE: This property will not be serialized. It can only be populated by the server. */ readonly longitude?: number; @@ -2228,7 +2635,7 @@ export interface AlertRuleTemplate extends Resource { /** Specific entity. */ export interface Entity extends Resource { /** The kind of the entity. */ - kind: EntityKind; + kind: EntityKindEnum; } /** Specific entity query template. */ @@ -2302,6 +2709,15 @@ export interface OfficeConsent extends Resource { consentId?: string; } +/** The resource model definition for an Azure Resource Manager resource with an etag. */ +export interface AzureEntityResource extends Resource { + /** + * Resource Etag. + * NOTE: This property will not be serialized. It can only be populated by the server. + */ + readonly etag?: string; +} + /** Action property bag. */ export interface ActionResponseProperties extends ActionPropertiesBase { /** The name of the logic app's workflow. */ @@ -2352,6 +2768,14 @@ export interface PropertyConditionProperties extends AutomationRuleCondition { conditionProperties?: AutomationRulePropertyValuesCondition; } +/** Describes an automation rule action to add a task to an incident */ +export interface AutomationRuleAddIncidentTaskAction + extends AutomationRuleAction { + /** Polymorphic discriminator, which specifies the different types this object can be */ + actionType: "AddIncidentTask"; + actionConfiguration?: AddIncidentTaskActionProperties; +} + /** Describes an automation rule action to modify an object's properties */ export interface AutomationRuleModifyPropertiesAction extends AutomationRuleAction { @@ -2459,6 +2883,13 @@ export interface SecurityAlertTimelineItem extends EntityTimelineItem { timeGenerated: Date; /** The name of the alert type. */ alertType: string; + /** + * The intent of the alert. + * NOTE: This property will not be serialized. It can only be populated by the server. + */ + readonly intent?: KillChainIntent; + /** The techniques of the alert. */ + techniques?: string[]; } /** Represents Insight Query. */ @@ -3465,7 +3896,7 @@ export interface NicEntityProperties extends EntityCommonProperties { readonly vlans?: string[]; } -/** Represents AAD (Azure Active Directory) requirements check request. */ +/** Represents AADIP (Azure Active Directory Identity Protection) requirements check request. */ export interface AADCheckRequirements extends DataConnectorsCheckRequirements { /** Polymorphic discriminator, which specifies the different types this object can be */ kind: "AzureActiveDirectory"; @@ -3563,6 +3994,15 @@ export interface OfficeIRMCheckRequirements tenantId?: string; } +/** Represents MicrosoftPurviewInformationProtection requirements check request. */ +export interface MicrosoftPurviewInformationProtectionCheckRequirements + extends DataConnectorsCheckRequirements { + /** Polymorphic discriminator, which specifies the different types this object can be */ + kind: "MicrosoftPurviewInformationProtection"; + /** The tenant id to connect to, and get the data from. */ + tenantId?: string; +} + /** Represents Office365 Project requirements check request. */ export interface Office365ProjectCheckRequirements extends DataConnectorsCheckRequirements { @@ -3701,7 +4141,7 @@ export interface InsightQueryItemProperties extends EntityQueryItemProperties { referenceTimeRange?: InsightQueryItemPropertiesReferenceTimeRange; } -/** AAD (Azure Active Directory) requirements check properties. */ +/** AADIP (Azure Active Directory Identity Protection) requirements check properties. */ export interface AADCheckRequirementsProperties extends DataConnectorTenantId {} /** AATP (Azure Advanced Threat Protection) requirements check properties. */ @@ -3735,6 +4175,10 @@ export interface OfficeATPCheckRequirementsProperties export interface OfficeIRMCheckRequirementsProperties extends DataConnectorTenantId {} +/** MicrosoftPurviewInformationProtection requirements check properties. */ +export interface MicrosoftPurviewInformationProtectionCheckRequirementsProperties + extends DataConnectorTenantId {} + /** Office365 Project requirements check properties. */ export interface Office365ProjectCheckRequirementsProperties extends DataConnectorTenantId {} @@ -3750,7 +4194,7 @@ export interface TICheckRequirementsProperties extends DataConnectorTenantId {} export interface TiTaxiiCheckRequirementsProperties extends DataConnectorTenantId {} -/** AAD (Azure Active Directory) data connector properties. */ +/** AADIP (Azure Active Directory Identity Protection) data connector properties. */ export interface AADDataConnectorProperties extends DataConnectorTenantId, DataConnectorWithAlertsProperties {} @@ -3765,6 +4209,8 @@ export interface MstiDataConnectorProperties extends DataConnectorTenantId { export interface MTPDataConnectorProperties extends DataConnectorTenantId { /** The available data types for the connector. */ dataTypes: MTPDataConnectorDataTypes; + /** The available filtered providers for the connector. */ + filteredProviders?: MtpFilteredProviders; } /** AATP (Azure Advanced Threat Protection) data connector properties. */ @@ -3790,6 +4236,13 @@ export interface OfficeATPDataConnectorProperties extends DataConnectorTenantId, DataConnectorWithAlertsProperties {} +/** Microsoft Purview Information Protection data connector properties. */ +export interface MicrosoftPurviewInformationProtectionDataConnectorProperties + extends DataConnectorTenantId { + /** The available data types for the connector. */ + dataTypes: MicrosoftPurviewInformationProtectionConnectorDataTypes; +} + /** Office Microsoft Project data connector properties. */ export interface Office365ProjectDataConnectorProperties extends DataConnectorTenantId { @@ -3871,24 +4324,21 @@ export interface McasDataConnectorDataTypes discoveryLogs?: DataConnectorDataTypeCommon; } -/** Data type for Microsoft Threat Intelligence Platforms data connector. */ -export interface MstiDataConnectorDataTypesBingSafetyPhishingURL - extends DataConnectorDataTypeCommon { - /** lookback period */ - lookbackPeriod: string; -} - /** Data type for Microsoft Threat Intelligence Platforms data connector. */ export interface MstiDataConnectorDataTypesMicrosoftEmergingThreatFeed extends DataConnectorDataTypeCommon { - /** lookback period */ + /** The lookback period for the feed to be imported. */ lookbackPeriod: string; } -/** Data type for Microsoft Threat Protection Platforms data connector. */ +/** Incidents data type for Microsoft Threat Protection Platforms data connector. */ export interface MTPDataConnectorDataTypesIncidents extends DataConnectorDataTypeCommon {} +/** Alerts data type for Microsoft Threat Protection Platforms data connector. */ +export interface MTPDataConnectorDataTypesAlerts + extends DataConnectorDataTypeCommon {} + /** Logs data type. */ export interface AwsCloudTrailDataConnectorDataTypesLogs extends DataConnectorDataTypeCommon {} @@ -3901,6 +4351,10 @@ export interface AwsS3DataConnectorDataTypesLogs export interface Dynamics365DataConnectorDataTypesDynamics365CdsActivities extends DataConnectorDataTypeCommon {} +/** Logs data type. */ +export interface MicrosoftPurviewInformationProtectionConnectorDataTypesLogs + extends DataConnectorDataTypeCommon {} + /** Logs data type. */ export interface Office365ProjectConnectorDataTypesLogs extends DataConnectorDataTypeCommon {} @@ -4062,82 +4516,338 @@ export interface Relation extends ResourceWithEtag { readonly relatedResourceKind?: string; } -/** Specific entity query. */ -export interface EntityQuery extends ResourceWithEtag { - /** the entity query kind */ - kind: EntityQueryKind; +/** Represents a Package in Azure Security Insights. */ +export interface PackageModel extends ResourceWithEtag { + /** The package id */ + contentId?: string; + /** The package kind */ + contentKind?: PackageKind; + /** The version of the content schema. */ + contentSchemaVersion?: string; + /** Flag indicates if this is a newly published package. */ + isNew?: Flag; + /** Flag indicates if this package is in preview. */ + isPreview?: Flag; + /** Flag indicates if this package is among the featured list. */ + isFeatured?: Flag; + /** the latest version number of the package */ + version?: string; + /** The display name of the package */ + displayName?: string; + /** The description of the package */ + description?: string; + /** The publisher display name of the package */ + publisherDisplayName?: string; + /** The source of the package */ + source?: MetadataSource; + /** The author of the package */ + author?: MetadataAuthor; + /** The support tier of the package */ + support?: MetadataSupport; + /** The support tier of the package */ + dependencies?: MetadataDependencies; + /** Providers for the package item */ + providers?: string[]; + /** first publish date package item */ + firstPublishDate?: Date; + /** last publish date for the package item */ + lastPublishDate?: Date; + /** The categories of the package */ + categories?: MetadataCategories; + /** the tactics the resource covers */ + threatAnalysisTactics?: string[]; + /** the techniques the resource covers, these have to be aligned with the tactics being used */ + threatAnalyticsTechniques?: string[]; + /** the icon identifier. this id can later be fetched from the content metadata */ + icon?: string; } -/** Specific entity query that supports put requests. */ -export interface CustomEntityQuery extends ResourceWithEtag { - /** the entity query kind */ - kind: CustomEntityQueryKind; +/** Represents a Package in Azure Security Insights. */ +export interface PackageModelAutoGenerated extends ResourceWithEtag { + /** The content id of the package */ + contentId?: string; + /** The package kind */ + contentKind?: PackageKind; + /** The version of the installed package, null or absent means not installed. */ + installedVersion?: string; + /** The version of the content schema. */ + contentSchemaVersion?: string; + /** The metadata resource id. */ + resourceId?: string; + /** Flag indicates if this is a newly published package. */ + isNew?: Flag; + /** Flag indicates if this package is in preview. */ + isPreview?: Flag; + /** Flag indicates if this package is among the featured list. */ + isFeatured?: Flag; + /** the latest version number of the package */ + version?: string; + /** The display name of the package */ + displayName?: string; + /** The description of the package */ + description?: string; + /** The publisher display name of the package */ + publisherDisplayName?: string; + /** The source of the package */ + source?: MetadataSource; + /** The author of the package */ + author?: MetadataAuthor; + /** The support tier of the package */ + support?: MetadataSupport; + /** The support tier of the package */ + dependencies?: MetadataDependencies; + /** Providers for the package item */ + providers?: string[]; + /** first publish date package item */ + firstPublishDate?: Date; + /** last publish date for the package item */ + lastPublishDate?: Date; + /** The categories of the package */ + categories?: MetadataCategories; + /** the tactics the resource covers */ + threatAnalysisTactics?: string[]; + /** the techniques the resource covers, these have to be aligned with the tactics being used */ + threatAnalyticsTechniques?: string[]; + /** the icon identifier. this id can later be fetched from the content metadata */ + icon?: string; + /** the json to deploy */ + packagedContent?: Record; } -/** Represents an incident in Azure Security Insights. */ -export interface Incident extends ResourceWithEtag { - /** - * Additional data on the incident - * NOTE: This property will not be serialized. It can only be populated by the server. - */ - readonly additionalData?: IncidentAdditionalData; - /** The reason the incident was closed */ - classification?: IncidentClassification; - /** Describes the reason the incident was closed */ - classificationComment?: string; - /** The classification reason the incident was closed with */ - classificationReason?: IncidentClassificationReason; - /** - * The time the incident was created - * NOTE: This property will not be serialized. It can only be populated by the server. - */ - readonly createdTimeUtc?: Date; - /** The description of the incident */ - description?: string; - /** The time of the first activity in the incident */ - firstActivityTimeUtc?: Date; - /** - * The deep-link url to the incident in Azure portal - * NOTE: This property will not be serialized. It can only be populated by the server. - */ - readonly incidentUrl?: string; - /** - * A sequential number - * NOTE: This property will not be serialized. It can only be populated by the server. - */ - readonly incidentNumber?: number; - /** List of labels relevant to this incident */ - labels?: IncidentLabel[]; - /** The name of the source provider that generated the incident */ - providerName?: string; - /** The incident ID assigned by the incident provider */ - providerIncidentId?: string; - /** The time of the last activity in the incident */ - lastActivityTimeUtc?: Date; - /** - * The last time the incident was updated - * NOTE: This property will not be serialized. It can only be populated by the server. - */ - readonly lastModifiedTimeUtc?: Date; - /** Describes a user that the incident is assigned to */ - owner?: IncidentOwnerInfo; - /** - * List of resource ids of Analytic rules related to the incident - * NOTE: This property will not be serialized. It can only be populated by the server. - */ - readonly relatedAnalyticRuleIds?: string[]; - /** The severity of the incident */ - severity?: IncidentSeverity; +/** Template resource definition. */ +export interface TemplateModel extends ResourceWithEtag { + /** Static ID for the content. Used to identify dependencies and content from solutions or community. Hard-coded/static for out of the box content and solutions. Dynamic for user-created. This is the resource name */ + contentId?: string; + /** Full parent resource ID of the content item the template is for. This is the full resource ID including the scope (subscription and resource group) */ + parentId?: string; + /** Version of the content. Default and recommended format is numeric (e.g. 1, 1.0, 1.0.0, 1.0.0.0), following ARM metadata best practices. Can also be any string, but then we cannot guarantee any version checks */ + version?: string; + /** The display name of the template */ + displayName?: string; + /** The kind of content the template is for. */ + contentKind?: Kind; + /** Source of the content. This is where/how it was created. */ + source?: MetadataSource; + /** The creator of the content item. */ + author?: MetadataAuthor; + /** Support information for the template - type, name, contact information */ + support?: MetadataSupport; + /** Dependencies for the content item, what other content items it requires to work. Can describe more complex dependencies using a recursive/nested structure. For a single dependency an id/kind/version can be supplied or operator/criteria for complex formats. */ + dependencies?: MetadataDependencies; + /** Categories for the item */ + categories?: MetadataCategories; + /** Providers for the content item */ + providers?: string[]; + /** first publish date content item */ + firstPublishDate?: Date; + /** last publish date for the content item */ + lastPublishDate?: Date; + /** The custom version of the content. A optional free text */ + customVersion?: string; + /** Schema version of the content. Can be used to distinguish between different flow based on the schema version */ + contentSchemaVersion?: string; + /** the icon identifier. this id can later be fetched from the content metadata */ + icon?: string; + /** the tactics the resource covers */ + threatAnalysisTactics?: string[]; + /** the techniques the resource covers, these have to be aligned with the tactics being used */ + threatAnalysisTechniques?: string[]; + /** preview image file names. These will be taken from the solution artifacts */ + previewImages?: string[]; + /** preview image file names. These will be taken from the solution artifacts. used for dark theme support */ + previewImagesDark?: string[]; + /** the package Id contains this template */ + packageId?: string; + /** the packageKind of the package contains this template */ + packageKind?: PackageKind; + /** the name of the package contains this template */ + packageName?: string; + /** the json to deploy */ + packagedContent?: Record; +} + +/** Template resource definition. */ +export interface TemplateModelAutoGenerated extends ResourceWithEtag { + /** Static ID for the content. Used to identify dependencies and content from solutions or community. Hard-coded/static for out of the box content and solutions. Dynamic for user-created. This is the resource name */ + contentId?: string; + /** Version of the content. Default and recommended format is numeric (e.g. 1, 1.0, 1.0.0, 1.0.0.0), following ARM metadata best practices. Can also be any string, but then we cannot guarantee any version checks */ + version?: string; + /** The display name of the template */ + displayName?: string; + /** The kind of content the template is for. */ + contentKind?: Kind; + /** Source of the content. This is where/how it was created. */ + source?: MetadataSource; + /** The creator of the content item. */ + author?: MetadataAuthor; + /** Support information for the template - type, name, contact information */ + support?: MetadataSupport; + /** Dependencies for the content item, what other content items it requires to work. Can describe more complex dependencies using a recursive/nested structure. For a single dependency an id/kind/version can be supplied or operator/criteria for complex formats. */ + dependencies?: MetadataDependencies; + /** Categories for the item */ + categories?: MetadataCategories; + /** Providers for the content item */ + providers?: string[]; + /** first publish date content item */ + firstPublishDate?: Date; + /** last publish date for the content item */ + lastPublishDate?: Date; + /** The custom version of the content. A optional free text */ + customVersion?: string; + /** Schema version of the content. Can be used to distinguish between different flow based on the schema version */ + contentSchemaVersion?: string; + /** the icon identifier. this id can later be fetched from the content metadata */ + icon?: string; + /** the tactics the resource covers */ + threatAnalysisTactics?: string[]; + /** the techniques the resource covers, these have to be aligned with the tactics being used */ + threatAnalysisTechniques?: string[]; + /** preview image file names. These will be taken from the solution artifacts */ + previewImages?: string[]; + /** preview image file names. These will be taken from the solution artifacts. used for dark theme support */ + previewImagesDark?: string[]; + /** the package Id contains this template */ + packageId?: string; + /** the packageKind of the package contains this template */ + packageKind?: PackageKind; + /** the name of the package contains this template */ + packageName?: string; + /** The JSON of the ARM template to deploy active content */ + mainTemplate?: Record; +} + +/** Specific entity query. */ +export interface EntityQuery extends ResourceWithEtag { + /** the entity query kind */ + kind: EntityQueryKind; +} + +/** Specific entity query that supports put requests. */ +export interface CustomEntityQuery extends ResourceWithEtag { + /** the entity query kind */ + kind: CustomEntityQueryKind; +} + +/** Represents a Hunt in Azure Security Insights. */ +export interface Hunt extends ResourceWithEtag { + /** The display name of the hunt */ + displayName?: string; + /** The description of the hunt */ + description?: string; + /** The status of the hunt. */ + status?: Status; + /** The hypothesis status of the hunt. */ + hypothesisStatus?: HypothesisStatus; + /** A list of mitre attack tactics the hunt is associated with */ + attackTactics?: AttackTactic[]; + /** A list of a mitre attack techniques the hunt is associated with */ + attackTechniques?: string[]; + /** List of labels relevant to this hunt */ + labels?: string[]; + /** Describes a user that the hunt is assigned to */ + owner?: HuntOwner; +} + +/** Represents a Hunt Relation in Azure Security Insights. */ +export interface HuntRelation extends ResourceWithEtag { + /** The id of the related resource */ + relatedResourceId?: string; + /** + * The name of the related resource + * NOTE: This property will not be serialized. It can only be populated by the server. + */ + readonly relatedResourceName?: string; + /** + * The type of the hunt relation + * NOTE: This property will not be serialized. It can only be populated by the server. + */ + readonly relationType?: string; + /** + * The resource that the relation is related to + * NOTE: This property will not be serialized. It can only be populated by the server. + */ + readonly relatedResourceKind?: string; + /** List of labels relevant to this hunt */ + labels?: string[]; +} + +/** Represents a Hunt Comment in Azure Security Insights */ +export interface HuntComment extends ResourceWithEtag { + /** The message for the comment */ + message?: string; +} + +export interface Incident extends ResourceWithEtag { + /** The title of the incident */ + title?: string; + /** The description of the incident */ + description?: string; + /** The severity of the incident */ + severity?: IncidentSeverity; /** The status of the incident */ status?: IncidentStatus; + /** The reason the incident was closed */ + classification?: IncidentClassification; + /** The classification reason the incident was closed with */ + classificationReason?: IncidentClassificationReason; + /** Describes the reason the incident was closed */ + classificationComment?: string; + /** Describes a user that the incident is assigned to */ + owner?: IncidentOwnerInfo; + /** List of labels relevant to this incident */ + labels?: IncidentLabel[]; + /** The time of the first activity in the incident */ + firstActivityTimeUtc?: Date; + /** The time of the last activity in the incident */ + lastActivityTimeUtc?: Date; + /** + * The last time the incident was updated + * NOTE: This property will not be serialized. It can only be populated by the server. + */ + readonly lastModifiedTimeUtc?: Date; + /** + * The time the incident was created + * NOTE: This property will not be serialized. It can only be populated by the server. + */ + readonly createdTimeUtc?: Date; + /** + * A sequential number + * NOTE: This property will not be serialized. It can only be populated by the server. + */ + readonly incidentNumber?: number; + /** + * Additional data on the incident + * NOTE: This property will not be serialized. It can only be populated by the server. + */ + readonly additionalData?: IncidentAdditionalData; + /** + * List of resource ids of Analytic rules related to the incident + * NOTE: This property will not be serialized. It can only be populated by the server. + */ + readonly relatedAnalyticRuleIds?: string[]; + /** + * The deep-link url to the incident in Azure portal + * NOTE: This property will not be serialized. It can only be populated by the server. + */ + readonly incidentUrl?: string; + /** + * The name of the source provider that generated the incident + * NOTE: This property will not be serialized. It can only be populated by the server. + */ + readonly providerName?: string; + /** + * The incident ID assigned by the incident provider + * NOTE: This property will not be serialized. It can only be populated by the server. + */ + readonly providerIncidentId?: string; /** Describes a team for the incident */ teamInformation?: TeamInformation; - /** The title of the incident */ - title?: string; } /** Represents an incident comment */ export interface IncidentComment extends ResourceWithEtag { + /** The comment message */ + message?: string; /** * The time the comment was created * NOTE: This property will not be serialized. It can only be populated by the server. @@ -4148,8 +4858,6 @@ export interface IncidentComment extends ResourceWithEtag { * NOTE: This property will not be serialized. It can only be populated by the server. */ readonly lastModifiedTimeUtc?: Date; - /** The comment message */ - message?: string; /** * Describes the client that created the comment * NOTE: This property will not be serialized. It can only be populated by the server. @@ -4157,6 +4865,28 @@ export interface IncidentComment extends ResourceWithEtag { readonly author?: ClientInfo; } +export interface IncidentTask extends ResourceWithEtag { + /** The title of the task */ + title: string; + /** The description of the task */ + description?: string; + status: IncidentTaskStatus; + /** + * The time the task was created + * NOTE: This property will not be serialized. It can only be populated by the server. + */ + readonly createdTimeUtc?: Date; + /** + * The last time the task was updated + * NOTE: This property will not be serialized. It can only be populated by the server. + */ + readonly lastModifiedTimeUtc?: Date; + /** Information on the client (user or application) that made some action */ + createdBy?: ClientInfo; + /** Information on the client (user or application) that made some action */ + lastModifiedBy?: ClientInfo; +} + /** Metadata resource definition. */ export interface MetadataModel extends ResourceWithEtag { /** Static ID for the content. Used to identify dependencies and content from solutions or community. Hard-coded/static for out of the box content and solutions. Dynamic for user-created. This is the resource name */ @@ -4166,7 +4896,7 @@ export interface MetadataModel extends ResourceWithEtag { /** Version of the content. Default and recommended format is numeric (e.g. 1, 1.0, 1.0.0, 1.0.0.0), following ARM template best practices. Can also be any string, but then we cannot guarantee any version checks */ version?: string; /** The kind of content the metadata is for. */ - kind?: Kind; + kind?: string; /** Source of the content. This is where/how it was created. */ source?: MetadataSource; /** The creator of the content item. */ @@ -4174,7 +4904,7 @@ export interface MetadataModel extends ResourceWithEtag { /** Support information for the metadata - type, name, contact information */ support?: MetadataSupport; /** Dependencies for the content item, what other content items it requires to work. Can describe more complex dependencies using a recursive/nested structure. For a single dependency an id/kind/version can be supplied or operator/criteria for complex formats. */ - dependencies?: MetadataDependencies; + dependencies?: MetadataDependenciesAutoGenerated; /** Categories for the solution content item */ categories?: MetadataCategories; /** Providers for the solution content item */ @@ -4208,7 +4938,7 @@ export interface MetadataPatch extends ResourceWithEtag { /** Version of the content. Default and recommended format is numeric (e.g. 1, 1.0, 1.0.0, 1.0.0.0), following ARM template best practices. Can also be any string, but then we cannot guarantee any version checks */ version?: string; /** The kind of content the metadata is for. */ - kind?: Kind; + kind?: string; /** Source of the content. This is where/how it was created. */ source?: MetadataSource; /** The creator of the content item. */ @@ -4216,7 +4946,7 @@ export interface MetadataPatch extends ResourceWithEtag { /** Support information for the metadata - type, name, contact information */ support?: MetadataSupport; /** Dependencies for the content item, what other content items it requires to work. Can describe more complex dependencies using a recursive/nested structure. For a single dependency an id/kind/version can be supplied or operator/criteria for complex formats. */ - dependencies?: MetadataDependencies; + dependencies?: MetadataDependenciesAutoGenerated; /** Categories for the solution content item */ categories?: MetadataCategories; /** Providers for the solution content item */ @@ -4284,7 +5014,18 @@ export interface SourceControl extends ResourceWithEtag { /** Threat intelligence information object. */ export interface ThreatIntelligenceInformation extends ResourceWithEtag { /** The kind of the entity. */ - kind: ThreatIntelligenceResourceKindEnum; + kind: ThreatIntelligenceResourceInnerKind; +} + +/** The triggered analytics rule run */ +export interface TriggeredAnalyticsRuleRun extends ResourceWithEtag { + executionTimeUtc: Date; + ruleId: string; + triggeredAnalyticsRuleRunId: string; + /** The triggered analytics rule run provisioning state */ + provisioningState: ProvisioningState; + /** Dictionary of */ + ruleRunAdditionalData?: { [propertyName: string]: any }; } /** Represents a Watchlist in Azure Security Insights. */ @@ -4357,6 +5098,32 @@ export interface WatchlistItem extends ResourceWithEtag { entityMapping?: { [propertyName: string]: any }; } +/** The assignment job */ +export interface Job extends ResourceWithEtag { + /** + * The time the job completed + * NOTE: This property will not be serialized. It can only be populated by the server. + */ + readonly endTime?: Date; + /** List of items published by the job */ + items?: JobItem[]; + /** + * State of the job + * NOTE: This property will not be serialized. It can only be populated by the server. + */ + readonly provisioningState?: ProvisioningState; + /** + * The time the job started + * NOTE: This property will not be serialized. It can only be populated by the server. + */ + readonly startTime?: Date; + /** + * Message to describe error, if an error exists + * NOTE: This property will not be serialized. It can only be populated by the server. + */ + readonly errorMessage?: string; +} + /** Data connector */ export interface DataConnector extends ResourceWithEtag { /** The data connector kind */ @@ -4547,6 +5314,8 @@ export interface ScheduledAlertRuleTemplate extends AlertRuleTemplate { entityMappings?: EntityMapping[]; /** The alert details override settings */ alertDetailsOverride?: AlertDetailsOverride; + /** Array of the sentinel entity mappings of the alert rule */ + sentinelEntitiesMappings?: SentinelEntityMapping[]; } /** Represents NRT alert rule template. */ @@ -4591,6 +5360,8 @@ export interface NrtAlertRuleTemplate extends AlertRuleTemplate { alertDetailsOverride?: AlertDetailsOverride; /** The event grouping settings. */ eventGroupingSettings?: EventGroupingSettings; + /** Array of the sentinel entity mappings of the alert rule */ + sentinelEntitiesMappings?: SentinelEntityMapping[]; } /** Represents a security alert entity. */ @@ -4601,7 +5372,7 @@ export interface SecurityAlert extends Entity { * A bag of custom fields that should be part of the entity and will be presented to the user. * NOTE: This property will not be serialized. It can only be populated by the server. */ - readonly additionalData?: { [propertyName: string]: Record }; + readonly additionalData?: { [propertyName: string]: any }; /** * The graph item display name which is a short humanly readable description of the graph item instance. This property is optional and might be system generated. * NOTE: This property will not be serialized. It can only be populated by the server. @@ -4739,7 +5510,7 @@ export interface HuntingBookmark extends Entity { * A bag of custom fields that should be part of the entity and will be presented to the user. * NOTE: This property will not be serialized. It can only be populated by the server. */ - readonly additionalData?: { [propertyName: string]: Record }; + readonly additionalData?: { [propertyName: string]: any }; /** * The graph item display name which is a short humanly readable description of the graph item instance. This property is optional and might be system generated. * NOTE: This property will not be serialized. It can only be populated by the server. @@ -4777,7 +5548,7 @@ export interface AccountEntity extends Entity { * A bag of custom fields that should be part of the entity and will be presented to the user. * NOTE: This property will not be serialized. It can only be populated by the server. */ - readonly additionalData?: { [propertyName: string]: Record }; + readonly additionalData?: { [propertyName: string]: any }; /** * The graph item display name which is a short humanly readable description of the graph item instance. This property is optional and might be system generated. * NOTE: This property will not be serialized. It can only be populated by the server. @@ -4853,7 +5624,7 @@ export interface AzureResourceEntity extends Entity { * A bag of custom fields that should be part of the entity and will be presented to the user. * NOTE: This property will not be serialized. It can only be populated by the server. */ - readonly additionalData?: { [propertyName: string]: Record }; + readonly additionalData?: { [propertyName: string]: any }; /** * The graph item display name which is a short humanly readable description of the graph item instance. This property is optional and might be system generated. * NOTE: This property will not be serialized. It can only be populated by the server. @@ -4879,7 +5650,7 @@ export interface CloudApplicationEntity extends Entity { * A bag of custom fields that should be part of the entity and will be presented to the user. * NOTE: This property will not be serialized. It can only be populated by the server. */ - readonly additionalData?: { [propertyName: string]: Record }; + readonly additionalData?: { [propertyName: string]: any }; /** * The graph item display name which is a short humanly readable description of the graph item instance. This property is optional and might be system generated. * NOTE: This property will not be serialized. It can only be populated by the server. @@ -4910,7 +5681,7 @@ export interface DnsEntity extends Entity { * A bag of custom fields that should be part of the entity and will be presented to the user. * NOTE: This property will not be serialized. It can only be populated by the server. */ - readonly additionalData?: { [propertyName: string]: Record }; + readonly additionalData?: { [propertyName: string]: any }; /** * The graph item display name which is a short humanly readable description of the graph item instance. This property is optional and might be system generated. * NOTE: This property will not be serialized. It can only be populated by the server. @@ -4946,7 +5717,7 @@ export interface FileEntity extends Entity { * A bag of custom fields that should be part of the entity and will be presented to the user. * NOTE: This property will not be serialized. It can only be populated by the server. */ - readonly additionalData?: { [propertyName: string]: Record }; + readonly additionalData?: { [propertyName: string]: any }; /** * The graph item display name which is a short humanly readable description of the graph item instance. This property is optional and might be system generated. * NOTE: This property will not be serialized. It can only be populated by the server. @@ -4982,7 +5753,7 @@ export interface FileHashEntity extends Entity { * A bag of custom fields that should be part of the entity and will be presented to the user. * NOTE: This property will not be serialized. It can only be populated by the server. */ - readonly additionalData?: { [propertyName: string]: Record }; + readonly additionalData?: { [propertyName: string]: any }; /** * The graph item display name which is a short humanly readable description of the graph item instance. This property is optional and might be system generated. * NOTE: This property will not be serialized. It can only be populated by the server. @@ -5008,7 +5779,7 @@ export interface HostEntity extends Entity { * A bag of custom fields that should be part of the entity and will be presented to the user. * NOTE: This property will not be serialized. It can only be populated by the server. */ - readonly additionalData?: { [propertyName: string]: Record }; + readonly additionalData?: { [propertyName: string]: any }; /** * The graph item display name which is a short humanly readable description of the graph item instance. This property is optional and might be system generated. * NOTE: This property will not be serialized. It can only be populated by the server. @@ -5066,7 +5837,7 @@ export interface IoTDeviceEntity extends Entity { * A bag of custom fields that should be part of the entity and will be presented to the user. * NOTE: This property will not be serialized. It can only be populated by the server. */ - readonly additionalData?: { [propertyName: string]: Record }; + readonly additionalData?: { [propertyName: string]: any }; /** * The graph item display name which is a short humanly readable description of the graph item instance. This property is optional and might be system generated. * NOTE: This property will not be serialized. It can only be populated by the server. @@ -5219,7 +5990,7 @@ export interface IpEntity extends Entity { * A bag of custom fields that should be part of the entity and will be presented to the user. * NOTE: This property will not be serialized. It can only be populated by the server. */ - readonly additionalData?: { [propertyName: string]: Record }; + readonly additionalData?: { [propertyName: string]: any }; /** * The graph item display name which is a short humanly readable description of the graph item instance. This property is optional and might be system generated. * NOTE: This property will not be serialized. It can only be populated by the server. @@ -5250,7 +6021,7 @@ export interface MailboxEntity extends Entity { * A bag of custom fields that should be part of the entity and will be presented to the user. * NOTE: This property will not be serialized. It can only be populated by the server. */ - readonly additionalData?: { [propertyName: string]: Record }; + readonly additionalData?: { [propertyName: string]: any }; /** * The graph item display name which is a short humanly readable description of the graph item instance. This property is optional and might be system generated. * NOTE: This property will not be serialized. It can only be populated by the server. @@ -5286,7 +6057,7 @@ export interface MailClusterEntity extends Entity { * A bag of custom fields that should be part of the entity and will be presented to the user. * NOTE: This property will not be serialized. It can only be populated by the server. */ - readonly additionalData?: { [propertyName: string]: Record }; + readonly additionalData?: { [propertyName: string]: any }; /** * The graph item display name which is a short humanly readable description of the graph item instance. This property is optional and might be system generated. * NOTE: This property will not be serialized. It can only be populated by the server. @@ -5377,7 +6148,7 @@ export interface MailMessageEntity extends Entity { * A bag of custom fields that should be part of the entity and will be presented to the user. * NOTE: This property will not be serialized. It can only be populated by the server. */ - readonly additionalData?: { [propertyName: string]: Record }; + readonly additionalData?: { [propertyName: string]: any }; /** * The graph item display name which is a short humanly readable description of the graph item instance. This property is optional and might be system generated. * NOTE: This property will not be serialized. It can only be populated by the server. @@ -5494,7 +6265,7 @@ export interface MalwareEntity extends Entity { * A bag of custom fields that should be part of the entity and will be presented to the user. * NOTE: This property will not be serialized. It can only be populated by the server. */ - readonly additionalData?: { [propertyName: string]: Record }; + readonly additionalData?: { [propertyName: string]: any }; /** * The graph item display name which is a short humanly readable description of the graph item instance. This property is optional and might be system generated. * NOTE: This property will not be serialized. It can only be populated by the server. @@ -5530,7 +6301,7 @@ export interface ProcessEntity extends Entity { * A bag of custom fields that should be part of the entity and will be presented to the user. * NOTE: This property will not be serialized. It can only be populated by the server. */ - readonly additionalData?: { [propertyName: string]: Record }; + readonly additionalData?: { [propertyName: string]: any }; /** * The graph item display name which is a short humanly readable description of the graph item instance. This property is optional and might be system generated. * NOTE: This property will not be serialized. It can only be populated by the server. @@ -5588,7 +6359,7 @@ export interface RegistryKeyEntity extends Entity { * A bag of custom fields that should be part of the entity and will be presented to the user. * NOTE: This property will not be serialized. It can only be populated by the server. */ - readonly additionalData?: { [propertyName: string]: Record }; + readonly additionalData?: { [propertyName: string]: any }; /** * The graph item display name which is a short humanly readable description of the graph item instance. This property is optional and might be system generated. * NOTE: This property will not be serialized. It can only be populated by the server. @@ -5614,7 +6385,7 @@ export interface RegistryValueEntity extends Entity { * A bag of custom fields that should be part of the entity and will be presented to the user. * NOTE: This property will not be serialized. It can only be populated by the server. */ - readonly additionalData?: { [propertyName: string]: Record }; + readonly additionalData?: { [propertyName: string]: any }; /** * The graph item display name which is a short humanly readable description of the graph item instance. This property is optional and might be system generated. * NOTE: This property will not be serialized. It can only be populated by the server. @@ -5650,7 +6421,7 @@ export interface SecurityGroupEntity extends Entity { * A bag of custom fields that should be part of the entity and will be presented to the user. * NOTE: This property will not be serialized. It can only be populated by the server. */ - readonly additionalData?: { [propertyName: string]: Record }; + readonly additionalData?: { [propertyName: string]: any }; /** * The graph item display name which is a short humanly readable description of the graph item instance. This property is optional and might be system generated. * NOTE: This property will not be serialized. It can only be populated by the server. @@ -5681,7 +6452,7 @@ export interface SubmissionMailEntity extends Entity { * A bag of custom fields that should be part of the entity and will be presented to the user. * NOTE: This property will not be serialized. It can only be populated by the server. */ - readonly additionalData?: { [propertyName: string]: Record }; + readonly additionalData?: { [propertyName: string]: any }; /** * The graph item display name which is a short humanly readable description of the graph item instance. This property is optional and might be system generated. * NOTE: This property will not be serialized. It can only be populated by the server. @@ -5747,7 +6518,7 @@ export interface UrlEntity extends Entity { * A bag of custom fields that should be part of the entity and will be presented to the user. * NOTE: This property will not be serialized. It can only be populated by the server. */ - readonly additionalData?: { [propertyName: string]: Record }; + readonly additionalData?: { [propertyName: string]: any }; /** * The graph item display name which is a short humanly readable description of the graph item instance. This property is optional and might be system generated. * NOTE: This property will not be serialized. It can only be populated by the server. @@ -5768,7 +6539,7 @@ export interface NicEntity extends Entity { * A bag of custom fields that should be part of the entity and will be presented to the user. * NOTE: This property will not be serialized. It can only be populated by the server. */ - readonly additionalData?: { [propertyName: string]: Record }; + readonly additionalData?: { [propertyName: string]: any }; /** * The graph item display name which is a short humanly readable description of the graph item instance. This property is optional and might be system generated. * NOTE: This property will not be serialized. It can only be populated by the server. @@ -5813,6 +6584,48 @@ export interface ActivityEntityQueryTemplate extends EntityQueryTemplate { entitiesFilter?: { [propertyName: string]: string[] }; } +/** The workspace manager group */ +export interface WorkspaceManagerGroup extends AzureEntityResource { + /** The description of the workspace manager group */ + description?: string; + /** The display name of the workspace manager group */ + displayName?: string; + /** The names of the workspace manager members participating in this group. */ + memberResourceNames?: string[]; +} + +/** The workspace manager assignment */ +export interface WorkspaceManagerAssignment extends AzureEntityResource { + /** The resource name of the workspace manager group targeted by the workspace manager assignment */ + targetResourceName?: string; + /** + * The time the last job associated to this assignment ended at + * NOTE: This property will not be serialized. It can only be populated by the server. + */ + readonly lastJobEndTime?: Date; + /** + * State of the last job associated to this assignment + * NOTE: This property will not be serialized. It can only be populated by the server. + */ + readonly lastJobProvisioningState?: ProvisioningState; + /** List of resources included in this workspace manager assignment */ + items?: AssignmentItem[]; +} + +/** The workspace manager configuration */ +export interface WorkspaceManagerConfiguration extends AzureEntityResource { + /** The current mode of the workspace manager configuration */ + mode?: Mode; +} + +/** The workspace manager member */ +export interface WorkspaceManagerMember extends AzureEntityResource { + /** Fully qualified resource ID of the target Sentinel workspace joining the given Sentinel workspace manager */ + targetWorkspaceId?: string; + /** Tenant id of the target Sentinel workspace joining the given Sentinel workspace manager */ + targetWorkspaceTenantId?: string; +} + /** MLBehaviorAnalytics alert rule template properties. */ export interface MLBehaviorAnalyticsAlertRuleTemplateProperties extends AlertRuleTemplateWithMitreProperties { @@ -6004,6 +6817,8 @@ export interface ScheduledAlertRule extends AlertRule { entityMappings?: EntityMapping[]; /** The alert details override settings */ alertDetailsOverride?: AlertDetailsOverride; + /** Array of the sentinel entity mappings of the alert rule */ + sentinelEntitiesMappings?: SentinelEntityMapping[]; /** The Name of the alert rule template used to create this rule. */ alertRuleTemplateName?: string; /** The version of the alert rule template used to create this rule - in format , where all are numbers, for example 0 <1.0.2> */ @@ -6072,6 +6887,8 @@ export interface NrtAlertRule extends AlertRule { alertDetailsOverride?: AlertDetailsOverride; /** The event grouping settings. */ eventGroupingSettings?: EventGroupingSettings; + /** Array of the sentinel entity mappings of the alert rule */ + sentinelEntitiesMappings?: SentinelEntityMapping[]; } /** Represents Expansion entity query. */ @@ -6245,7 +7062,7 @@ export interface ThreatIntelligenceIndicatorModel * A bag of custom fields that should be part of the entity and will be presented to the user. * NOTE: This property will not be serialized. It can only be populated by the server. */ - readonly additionalData?: { [propertyName: string]: Record }; + readonly additionalData?: { [propertyName: string]: any }; /** * The graph item display name which is a short humanly readable description of the graph item instance. This property is optional and might be system generated. * NOTE: This property will not be serialized. It can only be populated by the server. @@ -6309,7 +7126,7 @@ export interface ThreatIntelligenceIndicatorModel extensions?: { [propertyName: string]: any }; } -/** Represents AAD (Azure Active Directory) data connector. */ +/** Represents AADIP (Azure Active Directory Identity Protection) data connector. */ export interface AADDataConnector extends DataConnector { /** Polymorphic discriminator, which specifies the different types this object can be */ kind: "AzureActiveDirectory"; @@ -6337,6 +7154,8 @@ export interface MTPDataConnector extends DataConnector { tenantId?: string; /** The available data types for the connector. */ dataTypes?: MTPDataConnectorDataTypes; + /** The available filtered providers for the connector. */ + filteredProviders?: MtpFilteredProviders; } /** Represents AATP (Azure Advanced Threat Protection) data connector. */ @@ -6413,6 +7232,17 @@ export interface OfficeATPDataConnector extends DataConnector { dataTypes?: AlertsDataTypeOfDataConnector; } +/** Represents Microsoft Purview Information Protection data connector. */ +export interface MicrosoftPurviewInformationProtectionDataConnector + extends DataConnector { + /** Polymorphic discriminator, which specifies the different types this object can be */ + kind: "MicrosoftPurviewInformationProtection"; + /** The tenant id to connect to, and get the data from. */ + tenantId?: string; + /** The available data types for the connector. */ + dataTypes?: MicrosoftPurviewInformationProtectionConnectorDataTypes; +} + /** Represents Office Microsoft Project data connector. */ export interface Office365ProjectDataConnector extends DataConnector { /** Polymorphic discriminator, which specifies the different types this object can be */ @@ -6529,6 +7359,11 @@ export interface CodelessApiPollingDataConnector extends DataConnector { pollingConfig?: CodelessConnectorPollingConfigProperties; } +/** Defines headers for AlertRule_triggerRuleRun operation. */ +export interface AlertRuleTriggerRuleRunHeaders { + location?: string; +} + /** Defines headers for Watchlists_delete operation. */ export interface WatchlistsDeleteHeaders { /** Contains the status URL on which clients are expected to poll the status of the delete operation. */ @@ -6663,7 +7498,9 @@ export enum KnownActionType { /** Modify an object's properties */ ModifyProperties = "ModifyProperties", /** Run a playbook on an object */ - RunPlaybook = "RunPlaybook" + RunPlaybook = "RunPlaybook", + /** Add a task to an incident object */ + AddIncidentTask = "AddIncidentTask" } /** @@ -6672,7 +7509,8 @@ export enum KnownActionType { * this enum contains the known values that the service supports. * ### Known values supported by the service * **ModifyProperties**: Modify an object's properties \ - * **RunPlaybook**: Run a playbook on an object + * **RunPlaybook**: Run a playbook on an object \ + * **AddIncidentTask**: Add a task to an incident object */ export type ActionType = string; @@ -6763,8 +7601,8 @@ export enum KnownAttackTactic { */ export type AttackTactic = string; -/** Known values of {@link EntityKind} that the service accepts. */ -export enum KnownEntityKind { +/** Known values of {@link EntityKindEnum} that the service accepts. */ +export enum KnownEntityKindEnum { /** Entity represents account in the system. */ Account = "Account", /** Entity represents host in the system. */ @@ -6812,8 +7650,8 @@ export enum KnownEntityKind { } /** - * Defines values for EntityKind. \ - * {@link KnownEntityKind} can be used interchangeably with EntityKind, + * Defines values for EntityKindEnum. \ + * {@link KnownEntityKindEnum} can be used interchangeably with EntityKindEnum, * this enum contains the known values that the service supports. * ### Known values supported by the service * **Account**: Entity represents account in the system. \ @@ -6839,60 +7677,222 @@ export enum KnownEntityKind { * **SubmissionMail**: Entity represents submission mail in the system. \ * **Nic**: Entity represents network interface in the system. */ -export type EntityKind = string; +export type EntityKindEnum = string; -/** Known values of {@link EntityTimelineKind} that the service accepts. */ -export enum KnownEntityTimelineKind { - /** activity */ - Activity = "Activity", - /** bookmarks */ - Bookmark = "Bookmark", - /** security alerts */ - SecurityAlert = "SecurityAlert", - /** anomaly */ - Anomaly = "Anomaly" +/** Known values of {@link PackageKind} that the service accepts. */ +export enum KnownPackageKind { + /** Solution */ + Solution = "Solution", + /** Standalone */ + Standalone = "Standalone" } /** - * Defines values for EntityTimelineKind. \ - * {@link KnownEntityTimelineKind} can be used interchangeably with EntityTimelineKind, + * Defines values for PackageKind. \ + * {@link KnownPackageKind} can be used interchangeably with PackageKind, * this enum contains the known values that the service supports. * ### Known values supported by the service - * **Activity**: activity \ - * **Bookmark**: bookmarks \ - * **SecurityAlert**: security alerts \ - * **Anomaly**: anomaly + * **Solution** \ + * **Standalone** */ -export type EntityTimelineKind = string; +export type PackageKind = string; -/** Known values of {@link EntityItemQueryKind} that the service accepts. */ -export enum KnownEntityItemQueryKind { - /** insight */ - Insight = "Insight" +/** Known values of {@link Flag} that the service accepts. */ +export enum KnownFlag { + /** True */ + True = "true", + /** False */ + False = "false" } /** - * Defines values for EntityItemQueryKind. \ - * {@link KnownEntityItemQueryKind} can be used interchangeably with EntityItemQueryKind, + * Defines values for Flag. \ + * {@link KnownFlag} can be used interchangeably with Flag, * this enum contains the known values that the service supports. * ### Known values supported by the service - * **Insight**: insight + * **true** \ + * **false** */ -export type EntityItemQueryKind = string; - -/** Known values of {@link EntityQueryKind} that the service accepts. */ -export enum KnownEntityQueryKind { - /** Expansion */ - Expansion = "Expansion", - /** Insight */ - Insight = "Insight", - /** Activity */ - Activity = "Activity" -} +export type Flag = string; -/** - * Defines values for EntityQueryKind. \ - * {@link KnownEntityQueryKind} can be used interchangeably with EntityQueryKind, +/** Known values of {@link SourceKind} that the service accepts. */ +export enum KnownSourceKind { + /** LocalWorkspace */ + LocalWorkspace = "LocalWorkspace", + /** Community */ + Community = "Community", + /** Solution */ + Solution = "Solution", + /** SourceRepository */ + SourceRepository = "SourceRepository" +} + +/** + * Defines values for SourceKind. \ + * {@link KnownSourceKind} can be used interchangeably with SourceKind, + * this enum contains the known values that the service supports. + * ### Known values supported by the service + * **LocalWorkspace** \ + * **Community** \ + * **Solution** \ + * **SourceRepository** + */ +export type SourceKind = string; + +/** Known values of {@link SupportTier} that the service accepts. */ +export enum KnownSupportTier { + /** Microsoft */ + Microsoft = "Microsoft", + /** Partner */ + Partner = "Partner", + /** Community */ + Community = "Community" +} + +/** + * Defines values for SupportTier. \ + * {@link KnownSupportTier} can be used interchangeably with SupportTier, + * this enum contains the known values that the service supports. + * ### Known values supported by the service + * **Microsoft** \ + * **Partner** \ + * **Community** + */ +export type SupportTier = string; + +/** Known values of {@link Kind} that the service accepts. */ +export enum KnownKind { + /** DataConnector */ + DataConnector = "DataConnector", + /** DataType */ + DataType = "DataType", + /** Workbook */ + Workbook = "Workbook", + /** WorkbookTemplate */ + WorkbookTemplate = "WorkbookTemplate", + /** Playbook */ + Playbook = "Playbook", + /** PlaybookTemplate */ + PlaybookTemplate = "PlaybookTemplate", + /** AnalyticsRuleTemplate */ + AnalyticsRuleTemplate = "AnalyticsRuleTemplate", + /** AnalyticsRule */ + AnalyticsRule = "AnalyticsRule", + /** HuntingQuery */ + HuntingQuery = "HuntingQuery", + /** InvestigationQuery */ + InvestigationQuery = "InvestigationQuery", + /** Parser */ + Parser = "Parser", + /** Watchlist */ + Watchlist = "Watchlist", + /** WatchlistTemplate */ + WatchlistTemplate = "WatchlistTemplate", + /** Solution */ + Solution = "Solution", + /** AzureFunction */ + AzureFunction = "AzureFunction", + /** LogicAppsCustomConnector */ + LogicAppsCustomConnector = "LogicAppsCustomConnector", + /** AutomationRule */ + AutomationRule = "AutomationRule" +} + +/** + * Defines values for Kind. \ + * {@link KnownKind} can be used interchangeably with Kind, + * this enum contains the known values that the service supports. + * ### Known values supported by the service + * **DataConnector** \ + * **DataType** \ + * **Workbook** \ + * **WorkbookTemplate** \ + * **Playbook** \ + * **PlaybookTemplate** \ + * **AnalyticsRuleTemplate** \ + * **AnalyticsRule** \ + * **HuntingQuery** \ + * **InvestigationQuery** \ + * **Parser** \ + * **Watchlist** \ + * **WatchlistTemplate** \ + * **Solution** \ + * **AzureFunction** \ + * **LogicAppsCustomConnector** \ + * **AutomationRule** + */ +export type Kind = string; + +/** Known values of {@link Operator} that the service accepts. */ +export enum KnownOperator { + /** AND */ + AND = "AND", + /** OR */ + OR = "OR" +} + +/** + * Defines values for Operator. \ + * {@link KnownOperator} can be used interchangeably with Operator, + * this enum contains the known values that the service supports. + * ### Known values supported by the service + * **AND** \ + * **OR** + */ +export type Operator = string; + +/** Known values of {@link EntityTimelineKind} that the service accepts. */ +export enum KnownEntityTimelineKind { + /** activity */ + Activity = "Activity", + /** bookmarks */ + Bookmark = "Bookmark", + /** security alerts */ + SecurityAlert = "SecurityAlert", + /** anomaly */ + Anomaly = "Anomaly" +} + +/** + * Defines values for EntityTimelineKind. \ + * {@link KnownEntityTimelineKind} can be used interchangeably with EntityTimelineKind, + * this enum contains the known values that the service supports. + * ### Known values supported by the service + * **Activity**: activity \ + * **Bookmark**: bookmarks \ + * **SecurityAlert**: security alerts \ + * **Anomaly**: anomaly + */ +export type EntityTimelineKind = string; + +/** Known values of {@link EntityItemQueryKind} that the service accepts. */ +export enum KnownEntityItemQueryKind { + /** insight */ + Insight = "Insight" +} + +/** + * Defines values for EntityItemQueryKind. \ + * {@link KnownEntityItemQueryKind} can be used interchangeably with EntityItemQueryKind, + * this enum contains the known values that the service supports. + * ### Known values supported by the service + * **Insight**: insight + */ +export type EntityItemQueryKind = string; + +/** Known values of {@link EntityQueryKind} that the service accepts. */ +export enum KnownEntityQueryKind { + /** Expansion */ + Expansion = "Expansion", + /** Insight */ + Insight = "Insight", + /** Activity */ + Activity = "Activity" +} + +/** + * Defines values for EntityQueryKind. \ + * {@link KnownEntityQueryKind} can be used interchangeably with EntityQueryKind, * this enum contains the known values that the service supports. * ### Known values supported by the service * **Expansion** \ @@ -6916,8 +7916,8 @@ export enum KnownGetInsightsError { */ export type GetInsightsError = string; -/** Known values of {@link Enum13} that the service accepts. */ -export enum KnownEnum13 { +/** Known values of {@link Enum19} that the service accepts. */ +export enum KnownEnum19 { /** Expansion */ Expansion = "Expansion", /** Activity */ @@ -6925,14 +7925,14 @@ export enum KnownEnum13 { } /** - * Defines values for Enum13. \ - * {@link KnownEnum13} can be used interchangeably with Enum13, + * Defines values for Enum19. \ + * {@link KnownEnum19} can be used interchangeably with Enum19, * this enum contains the known values that the service supports. * ### Known values supported by the service * **Expansion** \ * **Activity** */ -export type Enum13 = string; +export type Enum19 = string; /** Known values of {@link CustomEntityQueryKind} that the service accepts. */ export enum KnownCustomEntityQueryKind { @@ -7081,6 +8081,99 @@ export enum KnownFileImportState { */ export type FileImportState = string; +/** Known values of {@link Status} that the service accepts. */ +export enum KnownStatus { + /** New */ + New = "New", + /** Active */ + Active = "Active", + /** Closed */ + Closed = "Closed", + /** Succeeded */ + Succeeded = "Succeeded", + /** Failed */ + Failed = "Failed", + /** InProgress */ + InProgress = "InProgress" +} + +/** + * Defines values for Status. \ + * {@link KnownStatus} can be used interchangeably with Status, + * this enum contains the known values that the service supports. + * ### Known values supported by the service + * **New** \ + * **Active** \ + * **Closed** \ + * **Succeeded** \ + * **Failed** \ + * **InProgress** + */ +export type Status = string; + +/** Known values of {@link HypothesisStatus} that the service accepts. */ +export enum KnownHypothesisStatus { + /** Unknown */ + Unknown = "Unknown", + /** Invalidated */ + Invalidated = "Invalidated", + /** Validated */ + Validated = "Validated" +} + +/** + * Defines values for HypothesisStatus. \ + * {@link KnownHypothesisStatus} can be used interchangeably with HypothesisStatus, + * this enum contains the known values that the service supports. + * ### Known values supported by the service + * **Unknown** \ + * **Invalidated** \ + * **Validated** + */ +export type HypothesisStatus = string; + +/** Known values of {@link OwnerType} that the service accepts. */ +export enum KnownOwnerType { + /** The hunt owner type is unknown */ + Unknown = "Unknown", + /** The hunt owner type is an AAD user */ + User = "User", + /** The hunt owner type is an AAD group */ + Group = "Group" +} + +/** + * Defines values for OwnerType. \ + * {@link KnownOwnerType} can be used interchangeably with OwnerType, + * this enum contains the known values that the service supports. + * ### Known values supported by the service + * **Unknown**: The hunt owner type is unknown \ + * **User**: The hunt owner type is an AAD user \ + * **Group**: The hunt owner type is an AAD group + */ +export type OwnerType = string; + +/** Known values of {@link IncidentStatus} that the service accepts. */ +export enum KnownIncidentStatus { + /** An active incident which isn't being handled currently */ + New = "New", + /** An active incident which is being handled */ + Active = "Active", + /** A non-active incident */ + Closed = "Closed" +} + +/** + * Defines values for IncidentStatus. \ + * {@link KnownIncidentStatus} can be used interchangeably with IncidentStatus, + * this enum contains the known values that the service supports. + * ### Known values supported by the service + * **New**: An active incident which isn't being handled currently \ + * **Active**: An active incident which is being handled \ + * **Closed**: A non-active incident + */ +export type IncidentStatus = string; + /** Known values of {@link IncidentClassification} that the service accepts. */ export enum KnownIncidentClassification { /** Incident classification was undetermined */ @@ -7147,48 +8240,6 @@ export enum KnownIncidentLabelType { */ export type IncidentLabelType = string; -/** Known values of {@link OwnerType} that the service accepts. */ -export enum KnownOwnerType { - /** The incident owner type is unknown */ - Unknown = "Unknown", - /** The incident owner type is an AAD user */ - User = "User", - /** The incident owner type is an AAD group */ - Group = "Group" -} - -/** - * Defines values for OwnerType. \ - * {@link KnownOwnerType} can be used interchangeably with OwnerType, - * this enum contains the known values that the service supports. - * ### Known values supported by the service - * **Unknown**: The incident owner type is unknown \ - * **User**: The incident owner type is an AAD user \ - * **Group**: The incident owner type is an AAD group - */ -export type OwnerType = string; - -/** Known values of {@link IncidentStatus} that the service accepts. */ -export enum KnownIncidentStatus { - /** An active incident which isn't being handled currently */ - New = "New", - /** An active incident which is being handled */ - Active = "Active", - /** A non-active incident */ - Closed = "Closed" -} - -/** - * Defines values for IncidentStatus. \ - * {@link KnownIncidentStatus} can be used interchangeably with IncidentStatus, - * this enum contains the known values that the service supports. - * ### Known values supported by the service - * **New**: An active incident which isn't being handled currently \ - * **Active**: An active incident which is being handled \ - * **Closed**: A non-active incident - */ -export type IncidentStatus = string; - /** Known values of {@link ConfidenceLevel} that the service accepts. */ export enum KnownConfidenceLevel { /** Unknown confidence, the is the default value */ @@ -7250,7 +8301,7 @@ export enum KnownKillChainIntent { DefenseEvasion = "DefenseEvasion", /** Credential access represents techniques resulting in access to or control over system, domain, or service credentials that are used within an enterprise environment. Adversaries will likely attempt to obtain legitimate credentials from users or administrator accounts (local system administrator or domain users with administrator access) to use within the network. With sufficient access within a network, an adversary can create accounts for later use within the environment. */ CredentialAccess = "CredentialAccess", - /** Discovery consists of techniques that allow the adversary to gain knowledge about the system and internal network. When adversaries gain access to a new system, they must orient themselves to what they now have control of and what benefits operating from that system give to their current objective or overall goals during the intrusion. The operating system provides many native tools that aid in this post-compromise information-gathering phase. */ + /** Discovery consists of techniques that allow the adversary to gain knowledge about the system and internal network. When adversaries gain access to a new system, they must navigate themselves to what they now have control of and what benefits operating from that system give to their current objective or overall goals during the intrusion. The operating system provides many native tools that aid in this post-compromise information-gathering phase. */ Discovery = "Discovery", /** Lateral movement consists of techniques that enable an adversary to access and control remote systems on a network and could, but does not necessarily, include execution of tools on remote systems. The lateral movement techniques could allow an adversary to gather information from a system without needing additional tools, such as a remote access tool. An adversary can use lateral movement for many purposes, including remote Execution of tools, pivoting to additional systems, access to specific information or files, access to additional credentials, or to cause an effect. */ LateralMovement = "LateralMovement", @@ -7278,7 +8329,7 @@ export enum KnownKillChainIntent { * **PrivilegeEscalation**: Privilege escalation is the result of actions that allow an adversary to obtain a higher level of permissions on a system or network. Certain tools or actions require a higher level of privilege to work and are likely necessary at many points throughout an operation. User accounts with permissions to access specific systems or perform specific functions necessary for adversaries to achieve their objective may also be considered an escalation of privilege. \ * **DefenseEvasion**: Defense evasion consists of techniques an adversary may use to evade detection or avoid other defenses. Sometimes these actions are the same as or variations of techniques in other categories that have the added benefit of subverting a particular defense or mitigation. \ * **CredentialAccess**: Credential access represents techniques resulting in access to or control over system, domain, or service credentials that are used within an enterprise environment. Adversaries will likely attempt to obtain legitimate credentials from users or administrator accounts (local system administrator or domain users with administrator access) to use within the network. With sufficient access within a network, an adversary can create accounts for later use within the environment. \ - * **Discovery**: Discovery consists of techniques that allow the adversary to gain knowledge about the system and internal network. When adversaries gain access to a new system, they must orient themselves to what they now have control of and what benefits operating from that system give to their current objective or overall goals during the intrusion. The operating system provides many native tools that aid in this post-compromise information-gathering phase. \ + * **Discovery**: Discovery consists of techniques that allow the adversary to gain knowledge about the system and internal network. When adversaries gain access to a new system, they must navigate themselves to what they now have control of and what benefits operating from that system give to their current objective or overall goals during the intrusion. The operating system provides many native tools that aid in this post-compromise information-gathering phase. \ * **LateralMovement**: Lateral movement consists of techniques that enable an adversary to access and control remote systems on a network and could, but does not necessarily, include execution of tools on remote systems. The lateral movement techniques could allow an adversary to gather information from a system without needing additional tools, such as a remote access tool. An adversary can use lateral movement for many purposes, including remote Execution of tools, pivoting to additional systems, access to specific information or files, access to additional credentials, or to cause an effect. \ * **Execution**: The execution tactic represents techniques that result in execution of adversary-controlled code on a local or remote system. This tactic is often used in conjunction with lateral movement to expand access to remote systems on a network. \ * **Collection**: Collection consists of techniques used to identify and gather information, such as sensitive files, from a target network prior to exfiltration. This category also covers locations on a system or network where the adversary may look for information to exfiltrate. \ @@ -7339,131 +8390,122 @@ export enum KnownAlertStatus { */ export type AlertStatus = string; -/** Known values of {@link Kind} that the service accepts. */ -export enum KnownKind { - /** DataConnector */ - DataConnector = "DataConnector", - /** DataType */ - DataType = "DataType", - /** Workbook */ - Workbook = "Workbook", - /** WorkbookTemplate */ - WorkbookTemplate = "WorkbookTemplate", - /** Playbook */ - Playbook = "Playbook", - /** PlaybookTemplate */ - PlaybookTemplate = "PlaybookTemplate", - /** AnalyticsRuleTemplate */ - AnalyticsRuleTemplate = "AnalyticsRuleTemplate", - /** AnalyticsRule */ - AnalyticsRule = "AnalyticsRule", - /** HuntingQuery */ - HuntingQuery = "HuntingQuery", - /** InvestigationQuery */ - InvestigationQuery = "InvestigationQuery", - /** Parser */ - Parser = "Parser", - /** Watchlist */ - Watchlist = "Watchlist", - /** WatchlistTemplate */ - WatchlistTemplate = "WatchlistTemplate", - /** Solution */ - Solution = "Solution", - /** AzureFunction */ - AzureFunction = "AzureFunction", - /** LogicAppsCustomConnector */ - LogicAppsCustomConnector = "LogicAppsCustomConnector", - /** AutomationRule */ - AutomationRule = "AutomationRule" +/** Known values of {@link IncidentTaskStatus} that the service accepts. */ +export enum KnownIncidentTaskStatus { + /** A new task */ + New = "New", + /** A completed task */ + Completed = "Completed" } /** - * Defines values for Kind. \ - * {@link KnownKind} can be used interchangeably with Kind, + * Defines values for IncidentTaskStatus. \ + * {@link KnownIncidentTaskStatus} can be used interchangeably with IncidentTaskStatus, * this enum contains the known values that the service supports. * ### Known values supported by the service - * **DataConnector** \ - * **DataType** \ - * **Workbook** \ - * **WorkbookTemplate** \ - * **Playbook** \ - * **PlaybookTemplate** \ - * **AnalyticsRuleTemplate** \ - * **AnalyticsRule** \ - * **HuntingQuery** \ - * **InvestigationQuery** \ - * **Parser** \ - * **Watchlist** \ - * **WatchlistTemplate** \ - * **Solution** \ - * **AzureFunction** \ - * **LogicAppsCustomConnector** \ - * **AutomationRule** + * **New**: A new task \ + * **Completed**: A completed task */ -export type Kind = string; +export type IncidentTaskStatus = string; + +/** Known values of {@link Category} that the service accepts. */ +export enum KnownCategory { + /** Onboarding recommendation. */ + Onboarding = "Onboarding", + /** New feature recommendation. */ + NewFeature = "NewFeature", + /** Soc Efficiency recommendation. */ + SocEfficiency = "SocEfficiency", + /** Cost optimization recommendation. */ + CostOptimization = "CostOptimization", + /** Demo recommendation. */ + Demo = "Demo" +} -/** Known values of {@link SourceKind} that the service accepts. */ -export enum KnownSourceKind { - /** LocalWorkspace */ - LocalWorkspace = "LocalWorkspace", - /** Community */ - Community = "Community", - /** Solution */ - Solution = "Solution", - /** SourceRepository */ - SourceRepository = "SourceRepository" +/** + * Defines values for Category. \ + * {@link KnownCategory} can be used interchangeably with Category, + * this enum contains the known values that the service supports. + * ### Known values supported by the service + * **Onboarding**: Onboarding recommendation. \ + * **NewFeature**: New feature recommendation. \ + * **SocEfficiency**: Soc Efficiency recommendation. \ + * **CostOptimization**: Cost optimization recommendation. \ + * **Demo**: Demo recommendation. + */ +export type Category = string; + +/** Known values of {@link Context} that the service accepts. */ +export enum KnownContext { + /** Analytics context. */ + Analytics = "Analytics", + /** Incidents context. */ + Incidents = "Incidents", + /** Overview context. */ + Overview = "Overview", + /** No context. */ + None = "None" } /** - * Defines values for SourceKind. \ - * {@link KnownSourceKind} can be used interchangeably with SourceKind, + * Defines values for Context. \ + * {@link KnownContext} can be used interchangeably with Context, * this enum contains the known values that the service supports. * ### Known values supported by the service - * **LocalWorkspace** \ - * **Community** \ - * **Solution** \ - * **SourceRepository** + * **Analytics**: Analytics context. \ + * **Incidents**: Incidents context. \ + * **Overview**: Overview context. \ + * **None**: No context. */ -export type SourceKind = string; +export type Context = string; -/** Known values of {@link SupportTier} that the service accepts. */ -export enum KnownSupportTier { - /** Microsoft */ - Microsoft = "Microsoft", - /** Partner */ - Partner = "Partner", - /** Community */ - Community = "Community" +/** Known values of {@link Priority} that the service accepts. */ +export enum KnownPriority { + /** Low priority for recommendation. */ + Low = "Low", + /** Medium priority for recommendation. */ + Medium = "Medium", + /** High priority for recommendation. */ + High = "High" } /** - * Defines values for SupportTier. \ - * {@link KnownSupportTier} can be used interchangeably with SupportTier, + * Defines values for Priority. \ + * {@link KnownPriority} can be used interchangeably with Priority, * this enum contains the known values that the service supports. * ### Known values supported by the service - * **Microsoft** \ - * **Partner** \ - * **Community** + * **Low**: Low priority for recommendation. \ + * **Medium**: Medium priority for recommendation. \ + * **High**: High priority for recommendation. */ -export type SupportTier = string; +export type Priority = string; -/** Known values of {@link Operator} that the service accepts. */ -export enum KnownOperator { - /** AND */ - AND = "AND", - /** OR */ - OR = "OR" +/** Known values of {@link State} that the service accepts. */ +export enum KnownState { + /** Recommendation is active. */ + Active = "Active", + /** Recommendation is disabled. */ + Disabled = "Disabled", + /** Recommendation has been completed by user. */ + CompletedByUser = "CompletedByUser", + /** Recommendation has been completed by action. */ + CompletedByAction = "CompletedByAction", + /** Recommendation is hidden. */ + Hidden = "Hidden" } /** - * Defines values for Operator. \ - * {@link KnownOperator} can be used interchangeably with Operator, + * Defines values for State. \ + * {@link KnownState} can be used interchangeably with State, * this enum contains the known values that the service supports. * ### Known values supported by the service - * **AND** \ - * **OR** + * **Active**: Recommendation is active. \ + * **Disabled**: Recommendation is disabled. \ + * **CompletedByUser**: Recommendation has been completed by user. \ + * **CompletedByAction**: Recommendation has been completed by action. \ + * **Hidden**: Recommendation is hidden. */ -export type Operator = string; +export type State = string; /** Known values of {@link SecurityMLAnalyticsSettingsKind} that the service accepts. */ export enum KnownSecurityMLAnalyticsSettingsKind { @@ -7624,23 +8666,23 @@ export enum KnownDeploymentResult { */ export type DeploymentResult = string; -/** Known values of {@link ThreatIntelligenceResourceKindEnum} that the service accepts. */ -export enum KnownThreatIntelligenceResourceKindEnum { +/** Known values of {@link ThreatIntelligenceResourceInnerKind} that the service accepts. */ +export enum KnownThreatIntelligenceResourceInnerKind { /** Entity represents threat intelligence indicator in the system. */ Indicator = "indicator" } /** - * Defines values for ThreatIntelligenceResourceKindEnum. \ - * {@link KnownThreatIntelligenceResourceKindEnum} can be used interchangeably with ThreatIntelligenceResourceKindEnum, + * Defines values for ThreatIntelligenceResourceInnerKind. \ + * {@link KnownThreatIntelligenceResourceInnerKind} can be used interchangeably with ThreatIntelligenceResourceInnerKind, * this enum contains the known values that the service supports. * ### Known values supported by the service * **indicator**: Entity represents threat intelligence indicator in the system. */ -export type ThreatIntelligenceResourceKindEnum = string; +export type ThreatIntelligenceResourceInnerKind = string; -/** Known values of {@link ThreatIntelligenceSortingCriteriaEnum} that the service accepts. */ -export enum KnownThreatIntelligenceSortingCriteriaEnum { +/** Known values of {@link ThreatIntelligenceSortingOrder} that the service accepts. */ +export enum KnownThreatIntelligenceSortingOrder { /** Unsorted */ Unsorted = "unsorted", /** Ascending */ @@ -7650,15 +8692,42 @@ export enum KnownThreatIntelligenceSortingCriteriaEnum { } /** - * Defines values for ThreatIntelligenceSortingCriteriaEnum. \ - * {@link KnownThreatIntelligenceSortingCriteriaEnum} can be used interchangeably with ThreatIntelligenceSortingCriteriaEnum, + * Defines values for ThreatIntelligenceSortingOrder. \ + * {@link KnownThreatIntelligenceSortingOrder} can be used interchangeably with ThreatIntelligenceSortingOrder, * this enum contains the known values that the service supports. * ### Known values supported by the service * **unsorted** \ * **ascending** \ * **descending** */ -export type ThreatIntelligenceSortingCriteriaEnum = string; +export type ThreatIntelligenceSortingOrder = string; + +/** Known values of {@link ProvisioningState} that the service accepts. */ +export enum KnownProvisioningState { + /** Accepted */ + Accepted = "Accepted", + /** InProgress */ + InProgress = "InProgress", + /** Succeeded */ + Succeeded = "Succeeded", + /** Failed */ + Failed = "Failed", + /** Canceled */ + Canceled = "Canceled" +} + +/** + * Defines values for ProvisioningState. \ + * {@link KnownProvisioningState} can be used interchangeably with ProvisioningState, + * this enum contains the known values that the service supports. + * ### Known values supported by the service + * **Accepted** \ + * **InProgress** \ + * **Succeeded** \ + * **Failed** \ + * **Canceled** + */ +export type ProvisioningState = string; /** Known values of {@link SourceType} that the service accepts. */ export enum KnownSourceType { @@ -7678,6 +8747,24 @@ export enum KnownSourceType { */ export type SourceType = string; +/** Known values of {@link Mode} that the service accepts. */ +export enum KnownMode { + /** The workspace manager configuration is enabled */ + Enabled = "Enabled", + /** The workspace manager configuration is disabled */ + Disabled = "Disabled" +} + +/** + * Defines values for Mode. \ + * {@link KnownMode} can be used interchangeably with Mode, + * this enum contains the known values that the service supports. + * ### Known values supported by the service + * **Enabled**: The workspace manager configuration is enabled \ + * **Disabled**: The workspace manager configuration is disabled + */ +export type Mode = string; + /** Known values of {@link DataConnectorKind} that the service accepts. */ export enum KnownDataConnectorKind { /** AzureActiveDirectory */ @@ -7698,6 +8785,8 @@ export enum KnownDataConnectorKind { OfficeIRM = "OfficeIRM", /** Office365Project */ Office365Project = "Office365Project", + /** MicrosoftPurviewInformationProtection */ + MicrosoftPurviewInformationProtection = "MicrosoftPurviewInformationProtection", /** OfficePowerBI */ OfficePowerBI = "OfficePowerBI", /** AmazonWebServicesCloudTrail */ @@ -7736,6 +8825,7 @@ export enum KnownDataConnectorKind { * **OfficeATP** \ * **OfficeIRM** \ * **Office365Project** \ + * **MicrosoftPurviewInformationProtection** \ * **OfficePowerBI** \ * **AmazonWebServicesCloudTrail** \ * **AmazonWebServicesS3** \ @@ -7897,6 +8987,45 @@ export enum KnownEntityMappingType { */ export type EntityMappingType = string; +/** Known values of {@link AlertProperty} that the service accepts. */ +export enum KnownAlertProperty { + /** Alert's link */ + AlertLink = "AlertLink", + /** Confidence level property */ + ConfidenceLevel = "ConfidenceLevel", + /** Confidence score */ + ConfidenceScore = "ConfidenceScore", + /** Extended links to the alert */ + ExtendedLinks = "ExtendedLinks", + /** Product name alert property */ + ProductName = "ProductName", + /** Provider name alert property */ + ProviderName = "ProviderName", + /** Product component name alert property */ + ProductComponentName = "ProductComponentName", + /** Remediation steps alert property */ + RemediationSteps = "RemediationSteps", + /** Techniques alert property */ + Techniques = "Techniques" +} + +/** + * Defines values for AlertProperty. \ + * {@link KnownAlertProperty} can be used interchangeably with AlertProperty, + * this enum contains the known values that the service supports. + * ### Known values supported by the service + * **AlertLink**: Alert's link \ + * **ConfidenceLevel**: Confidence level property \ + * **ConfidenceScore**: Confidence score \ + * **ExtendedLinks**: Extended links to the alert \ + * **ProductName**: Product name alert property \ + * **ProviderName**: Provider name alert property \ + * **ProductComponentName**: Product component name alert property \ + * **RemediationSteps**: Remediation steps alert property \ + * **Techniques**: Techniques alert property + */ +export type AlertProperty = string; + /** Known values of {@link EventGroupingAggregationKind} that the service accepts. */ export enum KnownEventGroupingAggregationKind { /** SingleAlert */ @@ -8518,6 +9647,24 @@ export enum KnownDataTypeState { */ export type DataTypeState = string; +/** Known values of {@link MtpProvider} that the service accepts. */ +export enum KnownMtpProvider { + /** MicrosoftDefenderForCloudApps */ + MicrosoftDefenderForCloudApps = "microsoftDefenderForCloudApps", + /** MicrosoftDefenderForIdentity */ + MicrosoftDefenderForIdentity = "microsoftDefenderForIdentity" +} + +/** + * Defines values for MtpProvider. \ + * {@link KnownMtpProvider} can be used interchangeably with MtpProvider, + * this enum contains the known values that the service supports. + * ### Known values supported by the service + * **microsoftDefenderForCloudApps** \ + * **microsoftDefenderForIdentity** + */ +export type MtpProvider = string; + /** Known values of {@link PollingFrequency} that the service accepts. */ export enum KnownPollingFrequency { /** Once a minute */ @@ -8901,29 +10048,78 @@ export interface AutomationRulesCreateOrUpdateOptionalParams automationRuleToUpsert?: AutomationRule; } -/** Contains response data for the createOrUpdate operation. */ -export type AutomationRulesCreateOrUpdateResponse = AutomationRule; +/** Contains response data for the createOrUpdate operation. */ +export type AutomationRulesCreateOrUpdateResponse = AutomationRule; + +/** Optional parameters. */ +export interface AutomationRulesDeleteOptionalParams + extends coreClient.OperationOptions {} + +/** Contains response data for the delete operation. */ +export type AutomationRulesDeleteResponse = Record; + +/** Optional parameters. */ +export interface AutomationRulesListOptionalParams + extends coreClient.OperationOptions {} + +/** Contains response data for the list operation. */ +export type AutomationRulesListResponse = AutomationRulesList; + +/** Optional parameters. */ +export interface AutomationRulesListNextOptionalParams + extends coreClient.OperationOptions {} + +/** Contains response data for the listNext operation. */ +export type AutomationRulesListNextResponse = AutomationRulesList; + +/** Optional parameters. */ +export interface EntitiesRunPlaybookOptionalParams + extends coreClient.OperationOptions { + /** Describes the request body for triggering a playbook on an entity. */ + requestBody?: EntityManualTriggerRequestBody; +} + +/** Optional parameters. */ +export interface EntitiesListOptionalParams + extends coreClient.OperationOptions {} + +/** Contains response data for the list operation. */ +export type EntitiesListResponse = EntityList; + +/** Optional parameters. */ +export interface EntitiesGetOptionalParams + extends coreClient.OperationOptions {} + +/** Contains response data for the get operation. */ +export type EntitiesGetResponse = EntityUnion; + +/** Optional parameters. */ +export interface EntitiesExpandOptionalParams + extends coreClient.OperationOptions {} + +/** Contains response data for the expand operation. */ +export type EntitiesExpandResponse = EntityExpandResponse; /** Optional parameters. */ -export interface AutomationRulesDeleteOptionalParams +export interface EntitiesQueriesOptionalParams extends coreClient.OperationOptions {} -/** Contains response data for the delete operation. */ -export type AutomationRulesDeleteResponse = Record; +/** Contains response data for the queries operation. */ +export type EntitiesQueriesResponse = GetQueriesResponse; /** Optional parameters. */ -export interface AutomationRulesListOptionalParams +export interface EntitiesGetInsightsOptionalParams extends coreClient.OperationOptions {} -/** Contains response data for the list operation. */ -export type AutomationRulesListResponse = AutomationRulesList; +/** Contains response data for the getInsights operation. */ +export type EntitiesGetInsightsResponse = EntityGetInsightsResponse; /** Optional parameters. */ -export interface AutomationRulesListNextOptionalParams +export interface EntitiesListNextOptionalParams extends coreClient.OperationOptions {} /** Contains response data for the listNext operation. */ -export type AutomationRulesListNextResponse = AutomationRulesList; +export type EntitiesListNextResponse = EntityList; /** Optional parameters. */ export interface IncidentsRunPlaybookOptionalParams @@ -9084,60 +10280,160 @@ export interface BookmarkExpandOptionalParams export type BookmarkExpandOperationResponse = BookmarkExpandResponse; /** Optional parameters. */ -export interface IPGeodataGetOptionalParams +export interface ContentPackagesListOptionalParams + extends coreClient.OperationOptions { + /** Filters the results, based on a Boolean condition. Optional. */ + filter?: string; + /** Sorts the results. Optional. */ + orderby?: string; + /** Returns only the first n results. Optional. */ + top?: number; + /** Skiptoken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element, the value of the nextLink element will include a skiptoken parameter that specifies a starting point to use for subsequent calls. Optional. */ + skipToken?: string; +} + +/** Contains response data for the list operation. */ +export type ContentPackagesListResponse = PackageList; + +/** Optional parameters. */ +export interface ContentPackagesGetOptionalParams extends coreClient.OperationOptions {} /** Contains response data for the get operation. */ -export type IPGeodataGetResponse = EnrichmentIpGeodata; +export type ContentPackagesGetResponse = PackageModel; /** Optional parameters. */ -export interface DomainWhoisGetOptionalParams +export interface ContentPackagesListNextOptionalParams extends coreClient.OperationOptions {} -/** Contains response data for the get operation. */ -export type DomainWhoisGetResponse = EnrichmentDomainWhois; +/** Contains response data for the listNext operation. */ +export type ContentPackagesListNextResponse = PackageList; /** Optional parameters. */ -export interface EntitiesListOptionalParams +export interface ContentPackageInstallOptionalParams + extends coreClient.OperationOptions {} + +/** Contains response data for the install operation. */ +export type ContentPackageInstallResponse = PackageModel; + +/** Optional parameters. */ +export interface ContentPackageUninstallOptionalParams extends coreClient.OperationOptions {} +/** Optional parameters. */ +export interface ProductPackagesListOptionalParams + extends coreClient.OperationOptions { + /** Filters the results, based on a Boolean condition. Optional. */ + filter?: string; + /** Sorts the results. Optional. */ + orderby?: string; + /** Returns only the first n results. Optional. */ + top?: number; + /** Skiptoken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element, the value of the nextLink element will include a skiptoken parameter that specifies a starting point to use for subsequent calls. Optional. */ + skipToken?: string; +} + /** Contains response data for the list operation. */ -export type EntitiesListResponse = EntityList; +export type ProductPackagesListResponse = PackageListAutoGenerated; /** Optional parameters. */ -export interface EntitiesGetOptionalParams +export interface ProductPackagesListNextOptionalParams extends coreClient.OperationOptions {} -/** Contains response data for the get operation. */ -export type EntitiesGetResponse = EntityUnion; +/** Contains response data for the listNext operation. */ +export type ProductPackagesListNextResponse = PackageListAutoGenerated; /** Optional parameters. */ -export interface EntitiesExpandOptionalParams +export interface ProductPackageGetOptionalParams extends coreClient.OperationOptions {} -/** Contains response data for the expand operation. */ -export type EntitiesExpandResponse = EntityExpandResponse; +/** Contains response data for the get operation. */ +export type ProductPackageGetResponse = PackageModelAutoGenerated; /** Optional parameters. */ -export interface EntitiesQueriesOptionalParams +export interface ProductTemplatesListOptionalParams + extends coreClient.OperationOptions { + /** Filters the results, based on a Boolean condition. Optional. */ + filter?: string; + /** Sorts the results. Optional. */ + orderby?: string; + /** Returns only the first n results. Optional. */ + top?: number; + /** Skiptoken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element, the value of the nextLink element will include a skiptoken parameter that specifies a starting point to use for subsequent calls. Optional. */ + skipToken?: string; +} + +/** Contains response data for the list operation. */ +export type ProductTemplatesListResponse = TemplateList; + +/** Optional parameters. */ +export interface ProductTemplatesListNextOptionalParams extends coreClient.OperationOptions {} -/** Contains response data for the queries operation. */ -export type EntitiesQueriesResponse = GetQueriesResponse; +/** Contains response data for the listNext operation. */ +export type ProductTemplatesListNextResponse = TemplateList; /** Optional parameters. */ -export interface EntitiesGetInsightsOptionalParams +export interface ProductTemplateGetOptionalParams extends coreClient.OperationOptions {} -/** Contains response data for the getInsights operation. */ -export type EntitiesGetInsightsResponse = EntityGetInsightsResponse; +/** Contains response data for the get operation. */ +export type ProductTemplateGetResponse = TemplateModel; /** Optional parameters. */ -export interface EntitiesListNextOptionalParams +export interface ContentTemplatesListOptionalParams + extends coreClient.OperationOptions { + /** Filters the results, based on a Boolean condition. Optional. */ + filter?: string; + /** Sorts the results. Optional. */ + orderby?: string; + /** Returns only the first n results. Optional. */ + top?: number; + /** Skiptoken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element, the value of the nextLink element will include a skiptoken parameter that specifies a starting point to use for subsequent calls. Optional. */ + skipToken?: string; +} + +/** Contains response data for the list operation. */ +export type ContentTemplatesListResponse = TemplateListAutoGenerated; + +/** Optional parameters. */ +export interface ContentTemplatesListNextOptionalParams extends coreClient.OperationOptions {} /** Contains response data for the listNext operation. */ -export type EntitiesListNextResponse = EntityList; +export type ContentTemplatesListNextResponse = TemplateListAutoGenerated; + +/** Optional parameters. */ +export interface ContentTemplateInstallOptionalParams + extends coreClient.OperationOptions {} + +/** Contains response data for the install operation. */ +export type ContentTemplateInstallResponse = TemplateModelAutoGenerated; + +/** Optional parameters. */ +export interface ContentTemplateGetOptionalParams + extends coreClient.OperationOptions {} + +/** Contains response data for the get operation. */ +export type ContentTemplateGetResponse = TemplateModelAutoGenerated; + +/** Optional parameters. */ +export interface ContentTemplateDeleteOptionalParams + extends coreClient.OperationOptions {} + +/** Optional parameters. */ +export interface IPGeodataGetOptionalParams + extends coreClient.OperationOptions {} + +/** Contains response data for the get operation. */ +export type IPGeodataGetResponse = EnrichmentIpGeodata; + +/** Optional parameters. */ +export interface DomainWhoisGetOptionalParams + extends coreClient.OperationOptions {} + +/** Contains response data for the get operation. */ +export type DomainWhoisGetResponse = EnrichmentDomainWhois; /** Optional parameters. */ export interface EntitiesGetTimelineListOptionalParams @@ -9180,7 +10476,7 @@ export type EntityRelationsGetRelationResponse = Relation; export interface EntityQueriesListOptionalParams extends coreClient.OperationOptions { /** The entity query kind we want to fetch */ - kind?: Enum13; + kind?: Enum19; } /** Contains response data for the list operation. */ @@ -9200,40 +10496,169 @@ export interface EntityQueriesCreateOrUpdateOptionalParams /** Contains response data for the createOrUpdate operation. */ export type EntityQueriesCreateOrUpdateResponse = EntityQueryUnion; -/** Optional parameters. */ -export interface EntityQueriesDeleteOptionalParams - extends coreClient.OperationOptions {} +/** Optional parameters. */ +export interface EntityQueriesDeleteOptionalParams + extends coreClient.OperationOptions {} + +/** Optional parameters. */ +export interface EntityQueriesListNextOptionalParams + extends coreClient.OperationOptions {} + +/** Contains response data for the listNext operation. */ +export type EntityQueriesListNextResponse = EntityQueryList; + +/** Optional parameters. */ +export interface EntityQueryTemplatesListOptionalParams + extends coreClient.OperationOptions {} + +/** Contains response data for the list operation. */ +export type EntityQueryTemplatesListResponse = EntityQueryTemplateList; + +/** Optional parameters. */ +export interface EntityQueryTemplatesGetOptionalParams + extends coreClient.OperationOptions {} + +/** Contains response data for the get operation. */ +export type EntityQueryTemplatesGetResponse = EntityQueryTemplateUnion; + +/** Optional parameters. */ +export interface EntityQueryTemplatesListNextOptionalParams + extends coreClient.OperationOptions {} + +/** Contains response data for the listNext operation. */ +export type EntityQueryTemplatesListNextResponse = EntityQueryTemplateList; + +/** Optional parameters. */ +export interface FileImportsListOptionalParams + extends coreClient.OperationOptions { + /** Filters the results, based on a Boolean condition. Optional. */ + filter?: string; + /** Sorts the results. Optional. */ + orderby?: string; + /** Returns only the first n results. Optional. */ + top?: number; + /** Skiptoken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element, the value of the nextLink element will include a skiptoken parameter that specifies a starting point to use for subsequent calls. Optional. */ + skipToken?: string; +} + +/** Contains response data for the list operation. */ +export type FileImportsListResponse = FileImportList; + +/** Optional parameters. */ +export interface FileImportsGetOptionalParams + extends coreClient.OperationOptions {} + +/** Contains response data for the get operation. */ +export type FileImportsGetResponse = FileImport; + +/** Optional parameters. */ +export interface FileImportsCreateOptionalParams + extends coreClient.OperationOptions {} + +/** Contains response data for the create operation. */ +export type FileImportsCreateResponse = FileImport; + +/** Optional parameters. */ +export interface FileImportsDeleteOptionalParams + extends coreClient.OperationOptions { + /** Delay to wait until next poll, in milliseconds. */ + updateIntervalInMs?: number; + /** A serialized poller which can be used to resume an existing paused Long-Running-Operation. */ + resumeFrom?: string; +} + +/** Contains response data for the delete operation. */ +export type FileImportsDeleteResponse = FileImport; + +/** Optional parameters. */ +export interface FileImportsListNextOptionalParams + extends coreClient.OperationOptions {} + +/** Contains response data for the listNext operation. */ +export type FileImportsListNextResponse = FileImportList; + +/** Optional parameters. */ +export interface HuntsListOptionalParams extends coreClient.OperationOptions { + /** Filters the results, based on a Boolean condition. Optional. */ + filter?: string; + /** Sorts the results. Optional. */ + orderby?: string; + /** Returns only the first n results. Optional. */ + top?: number; + /** Skiptoken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element, the value of the nextLink element will include a skiptoken parameter that specifies a starting point to use for subsequent calls. Optional. */ + skipToken?: string; +} + +/** Contains response data for the list operation. */ +export type HuntsListResponse = HuntList; + +/** Optional parameters. */ +export interface HuntsGetOptionalParams extends coreClient.OperationOptions {} + +/** Contains response data for the get operation. */ +export type HuntsGetResponse = Hunt; + +/** Optional parameters. */ +export interface HuntsDeleteOptionalParams + extends coreClient.OperationOptions {} + +/** Optional parameters. */ +export interface HuntsCreateOrUpdateOptionalParams + extends coreClient.OperationOptions {} + +/** Contains response data for the createOrUpdate operation. */ +export type HuntsCreateOrUpdateResponse = Hunt; + +/** Optional parameters. */ +export interface HuntsListNextOptionalParams + extends coreClient.OperationOptions {} + +/** Contains response data for the listNext operation. */ +export type HuntsListNextResponse = HuntList; + +/** Optional parameters. */ +export interface HuntRelationsListOptionalParams + extends coreClient.OperationOptions { + /** Filters the results, based on a Boolean condition. Optional. */ + filter?: string; + /** Sorts the results. Optional. */ + orderby?: string; + /** Returns only the first n results. Optional. */ + top?: number; + /** Skiptoken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element, the value of the nextLink element will include a skiptoken parameter that specifies a starting point to use for subsequent calls. Optional. */ + skipToken?: string; +} + +/** Contains response data for the list operation. */ +export type HuntRelationsListResponse = HuntRelationList; /** Optional parameters. */ -export interface EntityQueriesListNextOptionalParams +export interface HuntRelationsGetOptionalParams extends coreClient.OperationOptions {} -/** Contains response data for the listNext operation. */ -export type EntityQueriesListNextResponse = EntityQueryList; +/** Contains response data for the get operation. */ +export type HuntRelationsGetResponse = HuntRelation; /** Optional parameters. */ -export interface EntityQueryTemplatesListOptionalParams +export interface HuntRelationsDeleteOptionalParams extends coreClient.OperationOptions {} -/** Contains response data for the list operation. */ -export type EntityQueryTemplatesListResponse = EntityQueryTemplateList; - /** Optional parameters. */ -export interface EntityQueryTemplatesGetOptionalParams +export interface HuntRelationsCreateOrUpdateOptionalParams extends coreClient.OperationOptions {} -/** Contains response data for the get operation. */ -export type EntityQueryTemplatesGetResponse = EntityQueryTemplateUnion; +/** Contains response data for the createOrUpdate operation. */ +export type HuntRelationsCreateOrUpdateResponse = HuntRelation; /** Optional parameters. */ -export interface EntityQueryTemplatesListNextOptionalParams +export interface HuntRelationsListNextOptionalParams extends coreClient.OperationOptions {} /** Contains response data for the listNext operation. */ -export type EntityQueryTemplatesListNextResponse = EntityQueryTemplateList; +export type HuntRelationsListNextResponse = HuntRelationList; /** Optional parameters. */ -export interface FileImportsListOptionalParams +export interface HuntCommentsListOptionalParams extends coreClient.OperationOptions { /** Filters the results, based on a Boolean condition. Optional. */ filter?: string; @@ -9246,40 +10671,32 @@ export interface FileImportsListOptionalParams } /** Contains response data for the list operation. */ -export type FileImportsListResponse = FileImportList; +export type HuntCommentsListResponse = HuntCommentList; /** Optional parameters. */ -export interface FileImportsGetOptionalParams +export interface HuntCommentsGetOptionalParams extends coreClient.OperationOptions {} /** Contains response data for the get operation. */ -export type FileImportsGetResponse = FileImport; +export type HuntCommentsGetResponse = HuntComment; /** Optional parameters. */ -export interface FileImportsCreateOptionalParams +export interface HuntCommentsDeleteOptionalParams extends coreClient.OperationOptions {} -/** Contains response data for the create operation. */ -export type FileImportsCreateResponse = FileImport; - /** Optional parameters. */ -export interface FileImportsDeleteOptionalParams - extends coreClient.OperationOptions { - /** Delay to wait until next poll, in milliseconds. */ - updateIntervalInMs?: number; - /** A serialized poller which can be used to resume an existing paused Long-Running-Operation. */ - resumeFrom?: string; -} +export interface HuntCommentsCreateOrUpdateOptionalParams + extends coreClient.OperationOptions {} -/** Contains response data for the delete operation. */ -export type FileImportsDeleteResponse = FileImport; +/** Contains response data for the createOrUpdate operation. */ +export type HuntCommentsCreateOrUpdateResponse = HuntComment; /** Optional parameters. */ -export interface FileImportsListNextOptionalParams +export interface HuntCommentsListNextOptionalParams extends coreClient.OperationOptions {} /** Contains response data for the listNext operation. */ -export type FileImportsListNextResponse = FileImportList; +export type HuntCommentsListNextResponse = HuntCommentList; /** Optional parameters. */ export interface IncidentCommentsListOptionalParams @@ -9363,6 +10780,38 @@ export interface IncidentRelationsListNextOptionalParams /** Contains response data for the listNext operation. */ export type IncidentRelationsListNextResponse = RelationList; +/** Optional parameters. */ +export interface IncidentTasksListOptionalParams + extends coreClient.OperationOptions {} + +/** Contains response data for the list operation. */ +export type IncidentTasksListResponse = IncidentTaskList; + +/** Optional parameters. */ +export interface IncidentTasksGetOptionalParams + extends coreClient.OperationOptions {} + +/** Contains response data for the get operation. */ +export type IncidentTasksGetResponse = IncidentTask; + +/** Optional parameters. */ +export interface IncidentTasksCreateOrUpdateOptionalParams + extends coreClient.OperationOptions {} + +/** Contains response data for the createOrUpdate operation. */ +export type IncidentTasksCreateOrUpdateResponse = IncidentTask; + +/** Optional parameters. */ +export interface IncidentTasksDeleteOptionalParams + extends coreClient.OperationOptions {} + +/** Optional parameters. */ +export interface IncidentTasksListNextOptionalParams + extends coreClient.OperationOptions {} + +/** Contains response data for the listNext operation. */ +export type IncidentTasksListNextResponse = IncidentTaskList; + /** Optional parameters. */ export interface MetadataListOptionalParams extends coreClient.OperationOptions { @@ -9464,6 +10913,32 @@ export interface SentinelOnboardingStatesListOptionalParams /** Contains response data for the list operation. */ export type SentinelOnboardingStatesListResponse = SentinelOnboardingStatesList; +/** Optional parameters. */ +export interface GetRecommendationsListOptionalParams + extends coreClient.OperationOptions {} + +/** Contains response data for the list operation. */ +export type GetRecommendationsListResponse = RecommendationList; + +/** Optional parameters. */ +export interface GetSingleRecommendationOptionalParams + extends coreClient.OperationOptions {} + +/** Contains response data for the singleRecommendation operation. */ +export type GetSingleRecommendationResponse = Recommendation; + +/** Optional parameters. */ +export interface UpdateRecommendationOptionalParams + extends coreClient.OperationOptions { + /** Delay to wait until next poll, in milliseconds. */ + updateIntervalInMs?: number; + /** A serialized poller which can be used to resume an existing paused Long-Running-Operation. */ + resumeFrom?: string; +} + +/** Contains response data for the recommendation operation. */ +export type UpdateRecommendationResponse = Recommendation; + /** Optional parameters. */ export interface SecurityMLAnalyticsSettingsListOptionalParams extends coreClient.OperationOptions {} @@ -9647,6 +11122,39 @@ export interface ThreatIntelligenceIndicatorMetricsListOptionalParams /** Contains response data for the list operation. */ export type ThreatIntelligenceIndicatorMetricsListResponse = ThreatIntelligenceMetricsList; +/** Optional parameters. */ +export interface TriggeredAnalyticsRuleRunGetOptionalParams + extends coreClient.OperationOptions {} + +/** Contains response data for the get operation. */ +export type TriggeredAnalyticsRuleRunGetResponse = TriggeredAnalyticsRuleRun; + +/** Optional parameters. */ +export interface GetTriggeredAnalyticsRuleRunsListOptionalParams + extends coreClient.OperationOptions {} + +/** Contains response data for the list operation. */ +export type GetTriggeredAnalyticsRuleRunsListResponse = TriggeredAnalyticsRuleRuns; + +/** Optional parameters. */ +export interface GetTriggeredAnalyticsRuleRunsListNextOptionalParams + extends coreClient.OperationOptions {} + +/** Contains response data for the listNext operation. */ +export type GetTriggeredAnalyticsRuleRunsListNextResponse = TriggeredAnalyticsRuleRuns; + +/** Optional parameters. */ +export interface AlertRuleTriggerRuleRunOptionalParams + extends coreClient.OperationOptions { + /** Delay to wait until next poll, in milliseconds. */ + updateIntervalInMs?: number; + /** A serialized poller which can be used to resume an existing paused Long-Running-Operation. */ + resumeFrom?: string; +} + +/** Contains response data for the triggerRuleRun operation. */ +export type AlertRuleTriggerRuleRunResponse = AlertRuleTriggerRuleRunHeaders; + /** Optional parameters. */ export interface WatchlistsListOptionalParams extends coreClient.OperationOptions { @@ -9720,6 +11228,201 @@ export interface WatchlistItemsListNextOptionalParams /** Contains response data for the listNext operation. */ export type WatchlistItemsListNextResponse = WatchlistItemList; +/** Optional parameters. */ +export interface WorkspaceManagerGroupsListOptionalParams + extends coreClient.OperationOptions { + /** Sorts the results. Optional. */ + orderby?: string; + /** Returns only the first n results. Optional. */ + top?: number; + /** Skiptoken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element, the value of the nextLink element will include a skiptoken parameter that specifies a starting point to use for subsequent calls. Optional. */ + skipToken?: string; +} + +/** Contains response data for the list operation. */ +export type WorkspaceManagerGroupsListResponse = WorkspaceManagerGroupList; + +/** Optional parameters. */ +export interface WorkspaceManagerGroupsGetOptionalParams + extends coreClient.OperationOptions {} + +/** Contains response data for the get operation. */ +export type WorkspaceManagerGroupsGetResponse = WorkspaceManagerGroup; + +/** Optional parameters. */ +export interface WorkspaceManagerGroupsCreateOrUpdateOptionalParams + extends coreClient.OperationOptions {} + +/** Contains response data for the createOrUpdate operation. */ +export type WorkspaceManagerGroupsCreateOrUpdateResponse = WorkspaceManagerGroup; + +/** Optional parameters. */ +export interface WorkspaceManagerGroupsDeleteOptionalParams + extends coreClient.OperationOptions {} + +/** Optional parameters. */ +export interface WorkspaceManagerGroupsListNextOptionalParams + extends coreClient.OperationOptions {} + +/** Contains response data for the listNext operation. */ +export type WorkspaceManagerGroupsListNextResponse = WorkspaceManagerGroupList; + +/** Optional parameters. */ +export interface WorkspaceManagerAssignmentsListOptionalParams + extends coreClient.OperationOptions { + /** Sorts the results. Optional. */ + orderby?: string; + /** Returns only the first n results. Optional. */ + top?: number; + /** Skiptoken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element, the value of the nextLink element will include a skiptoken parameter that specifies a starting point to use for subsequent calls. Optional. */ + skipToken?: string; +} + +/** Contains response data for the list operation. */ +export type WorkspaceManagerAssignmentsListResponse = WorkspaceManagerAssignmentList; + +/** Optional parameters. */ +export interface WorkspaceManagerAssignmentsGetOptionalParams + extends coreClient.OperationOptions {} + +/** Contains response data for the get operation. */ +export type WorkspaceManagerAssignmentsGetResponse = WorkspaceManagerAssignment; + +/** Optional parameters. */ +export interface WorkspaceManagerAssignmentsCreateOrUpdateOptionalParams + extends coreClient.OperationOptions {} + +/** Contains response data for the createOrUpdate operation. */ +export type WorkspaceManagerAssignmentsCreateOrUpdateResponse = WorkspaceManagerAssignment; + +/** Optional parameters. */ +export interface WorkspaceManagerAssignmentsDeleteOptionalParams + extends coreClient.OperationOptions {} + +/** Optional parameters. */ +export interface WorkspaceManagerAssignmentsListNextOptionalParams + extends coreClient.OperationOptions {} + +/** Contains response data for the listNext operation. */ +export type WorkspaceManagerAssignmentsListNextResponse = WorkspaceManagerAssignmentList; + +/** Optional parameters. */ +export interface WorkspaceManagerAssignmentJobsListOptionalParams + extends coreClient.OperationOptions { + /** Sorts the results. Optional. */ + orderby?: string; + /** Returns only the first n results. Optional. */ + top?: number; + /** Skiptoken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element, the value of the nextLink element will include a skiptoken parameter that specifies a starting point to use for subsequent calls. Optional. */ + skipToken?: string; +} + +/** Contains response data for the list operation. */ +export type WorkspaceManagerAssignmentJobsListResponse = JobList; + +/** Optional parameters. */ +export interface WorkspaceManagerAssignmentJobsCreateOptionalParams + extends coreClient.OperationOptions {} + +/** Contains response data for the create operation. */ +export type WorkspaceManagerAssignmentJobsCreateResponse = Job; + +/** Optional parameters. */ +export interface WorkspaceManagerAssignmentJobsGetOptionalParams + extends coreClient.OperationOptions {} + +/** Contains response data for the get operation. */ +export type WorkspaceManagerAssignmentJobsGetResponse = Job; + +/** Optional parameters. */ +export interface WorkspaceManagerAssignmentJobsDeleteOptionalParams + extends coreClient.OperationOptions {} + +/** Optional parameters. */ +export interface WorkspaceManagerAssignmentJobsListNextOptionalParams + extends coreClient.OperationOptions {} + +/** Contains response data for the listNext operation. */ +export type WorkspaceManagerAssignmentJobsListNextResponse = JobList; + +/** Optional parameters. */ +export interface WorkspaceManagerConfigurationsListOptionalParams + extends coreClient.OperationOptions { + /** Sorts the results. Optional. */ + orderby?: string; + /** Returns only the first n results. Optional. */ + top?: number; + /** Skiptoken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element, the value of the nextLink element will include a skiptoken parameter that specifies a starting point to use for subsequent calls. Optional. */ + skipToken?: string; +} + +/** Contains response data for the list operation. */ +export type WorkspaceManagerConfigurationsListResponse = WorkspaceManagerConfigurationList; + +/** Optional parameters. */ +export interface WorkspaceManagerConfigurationsGetOptionalParams + extends coreClient.OperationOptions {} + +/** Contains response data for the get operation. */ +export type WorkspaceManagerConfigurationsGetResponse = WorkspaceManagerConfiguration; + +/** Optional parameters. */ +export interface WorkspaceManagerConfigurationsDeleteOptionalParams + extends coreClient.OperationOptions {} + +/** Optional parameters. */ +export interface WorkspaceManagerConfigurationsCreateOrUpdateOptionalParams + extends coreClient.OperationOptions {} + +/** Contains response data for the createOrUpdate operation. */ +export type WorkspaceManagerConfigurationsCreateOrUpdateResponse = WorkspaceManagerConfiguration; + +/** Optional parameters. */ +export interface WorkspaceManagerConfigurationsListNextOptionalParams + extends coreClient.OperationOptions {} + +/** Contains response data for the listNext operation. */ +export type WorkspaceManagerConfigurationsListNextResponse = WorkspaceManagerConfigurationList; + +/** Optional parameters. */ +export interface WorkspaceManagerMembersListOptionalParams + extends coreClient.OperationOptions { + /** Sorts the results. Optional. */ + orderby?: string; + /** Returns only the first n results. Optional. */ + top?: number; + /** Skiptoken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element, the value of the nextLink element will include a skiptoken parameter that specifies a starting point to use for subsequent calls. Optional. */ + skipToken?: string; +} + +/** Contains response data for the list operation. */ +export type WorkspaceManagerMembersListResponse = WorkspaceManagerMembersList; + +/** Optional parameters. */ +export interface WorkspaceManagerMembersGetOptionalParams + extends coreClient.OperationOptions {} + +/** Contains response data for the get operation. */ +export type WorkspaceManagerMembersGetResponse = WorkspaceManagerMember; + +/** Optional parameters. */ +export interface WorkspaceManagerMembersCreateOrUpdateOptionalParams + extends coreClient.OperationOptions {} + +/** Contains response data for the createOrUpdate operation. */ +export type WorkspaceManagerMembersCreateOrUpdateResponse = WorkspaceManagerMember; + +/** Optional parameters. */ +export interface WorkspaceManagerMembersDeleteOptionalParams + extends coreClient.OperationOptions {} + +/** Optional parameters. */ +export interface WorkspaceManagerMembersListNextOptionalParams + extends coreClient.OperationOptions {} + +/** Contains response data for the listNext operation. */ +export type WorkspaceManagerMembersListNextResponse = WorkspaceManagerMembersList; + /** Optional parameters. */ export interface DataConnectorsListOptionalParams extends coreClient.OperationOptions {} diff --git a/sdk/securityinsight/arm-securityinsight/src/models/mappers.ts b/sdk/securityinsight/arm-securityinsight/src/models/mappers.ts index 6f5b1105eada..64906d0233f0 100644 --- a/sdk/securityinsight/arm-securityinsight/src/models/mappers.ts +++ b/sdk/securityinsight/arm-securityinsight/src/models/mappers.ts @@ -392,6 +392,34 @@ export const AutomationRulesList: coreClient.CompositeMapper = { } }; +export const EntityManualTriggerRequestBody: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "EntityManualTriggerRequestBody", + modelProperties: { + incidentArmId: { + serializedName: "incidentArmId", + type: { + name: "String" + } + }, + tenantId: { + serializedName: "tenantId", + type: { + name: "Uuid" + } + }, + logicAppsResourceId: { + serializedName: "logicAppsResourceId", + required: true, + type: { + name: "String" + } + } + } + } +}; + export const ManualTriggerRequestBody: coreClient.CompositeMapper = { type: { name: "Composite", @@ -744,109 +772,116 @@ export const ConnectedEntity: coreClient.CompositeMapper = { } }; -export const EnrichmentIpGeodata: coreClient.CompositeMapper = { +export const PackageList: coreClient.CompositeMapper = { type: { name: "Composite", - className: "EnrichmentIpGeodata", + className: "PackageList", modelProperties: { - asn: { - serializedName: "asn", - type: { - name: "String" - } - }, - carrier: { - serializedName: "carrier", - type: { - name: "String" - } - }, - city: { - serializedName: "city", + nextLink: { + serializedName: "nextLink", + readOnly: true, type: { name: "String" } }, - cityCf: { - serializedName: "cityCf", - type: { - name: "Number" - } - }, - continent: { - serializedName: "continent", + value: { + serializedName: "value", + required: true, type: { - name: "String" + name: "Sequence", + element: { + type: { + name: "Composite", + className: "PackageModel" + } + } } - }, - country: { - serializedName: "country", + } + } + } +}; + +export const MetadataSource: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "MetadataSource", + modelProperties: { + kind: { + serializedName: "kind", + required: true, type: { name: "String" } }, - countryCf: { - serializedName: "countryCf", - type: { - name: "Number" - } - }, - ipAddr: { - serializedName: "ipAddr", + name: { + serializedName: "name", type: { name: "String" } }, - ipRoutingType: { - serializedName: "ipRoutingType", + sourceId: { + serializedName: "sourceId", type: { name: "String" } - }, - latitude: { - serializedName: "latitude", + } + } + } +}; + +export const MetadataAuthor: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "MetadataAuthor", + modelProperties: { + name: { + serializedName: "name", type: { name: "String" } }, - longitude: { - serializedName: "longitude", + email: { + serializedName: "email", type: { name: "String" } }, - organization: { - serializedName: "organization", + link: { + serializedName: "link", type: { name: "String" } - }, - organizationType: { - serializedName: "organizationType", + } + } + } +}; + +export const MetadataSupport: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "MetadataSupport", + modelProperties: { + tier: { + serializedName: "tier", + required: true, type: { name: "String" } }, - region: { - serializedName: "region", + name: { + serializedName: "name", type: { name: "String" } }, - state: { - serializedName: "state", + email: { + serializedName: "email", type: { name: "String" } }, - stateCf: { - serializedName: "stateCf", - type: { - name: "Number" - } - }, - stateCode: { - serializedName: "stateCode", + link: { + serializedName: "link", type: { name: "String" } @@ -855,73 +890,64 @@ export const EnrichmentIpGeodata: coreClient.CompositeMapper = { } }; -export const EnrichmentDomainWhois: coreClient.CompositeMapper = { +export const MetadataDependencies: coreClient.CompositeMapper = { type: { name: "Composite", - className: "EnrichmentDomainWhois", + className: "MetadataDependencies", modelProperties: { - domain: { - serializedName: "domain", + contentId: { + serializedName: "contentId", type: { name: "String" } }, - server: { - serializedName: "server", + kind: { + serializedName: "kind", type: { name: "String" } }, - created: { - serializedName: "created", + version: { + serializedName: "version", type: { - name: "DateTime" + name: "String" } }, - updated: { - serializedName: "updated", + name: { + serializedName: "name", type: { - name: "DateTime" + name: "String" } }, - expires: { - serializedName: "expires", + operator: { + serializedName: "operator", type: { - name: "DateTime" + name: "String" } }, - parsedWhois: { - serializedName: "parsedWhois", + criteria: { + serializedName: "criteria", type: { - name: "Composite", - className: "EnrichmentDomainWhoisDetails" + name: "Sequence", + element: { + type: { + name: "Composite", + className: "MetadataDependencies" + } + } } } } } }; -export const EnrichmentDomainWhoisDetails: coreClient.CompositeMapper = { +export const MetadataCategories: coreClient.CompositeMapper = { type: { name: "Composite", - className: "EnrichmentDomainWhoisDetails", + className: "MetadataCategories", modelProperties: { - registrar: { - serializedName: "registrar", - type: { - name: "Composite", - className: "EnrichmentDomainWhoisRegistrarDetails" - } - }, - contacts: { - serializedName: "contacts", - type: { - name: "Composite", - className: "EnrichmentDomainWhoisContacts" - } - }, - nameServers: { - serializedName: "nameServers", + domains: { + serializedName: "domains", type: { name: "Sequence", element: { @@ -931,8 +957,8 @@ export const EnrichmentDomainWhoisDetails: coreClient.CompositeMapper = { } } }, - statuses: { - serializedName: "statuses", + verticals: { + serializedName: "verticals", type: { name: "Sequence", element: { @@ -946,43 +972,85 @@ export const EnrichmentDomainWhoisDetails: coreClient.CompositeMapper = { } }; -export const EnrichmentDomainWhoisRegistrarDetails: coreClient.CompositeMapper = { +export const PackageListAutoGenerated: coreClient.CompositeMapper = { type: { name: "Composite", - className: "EnrichmentDomainWhoisRegistrarDetails", + className: "PackageListAutoGenerated", modelProperties: { - name: { - serializedName: "name", - type: { - name: "String" - } - }, - abuseContactEmail: { - serializedName: "abuseContactEmail", + nextLink: { + serializedName: "nextLink", + readOnly: true, type: { name: "String" } }, - abuseContactPhone: { - serializedName: "abuseContactPhone", + value: { + serializedName: "value", + required: true, type: { - name: "String" + name: "Sequence", + element: { + type: { + name: "Composite", + className: "PackageModelAutoGenerated" + } + } } - }, - ianaId: { - serializedName: "ianaId", + } + } + } +}; + +export const TemplateList: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "TemplateList", + modelProperties: { + value: { + serializedName: "value", + required: true, type: { - name: "String" + name: "Sequence", + element: { + type: { + name: "Composite", + className: "TemplateModel" + } + } } }, - url: { - serializedName: "url", + nextLink: { + serializedName: "nextLink", + readOnly: true, type: { name: "String" } + } + } + } +}; + +export const TemplateListAutoGenerated: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "TemplateListAutoGenerated", + modelProperties: { + value: { + serializedName: "value", + required: true, + type: { + name: "Sequence", + element: { + type: { + name: "Composite", + className: "TemplateModelAutoGenerated" + } + } + } }, - whoisServer: { - serializedName: "whoisServer", + nextLink: { + serializedName: "nextLink", + readOnly: true, type: { name: "String" } @@ -991,221 +1059,200 @@ export const EnrichmentDomainWhoisRegistrarDetails: coreClient.CompositeMapper = } }; -export const EnrichmentDomainWhoisContacts: coreClient.CompositeMapper = { +export const EnrichmentIpGeodata: coreClient.CompositeMapper = { type: { name: "Composite", - className: "EnrichmentDomainWhoisContacts", + className: "EnrichmentIpGeodata", modelProperties: { - admin: { - serializedName: "admin", + asn: { + serializedName: "asn", type: { - name: "Composite", - className: "EnrichmentDomainWhoisContact" + name: "String" } }, - billing: { - serializedName: "billing", + carrier: { + serializedName: "carrier", type: { - name: "Composite", - className: "EnrichmentDomainWhoisContact" + name: "String" } }, - registrant: { - serializedName: "registrant", + city: { + serializedName: "city", type: { - name: "Composite", - className: "EnrichmentDomainWhoisContact" + name: "String" } }, - tech: { - serializedName: "tech", + cityCf: { + serializedName: "cityCf", type: { - name: "Composite", - className: "EnrichmentDomainWhoisContact" + name: "Number" } - } - } - } -}; - -export const EnrichmentDomainWhoisContact: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "EnrichmentDomainWhoisContact", - modelProperties: { - name: { - serializedName: "name", + }, + continent: { + serializedName: "continent", type: { name: "String" } }, - org: { - serializedName: "org", + country: { + serializedName: "country", type: { name: "String" } }, - street: { - serializedName: "street", + countryCf: { + serializedName: "countryCf", type: { - name: "Sequence", - element: { - type: { - name: "String" - } - } + name: "Number" } }, - city: { - serializedName: "city", + ipAddr: { + serializedName: "ipAddr", type: { name: "String" } }, - state: { - serializedName: "state", + ipRoutingType: { + serializedName: "ipRoutingType", type: { name: "String" } }, - postal: { - serializedName: "postal", + latitude: { + serializedName: "latitude", type: { name: "String" } }, - country: { - serializedName: "country", + longitude: { + serializedName: "longitude", type: { name: "String" } }, - phone: { - serializedName: "phone", + organization: { + serializedName: "organization", type: { name: "String" } }, - fax: { - serializedName: "fax", + organizationType: { + serializedName: "organizationType", type: { name: "String" } }, - email: { - serializedName: "email", + region: { + serializedName: "region", type: { name: "String" } - } - } - } -}; - -export const EntityList: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "EntityList", - modelProperties: { - nextLink: { - serializedName: "nextLink", - readOnly: true, + }, + state: { + serializedName: "state", type: { name: "String" } }, - value: { - serializedName: "value", - required: true, + stateCf: { + serializedName: "stateCf", type: { - name: "Sequence", - element: { - type: { - name: "Composite", - className: "Entity" - } - } + name: "Number" + } + }, + stateCode: { + serializedName: "stateCode", + type: { + name: "String" } } } } }; -export const EntityExpandParameters: coreClient.CompositeMapper = { +export const EnrichmentDomainWhois: coreClient.CompositeMapper = { type: { name: "Composite", - className: "EntityExpandParameters", + className: "EnrichmentDomainWhois", modelProperties: { - endTime: { - serializedName: "endTime", + domain: { + serializedName: "domain", + type: { + name: "String" + } + }, + server: { + serializedName: "server", + type: { + name: "String" + } + }, + created: { + serializedName: "created", type: { name: "DateTime" } }, - expansionId: { - serializedName: "expansionId", + updated: { + serializedName: "updated", type: { - name: "Uuid" + name: "DateTime" } }, - startTime: { - serializedName: "startTime", + expires: { + serializedName: "expires", type: { name: "DateTime" } + }, + parsedWhois: { + serializedName: "parsedWhois", + type: { + name: "Composite", + className: "EnrichmentDomainWhoisDetails" + } } } } }; -export const EntityExpandResponse: coreClient.CompositeMapper = { +export const EnrichmentDomainWhoisDetails: coreClient.CompositeMapper = { type: { name: "Composite", - className: "EntityExpandResponse", + className: "EnrichmentDomainWhoisDetails", modelProperties: { - metaData: { - serializedName: "metaData", + registrar: { + serializedName: "registrar", type: { name: "Composite", - className: "ExpansionResultsMetadata" + className: "EnrichmentDomainWhoisRegistrarDetails" } }, - value: { - serializedName: "value", + contacts: { + serializedName: "contacts", type: { name: "Composite", - className: "EntityExpandResponseValue" + className: "EnrichmentDomainWhoisContacts" } - } - } - } -}; - -export const EntityExpandResponseValue: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "EntityExpandResponseValue", - modelProperties: { - entities: { - serializedName: "entities", + }, + nameServers: { + serializedName: "nameServers", type: { name: "Sequence", element: { type: { - name: "Composite", - className: "Entity" + name: "String" } } } }, - edges: { - serializedName: "edges", + statuses: { + serializedName: "statuses", type: { name: "Sequence", element: { type: { - name: "Composite", - className: "EntityEdges" + name: "String" } } } @@ -1214,204 +1261,154 @@ export const EntityExpandResponseValue: coreClient.CompositeMapper = { } }; -export const EntityEdges: coreClient.CompositeMapper = { +export const EnrichmentDomainWhoisRegistrarDetails: coreClient.CompositeMapper = { type: { name: "Composite", - className: "EntityEdges", + className: "EnrichmentDomainWhoisRegistrarDetails", modelProperties: { - targetEntityId: { - serializedName: "targetEntityId", + name: { + serializedName: "name", type: { name: "String" } }, - additionalData: { - serializedName: "additionalData", + abuseContactEmail: { + serializedName: "abuseContactEmail", type: { - name: "Dictionary", - value: { - type: { name: "Dictionary", value: { type: { name: "any" } } } - } + name: "String" } - } - } - } -}; - -export const EntityTimelineParameters: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "EntityTimelineParameters", - modelProperties: { - kinds: { - serializedName: "kinds", + }, + abuseContactPhone: { + serializedName: "abuseContactPhone", type: { - name: "Sequence", - element: { - type: { - name: "String" - } - } + name: "String" } }, - startTime: { - serializedName: "startTime", - required: true, + ianaId: { + serializedName: "ianaId", type: { - name: "DateTime" + name: "String" } }, - endTime: { - serializedName: "endTime", - required: true, + url: { + serializedName: "url", type: { - name: "DateTime" + name: "String" } }, - numberOfBucket: { - serializedName: "numberOfBucket", + whoisServer: { + serializedName: "whoisServer", type: { - name: "Number" + name: "String" } } } } }; -export const EntityTimelineResponse: coreClient.CompositeMapper = { +export const EnrichmentDomainWhoisContacts: coreClient.CompositeMapper = { type: { name: "Composite", - className: "EntityTimelineResponse", + className: "EnrichmentDomainWhoisContacts", modelProperties: { - metaData: { - serializedName: "metaData", + admin: { + serializedName: "admin", type: { name: "Composite", - className: "TimelineResultsMetadata" + className: "EnrichmentDomainWhoisContact" } }, - value: { - serializedName: "value", + billing: { + serializedName: "billing", type: { - name: "Sequence", - element: { - type: { - name: "Composite", - className: "EntityTimelineItem" - } - } + name: "Composite", + className: "EnrichmentDomainWhoisContact" + } + }, + registrant: { + serializedName: "registrant", + type: { + name: "Composite", + className: "EnrichmentDomainWhoisContact" + } + }, + tech: { + serializedName: "tech", + type: { + name: "Composite", + className: "EnrichmentDomainWhoisContact" } } } } }; -export const TimelineResultsMetadata: coreClient.CompositeMapper = { +export const EnrichmentDomainWhoisContact: coreClient.CompositeMapper = { type: { name: "Composite", - className: "TimelineResultsMetadata", + className: "EnrichmentDomainWhoisContact", modelProperties: { - totalCount: { - serializedName: "totalCount", - required: true, + name: { + serializedName: "name", type: { - name: "Number" + name: "String" } }, - aggregations: { - serializedName: "aggregations", - required: true, + org: { + serializedName: "org", type: { - name: "Sequence", - element: { - type: { - name: "Composite", - className: "TimelineAggregation" - } - } + name: "String" } }, - errors: { - serializedName: "errors", + street: { + serializedName: "street", type: { name: "Sequence", element: { type: { - name: "Composite", - className: "TimelineError" + name: "String" } } } - } - } - } -}; - -export const TimelineAggregation: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "TimelineAggregation", - modelProperties: { - count: { - serializedName: "count", - required: true, + }, + city: { + serializedName: "city", type: { - name: "Number" + name: "String" } }, - kind: { - serializedName: "kind", - required: true, + state: { + serializedName: "state", type: { name: "String" } - } - } - } -}; - -export const TimelineError: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "TimelineError", - modelProperties: { - kind: { - serializedName: "kind", - required: true, + }, + postal: { + serializedName: "postal", type: { name: "String" } }, - queryId: { - serializedName: "queryId", + country: { + serializedName: "country", type: { name: "String" } }, - errorMessage: { - serializedName: "errorMessage", - required: true, + phone: { + serializedName: "phone", type: { name: "String" } - } - } - } -}; - -export const EntityTimelineItem: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "EntityTimelineItem", - uberParent: "EntityTimelineItem", - polymorphicDiscriminator: { - serializedName: "kind", - clientName: "kind" - }, - modelProperties: { - kind: { - serializedName: "kind", - required: true, + }, + fax: { + serializedName: "fax", + type: { + name: "String" + } + }, + email: { + serializedName: "email", type: { name: "String" } @@ -1420,19 +1417,27 @@ export const EntityTimelineItem: coreClient.CompositeMapper = { } }; -export const GetQueriesResponse: coreClient.CompositeMapper = { +export const EntityList: coreClient.CompositeMapper = { type: { name: "Composite", - className: "GetQueriesResponse", + className: "EntityList", modelProperties: { + nextLink: { + serializedName: "nextLink", + readOnly: true, + type: { + name: "String" + } + }, value: { serializedName: "value", + required: true, type: { name: "Sequence", element: { type: { name: "Composite", - className: "EntityQueryItem" + className: "Entity" } } } @@ -1441,106 +1446,81 @@ export const GetQueriesResponse: coreClient.CompositeMapper = { } }; -export const EntityQueryItem: coreClient.CompositeMapper = { +export const EntityExpandParameters: coreClient.CompositeMapper = { type: { name: "Composite", - className: "EntityQueryItem", - uberParent: "EntityQueryItem", - polymorphicDiscriminator: { - serializedName: "kind", - clientName: "kind" - }, + className: "EntityExpandParameters", modelProperties: { - id: { - serializedName: "id", - readOnly: true, - type: { - name: "String" - } - }, - name: { - serializedName: "name", + endTime: { + serializedName: "endTime", type: { - name: "String" + name: "DateTime" } }, - type: { - serializedName: "type", + expansionId: { + serializedName: "expansionId", type: { - name: "String" + name: "Uuid" } }, - kind: { - serializedName: "kind", - required: true, + startTime: { + serializedName: "startTime", type: { - name: "String" + name: "DateTime" } } } } }; -export const EntityGetInsightsParameters: coreClient.CompositeMapper = { +export const EntityExpandResponse: coreClient.CompositeMapper = { type: { name: "Composite", - className: "EntityGetInsightsParameters", + className: "EntityExpandResponse", modelProperties: { - startTime: { - serializedName: "startTime", - required: true, + metaData: { + serializedName: "metaData", type: { - name: "DateTime" + name: "Composite", + className: "ExpansionResultsMetadata" } }, - endTime: { - serializedName: "endTime", - required: true, + value: { + serializedName: "value", type: { - name: "DateTime" - } - }, - addDefaultExtendedTimeRange: { - serializedName: "addDefaultExtendedTimeRange", - type: { - name: "Boolean" - } - }, - insightQueryIds: { - serializedName: "insightQueryIds", - type: { - name: "Sequence", - element: { - type: { - name: "Uuid" - } - } + name: "Composite", + className: "EntityExpandResponseValue" } } } } }; -export const EntityGetInsightsResponse: coreClient.CompositeMapper = { +export const EntityExpandResponseValue: coreClient.CompositeMapper = { type: { name: "Composite", - className: "EntityGetInsightsResponse", + className: "EntityExpandResponseValue", modelProperties: { - metaData: { - serializedName: "metaData", + entities: { + serializedName: "entities", type: { - name: "Composite", - className: "GetInsightsResultsMetadata" + name: "Sequence", + element: { + type: { + name: "Composite", + className: "Entity" + } + } } }, - value: { - serializedName: "value", + edges: { + serializedName: "edges", type: { name: "Sequence", element: { type: { name: "Composite", - className: "EntityInsightItem" + className: "EntityEdges" } } } @@ -1549,96 +1529,88 @@ export const EntityGetInsightsResponse: coreClient.CompositeMapper = { } }; -export const GetInsightsResultsMetadata: coreClient.CompositeMapper = { +export const EntityEdges: coreClient.CompositeMapper = { type: { name: "Composite", - className: "GetInsightsResultsMetadata", + className: "EntityEdges", modelProperties: { - totalCount: { - serializedName: "totalCount", - required: true, + targetEntityId: { + serializedName: "targetEntityId", type: { - name: "Number" + name: "String" } }, - errors: { - serializedName: "errors", + additionalData: { + serializedName: "additionalData", type: { - name: "Sequence", - element: { - type: { - name: "Composite", - className: "GetInsightsErrorKind" - } - } + name: "Dictionary", + value: { type: { name: "any" } } } } } } }; -export const GetInsightsErrorKind: coreClient.CompositeMapper = { +export const EntityTimelineParameters: coreClient.CompositeMapper = { type: { name: "Composite", - className: "GetInsightsErrorKind", + className: "EntityTimelineParameters", modelProperties: { - kind: { - serializedName: "kind", - required: true, + kinds: { + serializedName: "kinds", type: { - name: "String" + name: "Sequence", + element: { + type: { + name: "String" + } + } } }, - queryId: { - serializedName: "queryId", + startTime: { + serializedName: "startTime", + required: true, type: { - name: "String" + name: "DateTime" } }, - errorMessage: { - serializedName: "errorMessage", + endTime: { + serializedName: "endTime", required: true, type: { - name: "String" + name: "DateTime" + } + }, + numberOfBucket: { + serializedName: "numberOfBucket", + type: { + name: "Number" } } } } }; -export const EntityInsightItem: coreClient.CompositeMapper = { +export const EntityTimelineResponse: coreClient.CompositeMapper = { type: { name: "Composite", - className: "EntityInsightItem", + className: "EntityTimelineResponse", modelProperties: { - queryId: { - serializedName: "queryId", - type: { - name: "String" - } - }, - queryTimeInterval: { - serializedName: "queryTimeInterval", - type: { - name: "Composite", - className: "EntityInsightItemQueryTimeInterval" - } - }, - tableQueryResults: { - serializedName: "tableQueryResults", + metaData: { + serializedName: "metaData", type: { name: "Composite", - className: "InsightsTableResult" + className: "TimelineResultsMetadata" } }, - chartQueryResults: { - serializedName: "chartQueryResults", + value: { + serializedName: "value", type: { name: "Sequence", element: { type: { name: "Composite", - className: "InsightsTableResult" + className: "EntityTimelineItem" } } } @@ -1647,56 +1619,39 @@ export const EntityInsightItem: coreClient.CompositeMapper = { } }; -export const EntityInsightItemQueryTimeInterval: coreClient.CompositeMapper = { +export const TimelineResultsMetadata: coreClient.CompositeMapper = { type: { name: "Composite", - className: "EntityInsightItemQueryTimeInterval", + className: "TimelineResultsMetadata", modelProperties: { - startTime: { - serializedName: "startTime", + totalCount: { + serializedName: "totalCount", + required: true, type: { - name: "DateTime" + name: "Number" } }, - endTime: { - serializedName: "endTime", - type: { - name: "DateTime" - } - } - } - } -}; - -export const InsightsTableResult: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "InsightsTableResult", - modelProperties: { - columns: { - serializedName: "columns", + aggregations: { + serializedName: "aggregations", + required: true, type: { name: "Sequence", element: { type: { name: "Composite", - className: "InsightsTableResultColumnsItem" + className: "TimelineAggregation" } } } }, - rows: { - serializedName: "rows", + errors: { + serializedName: "errors", type: { name: "Sequence", element: { type: { - name: "Sequence", - element: { - type: { - name: "String" - } - } + name: "Composite", + className: "TimelineError" } } } @@ -1705,19 +1660,21 @@ export const InsightsTableResult: coreClient.CompositeMapper = { } }; -export const InsightsTableResultColumnsItem: coreClient.CompositeMapper = { +export const TimelineAggregation: coreClient.CompositeMapper = { type: { name: "Composite", - className: "InsightsTableResultColumnsItem", + className: "TimelineAggregation", modelProperties: { - type: { - serializedName: "type", + count: { + serializedName: "count", + required: true, type: { - name: "String" + name: "Number" } }, - name: { - serializedName: "name", + kind: { + serializedName: "kind", + required: true, type: { name: "String" } @@ -1726,85 +1683,69 @@ export const InsightsTableResultColumnsItem: coreClient.CompositeMapper = { } }; -export const EntityQueryList: coreClient.CompositeMapper = { +export const TimelineError: coreClient.CompositeMapper = { type: { name: "Composite", - className: "EntityQueryList", + className: "TimelineError", modelProperties: { - nextLink: { - serializedName: "nextLink", - readOnly: true, + kind: { + serializedName: "kind", + required: true, type: { name: "String" } }, - value: { - serializedName: "value", + queryId: { + serializedName: "queryId", + type: { + name: "String" + } + }, + errorMessage: { + serializedName: "errorMessage", required: true, type: { - name: "Sequence", - element: { - type: { - name: "Composite", - className: "EntityQuery" - } - } + name: "String" } } } } }; -export const EntityQueryTemplateList: coreClient.CompositeMapper = { +export const EntityTimelineItem: coreClient.CompositeMapper = { type: { name: "Composite", - className: "EntityQueryTemplateList", + className: "EntityTimelineItem", + uberParent: "EntityTimelineItem", + polymorphicDiscriminator: { + serializedName: "kind", + clientName: "kind" + }, modelProperties: { - nextLink: { - serializedName: "nextLink", - readOnly: true, - type: { - name: "String" - } - }, - value: { - serializedName: "value", + kind: { + serializedName: "kind", required: true, type: { - name: "Sequence", - element: { - type: { - name: "Composite", - className: "EntityQueryTemplate" - } - } + name: "String" } } } } }; -export const FileImportList: coreClient.CompositeMapper = { +export const GetQueriesResponse: coreClient.CompositeMapper = { type: { name: "Composite", - className: "FileImportList", + className: "GetQueriesResponse", modelProperties: { - nextLink: { - serializedName: "nextLink", - readOnly: true, - type: { - name: "String" - } - }, value: { serializedName: "value", - required: true, type: { name: "Sequence", element: { type: { name: "Composite", - className: "FileImport" + className: "EntityQueryItem" } } } @@ -1813,39 +1754,38 @@ export const FileImportList: coreClient.CompositeMapper = { } }; -export const FileMetadata: coreClient.CompositeMapper = { +export const EntityQueryItem: coreClient.CompositeMapper = { type: { name: "Composite", - className: "FileMetadata", + className: "EntityQueryItem", + uberParent: "EntityQueryItem", + polymorphicDiscriminator: { + serializedName: "kind", + clientName: "kind" + }, modelProperties: { - fileFormat: { - serializedName: "fileFormat", + id: { + serializedName: "id", + readOnly: true, type: { name: "String" } }, - fileName: { - serializedName: "fileName", + name: { + serializedName: "name", type: { name: "String" } }, - fileSize: { - serializedName: "fileSize", - type: { - name: "Number" - } - }, - fileContentUri: { - serializedName: "fileContentUri", - readOnly: true, + type: { + serializedName: "type", type: { name: "String" } }, - deleteStatus: { - serializedName: "deleteStatus", - readOnly: true, + kind: { + serializedName: "kind", + required: true, type: { name: "String" } @@ -1854,25 +1794,38 @@ export const FileMetadata: coreClient.CompositeMapper = { } }; -export const ValidationError: coreClient.CompositeMapper = { +export const EntityGetInsightsParameters: coreClient.CompositeMapper = { type: { name: "Composite", - className: "ValidationError", + className: "EntityGetInsightsParameters", modelProperties: { - recordIndex: { - serializedName: "recordIndex", + startTime: { + serializedName: "startTime", + required: true, type: { - name: "Number" + name: "DateTime" } }, - errorMessages: { - serializedName: "errorMessages", - readOnly: true, + endTime: { + serializedName: "endTime", + required: true, + type: { + name: "DateTime" + } + }, + addDefaultExtendedTimeRange: { + serializedName: "addDefaultExtendedTimeRange", + type: { + name: "Boolean" + } + }, + insightQueryIds: { + serializedName: "insightQueryIds", type: { name: "Sequence", element: { type: { - name: "String" + name: "Uuid" } } } @@ -1881,27 +1834,26 @@ export const ValidationError: coreClient.CompositeMapper = { } }; -export const IncidentList: coreClient.CompositeMapper = { +export const EntityGetInsightsResponse: coreClient.CompositeMapper = { type: { name: "Composite", - className: "IncidentList", + className: "EntityGetInsightsResponse", modelProperties: { - nextLink: { - serializedName: "nextLink", - readOnly: true, + metaData: { + serializedName: "metaData", type: { - name: "String" + name: "Composite", + className: "GetInsightsResultsMetadata" } }, value: { serializedName: "value", - required: true, type: { name: "Sequence", element: { type: { name: "Composite", - className: "Incident" + className: "EntityInsightItem" } } } @@ -1910,71 +1862,26 @@ export const IncidentList: coreClient.CompositeMapper = { } }; -export const IncidentAdditionalData: coreClient.CompositeMapper = { +export const GetInsightsResultsMetadata: coreClient.CompositeMapper = { type: { name: "Composite", - className: "IncidentAdditionalData", + className: "GetInsightsResultsMetadata", modelProperties: { - alertsCount: { - serializedName: "alertsCount", - readOnly: true, - type: { - name: "Number" - } - }, - bookmarksCount: { - serializedName: "bookmarksCount", - readOnly: true, - type: { - name: "Number" - } - }, - commentsCount: { - serializedName: "commentsCount", - readOnly: true, + totalCount: { + serializedName: "totalCount", + required: true, type: { name: "Number" } }, - alertProductNames: { - serializedName: "alertProductNames", - readOnly: true, - type: { - name: "Sequence", - element: { - type: { - name: "String" - } - } - } - }, - providerIncidentUrl: { - serializedName: "providerIncidentUrl", - readOnly: true, - type: { - name: "String" - } - }, - tactics: { - serializedName: "tactics", - readOnly: true, - type: { - name: "Sequence", - element: { - type: { - name: "String" - } - } - } - }, - techniques: { - serializedName: "techniques", - readOnly: true, + errors: { + serializedName: "errors", type: { name: "Sequence", element: { type: { - name: "String" + name: "Composite", + className: "GetInsightsErrorKind" } } } @@ -1983,21 +1890,27 @@ export const IncidentAdditionalData: coreClient.CompositeMapper = { } }; -export const IncidentLabel: coreClient.CompositeMapper = { +export const GetInsightsErrorKind: coreClient.CompositeMapper = { type: { name: "Composite", - className: "IncidentLabel", + className: "GetInsightsErrorKind", modelProperties: { - labelName: { - serializedName: "labelName", + kind: { + serializedName: "kind", required: true, type: { name: "String" } }, - labelType: { - serializedName: "labelType", - readOnly: true, + queryId: { + serializedName: "queryId", + type: { + name: "String" + } + }, + errorMessage: { + serializedName: "errorMessage", + required: true, type: { name: "String" } @@ -2006,125 +1919,147 @@ export const IncidentLabel: coreClient.CompositeMapper = { } }; -export const IncidentOwnerInfo: coreClient.CompositeMapper = { +export const EntityInsightItem: coreClient.CompositeMapper = { type: { name: "Composite", - className: "IncidentOwnerInfo", + className: "EntityInsightItem", modelProperties: { - email: { - serializedName: "email", - type: { - name: "String" - } - }, - assignedTo: { - serializedName: "assignedTo", + queryId: { + serializedName: "queryId", type: { name: "String" } }, - objectId: { - serializedName: "objectId", + queryTimeInterval: { + serializedName: "queryTimeInterval", type: { - name: "Uuid" + name: "Composite", + className: "EntityInsightItemQueryTimeInterval" } }, - userPrincipalName: { - serializedName: "userPrincipalName", + tableQueryResults: { + serializedName: "tableQueryResults", type: { - name: "String" + name: "Composite", + className: "InsightsTableResult" } }, - ownerType: { - serializedName: "ownerType", + chartQueryResults: { + serializedName: "chartQueryResults", type: { - name: "String" + name: "Sequence", + element: { + type: { + name: "Composite", + className: "InsightsTableResult" + } + } } } } } }; -export const TeamInformation: coreClient.CompositeMapper = { +export const EntityInsightItemQueryTimeInterval: coreClient.CompositeMapper = { type: { name: "Composite", - className: "TeamInformation", + className: "EntityInsightItemQueryTimeInterval", modelProperties: { - teamId: { - serializedName: "teamId", - readOnly: true, - type: { - name: "String" - } - }, - primaryChannelUrl: { - serializedName: "primaryChannelUrl", - readOnly: true, - type: { - name: "String" - } - }, - teamCreationTimeUtc: { - serializedName: "teamCreationTimeUtc", - readOnly: true, + startTime: { + serializedName: "startTime", type: { name: "DateTime" } }, - name: { - serializedName: "name", - readOnly: true, - type: { - name: "String" - } - }, - description: { - serializedName: "description", - readOnly: true, + endTime: { + serializedName: "endTime", type: { - name: "String" + name: "DateTime" } } } } }; -export const TeamProperties: coreClient.CompositeMapper = { +export const InsightsTableResult: coreClient.CompositeMapper = { type: { name: "Composite", - className: "TeamProperties", + className: "InsightsTableResult", modelProperties: { - teamName: { - serializedName: "teamName", - required: true, - type: { - name: "String" - } - }, - teamDescription: { - serializedName: "teamDescription", + columns: { + serializedName: "columns", type: { - name: "String" + name: "Sequence", + element: { + type: { + name: "Composite", + className: "InsightsTableResultColumnsItem" + } + } } }, - memberIds: { - serializedName: "memberIds", + rows: { + serializedName: "rows", type: { name: "Sequence", element: { type: { - name: "Uuid" + name: "Sequence", + element: { + type: { + name: "String" + } + } } } } + } + } + } +}; + +export const InsightsTableResultColumnsItem: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "InsightsTableResultColumnsItem", + modelProperties: { + type: { + serializedName: "type", + type: { + name: "String" + } }, - groupIds: { - serializedName: "groupIds", + name: { + serializedName: "name", + type: { + name: "String" + } + } + } + } +}; + +export const EntityQueryList: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "EntityQueryList", + modelProperties: { + nextLink: { + serializedName: "nextLink", + readOnly: true, + type: { + name: "String" + } + }, + value: { + serializedName: "value", + required: true, type: { name: "Sequence", element: { type: { - name: "Uuid" + name: "Composite", + className: "EntityQuery" } } } @@ -2133,11 +2068,18 @@ export const TeamProperties: coreClient.CompositeMapper = { } }; -export const IncidentAlertList: coreClient.CompositeMapper = { +export const EntityQueryTemplateList: coreClient.CompositeMapper = { type: { name: "Composite", - className: "IncidentAlertList", + className: "EntityQueryTemplateList", modelProperties: { + nextLink: { + serializedName: "nextLink", + readOnly: true, + type: { + name: "String" + } + }, value: { serializedName: "value", required: true, @@ -2146,7 +2088,7 @@ export const IncidentAlertList: coreClient.CompositeMapper = { element: { type: { name: "Composite", - className: "SecurityAlert" + className: "EntityQueryTemplate" } } } @@ -2155,46 +2097,67 @@ export const IncidentAlertList: coreClient.CompositeMapper = { } }; -export const SecurityAlertPropertiesConfidenceReasonsItem: coreClient.CompositeMapper = { +export const FileImportList: coreClient.CompositeMapper = { type: { name: "Composite", - className: "SecurityAlertPropertiesConfidenceReasonsItem", + className: "FileImportList", modelProperties: { - reason: { - serializedName: "reason", + nextLink: { + serializedName: "nextLink", readOnly: true, type: { name: "String" } }, - reasonType: { - serializedName: "reasonType", - readOnly: true, + value: { + serializedName: "value", + required: true, type: { - name: "String" + name: "Sequence", + element: { + type: { + name: "Composite", + className: "FileImport" + } + } } } } } }; -export const EntityCommonProperties: coreClient.CompositeMapper = { +export const FileMetadata: coreClient.CompositeMapper = { type: { name: "Composite", - className: "EntityCommonProperties", + className: "FileMetadata", modelProperties: { - additionalData: { - serializedName: "additionalData", + fileFormat: { + serializedName: "fileFormat", + type: { + name: "String" + } + }, + fileName: { + serializedName: "fileName", + type: { + name: "String" + } + }, + fileSize: { + serializedName: "fileSize", + type: { + name: "Number" + } + }, + fileContentUri: { + serializedName: "fileContentUri", readOnly: true, type: { - name: "Dictionary", - value: { - type: { name: "Dictionary", value: { type: { name: "any" } } } - } + name: "String" } }, - friendlyName: { - serializedName: "friendlyName", + deleteStatus: { + serializedName: "deleteStatus", readOnly: true, type: { name: "String" @@ -2204,20 +2167,25 @@ export const EntityCommonProperties: coreClient.CompositeMapper = { } }; -export const IncidentBookmarkList: coreClient.CompositeMapper = { +export const ValidationError: coreClient.CompositeMapper = { type: { name: "Composite", - className: "IncidentBookmarkList", + className: "ValidationError", modelProperties: { - value: { - serializedName: "value", - required: true, + recordIndex: { + serializedName: "recordIndex", + type: { + name: "Number" + } + }, + errorMessages: { + serializedName: "errorMessages", + readOnly: true, type: { name: "Sequence", element: { type: { - name: "Composite", - className: "HuntingBookmark" + name: "String" } } } @@ -2226,10 +2194,10 @@ export const IncidentBookmarkList: coreClient.CompositeMapper = { } }; -export const IncidentCommentList: coreClient.CompositeMapper = { +export const HuntList: coreClient.CompositeMapper = { type: { name: "Composite", - className: "IncidentCommentList", + className: "HuntList", modelProperties: { nextLink: { serializedName: "nextLink", @@ -2246,7 +2214,7 @@ export const IncidentCommentList: coreClient.CompositeMapper = { element: { type: { name: "Composite", - className: "IncidentComment" + className: "Hunt" } } } @@ -2255,31 +2223,67 @@ export const IncidentCommentList: coreClient.CompositeMapper = { } }; -export const IncidentEntitiesResponse: coreClient.CompositeMapper = { +export const HuntOwner: coreClient.CompositeMapper = { type: { name: "Composite", - className: "IncidentEntitiesResponse", + className: "HuntOwner", modelProperties: { - entities: { - serializedName: "entities", + email: { + serializedName: "email", type: { - name: "Sequence", - element: { - type: { - name: "Composite", - className: "Entity" - } - } + name: "String" } }, - metaData: { - serializedName: "metaData", + assignedTo: { + serializedName: "assignedTo", + type: { + name: "String" + } + }, + objectId: { + serializedName: "objectId", + nullable: true, + type: { + name: "Uuid" + } + }, + userPrincipalName: { + serializedName: "userPrincipalName", + type: { + name: "String" + } + }, + ownerType: { + serializedName: "ownerType", + type: { + name: "String" + } + } + } + } +}; + +export const HuntRelationList: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "HuntRelationList", + modelProperties: { + nextLink: { + serializedName: "nextLink", + readOnly: true, + type: { + name: "String" + } + }, + value: { + serializedName: "value", + required: true, type: { name: "Sequence", element: { type: { name: "Composite", - className: "IncidentEntitiesResultsMetadata" + className: "HuntRelation" } } } @@ -2288,33 +2292,39 @@ export const IncidentEntitiesResponse: coreClient.CompositeMapper = { } }; -export const IncidentEntitiesResultsMetadata: coreClient.CompositeMapper = { +export const HuntCommentList: coreClient.CompositeMapper = { type: { name: "Composite", - className: "IncidentEntitiesResultsMetadata", + className: "HuntCommentList", modelProperties: { - count: { - serializedName: "count", - required: true, + nextLink: { + serializedName: "nextLink", + readOnly: true, type: { - name: "Number" + name: "String" } }, - entityKind: { - serializedName: "entityKind", + value: { + serializedName: "value", required: true, type: { - name: "String" + name: "Sequence", + element: { + type: { + name: "Composite", + className: "HuntComment" + } + } } } } } }; -export const MetadataList: coreClient.CompositeMapper = { +export const IncidentList: coreClient.CompositeMapper = { type: { name: "Composite", - className: "MetadataList", + className: "IncidentList", modelProperties: { value: { serializedName: "value", @@ -2324,7 +2334,7 @@ export const MetadataList: coreClient.CompositeMapper = { element: { type: { name: "Composite", - className: "MetadataModel" + className: "Incident" } } } @@ -2340,53 +2350,37 @@ export const MetadataList: coreClient.CompositeMapper = { } }; -export const MetadataSource: coreClient.CompositeMapper = { +export const IncidentOwnerInfo: coreClient.CompositeMapper = { type: { name: "Composite", - className: "MetadataSource", + className: "IncidentOwnerInfo", modelProperties: { - kind: { - serializedName: "kind", - required: true, + email: { + serializedName: "email", type: { name: "String" } }, - name: { - serializedName: "name", + assignedTo: { + serializedName: "assignedTo", type: { name: "String" } }, - sourceId: { - serializedName: "sourceId", - type: { - name: "String" - } - } - } - } -}; - -export const MetadataAuthor: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "MetadataAuthor", - modelProperties: { - name: { - serializedName: "name", + objectId: { + serializedName: "objectId", type: { - name: "String" + name: "Uuid" } }, - email: { - serializedName: "email", + userPrincipalName: { + serializedName: "userPrincipalName", type: { name: "String" } }, - link: { - serializedName: "link", + ownerType: { + serializedName: "ownerType", type: { name: "String" } @@ -2395,32 +2389,21 @@ export const MetadataAuthor: coreClient.CompositeMapper = { } }; -export const MetadataSupport: coreClient.CompositeMapper = { +export const IncidentLabel: coreClient.CompositeMapper = { type: { name: "Composite", - className: "MetadataSupport", + className: "IncidentLabel", modelProperties: { - tier: { - serializedName: "tier", + labelName: { + serializedName: "labelName", required: true, type: { name: "String" } }, - name: { - serializedName: "name", - type: { - name: "String" - } - }, - email: { - serializedName: "email", - type: { - name: "String" - } - }, - link: { - serializedName: "link", + labelType: { + serializedName: "labelType", + readOnly: true, type: { name: "String" } @@ -2429,64 +2412,47 @@ export const MetadataSupport: coreClient.CompositeMapper = { } }; -export const MetadataDependencies: coreClient.CompositeMapper = { +export const IncidentAdditionalData: coreClient.CompositeMapper = { type: { name: "Composite", - className: "MetadataDependencies", + className: "IncidentAdditionalData", modelProperties: { - contentId: { - serializedName: "contentId", - type: { - name: "String" - } - }, - kind: { - serializedName: "kind", - type: { - name: "String" - } - }, - version: { - serializedName: "version", + alertsCount: { + serializedName: "alertsCount", + readOnly: true, type: { - name: "String" + name: "Number" } }, - name: { - serializedName: "name", + bookmarksCount: { + serializedName: "bookmarksCount", + readOnly: true, type: { - name: "String" + name: "Number" } }, - operator: { - serializedName: "operator", + commentsCount: { + serializedName: "commentsCount", + readOnly: true, type: { - name: "String" + name: "Number" } }, - criteria: { - serializedName: "criteria", + alertProductNames: { + serializedName: "alertProductNames", + readOnly: true, type: { name: "Sequence", element: { type: { - name: "Composite", - className: "MetadataDependencies" + name: "String" } } } - } - } - } -}; - -export const MetadataCategories: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "MetadataCategories", - modelProperties: { - domains: { - serializedName: "domains", + }, + tactics: { + serializedName: "tactics", + readOnly: true, type: { name: "Sequence", element: { @@ -2496,8 +2462,9 @@ export const MetadataCategories: coreClient.CompositeMapper = { } } }, - verticals: { - serializedName: "verticals", + techniques: { + serializedName: "techniques", + readOnly: true, type: { name: "Sequence", element: { @@ -2506,44 +2473,66 @@ export const MetadataCategories: coreClient.CompositeMapper = { } } } + }, + providerIncidentUrl: { + serializedName: "providerIncidentUrl", + readOnly: true, + type: { + name: "String" + } } } } }; -export const OfficeConsentList: coreClient.CompositeMapper = { +export const TeamInformation: coreClient.CompositeMapper = { type: { name: "Composite", - className: "OfficeConsentList", + className: "TeamInformation", modelProperties: { - nextLink: { - serializedName: "nextLink", + teamId: { + serializedName: "teamId", readOnly: true, type: { name: "String" } }, - value: { - serializedName: "value", - required: true, + primaryChannelUrl: { + serializedName: "primaryChannelUrl", + readOnly: true, type: { - name: "Sequence", - element: { - type: { - name: "Composite", - className: "OfficeConsent" - } - } + name: "String" + } + }, + teamCreationTimeUtc: { + serializedName: "teamCreationTimeUtc", + readOnly: true, + type: { + name: "DateTime" + } + }, + name: { + serializedName: "name", + readOnly: true, + type: { + name: "String" + } + }, + description: { + serializedName: "description", + readOnly: true, + type: { + name: "String" } } } } }; -export const SentinelOnboardingStatesList: coreClient.CompositeMapper = { +export const IncidentAlertList: coreClient.CompositeMapper = { type: { name: "Composite", - className: "SentinelOnboardingStatesList", + className: "IncidentAlertList", modelProperties: { value: { serializedName: "value", @@ -2553,7 +2542,7 @@ export const SentinelOnboardingStatesList: coreClient.CompositeMapper = { element: { type: { name: "Composite", - className: "SentinelOnboardingState" + className: "SecurityAlert" } } } @@ -2562,39 +2551,57 @@ export const SentinelOnboardingStatesList: coreClient.CompositeMapper = { } }; -export const SecurityMLAnalyticsSettingsList: coreClient.CompositeMapper = { +export const SecurityAlertPropertiesConfidenceReasonsItem: coreClient.CompositeMapper = { type: { name: "Composite", - className: "SecurityMLAnalyticsSettingsList", + className: "SecurityAlertPropertiesConfidenceReasonsItem", modelProperties: { - nextLink: { - serializedName: "nextLink", + reason: { + serializedName: "reason", readOnly: true, type: { name: "String" } }, - value: { - serializedName: "value", - required: true, + reasonType: { + serializedName: "reasonType", + readOnly: true, type: { - name: "Sequence", - element: { - type: { - name: "Composite", - className: "SecurityMLAnalyticsSetting" - } - } + name: "String" } } } } }; -export const SettingList: coreClient.CompositeMapper = { +export const EntityCommonProperties: coreClient.CompositeMapper = { type: { name: "Composite", - className: "SettingList", + className: "EntityCommonProperties", + modelProperties: { + additionalData: { + serializedName: "additionalData", + readOnly: true, + type: { + name: "Dictionary", + value: { type: { name: "any" } } + } + }, + friendlyName: { + serializedName: "friendlyName", + readOnly: true, + type: { + name: "String" + } + } + } + } +}; + +export const IncidentBookmarkList: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "IncidentBookmarkList", modelProperties: { value: { serializedName: "value", @@ -2604,7 +2611,7 @@ export const SettingList: coreClient.CompositeMapper = { element: { type: { name: "Composite", - className: "Settings" + className: "HuntingBookmark" } } } @@ -2613,18 +2620,11 @@ export const SettingList: coreClient.CompositeMapper = { } }; -export const RepoList: coreClient.CompositeMapper = { +export const IncidentCommentList: coreClient.CompositeMapper = { type: { name: "Composite", - className: "RepoList", + className: "IncidentCommentList", modelProperties: { - nextLink: { - serializedName: "nextLink", - readOnly: true, - type: { - name: "String" - } - }, value: { serializedName: "value", required: true, @@ -2633,39 +2633,47 @@ export const RepoList: coreClient.CompositeMapper = { element: { type: { name: "Composite", - className: "Repo" + className: "IncidentComment" } } } + }, + nextLink: { + serializedName: "nextLink", + readOnly: true, + type: { + name: "String" + } } } } }; -export const Repo: coreClient.CompositeMapper = { +export const IncidentEntitiesResponse: coreClient.CompositeMapper = { type: { name: "Composite", - className: "Repo", + className: "IncidentEntitiesResponse", modelProperties: { - url: { - serializedName: "url", + entities: { + serializedName: "entities", type: { - name: "String" - } - }, - fullName: { - serializedName: "fullName", - type: { - name: "String" + name: "Sequence", + element: { + type: { + name: "Composite", + className: "Entity" + } + } } }, - branches: { - serializedName: "branches", + metaData: { + serializedName: "metaData", type: { name: "Sequence", element: { type: { - name: "String" + name: "Composite", + className: "IncidentEntitiesResultsMetadata" } } } @@ -2674,93 +2682,77 @@ export const Repo: coreClient.CompositeMapper = { } }; -export const SourceControlList: coreClient.CompositeMapper = { +export const IncidentEntitiesResultsMetadata: coreClient.CompositeMapper = { type: { name: "Composite", - className: "SourceControlList", + className: "IncidentEntitiesResultsMetadata", modelProperties: { - nextLink: { - serializedName: "nextLink", - readOnly: true, + entityKind: { + serializedName: "entityKind", + required: true, type: { name: "String" } }, - value: { - serializedName: "value", + count: { + serializedName: "count", required: true, type: { - name: "Sequence", - element: { - type: { - name: "Composite", - className: "SourceControl" - } - } + name: "Number" } } } } }; -export const Repository: coreClient.CompositeMapper = { +export const IncidentTaskList: coreClient.CompositeMapper = { type: { name: "Composite", - className: "Repository", + className: "IncidentTaskList", modelProperties: { - url: { - serializedName: "url", - type: { - name: "String" - } - }, - branch: { - serializedName: "branch", - type: { - name: "String" - } - }, - displayUrl: { - serializedName: "displayUrl", - type: { - name: "String" - } - }, - deploymentLogsUrl: { - serializedName: "deploymentLogsUrl", - type: { - name: "String" - } - }, - pathMapping: { - serializedName: "pathMapping", + value: { + serializedName: "value", type: { name: "Sequence", element: { type: { name: "Composite", - className: "ContentPathMap" + className: "IncidentTask" } } } + }, + nextLink: { + serializedName: "nextLink", + type: { + name: "String" + } } } } }; -export const ContentPathMap: coreClient.CompositeMapper = { +export const MetadataList: coreClient.CompositeMapper = { type: { name: "Composite", - className: "ContentPathMap", + className: "MetadataList", modelProperties: { - contentType: { - serializedName: "contentType", + value: { + serializedName: "value", + required: true, type: { - name: "String" + name: "Sequence", + element: { + type: { + name: "Composite", + className: "MetadataModel" + } + } } }, - path: { - serializedName: "path", + nextLink: { + serializedName: "nextLink", + readOnly: true, type: { name: "String" } @@ -2769,233 +2761,299 @@ export const ContentPathMap: coreClient.CompositeMapper = { } }; -export const RepositoryResourceInfo: coreClient.CompositeMapper = { +export const MetadataDependenciesAutoGenerated: coreClient.CompositeMapper = { type: { name: "Composite", - className: "RepositoryResourceInfo", + className: "MetadataDependenciesAutoGenerated", modelProperties: { - webhook: { - serializedName: "webhook", + contentId: { + serializedName: "contentId", type: { - name: "Composite", - className: "Webhook" + name: "String" } }, - gitHubResourceInfo: { - serializedName: "gitHubResourceInfo", + kind: { + serializedName: "kind", type: { - name: "Composite", - className: "GitHubResourceInfo" + name: "String" } }, - azureDevOpsResourceInfo: { - serializedName: "azureDevOpsResourceInfo", - type: { - name: "Composite", - className: "AzureDevOpsResourceInfo" - } - } - } - } -}; - -export const Webhook: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "Webhook", - modelProperties: { - webhookId: { - serializedName: "webhookId", + version: { + serializedName: "version", type: { name: "String" } }, - webhookUrl: { - serializedName: "webhookUrl", + name: { + serializedName: "name", type: { name: "String" } }, - webhookSecretUpdateTime: { - serializedName: "webhookSecretUpdateTime", + operator: { + serializedName: "operator", type: { name: "String" } }, - rotateWebhookSecret: { - serializedName: "rotateWebhookSecret", + criteria: { + serializedName: "criteria", type: { - name: "Boolean" + name: "Sequence", + element: { + type: { + name: "Composite", + className: "MetadataDependenciesAutoGenerated" + } + } } } } } }; -export const GitHubResourceInfo: coreClient.CompositeMapper = { +export const OfficeConsentList: coreClient.CompositeMapper = { type: { name: "Composite", - className: "GitHubResourceInfo", + className: "OfficeConsentList", modelProperties: { - appInstallationId: { - serializedName: "appInstallationId", + nextLink: { + serializedName: "nextLink", + readOnly: true, type: { name: "String" } + }, + value: { + serializedName: "value", + required: true, + type: { + name: "Sequence", + element: { + type: { + name: "Composite", + className: "OfficeConsent" + } + } + } } } } }; -export const AzureDevOpsResourceInfo: coreClient.CompositeMapper = { +export const SentinelOnboardingStatesList: coreClient.CompositeMapper = { type: { name: "Composite", - className: "AzureDevOpsResourceInfo", + className: "SentinelOnboardingStatesList", modelProperties: { - pipelineId: { - serializedName: "pipelineId", - type: { - name: "String" - } - }, - serviceConnectionId: { - serializedName: "serviceConnectionId", + value: { + serializedName: "value", + required: true, type: { - name: "String" + name: "Sequence", + element: { + type: { + name: "Composite", + className: "SentinelOnboardingState" + } + } } } } } }; -export const DeploymentInfo: coreClient.CompositeMapper = { +export const RecommendationList: coreClient.CompositeMapper = { type: { name: "Composite", - className: "DeploymentInfo", + className: "RecommendationList", modelProperties: { - deploymentFetchStatus: { - serializedName: "deploymentFetchStatus", - type: { - name: "String" - } - }, - deployment: { - serializedName: "deployment", - type: { - name: "Composite", - className: "Deployment" - } - }, - message: { - serializedName: "message", + value: { + serializedName: "value", type: { - name: "String" + name: "Sequence", + element: { + type: { + name: "Composite", + className: "Recommendation" + } + } } } } } }; -export const Deployment: coreClient.CompositeMapper = { +export const Recommendation: coreClient.CompositeMapper = { type: { name: "Composite", - className: "Deployment", + className: "Recommendation", modelProperties: { - deploymentId: { - serializedName: "deploymentId", + id: { + serializedName: "id", + required: true, type: { - name: "String" + name: "Uuid" } }, - deploymentState: { - serializedName: "deploymentState", + instructions: { + serializedName: "instructions", type: { - name: "String" + name: "Composite", + className: "Instructions" } }, - deploymentResult: { - serializedName: "deploymentResult", + content: { + serializedName: "content", type: { - name: "String" + name: "Composite", + className: "Content" } }, - deploymentTime: { - serializedName: "deploymentTime", + resourceId: { + serializedName: "resourceId", + nullable: true, type: { - name: "DateTime" + name: "String" } }, - deploymentLogsUrl: { - serializedName: "deploymentLogsUrl", + additionalProperties: { + serializedName: "additionalProperties", + nullable: true, + type: { + name: "Dictionary", + value: { type: { name: "String" } } + } + }, + title: { + serializedName: "title", + required: true, type: { name: "String" } - } - } - } -}; - -export const ThreatIntelligenceKillChainPhase: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "ThreatIntelligenceKillChainPhase", - modelProperties: { - killChainName: { - serializedName: "killChainName", + }, + description: { + serializedName: "description", + required: true, type: { name: "String" } }, - phaseName: { - serializedName: "phaseName", + recommendationTypeTitle: { + serializedName: "recommendationTypeTitle", + required: true, type: { name: "String" } - } - } - } -}; - -export const ThreatIntelligenceParsedPattern: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "ThreatIntelligenceParsedPattern", - modelProperties: { - patternTypeKey: { - serializedName: "patternTypeKey", + }, + recommendationTypeId: { + serializedName: "recommendationTypeId", + required: true, type: { name: "String" } }, - patternTypeValues: { - serializedName: "patternTypeValues", + category: { + serializedName: "category", + required: true, + type: { + name: "String" + } + }, + context: { + serializedName: "context", + required: true, + type: { + name: "String" + } + }, + workspaceId: { + serializedName: "workspaceId", + required: true, + type: { + name: "Uuid" + } + }, + actions: { + serializedName: "actions", + required: true, type: { name: "Sequence", element: { type: { name: "Composite", - className: "ThreatIntelligenceParsedPatternTypeValue" + className: "RecommendedAction" } } } + }, + state: { + serializedName: "state", + required: true, + type: { + name: "String" + } + }, + priority: { + serializedName: "priority", + required: true, + type: { + name: "String" + } + }, + lastEvaluatedTimeUtc: { + serializedName: "lastEvaluatedTimeUtc", + required: true, + type: { + name: "DateTime" + } + }, + hideUntilTimeUtc: { + serializedName: "hideUntilTimeUtc", + nullable: true, + type: { + name: "DateTime" + } + }, + displayUntilTimeUtc: { + serializedName: "displayUntilTimeUtc", + nullable: true, + type: { + name: "DateTime" + } + }, + visible: { + serializedName: "visible", + type: { + name: "Boolean" + } } } } }; -export const ThreatIntelligenceParsedPatternTypeValue: coreClient.CompositeMapper = { +export const Instructions: coreClient.CompositeMapper = { type: { name: "Composite", - className: "ThreatIntelligenceParsedPatternTypeValue", + className: "Instructions", modelProperties: { - valueType: { - serializedName: "valueType", + actionsToBePerformed: { + serializedName: "actionsToBePerformed", + required: true, type: { name: "String" } }, - value: { - serializedName: "value", + recommendationImportance: { + serializedName: "recommendationImportance", + required: true, + type: { + name: "String" + } + }, + howToPerformActionDetails: { + serializedName: "howToPerformActionDetails", + nullable: true, type: { name: "String" } @@ -3004,70 +3062,122 @@ export const ThreatIntelligenceParsedPatternTypeValue: coreClient.CompositeMappe } }; -export const ThreatIntelligenceExternalReference: coreClient.CompositeMapper = { +export const Content: coreClient.CompositeMapper = { type: { name: "Composite", - className: "ThreatIntelligenceExternalReference", + className: "Content", modelProperties: { + title: { + serializedName: "title", + required: true, + type: { + name: "String" + } + }, description: { serializedName: "description", + required: true, type: { name: "String" } - }, - externalId: { - serializedName: "externalId", + } + } + } +}; + +export const RecommendedAction: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "RecommendedAction", + modelProperties: { + linkText: { + serializedName: "linkText", + required: true, type: { name: "String" } }, - sourceName: { - serializedName: "sourceName", + linkUrl: { + serializedName: "linkUrl", + required: true, type: { name: "String" } }, - url: { - serializedName: "url", + state: { + serializedName: "state", + type: { + name: "String" + } + } + } + } +}; + +export const RecommendationPatch: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "RecommendationPatch", + modelProperties: { + state: { + serializedName: "state", type: { name: "String" } }, - hashes: { - serializedName: "hashes", + hideUntilTimeUtc: { + serializedName: "hideUntilTimeUtc", type: { - name: "Dictionary", - value: { type: { name: "String" } } + name: "DateTime" } } } } }; -export const ThreatIntelligenceGranularMarkingModel: coreClient.CompositeMapper = { +export const SecurityMLAnalyticsSettingsList: coreClient.CompositeMapper = { type: { name: "Composite", - className: "ThreatIntelligenceGranularMarkingModel", + className: "SecurityMLAnalyticsSettingsList", modelProperties: { - language: { - serializedName: "language", + nextLink: { + serializedName: "nextLink", + readOnly: true, type: { name: "String" } }, - markingRef: { - serializedName: "markingRef", + value: { + serializedName: "value", + required: true, type: { - name: "Number" + name: "Sequence", + element: { + type: { + name: "Composite", + className: "SecurityMLAnalyticsSetting" + } + } } - }, - selectors: { - serializedName: "selectors", + } + } + } +}; + +export const SettingList: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "SettingList", + modelProperties: { + value: { + serializedName: "value", + required: true, type: { name: "Sequence", element: { type: { - name: "String" + name: "Composite", + className: "Settings" } } } @@ -3076,10 +3186,10 @@ export const ThreatIntelligenceGranularMarkingModel: coreClient.CompositeMapper } }; -export const ThreatIntelligenceInformationList: coreClient.CompositeMapper = { +export const RepoList: coreClient.CompositeMapper = { type: { name: "Composite", - className: "ThreatIntelligenceInformationList", + className: "RepoList", modelProperties: { nextLink: { serializedName: "nextLink", @@ -3096,7 +3206,7 @@ export const ThreatIntelligenceInformationList: coreClient.CompositeMapper = { element: { type: { name: "Composite", - className: "ThreatIntelligenceInformation" + className: "Repo" } } } @@ -3105,61 +3215,25 @@ export const ThreatIntelligenceInformationList: coreClient.CompositeMapper = { } }; -export const ThreatIntelligenceFilteringCriteria: coreClient.CompositeMapper = { +export const Repo: coreClient.CompositeMapper = { type: { name: "Composite", - className: "ThreatIntelligenceFilteringCriteria", + className: "Repo", modelProperties: { - pageSize: { - serializedName: "pageSize", - type: { - name: "Number" - } - }, - minConfidence: { - serializedName: "minConfidence", - type: { - name: "Number" - } - }, - maxConfidence: { - serializedName: "maxConfidence", - type: { - name: "Number" - } - }, - minValidUntil: { - serializedName: "minValidUntil", + url: { + serializedName: "url", type: { name: "String" } }, - maxValidUntil: { - serializedName: "maxValidUntil", + fullName: { + serializedName: "fullName", type: { name: "String" } }, - includeDisabled: { - serializedName: "includeDisabled", - type: { - name: "Boolean" - } - }, - sortBy: { - serializedName: "sortBy", - type: { - name: "Sequence", - element: { - type: { - name: "Composite", - className: "ThreatIntelligenceSortingCriteria" - } - } - } - }, - sources: { - serializedName: "sources", + branches: { + serializedName: "branches", type: { name: "Sequence", element: { @@ -3168,87 +3242,23 @@ export const ThreatIntelligenceFilteringCriteria: coreClient.CompositeMapper = { } } } - }, - patternTypes: { - serializedName: "patternTypes", - type: { - name: "Sequence", - element: { - type: { - name: "String" - } - } - } - }, - threatTypes: { - serializedName: "threatTypes", - type: { - name: "Sequence", - element: { - type: { - name: "String" - } - } - } - }, - ids: { - serializedName: "ids", - type: { - name: "Sequence", - element: { - type: { - name: "String" - } - } - } - }, - keywords: { - serializedName: "keywords", - type: { - name: "Sequence", - element: { - type: { - name: "String" - } - } - } - }, - skipToken: { - serializedName: "skipToken", - type: { - name: "String" - } } } } }; -export const ThreatIntelligenceSortingCriteria: coreClient.CompositeMapper = { +export const SourceControlList: coreClient.CompositeMapper = { type: { name: "Composite", - className: "ThreatIntelligenceSortingCriteria", + className: "SourceControlList", modelProperties: { - itemKey: { - serializedName: "itemKey", + nextLink: { + serializedName: "nextLink", + readOnly: true, type: { name: "String" } }, - sortOrder: { - serializedName: "sortOrder", - type: { - name: "String" - } - } - } - } -}; - -export const ThreatIntelligenceMetricsList: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "ThreatIntelligenceMetricsList", - modelProperties: { value: { serializedName: "value", required: true, @@ -3257,7 +3267,7 @@ export const ThreatIntelligenceMetricsList: coreClient.CompositeMapper = { element: { type: { name: "Composite", - className: "ThreatIntelligenceMetrics" + className: "SourceControl" } } } @@ -3266,65 +3276,43 @@ export const ThreatIntelligenceMetricsList: coreClient.CompositeMapper = { } }; -export const ThreatIntelligenceMetrics: coreClient.CompositeMapper = { +export const Repository: coreClient.CompositeMapper = { type: { name: "Composite", - className: "ThreatIntelligenceMetrics", + className: "Repository", modelProperties: { - properties: { - serializedName: "properties", + url: { + serializedName: "url", type: { - name: "Composite", - className: "ThreatIntelligenceMetric" + name: "String" } - } - } - } -}; - -export const ThreatIntelligenceMetric: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "ThreatIntelligenceMetric", - modelProperties: { - lastUpdatedTimeUtc: { - serializedName: "lastUpdatedTimeUtc", + }, + branch: { + serializedName: "branch", type: { name: "String" } }, - threatTypeMetrics: { - serializedName: "threatTypeMetrics", + displayUrl: { + serializedName: "displayUrl", type: { - name: "Sequence", - element: { - type: { - name: "Composite", - className: "ThreatIntelligenceMetricEntity" - } - } + name: "String" } }, - patternTypeMetrics: { - serializedName: "patternTypeMetrics", + deploymentLogsUrl: { + serializedName: "deploymentLogsUrl", type: { - name: "Sequence", - element: { - type: { - name: "Composite", - className: "ThreatIntelligenceMetricEntity" - } - } + name: "String" } }, - sourceMetrics: { - serializedName: "sourceMetrics", + pathMapping: { + serializedName: "pathMapping", type: { name: "Sequence", element: { type: { name: "Composite", - className: "ThreatIntelligenceMetricEntity" + className: "ContentPathMap" } } } @@ -3333,228 +3321,206 @@ export const ThreatIntelligenceMetric: coreClient.CompositeMapper = { } }; -export const ThreatIntelligenceMetricEntity: coreClient.CompositeMapper = { +export const ContentPathMap: coreClient.CompositeMapper = { type: { name: "Composite", - className: "ThreatIntelligenceMetricEntity", + className: "ContentPathMap", modelProperties: { - metricName: { - serializedName: "metricName", + contentType: { + serializedName: "contentType", type: { name: "String" } }, - metricValue: { - serializedName: "metricValue", + path: { + serializedName: "path", type: { - name: "Number" + name: "String" } } } } }; -export const ThreatIntelligenceAppendTags: coreClient.CompositeMapper = { +export const RepositoryResourceInfo: coreClient.CompositeMapper = { type: { name: "Composite", - className: "ThreatIntelligenceAppendTags", + className: "RepositoryResourceInfo", modelProperties: { - threatIntelligenceTags: { - serializedName: "threatIntelligenceTags", + webhook: { + serializedName: "webhook", type: { - name: "Sequence", - element: { - type: { - name: "String" - } - } + name: "Composite", + className: "Webhook" + } + }, + gitHubResourceInfo: { + serializedName: "gitHubResourceInfo", + type: { + name: "Composite", + className: "GitHubResourceInfo" + } + }, + azureDevOpsResourceInfo: { + serializedName: "azureDevOpsResourceInfo", + type: { + name: "Composite", + className: "AzureDevOpsResourceInfo" } } } } }; -export const WatchlistList: coreClient.CompositeMapper = { +export const Webhook: coreClient.CompositeMapper = { type: { name: "Composite", - className: "WatchlistList", + className: "Webhook", modelProperties: { - nextLink: { - serializedName: "nextLink", - readOnly: true, + webhookId: { + serializedName: "webhookId", type: { name: "String" } }, - value: { - serializedName: "value", - required: true, + webhookUrl: { + serializedName: "webhookUrl", type: { - name: "Sequence", - element: { - type: { - name: "Composite", - className: "Watchlist" - } - } + name: "String" + } + }, + webhookSecretUpdateTime: { + serializedName: "webhookSecretUpdateTime", + type: { + name: "String" + } + }, + rotateWebhookSecret: { + serializedName: "rotateWebhookSecret", + type: { + name: "Boolean" } } } } }; -export const WatchlistItemList: coreClient.CompositeMapper = { +export const GitHubResourceInfo: coreClient.CompositeMapper = { type: { name: "Composite", - className: "WatchlistItemList", + className: "GitHubResourceInfo", modelProperties: { - nextLink: { - serializedName: "nextLink", - readOnly: true, + appInstallationId: { + serializedName: "appInstallationId", type: { name: "String" } - }, - value: { - serializedName: "value", - required: true, - type: { - name: "Sequence", - element: { - type: { - name: "Composite", - className: "WatchlistItem" - } - } - } } } } }; -export const DataConnectorList: coreClient.CompositeMapper = { +export const AzureDevOpsResourceInfo: coreClient.CompositeMapper = { type: { name: "Composite", - className: "DataConnectorList", + className: "AzureDevOpsResourceInfo", modelProperties: { - nextLink: { - serializedName: "nextLink", - readOnly: true, + pipelineId: { + serializedName: "pipelineId", type: { name: "String" } }, - value: { - serializedName: "value", - required: true, + serviceConnectionId: { + serializedName: "serviceConnectionId", type: { - name: "Sequence", - element: { - type: { - name: "Composite", - className: "DataConnector" - } - } + name: "String" } } } } }; -export const DataConnectorConnectBody: coreClient.CompositeMapper = { +export const DeploymentInfo: coreClient.CompositeMapper = { type: { name: "Composite", - className: "DataConnectorConnectBody", + className: "DeploymentInfo", modelProperties: { - kind: { - serializedName: "kind", - type: { - name: "String" - } - }, - apiKey: { - serializedName: "apiKey", - type: { - name: "String" - } - }, - dataCollectionEndpoint: { - serializedName: "dataCollectionEndpoint", + deploymentFetchStatus: { + serializedName: "deploymentFetchStatus", type: { name: "String" } }, - dataCollectionRuleImmutableId: { - serializedName: "dataCollectionRuleImmutableId", + deployment: { + serializedName: "deployment", type: { - name: "String" + name: "Composite", + className: "Deployment" } }, - outputStream: { - serializedName: "outputStream", + message: { + serializedName: "message", type: { name: "String" } - }, - clientSecret: { - serializedName: "clientSecret", + } + } + } +}; + +export const Deployment: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "Deployment", + modelProperties: { + deploymentId: { + serializedName: "deploymentId", type: { name: "String" } }, - clientId: { - serializedName: "clientId", + deploymentState: { + serializedName: "deploymentState", type: { name: "String" } }, - authorizationCode: { - serializedName: "authorizationCode", + deploymentResult: { + serializedName: "deploymentResult", type: { name: "String" } }, - userName: { - serializedName: "userName", + deploymentTime: { + serializedName: "deploymentTime", type: { - name: "String" + name: "DateTime" } }, - password: { - serializedName: "password", + deploymentLogsUrl: { + serializedName: "deploymentLogsUrl", type: { name: "String" } - }, - requestConfigUserInputValues: { - serializedName: "requestConfigUserInputValues", - type: { - name: "Sequence", - element: { - type: { - name: "Dictionary", - value: { type: { name: "any" } } - } - } - } } } } }; -export const DataConnectorsCheckRequirements: coreClient.CompositeMapper = { +export const ThreatIntelligenceKillChainPhase: coreClient.CompositeMapper = { type: { name: "Composite", - className: "DataConnectorsCheckRequirements", - uberParent: "DataConnectorsCheckRequirements", - polymorphicDiscriminator: { - serializedName: "kind", - clientName: "kind" - }, + className: "ThreatIntelligenceKillChainPhase", modelProperties: { - kind: { - serializedName: "kind", - required: true, + killChainName: { + serializedName: "killChainName", + type: { + name: "String" + } + }, + phaseName: { + serializedName: "phaseName", type: { name: "String" } @@ -3563,141 +3529,147 @@ export const DataConnectorsCheckRequirements: coreClient.CompositeMapper = { } }; -export const DataConnectorRequirementsState: coreClient.CompositeMapper = { +export const ThreatIntelligenceParsedPattern: coreClient.CompositeMapper = { type: { name: "Composite", - className: "DataConnectorRequirementsState", + className: "ThreatIntelligenceParsedPattern", modelProperties: { - authorizationState: { - serializedName: "authorizationState", + patternTypeKey: { + serializedName: "patternTypeKey", type: { name: "String" } }, - licenseState: { - serializedName: "licenseState", + patternTypeValues: { + serializedName: "patternTypeValues", type: { - name: "String" + name: "Sequence", + element: { + type: { + name: "Composite", + className: "ThreatIntelligenceParsedPatternTypeValue" + } + } } } } } }; -export const OperationsList: coreClient.CompositeMapper = { +export const ThreatIntelligenceParsedPatternTypeValue: coreClient.CompositeMapper = { type: { name: "Composite", - className: "OperationsList", + className: "ThreatIntelligenceParsedPatternTypeValue", modelProperties: { - nextLink: { - serializedName: "nextLink", - readOnly: true, + valueType: { + serializedName: "valueType", type: { name: "String" } }, value: { serializedName: "value", - required: true, type: { - name: "Sequence", - element: { - type: { - name: "Composite", - className: "Operation" - } - } + name: "String" } } } } }; -export const Operation: coreClient.CompositeMapper = { +export const ThreatIntelligenceExternalReference: coreClient.CompositeMapper = { type: { name: "Composite", - className: "Operation", + className: "ThreatIntelligenceExternalReference", modelProperties: { - display: { - serializedName: "display", + description: { + serializedName: "description", type: { - name: "Composite", - className: "OperationDisplay" + name: "String" } }, - name: { - serializedName: "name", + externalId: { + serializedName: "externalId", type: { name: "String" } }, - origin: { - serializedName: "origin", + sourceName: { + serializedName: "sourceName", type: { name: "String" } }, - isDataAction: { - serializedName: "isDataAction", + url: { + serializedName: "url", type: { - name: "Boolean" + name: "String" + } + }, + hashes: { + serializedName: "hashes", + type: { + name: "Dictionary", + value: { type: { name: "String" } } } } } } }; -export const OperationDisplay: coreClient.CompositeMapper = { +export const ThreatIntelligenceGranularMarkingModel: coreClient.CompositeMapper = { type: { name: "Composite", - className: "OperationDisplay", + className: "ThreatIntelligenceGranularMarkingModel", modelProperties: { - description: { - serializedName: "description", - type: { - name: "String" - } - }, - operation: { - serializedName: "operation", + language: { + serializedName: "language", type: { name: "String" } }, - provider: { - serializedName: "provider", + markingRef: { + serializedName: "markingRef", type: { - name: "String" + name: "Number" } }, - resource: { - serializedName: "resource", + selectors: { + serializedName: "selectors", type: { - name: "String" + name: "Sequence", + element: { + type: { + name: "String" + } + } } } } } }; -export const AlertRuleTemplateDataSource: coreClient.CompositeMapper = { +export const ThreatIntelligenceInformationList: coreClient.CompositeMapper = { type: { name: "Composite", - className: "AlertRuleTemplateDataSource", + className: "ThreatIntelligenceInformationList", modelProperties: { - connectorId: { - serializedName: "connectorId", + nextLink: { + serializedName: "nextLink", + readOnly: true, type: { name: "String" } }, - dataTypes: { - serializedName: "dataTypes", + value: { + serializedName: "value", + required: true, type: { name: "Sequence", element: { type: { - name: "String" + name: "Composite", + className: "ThreatIntelligenceInformation" } } } @@ -3706,144 +3678,159 @@ export const AlertRuleTemplateDataSource: coreClient.CompositeMapper = { } }; -export const AlertRuleTemplatePropertiesBase: coreClient.CompositeMapper = { +export const ThreatIntelligenceFilteringCriteria: coreClient.CompositeMapper = { type: { name: "Composite", - className: "AlertRuleTemplatePropertiesBase", + className: "ThreatIntelligenceFilteringCriteria", modelProperties: { - alertRulesCreatedByTemplateCount: { - serializedName: "alertRulesCreatedByTemplateCount", + pageSize: { + serializedName: "pageSize", type: { name: "Number" } }, - lastUpdatedDateUTC: { - serializedName: "lastUpdatedDateUTC", - readOnly: true, + minConfidence: { + serializedName: "minConfidence", type: { - name: "DateTime" + name: "Number" } }, - createdDateUTC: { - serializedName: "createdDateUTC", - readOnly: true, + maxConfidence: { + serializedName: "maxConfidence", type: { - name: "DateTime" + name: "Number" } }, - description: { - serializedName: "description", + minValidUntil: { + serializedName: "minValidUntil", type: { name: "String" } }, - displayName: { - serializedName: "displayName", + maxValidUntil: { + serializedName: "maxValidUntil", type: { name: "String" } }, - requiredDataConnectors: { - serializedName: "requiredDataConnectors", + includeDisabled: { + serializedName: "includeDisabled", + type: { + name: "Boolean" + } + }, + sortBy: { + serializedName: "sortBy", type: { name: "Sequence", element: { type: { name: "Composite", - className: "AlertRuleTemplateDataSource" + className: "ThreatIntelligenceSortingCriteria" } } } }, - status: { - serializedName: "status", - type: { - name: "String" - } - } - } - } -}; - -export const QueryBasedAlertRuleTemplateProperties: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "QueryBasedAlertRuleTemplateProperties", - modelProperties: { - query: { - serializedName: "query", - type: { - name: "String" - } - }, - severity: { - serializedName: "severity", + sources: { + serializedName: "sources", type: { - name: "String" + name: "Sequence", + element: { + type: { + name: "String" + } + } } }, - version: { - serializedName: "version", + patternTypes: { + serializedName: "patternTypes", type: { - name: "String" + name: "Sequence", + element: { + type: { + name: "String" + } + } } }, - customDetails: { - serializedName: "customDetails", + threatTypes: { + serializedName: "threatTypes", type: { - name: "Dictionary", - value: { type: { name: "String" } } + name: "Sequence", + element: { + type: { + name: "String" + } + } } }, - entityMappings: { - serializedName: "entityMappings", + ids: { + serializedName: "ids", type: { name: "Sequence", element: { type: { - name: "Composite", - className: "EntityMapping" + name: "String" } } } }, - alertDetailsOverride: { - serializedName: "alertDetailsOverride", + keywords: { + serializedName: "keywords", type: { - name: "Composite", - className: "AlertDetailsOverride" + name: "Sequence", + element: { + type: { + name: "String" + } + } } }, - eventGroupingSettings: { - serializedName: "eventGroupingSettings", + skipToken: { + serializedName: "skipToken", type: { - name: "Composite", - className: "EventGroupingSettings" + name: "String" } } } } }; -export const EntityMapping: coreClient.CompositeMapper = { +export const ThreatIntelligenceSortingCriteria: coreClient.CompositeMapper = { type: { name: "Composite", - className: "EntityMapping", + className: "ThreatIntelligenceSortingCriteria", modelProperties: { - entityType: { - serializedName: "entityType", + itemKey: { + serializedName: "itemKey", type: { name: "String" } }, - fieldMappings: { - serializedName: "fieldMappings", + sortOrder: { + serializedName: "sortOrder", + type: { + name: "String" + } + } + } + } +}; + +export const ThreatIntelligenceMetricsList: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "ThreatIntelligenceMetricsList", + modelProperties: { + value: { + serializedName: "value", + required: true, type: { name: "Sequence", element: { type: { name: "Composite", - className: "FieldMapping" + className: "ThreatIntelligenceMetrics" } } } @@ -3852,102 +3839,106 @@ export const EntityMapping: coreClient.CompositeMapper = { } }; -export const FieldMapping: coreClient.CompositeMapper = { +export const ThreatIntelligenceMetrics: coreClient.CompositeMapper = { type: { name: "Composite", - className: "FieldMapping", + className: "ThreatIntelligenceMetrics", modelProperties: { - identifier: { - serializedName: "identifier", - type: { - name: "String" - } - }, - columnName: { - serializedName: "columnName", + properties: { + serializedName: "properties", type: { - name: "String" + name: "Composite", + className: "ThreatIntelligenceMetric" } } } } }; -export const AlertDetailsOverride: coreClient.CompositeMapper = { +export const ThreatIntelligenceMetric: coreClient.CompositeMapper = { type: { name: "Composite", - className: "AlertDetailsOverride", + className: "ThreatIntelligenceMetric", modelProperties: { - alertDisplayNameFormat: { - serializedName: "alertDisplayNameFormat", + lastUpdatedTimeUtc: { + serializedName: "lastUpdatedTimeUtc", type: { name: "String" } }, - alertDescriptionFormat: { - serializedName: "alertDescriptionFormat", + threatTypeMetrics: { + serializedName: "threatTypeMetrics", type: { - name: "String" + name: "Sequence", + element: { + type: { + name: "Composite", + className: "ThreatIntelligenceMetricEntity" + } + } } }, - alertTacticsColumnName: { - serializedName: "alertTacticsColumnName", + patternTypeMetrics: { + serializedName: "patternTypeMetrics", type: { - name: "String" + name: "Sequence", + element: { + type: { + name: "Composite", + className: "ThreatIntelligenceMetricEntity" + } + } } }, - alertSeverityColumnName: { - serializedName: "alertSeverityColumnName", + sourceMetrics: { + serializedName: "sourceMetrics", type: { - name: "String" + name: "Sequence", + element: { + type: { + name: "Composite", + className: "ThreatIntelligenceMetricEntity" + } + } } } } } }; -export const EventGroupingSettings: coreClient.CompositeMapper = { +export const ThreatIntelligenceMetricEntity: coreClient.CompositeMapper = { type: { name: "Composite", - className: "EventGroupingSettings", + className: "ThreatIntelligenceMetricEntity", modelProperties: { - aggregationKind: { - serializedName: "aggregationKind", + metricName: { + serializedName: "metricName", type: { name: "String" } + }, + metricValue: { + serializedName: "metricValue", + type: { + name: "Number" + } } } } }; -export const FusionSourceSettings: coreClient.CompositeMapper = { +export const ThreatIntelligenceAppendTags: coreClient.CompositeMapper = { type: { name: "Composite", - className: "FusionSourceSettings", + className: "ThreatIntelligenceAppendTags", modelProperties: { - enabled: { - serializedName: "enabled", - required: true, - type: { - name: "Boolean" - } - }, - sourceName: { - serializedName: "sourceName", - required: true, - type: { - name: "String" - } - }, - sourceSubTypes: { - serializedName: "sourceSubTypes", + threatIntelligenceTags: { + serializedName: "threatIntelligenceTags", type: { name: "Sequence", element: { type: { - name: "Composite", - className: "FusionSourceSubTypeSetting" + name: "String" } } } @@ -3956,63 +3947,72 @@ export const FusionSourceSettings: coreClient.CompositeMapper = { } }; -export const FusionSourceSubTypeSetting: coreClient.CompositeMapper = { +export const TriggeredAnalyticsRuleRuns: coreClient.CompositeMapper = { type: { name: "Composite", - className: "FusionSourceSubTypeSetting", + className: "TriggeredAnalyticsRuleRuns", modelProperties: { - enabled: { - serializedName: "enabled", - required: true, - type: { - name: "Boolean" - } - }, - sourceSubTypeName: { - serializedName: "sourceSubTypeName", + value: { + serializedName: "value", required: true, type: { - name: "String" + name: "Sequence", + element: { + type: { + name: "Composite", + className: "TriggeredAnalyticsRuleRun" + } + } } }, - sourceSubTypeDisplayName: { - serializedName: "sourceSubTypeDisplayName", + nextLink: { + serializedName: "nextLink", readOnly: true, type: { name: "String" } - }, - severityFilters: { - serializedName: "severityFilters", + } + } + } +}; + +export const AnalyticsRuleRunTrigger: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "AnalyticsRuleRunTrigger", + modelProperties: { + executionTimeUtc: { + serializedName: "properties.executionTimeUtc", + required: true, type: { - name: "Composite", - className: "FusionSubTypeSeverityFilter" + name: "DateTime" } } } } }; -export const FusionSubTypeSeverityFilter: coreClient.CompositeMapper = { +export const WatchlistList: coreClient.CompositeMapper = { type: { name: "Composite", - className: "FusionSubTypeSeverityFilter", + className: "WatchlistList", modelProperties: { - isSupported: { - serializedName: "isSupported", + nextLink: { + serializedName: "nextLink", readOnly: true, type: { - name: "Boolean" + name: "String" } }, - filters: { - serializedName: "filters", + value: { + serializedName: "value", + required: true, type: { name: "Sequence", element: { type: { name: "Composite", - className: "FusionSubTypeSeverityFiltersItem" + className: "Watchlist" } } } @@ -4021,129 +4021,128 @@ export const FusionSubTypeSeverityFilter: coreClient.CompositeMapper = { } }; -export const FusionSubTypeSeverityFiltersItem: coreClient.CompositeMapper = { +export const WatchlistItemList: coreClient.CompositeMapper = { type: { name: "Composite", - className: "FusionSubTypeSeverityFiltersItem", + className: "WatchlistItemList", modelProperties: { - severity: { - serializedName: "severity", - required: true, + nextLink: { + serializedName: "nextLink", + readOnly: true, type: { name: "String" } }, - enabled: { - serializedName: "enabled", + value: { + serializedName: "value", required: true, type: { - name: "Boolean" + name: "Sequence", + element: { + type: { + name: "Composite", + className: "WatchlistItem" + } + } } } } } }; -export const FusionScenarioExclusionPattern: coreClient.CompositeMapper = { +export const WorkspaceManagerGroupList: coreClient.CompositeMapper = { type: { name: "Composite", - className: "FusionScenarioExclusionPattern", + className: "WorkspaceManagerGroupList", modelProperties: { - exclusionPattern: { - serializedName: "exclusionPattern", - required: true, + nextLink: { + serializedName: "nextLink", + readOnly: true, type: { name: "String" } }, - dateAddedInUTC: { - serializedName: "dateAddedInUTC", + value: { + serializedName: "value", required: true, type: { - name: "String" + name: "Sequence", + element: { + type: { + name: "Composite", + className: "WorkspaceManagerGroup" + } + } } } } } }; -export const FusionTemplateSourceSetting: coreClient.CompositeMapper = { +export const ErrorResponse: coreClient.CompositeMapper = { type: { name: "Composite", - className: "FusionTemplateSourceSetting", + className: "ErrorResponse", modelProperties: { - sourceName: { - serializedName: "sourceName", - required: true, - type: { - name: "String" - } - }, - sourceSubTypes: { - serializedName: "sourceSubTypes", + error: { + serializedName: "error", type: { - name: "Sequence", - element: { - type: { - name: "Composite", - className: "FusionTemplateSourceSubType" - } - } + name: "Composite", + className: "ErrorDetail" } } } } }; -export const FusionTemplateSourceSubType: coreClient.CompositeMapper = { +export const ErrorDetail: coreClient.CompositeMapper = { type: { name: "Composite", - className: "FusionTemplateSourceSubType", + className: "ErrorDetail", modelProperties: { - sourceSubTypeName: { - serializedName: "sourceSubTypeName", - required: true, + code: { + serializedName: "code", + readOnly: true, type: { name: "String" } }, - sourceSubTypeDisplayName: { - serializedName: "sourceSubTypeDisplayName", + message: { + serializedName: "message", readOnly: true, type: { name: "String" } }, - severityFilter: { - serializedName: "severityFilter", + target: { + serializedName: "target", + readOnly: true, type: { - name: "Composite", - className: "FusionTemplateSubTypeSeverityFilter" + name: "String" } - } - } - } -}; - -export const FusionTemplateSubTypeSeverityFilter: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "FusionTemplateSubTypeSeverityFilter", - modelProperties: { - isSupported: { - serializedName: "isSupported", - required: true, + }, + details: { + serializedName: "details", + readOnly: true, type: { - name: "Boolean" + name: "Sequence", + element: { + type: { + name: "Composite", + className: "ErrorDetail" + } + } } }, - severityFilters: { - serializedName: "severityFilters", + additionalInfo: { + serializedName: "additionalInfo", + readOnly: true, type: { name: "Sequence", element: { type: { - name: "String" + name: "Composite", + className: "ErrorAdditionalInfo" } } } @@ -4152,47 +4151,51 @@ export const FusionTemplateSubTypeSeverityFilter: coreClient.CompositeMapper = { } }; -export const MicrosoftSecurityIncidentCreationAlertRuleCommonProperties: coreClient.CompositeMapper = { +export const ErrorAdditionalInfo: coreClient.CompositeMapper = { type: { name: "Composite", - className: "MicrosoftSecurityIncidentCreationAlertRuleCommonProperties", + className: "ErrorAdditionalInfo", modelProperties: { - displayNamesFilter: { - serializedName: "displayNamesFilter", + type: { + serializedName: "type", + readOnly: true, type: { - name: "Sequence", - element: { - type: { - name: "String" - } - } + name: "String" } }, - displayNamesExcludeFilter: { - serializedName: "displayNamesExcludeFilter", + info: { + serializedName: "info", + readOnly: true, type: { - name: "Sequence", - element: { - type: { - name: "String" - } - } + name: "Dictionary", + value: { type: { name: "any" } } } - }, - productFilter: { - serializedName: "productFilter", - required: true, + } + } + } +}; + +export const WorkspaceManagerAssignmentList: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "WorkspaceManagerAssignmentList", + modelProperties: { + nextLink: { + serializedName: "nextLink", + readOnly: true, type: { name: "String" } }, - severitiesFilter: { - serializedName: "severitiesFilter", + value: { + serializedName: "value", + required: true, type: { name: "Sequence", element: { type: { - name: "String" + name: "Composite", + className: "WorkspaceManagerAssignment" } } } @@ -4201,91 +4204,83 @@ export const MicrosoftSecurityIncidentCreationAlertRuleCommonProperties: coreCli } }; -export const IncidentConfiguration: coreClient.CompositeMapper = { +export const AssignmentItem: coreClient.CompositeMapper = { type: { name: "Composite", - className: "IncidentConfiguration", + className: "AssignmentItem", modelProperties: { - createIncident: { - serializedName: "createIncident", - required: true, - type: { - name: "Boolean" - } - }, - groupingConfiguration: { - serializedName: "groupingConfiguration", + resourceId: { + serializedName: "resourceId", type: { - name: "Composite", - className: "GroupingConfiguration" + name: "String" } } } } }; -export const GroupingConfiguration: coreClient.CompositeMapper = { +export const JobList: coreClient.CompositeMapper = { type: { name: "Composite", - className: "GroupingConfiguration", + className: "JobList", modelProperties: { - enabled: { - serializedName: "enabled", - required: true, - type: { - name: "Boolean" - } - }, - reopenClosedIncident: { - serializedName: "reopenClosedIncident", - required: true, + nextLink: { + serializedName: "nextLink", + readOnly: true, type: { - name: "Boolean" + name: "String" } }, - lookbackDuration: { - serializedName: "lookbackDuration", + value: { + serializedName: "value", required: true, type: { - name: "TimeSpan" + name: "Sequence", + element: { + type: { + name: "Composite", + className: "Job" + } + } } - }, - matchingMethod: { - serializedName: "matchingMethod", - required: true, + } + } + } +}; + +export const JobItem: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "JobItem", + modelProperties: { + resourceId: { + serializedName: "resourceId", type: { name: "String" } }, - groupByEntities: { - serializedName: "groupByEntities", + status: { + serializedName: "status", + readOnly: true, type: { - name: "Sequence", - element: { - type: { - name: "String" - } - } + name: "String" } }, - groupByAlertDetails: { - serializedName: "groupByAlertDetails", + executionTime: { + serializedName: "executionTime", + readOnly: true, type: { - name: "Sequence", - element: { - type: { - name: "String" - } - } + name: "DateTime" } }, - groupByCustomDetails: { - serializedName: "groupByCustomDetails", + errors: { + serializedName: "errors", type: { name: "Sequence", element: { type: { - name: "String" + name: "Composite", + className: "ErrorModel" } } } @@ -4294,108 +4289,108 @@ export const GroupingConfiguration: coreClient.CompositeMapper = { } }; -export const ScheduledAlertRuleCommonProperties: coreClient.CompositeMapper = { +export const ErrorModel: coreClient.CompositeMapper = { type: { name: "Composite", - className: "ScheduledAlertRuleCommonProperties", + className: "ErrorModel", modelProperties: { - query: { - serializedName: "query", + memberResourceName: { + serializedName: "memberResourceName", + required: true, type: { name: "String" } }, - queryFrequency: { - serializedName: "queryFrequency", - type: { - name: "TimeSpan" - } - }, - queryPeriod: { - serializedName: "queryPeriod", - type: { - name: "TimeSpan" - } - }, - severity: { - serializedName: "severity", + errorMessage: { + serializedName: "errorMessage", + required: true, type: { name: "String" } - }, - triggerOperator: { - serializedName: "triggerOperator", - type: { - name: "Enum", - allowedValues: ["GreaterThan", "LessThan", "Equal", "NotEqual"] - } - }, - triggerThreshold: { - serializedName: "triggerThreshold", + } + } + } +}; + +export const WorkspaceManagerConfigurationList: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "WorkspaceManagerConfigurationList", + modelProperties: { + nextLink: { + serializedName: "nextLink", + readOnly: true, type: { - name: "Number" + name: "String" } }, - eventGroupingSettings: { - serializedName: "eventGroupingSettings", + value: { + serializedName: "value", + required: true, type: { - name: "Composite", - className: "EventGroupingSettings" + name: "Sequence", + element: { + type: { + name: "Composite", + className: "WorkspaceManagerConfiguration" + } + } } - }, - customDetails: { - serializedName: "customDetails", + } + } + } +}; + +export const WorkspaceManagerMembersList: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "WorkspaceManagerMembersList", + modelProperties: { + nextLink: { + serializedName: "nextLink", + readOnly: true, type: { - name: "Dictionary", - value: { type: { name: "String" } } + name: "String" } }, - entityMappings: { - serializedName: "entityMappings", + value: { + serializedName: "value", + required: true, type: { name: "Sequence", element: { type: { name: "Composite", - className: "EntityMapping" + className: "WorkspaceManagerMember" } } } - }, - alertDetailsOverride: { - serializedName: "alertDetailsOverride", - type: { - name: "Composite", - className: "AlertDetailsOverride" - } } } } }; -export const AutomationRuleBooleanCondition: coreClient.CompositeMapper = { +export const DataConnectorList: coreClient.CompositeMapper = { type: { name: "Composite", - className: "AutomationRuleBooleanCondition", + className: "DataConnectorList", modelProperties: { - operator: { - serializedName: "operator", + nextLink: { + serializedName: "nextLink", + readOnly: true, type: { name: "String" } }, - innerConditions: { - constraints: { - MinItems: 2, - MaxItems: 10 - }, - serializedName: "innerConditions", + value: { + serializedName: "value", + required: true, type: { name: "Sequence", element: { type: { name: "Composite", - className: "AutomationRuleCondition" + className: "DataConnector" } } } @@ -4404,56 +4399,79 @@ export const AutomationRuleBooleanCondition: coreClient.CompositeMapper = { } }; -export const IncidentPropertiesAction: coreClient.CompositeMapper = { +export const DataConnectorConnectBody: coreClient.CompositeMapper = { type: { name: "Composite", - className: "IncidentPropertiesAction", + className: "DataConnectorConnectBody", modelProperties: { - severity: { - serializedName: "severity", + kind: { + serializedName: "kind", type: { name: "String" } }, - status: { - serializedName: "status", + apiKey: { + serializedName: "apiKey", type: { name: "String" } }, - classification: { - serializedName: "classification", + dataCollectionEndpoint: { + serializedName: "dataCollectionEndpoint", type: { name: "String" } }, - classificationReason: { - serializedName: "classificationReason", + dataCollectionRuleImmutableId: { + serializedName: "dataCollectionRuleImmutableId", type: { name: "String" } }, - classificationComment: { - serializedName: "classificationComment", + outputStream: { + serializedName: "outputStream", type: { name: "String" } }, - owner: { - serializedName: "owner", + clientSecret: { + serializedName: "clientSecret", type: { - name: "Composite", - className: "IncidentOwnerInfo" + name: "String" } }, - labels: { - serializedName: "labels", + clientId: { + serializedName: "clientId", + type: { + name: "String" + } + }, + authorizationCode: { + serializedName: "authorizationCode", + type: { + name: "String" + } + }, + userName: { + serializedName: "userName", + type: { + name: "String" + } + }, + password: { + serializedName: "password", + type: { + name: "String" + } + }, + requestConfigUserInputValues: { + serializedName: "requestConfigUserInputValues", type: { name: "Sequence", element: { type: { - name: "Composite", - className: "IncidentLabel" + name: "Dictionary", + value: { type: { name: "any" } } } } } @@ -4462,19 +4480,19 @@ export const IncidentPropertiesAction: coreClient.CompositeMapper = { } }; -export const AutomationRulePropertyArrayChangedValuesCondition: coreClient.CompositeMapper = { +export const DataConnectorsCheckRequirements: coreClient.CompositeMapper = { type: { name: "Composite", - className: "AutomationRulePropertyArrayChangedValuesCondition", + className: "DataConnectorsCheckRequirements", + uberParent: "DataConnectorsCheckRequirements", + polymorphicDiscriminator: { + serializedName: "kind", + clientName: "kind" + }, modelProperties: { - arrayType: { - serializedName: "arrayType", - type: { - name: "String" - } - }, - changeType: { - serializedName: "changeType", + kind: { + serializedName: "kind", + required: true, type: { name: "String" } @@ -4483,34 +4501,48 @@ export const AutomationRulePropertyArrayChangedValuesCondition: coreClient.Compo } }; -export const AutomationRulePropertyArrayValuesCondition: coreClient.CompositeMapper = { +export const DataConnectorRequirementsState: coreClient.CompositeMapper = { type: { name: "Composite", - className: "AutomationRulePropertyArrayValuesCondition", + className: "DataConnectorRequirementsState", modelProperties: { - arrayType: { - serializedName: "arrayType", + authorizationState: { + serializedName: "authorizationState", type: { name: "String" } }, - arrayConditionType: { - serializedName: "arrayConditionType", + licenseState: { + serializedName: "licenseState", + type: { + name: "String" + } + } + } + } +}; + +export const OperationsList: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "OperationsList", + modelProperties: { + nextLink: { + serializedName: "nextLink", + readOnly: true, type: { name: "String" } }, - itemConditions: { - constraints: { - MaxItems: 10 - }, - serializedName: "itemConditions", + value: { + serializedName: "value", + required: true, type: { name: "Sequence", element: { type: { name: "Composite", - className: "AutomationRuleCondition" + className: "Operation" } } } @@ -4519,189 +4551,222 @@ export const AutomationRulePropertyArrayValuesCondition: coreClient.CompositeMap } }; -export const AutomationRulePropertyValuesChangedCondition: coreClient.CompositeMapper = { +export const Operation: coreClient.CompositeMapper = { type: { name: "Composite", - className: "AutomationRulePropertyValuesChangedCondition", + className: "Operation", modelProperties: { - propertyName: { - serializedName: "propertyName", + display: { + serializedName: "display", type: { - name: "String" + name: "Composite", + className: "OperationDisplay" } }, - changeType: { - serializedName: "changeType", + name: { + serializedName: "name", type: { name: "String" } }, - operator: { - serializedName: "operator", + origin: { + serializedName: "origin", type: { name: "String" } }, - propertyValues: { - serializedName: "propertyValues", + isDataAction: { + serializedName: "isDataAction", type: { - name: "Sequence", - element: { - type: { - name: "String" - } - } + name: "Boolean" } } } } }; -export const AutomationRulePropertyValuesCondition: coreClient.CompositeMapper = { +export const OperationDisplay: coreClient.CompositeMapper = { type: { name: "Composite", - className: "AutomationRulePropertyValuesCondition", + className: "OperationDisplay", modelProperties: { - propertyName: { - serializedName: "propertyName", + description: { + serializedName: "description", type: { name: "String" } }, - operator: { - serializedName: "operator", + operation: { + serializedName: "operation", type: { name: "String" } }, - propertyValues: { - serializedName: "propertyValues", + provider: { + serializedName: "provider", type: { - name: "Sequence", - element: { - type: { - name: "String" - } - } + name: "String" + } + }, + resource: { + serializedName: "resource", + type: { + name: "String" } } } } }; -export const PlaybookActionProperties: coreClient.CompositeMapper = { +export const AlertRuleTemplateDataSource: coreClient.CompositeMapper = { type: { name: "Composite", - className: "PlaybookActionProperties", + className: "AlertRuleTemplateDataSource", modelProperties: { - logicAppResourceId: { - serializedName: "logicAppResourceId", + connectorId: { + serializedName: "connectorId", type: { name: "String" } }, - tenantId: { - serializedName: "tenantId", + dataTypes: { + serializedName: "dataTypes", type: { - name: "Uuid" + name: "Sequence", + element: { + type: { + name: "String" + } + } } } } } }; -export const EntityQueryItemProperties: coreClient.CompositeMapper = { +export const AlertRuleTemplatePropertiesBase: coreClient.CompositeMapper = { type: { name: "Composite", - className: "EntityQueryItemProperties", + className: "AlertRuleTemplatePropertiesBase", modelProperties: { - dataTypes: { - serializedName: "dataTypes", + alertRulesCreatedByTemplateCount: { + serializedName: "alertRulesCreatedByTemplateCount", type: { - name: "Sequence", - element: { - type: { - name: "Composite", - className: "EntityQueryItemPropertiesDataTypesItem" - } - } + name: "Number" } }, - inputEntityType: { - serializedName: "inputEntityType", + lastUpdatedDateUTC: { + serializedName: "lastUpdatedDateUTC", + readOnly: true, + type: { + name: "DateTime" + } + }, + createdDateUTC: { + serializedName: "createdDateUTC", + readOnly: true, + type: { + name: "DateTime" + } + }, + description: { + serializedName: "description", type: { name: "String" } }, - requiredInputFieldsSets: { - serializedName: "requiredInputFieldsSets", + displayName: { + serializedName: "displayName", + type: { + name: "String" + } + }, + requiredDataConnectors: { + serializedName: "requiredDataConnectors", type: { name: "Sequence", element: { type: { - name: "Sequence", - element: { - type: { - name: "String" - } - } + name: "Composite", + className: "AlertRuleTemplateDataSource" } } } }, - entitiesFilter: { - serializedName: "entitiesFilter", + status: { + serializedName: "status", type: { - name: "Dictionary", - value: { type: { name: "any" } } + name: "String" } } } } }; -export const EntityQueryItemPropertiesDataTypesItem: coreClient.CompositeMapper = { +export const QueryBasedAlertRuleTemplateProperties: coreClient.CompositeMapper = { type: { name: "Composite", - className: "EntityQueryItemPropertiesDataTypesItem", + className: "QueryBasedAlertRuleTemplateProperties", modelProperties: { - dataType: { - serializedName: "dataType", + query: { + serializedName: "query", type: { name: "String" } - } - } - } -}; - -export const InsightQueryItemPropertiesTableQuery: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "InsightQueryItemPropertiesTableQuery", - modelProperties: { - columnsDefinitions: { - serializedName: "columnsDefinitions", + }, + severity: { + serializedName: "severity", + type: { + name: "String" + } + }, + version: { + serializedName: "version", + type: { + name: "String" + } + }, + customDetails: { + serializedName: "customDetails", + type: { + name: "Dictionary", + value: { type: { name: "String" } } + } + }, + entityMappings: { + serializedName: "entityMappings", type: { name: "Sequence", element: { type: { name: "Composite", - className: - "InsightQueryItemPropertiesTableQueryColumnsDefinitionsItem" + className: "EntityMapping" } } } }, - queriesDefinitions: { - serializedName: "queriesDefinitions", + alertDetailsOverride: { + serializedName: "alertDetailsOverride", + type: { + name: "Composite", + className: "AlertDetailsOverride" + } + }, + eventGroupingSettings: { + serializedName: "eventGroupingSettings", + type: { + name: "Composite", + className: "EventGroupingSettings" + } + }, + sentinelEntitiesMappings: { + serializedName: "sentinelEntitiesMappings", type: { name: "Sequence", element: { type: { name: "Composite", - className: - "InsightQueryItemPropertiesTableQueryQueriesDefinitionsItem" + className: "SentinelEntityMapping" } } } @@ -4710,65 +4775,91 @@ export const InsightQueryItemPropertiesTableQuery: coreClient.CompositeMapper = } }; -export const InsightQueryItemPropertiesTableQueryColumnsDefinitionsItem: coreClient.CompositeMapper = { +export const EntityMapping: coreClient.CompositeMapper = { type: { name: "Composite", - className: "InsightQueryItemPropertiesTableQueryColumnsDefinitionsItem", + className: "EntityMapping", modelProperties: { - header: { - serializedName: "header", + entityType: { + serializedName: "entityType", type: { name: "String" } }, - outputType: { - serializedName: "outputType", + fieldMappings: { + serializedName: "fieldMappings", + type: { + name: "Sequence", + element: { + type: { + name: "Composite", + className: "FieldMapping" + } + } + } + } + } + } +}; + +export const FieldMapping: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "FieldMapping", + modelProperties: { + identifier: { + serializedName: "identifier", type: { name: "String" } }, - supportDeepLink: { - serializedName: "supportDeepLink", + columnName: { + serializedName: "columnName", type: { - name: "Boolean" + name: "String" } } } } }; -export const InsightQueryItemPropertiesTableQueryQueriesDefinitionsItem: coreClient.CompositeMapper = { +export const AlertDetailsOverride: coreClient.CompositeMapper = { type: { name: "Composite", - className: "InsightQueryItemPropertiesTableQueryQueriesDefinitionsItem", + className: "AlertDetailsOverride", modelProperties: { - filter: { - serializedName: "filter", + alertDisplayNameFormat: { + serializedName: "alertDisplayNameFormat", type: { name: "String" } }, - summarize: { - serializedName: "summarize", + alertDescriptionFormat: { + serializedName: "alertDescriptionFormat", type: { name: "String" } }, - project: { - serializedName: "project", + alertTacticsColumnName: { + serializedName: "alertTacticsColumnName", type: { name: "String" } }, - linkColumnsDefinitions: { - serializedName: "linkColumnsDefinitions", + alertSeverityColumnName: { + serializedName: "alertSeverityColumnName", + type: { + name: "String" + } + }, + alertDynamicProperties: { + serializedName: "alertDynamicProperties", type: { name: "Sequence", element: { type: { name: "Composite", - className: - "InsightQueryItemPropertiesTableQueryQueriesDefinitionsPropertiesItemsItem" + className: "AlertPropertyMapping" } } } @@ -4777,20 +4868,19 @@ export const InsightQueryItemPropertiesTableQueryQueriesDefinitionsItem: coreCli } }; -export const InsightQueryItemPropertiesTableQueryQueriesDefinitionsPropertiesItemsItem: coreClient.CompositeMapper = { +export const AlertPropertyMapping: coreClient.CompositeMapper = { type: { name: "Composite", - className: - "InsightQueryItemPropertiesTableQueryQueriesDefinitionsPropertiesItemsItem", + className: "AlertPropertyMapping", modelProperties: { - projectedName: { - serializedName: "projectedName", + alertProperty: { + serializedName: "alertProperty", type: { name: "String" } }, - query: { - serializedName: "Query", + value: { + serializedName: "value", type: { name: "String" } @@ -4799,19 +4889,13 @@ export const InsightQueryItemPropertiesTableQueryQueriesDefinitionsPropertiesIte } }; -export const InsightQueryItemPropertiesAdditionalQuery: coreClient.CompositeMapper = { +export const EventGroupingSettings: coreClient.CompositeMapper = { type: { name: "Composite", - className: "InsightQueryItemPropertiesAdditionalQuery", + className: "EventGroupingSettings", modelProperties: { - query: { - serializedName: "query", - type: { - name: "String" - } - }, - text: { - serializedName: "text", + aggregationKind: { + serializedName: "aggregationKind", type: { name: "String" } @@ -4820,85 +4904,159 @@ export const InsightQueryItemPropertiesAdditionalQuery: coreClient.CompositeMapp } }; -export const InsightQueryItemPropertiesDefaultTimeRange: coreClient.CompositeMapper = { +export const SentinelEntityMapping: coreClient.CompositeMapper = { type: { name: "Composite", - className: "InsightQueryItemPropertiesDefaultTimeRange", + className: "SentinelEntityMapping", modelProperties: { - beforeRange: { - serializedName: "beforeRange", + columnName: { + serializedName: "columnName", type: { name: "String" } + } + } + } +}; + +export const FusionSourceSettings: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "FusionSourceSettings", + modelProperties: { + enabled: { + serializedName: "enabled", + required: true, + type: { + name: "Boolean" + } }, - afterRange: { - serializedName: "afterRange", + sourceName: { + serializedName: "sourceName", + required: true, type: { name: "String" } + }, + sourceSubTypes: { + serializedName: "sourceSubTypes", + type: { + name: "Sequence", + element: { + type: { + name: "Composite", + className: "FusionSourceSubTypeSetting" + } + } + } } } } }; -export const InsightQueryItemPropertiesReferenceTimeRange: coreClient.CompositeMapper = { +export const FusionSourceSubTypeSetting: coreClient.CompositeMapper = { type: { name: "Composite", - className: "InsightQueryItemPropertiesReferenceTimeRange", + className: "FusionSourceSubTypeSetting", modelProperties: { - beforeRange: { - serializedName: "beforeRange", + enabled: { + serializedName: "enabled", + required: true, + type: { + name: "Boolean" + } + }, + sourceSubTypeName: { + serializedName: "sourceSubTypeName", + required: true, + type: { + name: "String" + } + }, + sourceSubTypeDisplayName: { + serializedName: "sourceSubTypeDisplayName", + readOnly: true, type: { name: "String" } + }, + severityFilters: { + serializedName: "severityFilters", + type: { + name: "Composite", + className: "FusionSubTypeSeverityFilter" + } } } } }; -export const ActivityEntityQueriesPropertiesQueryDefinitions: coreClient.CompositeMapper = { +export const FusionSubTypeSeverityFilter: coreClient.CompositeMapper = { type: { name: "Composite", - className: "ActivityEntityQueriesPropertiesQueryDefinitions", + className: "FusionSubTypeSeverityFilter", modelProperties: { - query: { - serializedName: "query", + isSupported: { + serializedName: "isSupported", + readOnly: true, type: { - name: "String" + name: "Boolean" + } + }, + filters: { + serializedName: "filters", + type: { + name: "Sequence", + element: { + type: { + name: "Composite", + className: "FusionSubTypeSeverityFiltersItem" + } + } } } } } }; -export const ActivityEntityQueryTemplatePropertiesQueryDefinitions: coreClient.CompositeMapper = { +export const FusionSubTypeSeverityFiltersItem: coreClient.CompositeMapper = { type: { name: "Composite", - className: "ActivityEntityQueryTemplatePropertiesQueryDefinitions", + className: "FusionSubTypeSeverityFiltersItem", modelProperties: { - query: { - serializedName: "query", + severity: { + serializedName: "severity", + required: true, type: { name: "String" } }, - summarizeBy: { - serializedName: "summarizeBy", + enabled: { + serializedName: "enabled", + required: true, type: { - name: "String" + name: "Boolean" } } } } }; -export const DataTypeDefinitions: coreClient.CompositeMapper = { +export const FusionScenarioExclusionPattern: coreClient.CompositeMapper = { type: { name: "Composite", - className: "DataTypeDefinitions", + className: "FusionScenarioExclusionPattern", modelProperties: { - dataType: { - serializedName: "dataType", + exclusionPattern: { + serializedName: "exclusionPattern", + required: true, + type: { + name: "String" + } + }, + dateAddedInUTC: { + serializedName: "dateAddedInUTC", + required: true, type: { name: "String" } @@ -4907,24 +5065,26 @@ export const DataTypeDefinitions: coreClient.CompositeMapper = { } }; -export const SecurityMLAnalyticsSettingsDataSource: coreClient.CompositeMapper = { +export const FusionTemplateSourceSetting: coreClient.CompositeMapper = { type: { name: "Composite", - className: "SecurityMLAnalyticsSettingsDataSource", + className: "FusionTemplateSourceSetting", modelProperties: { - connectorId: { - serializedName: "connectorId", + sourceName: { + serializedName: "sourceName", + required: true, type: { name: "String" } }, - dataTypes: { - serializedName: "dataTypes", + sourceSubTypes: { + serializedName: "sourceSubTypes", type: { name: "Sequence", element: { type: { - name: "String" + name: "Composite", + className: "FusionTemplateSourceSubType" } } } @@ -4933,367 +5093,288 @@ export const SecurityMLAnalyticsSettingsDataSource: coreClient.CompositeMapper = } }; -export const DataConnectorTenantId: coreClient.CompositeMapper = { +export const FusionTemplateSourceSubType: coreClient.CompositeMapper = { type: { name: "Composite", - className: "DataConnectorTenantId", + className: "FusionTemplateSourceSubType", modelProperties: { - tenantId: { - serializedName: "tenantId", + sourceSubTypeName: { + serializedName: "sourceSubTypeName", required: true, type: { name: "String" } - } - } - } -}; - -export const DataConnectorWithAlertsProperties: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "DataConnectorWithAlertsProperties", - modelProperties: { - dataTypes: { - serializedName: "dataTypes", + }, + sourceSubTypeDisplayName: { + serializedName: "sourceSubTypeDisplayName", + readOnly: true, + type: { + name: "String" + } + }, + severityFilter: { + serializedName: "severityFilter", type: { name: "Composite", - className: "AlertsDataTypeOfDataConnector" + className: "FusionTemplateSubTypeSeverityFilter" } } } } }; -export const AlertsDataTypeOfDataConnector: coreClient.CompositeMapper = { +export const FusionTemplateSubTypeSeverityFilter: coreClient.CompositeMapper = { type: { name: "Composite", - className: "AlertsDataTypeOfDataConnector", + className: "FusionTemplateSubTypeSeverityFilter", modelProperties: { - alerts: { - serializedName: "alerts", + isSupported: { + serializedName: "isSupported", + required: true, type: { - name: "Composite", - className: "DataConnectorDataTypeCommon" + name: "Boolean" + } + }, + severityFilters: { + serializedName: "severityFilters", + type: { + name: "Sequence", + element: { + type: { + name: "String" + } + } } } } } }; -export const DataConnectorDataTypeCommon: coreClient.CompositeMapper = { +export const MicrosoftSecurityIncidentCreationAlertRuleCommonProperties: coreClient.CompositeMapper = { type: { name: "Composite", - className: "DataConnectorDataTypeCommon", + className: "MicrosoftSecurityIncidentCreationAlertRuleCommonProperties", modelProperties: { - state: { - serializedName: "state", + displayNamesFilter: { + serializedName: "displayNamesFilter", + type: { + name: "Sequence", + element: { + type: { + name: "String" + } + } + } + }, + displayNamesExcludeFilter: { + serializedName: "displayNamesExcludeFilter", + type: { + name: "Sequence", + element: { + type: { + name: "String" + } + } + } + }, + productFilter: { + serializedName: "productFilter", required: true, type: { name: "String" } + }, + severitiesFilter: { + serializedName: "severitiesFilter", + type: { + name: "Sequence", + element: { + type: { + name: "String" + } + } + } } } } }; -export const MstiDataConnectorDataTypes: coreClient.CompositeMapper = { +export const IncidentConfiguration: coreClient.CompositeMapper = { type: { name: "Composite", - className: "MstiDataConnectorDataTypes", + className: "IncidentConfiguration", modelProperties: { - bingSafetyPhishingURL: { - serializedName: "bingSafetyPhishingURL", + createIncident: { + serializedName: "createIncident", + required: true, type: { - name: "Composite", - className: "MstiDataConnectorDataTypesBingSafetyPhishingURL" + name: "Boolean" } }, - microsoftEmergingThreatFeed: { - serializedName: "microsoftEmergingThreatFeed", + groupingConfiguration: { + serializedName: "groupingConfiguration", type: { name: "Composite", - className: "MstiDataConnectorDataTypesMicrosoftEmergingThreatFeed" + className: "GroupingConfiguration" } } } } }; -export const MTPDataConnectorDataTypes: coreClient.CompositeMapper = { +export const GroupingConfiguration: coreClient.CompositeMapper = { type: { name: "Composite", - className: "MTPDataConnectorDataTypes", + className: "GroupingConfiguration", modelProperties: { - incidents: { - serializedName: "incidents", - type: { - name: "Composite", - className: "MTPDataConnectorDataTypesIncidents" - } - } - } - } -}; - -export const AwsCloudTrailDataConnectorDataTypes: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "AwsCloudTrailDataConnectorDataTypes", - modelProperties: { - logs: { - serializedName: "logs", - type: { - name: "Composite", - className: "AwsCloudTrailDataConnectorDataTypesLogs" - } - } - } - } -}; - -export const AwsS3DataConnectorDataTypes: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "AwsS3DataConnectorDataTypes", - modelProperties: { - logs: { - serializedName: "logs", + enabled: { + serializedName: "enabled", + required: true, type: { - name: "Composite", - className: "AwsS3DataConnectorDataTypesLogs" + name: "Boolean" } - } - } - } -}; - -export const Dynamics365DataConnectorDataTypes: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "Dynamics365DataConnectorDataTypes", - modelProperties: { - dynamics365CdsActivities: { - serializedName: "dynamics365CdsActivities", + }, + reopenClosedIncident: { + serializedName: "reopenClosedIncident", + required: true, type: { - name: "Composite", - className: "Dynamics365DataConnectorDataTypesDynamics365CdsActivities" + name: "Boolean" } - } - } - } -}; - -export const Office365ProjectConnectorDataTypes: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "Office365ProjectConnectorDataTypes", - modelProperties: { - logs: { - serializedName: "logs", + }, + lookbackDuration: { + serializedName: "lookbackDuration", + required: true, type: { - name: "Composite", - className: "Office365ProjectConnectorDataTypesLogs" + name: "TimeSpan" } - } - } - } -}; - -export const OfficePowerBIConnectorDataTypes: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "OfficePowerBIConnectorDataTypes", - modelProperties: { - logs: { - serializedName: "logs", + }, + matchingMethod: { + serializedName: "matchingMethod", + required: true, type: { - name: "Composite", - className: "OfficePowerBIConnectorDataTypesLogs" + name: "String" } - } - } - } -}; - -export const OfficeDataConnectorDataTypes: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "OfficeDataConnectorDataTypes", - modelProperties: { - exchange: { - serializedName: "exchange", + }, + groupByEntities: { + serializedName: "groupByEntities", type: { - name: "Composite", - className: "OfficeDataConnectorDataTypesExchange" + name: "Sequence", + element: { + type: { + name: "String" + } + } } }, - sharePoint: { - serializedName: "sharePoint", + groupByAlertDetails: { + serializedName: "groupByAlertDetails", type: { - name: "Composite", - className: "OfficeDataConnectorDataTypesSharePoint" + name: "Sequence", + element: { + type: { + name: "String" + } + } } }, - teams: { - serializedName: "teams", + groupByCustomDetails: { + serializedName: "groupByCustomDetails", type: { - name: "Composite", - className: "OfficeDataConnectorDataTypesTeams" + name: "Sequence", + element: { + type: { + name: "String" + } + } } } } } }; -export const TIDataConnectorDataTypes: coreClient.CompositeMapper = { +export const ScheduledAlertRuleCommonProperties: coreClient.CompositeMapper = { type: { name: "Composite", - className: "TIDataConnectorDataTypes", + className: "ScheduledAlertRuleCommonProperties", modelProperties: { - indicators: { - serializedName: "indicators", + query: { + serializedName: "query", type: { - name: "Composite", - className: "TIDataConnectorDataTypesIndicators" + name: "String" } - } - } - } -}; - -export const TiTaxiiDataConnectorDataTypes: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "TiTaxiiDataConnectorDataTypes", - modelProperties: { - taxiiClient: { - serializedName: "taxiiClient", + }, + queryFrequency: { + serializedName: "queryFrequency", type: { - name: "Composite", - className: "TiTaxiiDataConnectorDataTypesTaxiiClient" + name: "TimeSpan" } - } - } - } -}; - -export const CodelessUiConnectorConfigProperties: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "CodelessUiConnectorConfigProperties", - modelProperties: { - title: { - serializedName: "title", - required: true, + }, + queryPeriod: { + serializedName: "queryPeriod", type: { - name: "String" + name: "TimeSpan" } }, - publisher: { - serializedName: "publisher", - required: true, + severity: { + serializedName: "severity", type: { name: "String" } }, - descriptionMarkdown: { - serializedName: "descriptionMarkdown", - required: true, + triggerOperator: { + serializedName: "triggerOperator", type: { - name: "String" + name: "Enum", + allowedValues: ["GreaterThan", "LessThan", "Equal", "NotEqual"] } }, - customImage: { - serializedName: "customImage", + triggerThreshold: { + serializedName: "triggerThreshold", type: { - name: "String" + name: "Number" } }, - graphQueriesTableName: { - serializedName: "graphQueriesTableName", - required: true, + eventGroupingSettings: { + serializedName: "eventGroupingSettings", type: { - name: "String" + name: "Composite", + className: "EventGroupingSettings" } }, - graphQueries: { - serializedName: "graphQueries", - required: true, + customDetails: { + serializedName: "customDetails", type: { - name: "Sequence", - element: { - type: { - name: "Composite", - className: "CodelessUiConnectorConfigPropertiesGraphQueriesItem" - } - } + name: "Dictionary", + value: { type: { name: "String" } } } }, - sampleQueries: { - serializedName: "sampleQueries", - required: true, + entityMappings: { + serializedName: "entityMappings", type: { name: "Sequence", element: { type: { name: "Composite", - className: "CodelessUiConnectorConfigPropertiesSampleQueriesItem" + className: "EntityMapping" } } } }, - dataTypes: { - serializedName: "dataTypes", - required: true, + alertDetailsOverride: { + serializedName: "alertDetailsOverride", type: { - name: "Sequence", - element: { - type: { - name: "Composite", - className: "CodelessUiConnectorConfigPropertiesDataTypesItem" - } - } + name: "Composite", + className: "AlertDetailsOverride" } }, - connectivityCriteria: { - serializedName: "connectivityCriteria", - required: true, + sentinelEntitiesMappings: { + serializedName: "sentinelEntitiesMappings", type: { name: "Sequence", element: { type: { name: "Composite", - className: - "CodelessUiConnectorConfigPropertiesConnectivityCriteriaItem" - } - } - } - }, - availability: { - serializedName: "availability", - type: { - name: "Composite", - className: "Availability" - } - }, - permissions: { - serializedName: "permissions", - type: { - name: "Composite", - className: "Permissions" - } - }, - instructionSteps: { - serializedName: "instructionSteps", - required: true, - type: { - name: "Sequence", - element: { - type: { - name: "Composite", - className: - "CodelessUiConnectorConfigPropertiesInstructionStepsItem" + className: "SentinelEntityMapping" } } } @@ -5302,25 +5383,20 @@ export const CodelessUiConnectorConfigProperties: coreClient.CompositeMapper = { } }; -export const GraphQueries: coreClient.CompositeMapper = { +export const AddIncidentTaskActionProperties: coreClient.CompositeMapper = { type: { name: "Composite", - className: "GraphQueries", + className: "AddIncidentTaskActionProperties", modelProperties: { - metricName: { - serializedName: "metricName", - type: { - name: "String" - } - }, - legend: { - serializedName: "legend", + title: { + serializedName: "title", + required: true, type: { name: "String" } }, - baseQuery: { - serializedName: "baseQuery", + description: { + serializedName: "description", type: { name: "String" } @@ -5329,66 +5405,87 @@ export const GraphQueries: coreClient.CompositeMapper = { } }; -export const SampleQueries: coreClient.CompositeMapper = { +export const AutomationRuleBooleanCondition: coreClient.CompositeMapper = { type: { name: "Composite", - className: "SampleQueries", + className: "AutomationRuleBooleanCondition", modelProperties: { - description: { - serializedName: "description", + operator: { + serializedName: "operator", type: { name: "String" } }, - query: { - serializedName: "query", + innerConditions: { + constraints: { + MinItems: 2, + MaxItems: 10 + }, + serializedName: "innerConditions", type: { - name: "String" + name: "Sequence", + element: { + type: { + name: "Composite", + className: "AutomationRuleCondition" + } + } } } } } }; -export const LastDataReceivedDataType: coreClient.CompositeMapper = { +export const IncidentPropertiesAction: coreClient.CompositeMapper = { type: { name: "Composite", - className: "LastDataReceivedDataType", + className: "IncidentPropertiesAction", modelProperties: { - name: { - serializedName: "name", + severity: { + serializedName: "severity", type: { name: "String" } }, - lastDataReceivedQuery: { - serializedName: "lastDataReceivedQuery", + status: { + serializedName: "status", type: { name: "String" } - } - } - } -}; - -export const ConnectivityCriteria: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "ConnectivityCriteria", - modelProperties: { - type: { - serializedName: "type", + }, + classification: { + serializedName: "classification", type: { name: "String" } }, - value: { - serializedName: "value", + classificationReason: { + serializedName: "classificationReason", + type: { + name: "String" + } + }, + classificationComment: { + serializedName: "classificationComment", + type: { + name: "String" + } + }, + owner: { + serializedName: "owner", + type: { + name: "Composite", + className: "IncidentOwnerInfo" + } + }, + labels: { + serializedName: "labels", type: { name: "Sequence", element: { type: { - name: "String" + name: "Composite", + className: "IncidentLabel" } } } @@ -5397,54 +5494,55 @@ export const ConnectivityCriteria: coreClient.CompositeMapper = { } }; -export const Availability: coreClient.CompositeMapper = { +export const AutomationRulePropertyArrayChangedValuesCondition: coreClient.CompositeMapper = { type: { name: "Composite", - className: "Availability", + className: "AutomationRulePropertyArrayChangedValuesCondition", modelProperties: { - status: { - defaultValue: 1, - isConstant: true, - serializedName: "status", + arrayType: { + serializedName: "arrayType", type: { - name: "Number" + name: "String" } }, - isPreview: { - serializedName: "isPreview", + changeType: { + serializedName: "changeType", type: { - name: "Boolean" + name: "String" } } } } }; -export const Permissions: coreClient.CompositeMapper = { +export const AutomationRulePropertyArrayValuesCondition: coreClient.CompositeMapper = { type: { name: "Composite", - className: "Permissions", + className: "AutomationRulePropertyArrayValuesCondition", modelProperties: { - resourceProvider: { - serializedName: "resourceProvider", + arrayType: { + serializedName: "arrayType", type: { - name: "Sequence", - element: { - type: { - name: "Composite", - className: "PermissionsResourceProviderItem" - } - } + name: "String" } }, - customs: { - serializedName: "customs", + arrayConditionType: { + serializedName: "arrayConditionType", + type: { + name: "String" + } + }, + itemConditions: { + constraints: { + MaxItems: 10 + }, + serializedName: "itemConditions", type: { name: "Sequence", element: { type: { name: "Composite", - className: "PermissionsCustomsItem" + className: "AutomationRuleCondition" } } } @@ -5453,125 +5551,141 @@ export const Permissions: coreClient.CompositeMapper = { } }; -export const ResourceProvider: coreClient.CompositeMapper = { +export const AutomationRulePropertyValuesChangedCondition: coreClient.CompositeMapper = { type: { name: "Composite", - className: "ResourceProvider", + className: "AutomationRulePropertyValuesChangedCondition", modelProperties: { - provider: { - serializedName: "provider", - type: { - name: "String" - } - }, - permissionsDisplayText: { - serializedName: "permissionsDisplayText", + propertyName: { + serializedName: "propertyName", type: { name: "String" } }, - providerDisplayName: { - serializedName: "providerDisplayName", + changeType: { + serializedName: "changeType", type: { name: "String" } }, - scope: { - serializedName: "scope", + operator: { + serializedName: "operator", type: { name: "String" } }, - requiredPermissions: { - serializedName: "requiredPermissions", + propertyValues: { + serializedName: "propertyValues", type: { - name: "Composite", - className: "RequiredPermissions" + name: "Sequence", + element: { + type: { + name: "String" + } + } } } } } }; -export const RequiredPermissions: coreClient.CompositeMapper = { +export const AutomationRulePropertyValuesCondition: coreClient.CompositeMapper = { type: { name: "Composite", - className: "RequiredPermissions", + className: "AutomationRulePropertyValuesCondition", modelProperties: { - action: { - serializedName: "action", - type: { - name: "Boolean" - } - }, - write: { - serializedName: "write", + propertyName: { + serializedName: "propertyName", type: { - name: "Boolean" + name: "String" } }, - read: { - serializedName: "read", + operator: { + serializedName: "operator", type: { - name: "Boolean" + name: "String" } }, - delete: { - serializedName: "delete", + propertyValues: { + serializedName: "propertyValues", type: { - name: "Boolean" + name: "Sequence", + element: { + type: { + name: "String" + } + } } } } } }; -export const CustomsPermission: coreClient.CompositeMapper = { +export const PlaybookActionProperties: coreClient.CompositeMapper = { type: { name: "Composite", - className: "CustomsPermission", + className: "PlaybookActionProperties", modelProperties: { - name: { - serializedName: "name", + logicAppResourceId: { + serializedName: "logicAppResourceId", + required: true, type: { name: "String" } }, - description: { - serializedName: "description", + tenantId: { + serializedName: "tenantId", type: { - name: "String" + name: "Uuid" } } } } }; -export const InstructionSteps: coreClient.CompositeMapper = { +export const MetadataDependenciesAutoGenerated2: coreClient.CompositeMapper = { type: { name: "Composite", - className: "InstructionSteps", + className: "MetadataDependenciesAutoGenerated2", modelProperties: { - title: { - serializedName: "title", + contentId: { + serializedName: "contentId", type: { name: "String" } }, - description: { - serializedName: "description", + kind: { + serializedName: "kind", type: { name: "String" } }, - instructions: { - serializedName: "instructions", + version: { + serializedName: "version", + type: { + name: "String" + } + }, + name: { + serializedName: "name", + type: { + name: "String" + } + }, + operator: { + serializedName: "operator", + type: { + name: "String" + } + }, + criteria: { + serializedName: "criteria", type: { name: "Sequence", element: { type: { name: "Composite", - className: "InstructionStepsInstructionsItem" + className: "MetadataDependenciesAutoGenerated2" } } } @@ -5580,155 +5694,187 @@ export const InstructionSteps: coreClient.CompositeMapper = { } }; -export const ConnectorInstructionModelBase: coreClient.CompositeMapper = { +export const EntityQueryItemProperties: coreClient.CompositeMapper = { type: { name: "Composite", - className: "ConnectorInstructionModelBase", + className: "EntityQueryItemProperties", modelProperties: { - parameters: { - serializedName: "parameters", + dataTypes: { + serializedName: "dataTypes", type: { - name: "Dictionary", - value: { type: { name: "any" } } + name: "Sequence", + element: { + type: { + name: "Composite", + className: "EntityQueryItemPropertiesDataTypesItem" + } + } } }, - type: { - serializedName: "type", - required: true, + inputEntityType: { + serializedName: "inputEntityType", type: { name: "String" } + }, + requiredInputFieldsSets: { + serializedName: "requiredInputFieldsSets", + type: { + name: "Sequence", + element: { + type: { + name: "Sequence", + element: { + type: { + name: "String" + } + } + } + } + } + }, + entitiesFilter: { + serializedName: "entitiesFilter", + type: { + name: "Dictionary", + value: { type: { name: "any" } } + } } } } }; -export const CodelessConnectorPollingConfigProperties: coreClient.CompositeMapper = { +export const EntityQueryItemPropertiesDataTypesItem: coreClient.CompositeMapper = { type: { name: "Composite", - className: "CodelessConnectorPollingConfigProperties", + className: "EntityQueryItemPropertiesDataTypesItem", modelProperties: { - isActive: { - serializedName: "isActive", - type: { - name: "Boolean" - } - }, - auth: { - serializedName: "auth", - type: { - name: "Composite", - className: "CodelessConnectorPollingAuthProperties" - } - }, - request: { - serializedName: "request", + dataType: { + serializedName: "dataType", type: { - name: "Composite", - className: "CodelessConnectorPollingRequestProperties" + name: "String" } - }, - paging: { - serializedName: "paging", + } + } + } +}; + +export const InsightQueryItemPropertiesTableQuery: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "InsightQueryItemPropertiesTableQuery", + modelProperties: { + columnsDefinitions: { + serializedName: "columnsDefinitions", type: { - name: "Composite", - className: "CodelessConnectorPollingPagingProperties" + name: "Sequence", + element: { + type: { + name: "Composite", + className: + "InsightQueryItemPropertiesTableQueryColumnsDefinitionsItem" + } + } } }, - response: { - serializedName: "response", + queriesDefinitions: { + serializedName: "queriesDefinitions", type: { - name: "Composite", - className: "CodelessConnectorPollingResponseProperties" + name: "Sequence", + element: { + type: { + name: "Composite", + className: + "InsightQueryItemPropertiesTableQueryQueriesDefinitionsItem" + } + } } } } } }; -export const CodelessConnectorPollingAuthProperties: coreClient.CompositeMapper = { +export const InsightQueryItemPropertiesTableQueryColumnsDefinitionsItem: coreClient.CompositeMapper = { type: { name: "Composite", - className: "CodelessConnectorPollingAuthProperties", + className: "InsightQueryItemPropertiesTableQueryColumnsDefinitionsItem", modelProperties: { - authType: { - serializedName: "authType", - required: true, - type: { - name: "String" - } - }, - apiKeyName: { - serializedName: "apiKeyName", + header: { + serializedName: "header", type: { name: "String" } }, - apiKeyIdentifier: { - serializedName: "apiKeyIdentifier", + outputType: { + serializedName: "outputType", type: { name: "String" } }, - isApiKeyInPostPayload: { - serializedName: "isApiKeyInPostPayload", + supportDeepLink: { + serializedName: "supportDeepLink", type: { - name: "String" + name: "Boolean" } - }, - flowName: { - serializedName: "flowName", + } + } + } +}; + +export const InsightQueryItemPropertiesTableQueryQueriesDefinitionsItem: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "InsightQueryItemPropertiesTableQueryQueriesDefinitionsItem", + modelProperties: { + filter: { + serializedName: "filter", type: { name: "String" } }, - tokenEndpoint: { - serializedName: "tokenEndpoint", + summarize: { + serializedName: "summarize", type: { name: "String" } }, - authorizationEndpoint: { - serializedName: "authorizationEndpoint", + project: { + serializedName: "project", type: { name: "String" } }, - authorizationEndpointQueryParameters: { - serializedName: "authorizationEndpointQueryParameters", + linkColumnsDefinitions: { + serializedName: "linkColumnsDefinitions", type: { - name: "Dictionary", - value: { type: { name: "any" } } + name: "Sequence", + element: { + type: { + name: "Composite", + className: + "InsightQueryItemPropertiesTableQueryQueriesDefinitionsPropertiesItemsItem" + } + } } - }, - redirectionEndpoint: { - serializedName: "redirectionEndpoint", + } + } + } +}; + +export const InsightQueryItemPropertiesTableQueryQueriesDefinitionsPropertiesItemsItem: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: + "InsightQueryItemPropertiesTableQueryQueriesDefinitionsPropertiesItemsItem", + modelProperties: { + projectedName: { + serializedName: "projectedName", type: { name: "String" } }, - tokenEndpointHeaders: { - serializedName: "tokenEndpointHeaders", - type: { - name: "Dictionary", - value: { type: { name: "any" } } - } - }, - tokenEndpointQueryParameters: { - serializedName: "tokenEndpointQueryParameters", - type: { - name: "Dictionary", - value: { type: { name: "any" } } - } - }, - isClientSecretInHeader: { - serializedName: "isClientSecretInHeader", - type: { - name: "Boolean" - } - }, - scope: { - serializedName: "scope", + query: { + serializedName: "Query", type: { name: "String" } @@ -5737,85 +5883,40 @@ export const CodelessConnectorPollingAuthProperties: coreClient.CompositeMapper } }; -export const CodelessConnectorPollingRequestProperties: coreClient.CompositeMapper = { +export const InsightQueryItemPropertiesAdditionalQuery: coreClient.CompositeMapper = { type: { name: "Composite", - className: "CodelessConnectorPollingRequestProperties", + className: "InsightQueryItemPropertiesAdditionalQuery", modelProperties: { - apiEndpoint: { - serializedName: "apiEndpoint", - required: true, + query: { + serializedName: "query", type: { name: "String" } }, - rateLimitQps: { - serializedName: "rateLimitQps", + text: { + serializedName: "text", type: { - name: "Number" + name: "String" } - }, - queryWindowInMin: { - serializedName: "queryWindowInMin", - required: true, - type: { - name: "Number" - } - }, - httpMethod: { - serializedName: "httpMethod", - required: true, - type: { - name: "String" - } - }, - queryTimeFormat: { - serializedName: "queryTimeFormat", - required: true, - type: { - name: "String" - } - }, - retryCount: { - serializedName: "retryCount", - type: { - name: "Number" - } - }, - timeoutInSeconds: { - serializedName: "timeoutInSeconds", - type: { - name: "Number" - } - }, - headers: { - serializedName: "headers", - type: { - name: "Dictionary", - value: { type: { name: "any" } } - } - }, - queryParameters: { - serializedName: "queryParameters", - type: { - name: "Dictionary", - value: { type: { name: "any" } } - } - }, - queryParametersTemplate: { - serializedName: "queryParametersTemplate", - type: { - name: "String" - } - }, - startTimeAttributeName: { - serializedName: "startTimeAttributeName", + } + } + } +}; + +export const InsightQueryItemPropertiesDefaultTimeRange: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "InsightQueryItemPropertiesDefaultTimeRange", + modelProperties: { + beforeRange: { + serializedName: "beforeRange", type: { name: "String" } }, - endTimeAttributeName: { - serializedName: "endTimeAttributeName", + afterRange: { + serializedName: "afterRange", type: { name: "String" } @@ -5824,78 +5925,129 @@ export const CodelessConnectorPollingRequestProperties: coreClient.CompositeMapp } }; -export const CodelessConnectorPollingPagingProperties: coreClient.CompositeMapper = { +export const InsightQueryItemPropertiesReferenceTimeRange: coreClient.CompositeMapper = { type: { name: "Composite", - className: "CodelessConnectorPollingPagingProperties", + className: "InsightQueryItemPropertiesReferenceTimeRange", modelProperties: { - pagingType: { - serializedName: "pagingType", - required: true, + beforeRange: { + serializedName: "beforeRange", type: { name: "String" } - }, - nextPageParaName: { - serializedName: "nextPageParaName", + } + } + } +}; + +export const ActivityEntityQueriesPropertiesQueryDefinitions: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "ActivityEntityQueriesPropertiesQueryDefinitions", + modelProperties: { + query: { + serializedName: "query", type: { name: "String" } - }, - nextPageTokenJsonPath: { - serializedName: "nextPageTokenJsonPath", + } + } + } +}; + +export const ActivityEntityQueryTemplatePropertiesQueryDefinitions: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "ActivityEntityQueryTemplatePropertiesQueryDefinitions", + modelProperties: { + query: { + serializedName: "query", type: { name: "String" } }, - pageCountAttributePath: { - serializedName: "pageCountAttributePath", + summarizeBy: { + serializedName: "summarizeBy", type: { name: "String" } - }, - pageTotalCountAttributePath: { - serializedName: "pageTotalCountAttributePath", + } + } + } +}; + +export const DataTypeDefinitions: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "DataTypeDefinitions", + modelProperties: { + dataType: { + serializedName: "dataType", type: { name: "String" } - }, - pageTimeStampAttributePath: { - serializedName: "pageTimeStampAttributePath", + } + } + } +}; + +export const TeamProperties: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "TeamProperties", + modelProperties: { + teamName: { + serializedName: "teamName", + required: true, type: { name: "String" } }, - searchTheLatestTimeStampFromEventsList: { - serializedName: "searchTheLatestTimeStampFromEventsList", + teamDescription: { + serializedName: "teamDescription", type: { name: "String" } }, - pageSizeParaName: { - serializedName: "pageSizeParaName", + groupIds: { + serializedName: "groupIds", type: { - name: "String" + name: "Sequence", + element: { + type: { + name: "Uuid" + } + } } }, - pageSize: { - serializedName: "pageSize", + memberIds: { + serializedName: "memberIds", type: { - name: "Number" + name: "Sequence", + element: { + type: { + name: "Uuid" + } + } } } } } }; -export const CodelessConnectorPollingResponseProperties: coreClient.CompositeMapper = { +export const SecurityMLAnalyticsSettingsDataSource: coreClient.CompositeMapper = { type: { name: "Composite", - className: "CodelessConnectorPollingResponseProperties", + className: "SecurityMLAnalyticsSettingsDataSource", modelProperties: { - eventsJsonPaths: { - serializedName: "eventsJsonPaths", - required: true, + connectorId: { + serializedName: "connectorId", + type: { + name: "String" + } + }, + dataTypes: { + serializedName: "dataTypes", type: { name: "Sequence", element: { @@ -5904,72 +6056,19 @@ export const CodelessConnectorPollingResponseProperties: coreClient.CompositeMap } } } - }, - successStatusJsonPath: { - serializedName: "successStatusJsonPath", - type: { - name: "String" - } - }, - successStatusValue: { - serializedName: "successStatusValue", - type: { - name: "String" - } - }, - isGzipCompressed: { - serializedName: "isGzipCompressed", - type: { - name: "Boolean" - } } } } }; -export const ThreatIntelligence: coreClient.CompositeMapper = { +export const DataConnectorTenantId: coreClient.CompositeMapper = { type: { name: "Composite", - className: "ThreatIntelligence", + className: "DataConnectorTenantId", modelProperties: { - confidence: { - serializedName: "confidence", - readOnly: true, - type: { - name: "Number" - } - }, - providerName: { - serializedName: "providerName", - readOnly: true, - type: { - name: "String" - } - }, - reportLink: { - serializedName: "reportLink", - readOnly: true, - type: { - name: "String" - } - }, - threatDescription: { - serializedName: "threatDescription", - readOnly: true, - type: { - name: "String" - } - }, - threatName: { - serializedName: "threatName", - readOnly: true, - type: { - name: "String" - } - }, - threatType: { - serializedName: "threatType", - readOnly: true, + tenantId: { + serializedName: "tenantId", + required: true, type: { name: "String" } @@ -5978,94 +6077,45 @@ export const ThreatIntelligence: coreClient.CompositeMapper = { } }; -export const GeoLocation: coreClient.CompositeMapper = { +export const DataConnectorWithAlertsProperties: coreClient.CompositeMapper = { type: { name: "Composite", - className: "GeoLocation", + className: "DataConnectorWithAlertsProperties", modelProperties: { - asn: { - serializedName: "asn", - readOnly: true, - type: { - name: "Number" - } - }, - city: { - serializedName: "city", - readOnly: true, - type: { - name: "String" - } - }, - countryCode: { - serializedName: "countryCode", - readOnly: true, - type: { - name: "String" - } - }, - countryName: { - serializedName: "countryName", - readOnly: true, - type: { - name: "String" - } - }, - latitude: { - serializedName: "latitude", - readOnly: true, - type: { - name: "Number" - } - }, - longitude: { - serializedName: "longitude", - readOnly: true, - type: { - name: "Number" - } - }, - state: { - serializedName: "state", - readOnly: true, + dataTypes: { + serializedName: "dataTypes", type: { - name: "String" + name: "Composite", + className: "AlertsDataTypeOfDataConnector" } } } } }; -export const ResourceWithEtag: coreClient.CompositeMapper = { +export const AlertsDataTypeOfDataConnector: coreClient.CompositeMapper = { type: { name: "Composite", - className: "ResourceWithEtag", + className: "AlertsDataTypeOfDataConnector", modelProperties: { - ...Resource.type.modelProperties, - etag: { - serializedName: "etag", + alerts: { + serializedName: "alerts", type: { - name: "String" + name: "Composite", + className: "DataConnectorDataTypeCommon" } } } } }; -export const AlertRuleTemplate: coreClient.CompositeMapper = { - serializedName: "AlertRuleTemplate", +export const DataConnectorDataTypeCommon: coreClient.CompositeMapper = { type: { name: "Composite", - className: "AlertRuleTemplate", - uberParent: "Resource", - polymorphicDiscriminator: { - serializedName: "kind", - clientName: "kind" - }, + className: "DataConnectorDataTypeCommon", modelProperties: { - ...Resource.type.modelProperties, - kind: { - serializedName: "kind", + state: { + serializedName: "state", required: true, type: { name: "String" @@ -6075,480 +6125,341 @@ export const AlertRuleTemplate: coreClient.CompositeMapper = { } }; -export const Entity: coreClient.CompositeMapper = { - serializedName: "Entity", +export const MstiDataConnectorDataTypes: coreClient.CompositeMapper = { type: { name: "Composite", - className: "Entity", - uberParent: "Resource", - polymorphicDiscriminator: { - serializedName: "kind", - clientName: "kind" - }, + className: "MstiDataConnectorDataTypes", modelProperties: { - ...Resource.type.modelProperties, - kind: { - serializedName: "kind", - required: true, + microsoftEmergingThreatFeed: { + serializedName: "microsoftEmergingThreatFeed", type: { - name: "String" + name: "Composite", + className: "MstiDataConnectorDataTypesMicrosoftEmergingThreatFeed" } } } } }; -export const EntityQueryTemplate: coreClient.CompositeMapper = { - serializedName: "EntityQueryTemplate", +export const MTPDataConnectorDataTypes: coreClient.CompositeMapper = { type: { name: "Composite", - className: "EntityQueryTemplate", - uberParent: "Resource", - polymorphicDiscriminator: { - serializedName: "kind", - clientName: "kind" - }, + className: "MTPDataConnectorDataTypes", modelProperties: { - ...Resource.type.modelProperties, - kind: { - serializedName: "kind", - required: true, + incidents: { + serializedName: "incidents", type: { - name: "String" + name: "Composite", + className: "MTPDataConnectorDataTypesIncidents" + } + }, + alerts: { + serializedName: "alerts", + type: { + name: "Composite", + className: "MTPDataConnectorDataTypesAlerts" } } } } }; -export const FileImport: coreClient.CompositeMapper = { +export const MtpFilteredProviders: coreClient.CompositeMapper = { type: { name: "Composite", - className: "FileImport", + className: "MtpFilteredProviders", modelProperties: { - ...Resource.type.modelProperties, - ingestionMode: { - serializedName: "properties.ingestionMode", - type: { - name: "String" - } - }, - contentType: { - serializedName: "properties.contentType", - type: { - name: "String" - } - }, - createdTimeUTC: { - serializedName: "properties.createdTimeUTC", - readOnly: true, - type: { - name: "DateTime" - } - }, - errorFile: { - serializedName: "properties.errorFile", - type: { - name: "Composite", - className: "FileMetadata" - } - }, - errorsPreview: { - serializedName: "properties.errorsPreview", - readOnly: true, + alerts: { + serializedName: "alerts", + required: true, type: { name: "Sequence", element: { type: { - name: "Composite", - className: "ValidationError" + name: "String" } } } - }, - importFile: { - serializedName: "properties.importFile", - type: { - name: "Composite", - className: "FileMetadata" - } - }, - ingestedRecordCount: { - serializedName: "properties.ingestedRecordCount", - readOnly: true, - type: { - name: "Number" - } - }, - source: { - serializedName: "properties.source", - type: { - name: "String" - } - }, - state: { - serializedName: "properties.state", - readOnly: true, - type: { - name: "String" - } - }, - totalRecordCount: { - serializedName: "properties.totalRecordCount", - readOnly: true, - type: { - name: "Number" - } - }, - validRecordCount: { - serializedName: "properties.validRecordCount", - readOnly: true, - type: { - name: "Number" - } - }, - filesValidUntilTimeUTC: { - serializedName: "properties.filesValidUntilTimeUTC", - readOnly: true, - type: { - name: "DateTime" - } - }, - importValidUntilTimeUTC: { - serializedName: "properties.importValidUntilTimeUTC", - readOnly: true, - type: { - name: "DateTime" - } } } } }; -export const OfficeConsent: coreClient.CompositeMapper = { +export const AwsCloudTrailDataConnectorDataTypes: coreClient.CompositeMapper = { type: { name: "Composite", - className: "OfficeConsent", + className: "AwsCloudTrailDataConnectorDataTypes", modelProperties: { - ...Resource.type.modelProperties, - tenantId: { - serializedName: "properties.tenantId", - type: { - name: "String" - } - }, - consentId: { - serializedName: "properties.consentId", + logs: { + serializedName: "logs", type: { - name: "String" + name: "Composite", + className: "AwsCloudTrailDataConnectorDataTypesLogs" } } } } }; -export const ActionResponseProperties: coreClient.CompositeMapper = { +export const AwsS3DataConnectorDataTypes: coreClient.CompositeMapper = { type: { name: "Composite", - className: "ActionResponseProperties", + className: "AwsS3DataConnectorDataTypes", modelProperties: { - ...ActionPropertiesBase.type.modelProperties, - workflowId: { - serializedName: "workflowId", + logs: { + serializedName: "logs", type: { - name: "String" + name: "Composite", + className: "AwsS3DataConnectorDataTypesLogs" } } } } }; -export const ActionRequestProperties: coreClient.CompositeMapper = { +export const Dynamics365DataConnectorDataTypes: coreClient.CompositeMapper = { type: { name: "Composite", - className: "ActionRequestProperties", + className: "Dynamics365DataConnectorDataTypes", modelProperties: { - ...ActionPropertiesBase.type.modelProperties, - triggerUri: { - serializedName: "triggerUri", - required: true, + dynamics365CdsActivities: { + serializedName: "dynamics365CdsActivities", type: { - name: "String" + name: "Composite", + className: "Dynamics365DataConnectorDataTypesDynamics365CdsActivities" } } } } }; -export const BooleanConditionProperties: coreClient.CompositeMapper = { - serializedName: "Boolean", +export const MicrosoftPurviewInformationProtectionConnectorDataTypes: coreClient.CompositeMapper = { type: { name: "Composite", - className: "BooleanConditionProperties", - uberParent: "AutomationRuleCondition", - polymorphicDiscriminator: - AutomationRuleCondition.type.polymorphicDiscriminator, + className: "MicrosoftPurviewInformationProtectionConnectorDataTypes", modelProperties: { - ...AutomationRuleCondition.type.modelProperties, - conditionProperties: { - serializedName: "conditionProperties", + logs: { + serializedName: "logs", type: { name: "Composite", - className: "AutomationRuleBooleanCondition" + className: + "MicrosoftPurviewInformationProtectionConnectorDataTypesLogs" } } } } }; -export const PropertyArrayChangedConditionProperties: coreClient.CompositeMapper = { - serializedName: "PropertyArrayChanged", +export const Office365ProjectConnectorDataTypes: coreClient.CompositeMapper = { type: { name: "Composite", - className: "PropertyArrayChangedConditionProperties", - uberParent: "AutomationRuleCondition", - polymorphicDiscriminator: - AutomationRuleCondition.type.polymorphicDiscriminator, + className: "Office365ProjectConnectorDataTypes", modelProperties: { - ...AutomationRuleCondition.type.modelProperties, - conditionProperties: { - serializedName: "conditionProperties", + logs: { + serializedName: "logs", type: { name: "Composite", - className: "AutomationRulePropertyArrayChangedValuesCondition" + className: "Office365ProjectConnectorDataTypesLogs" } } } } }; -export const PropertyArrayConditionProperties: coreClient.CompositeMapper = { - serializedName: "PropertyArray", +export const OfficePowerBIConnectorDataTypes: coreClient.CompositeMapper = { type: { name: "Composite", - className: "PropertyArrayConditionProperties", - uberParent: "AutomationRuleCondition", - polymorphicDiscriminator: - AutomationRuleCondition.type.polymorphicDiscriminator, + className: "OfficePowerBIConnectorDataTypes", modelProperties: { - ...AutomationRuleCondition.type.modelProperties, - conditionProperties: { - serializedName: "conditionProperties", + logs: { + serializedName: "logs", type: { name: "Composite", - className: "AutomationRulePropertyArrayValuesCondition" + className: "OfficePowerBIConnectorDataTypesLogs" } } } } }; -export const PropertyChangedConditionProperties: coreClient.CompositeMapper = { - serializedName: "PropertyChanged", +export const OfficeDataConnectorDataTypes: coreClient.CompositeMapper = { type: { name: "Composite", - className: "PropertyChangedConditionProperties", - uberParent: "AutomationRuleCondition", - polymorphicDiscriminator: - AutomationRuleCondition.type.polymorphicDiscriminator, + className: "OfficeDataConnectorDataTypes", modelProperties: { - ...AutomationRuleCondition.type.modelProperties, - conditionProperties: { - serializedName: "conditionProperties", + exchange: { + serializedName: "exchange", type: { name: "Composite", - className: "AutomationRulePropertyValuesChangedCondition" + className: "OfficeDataConnectorDataTypesExchange" } - } - } - } -}; - -export const PropertyConditionProperties: coreClient.CompositeMapper = { - serializedName: "Property", - type: { - name: "Composite", - className: "PropertyConditionProperties", - uberParent: "AutomationRuleCondition", - polymorphicDiscriminator: - AutomationRuleCondition.type.polymorphicDiscriminator, - modelProperties: { - ...AutomationRuleCondition.type.modelProperties, - conditionProperties: { - serializedName: "conditionProperties", + }, + sharePoint: { + serializedName: "sharePoint", type: { name: "Composite", - className: "AutomationRulePropertyValuesCondition" + className: "OfficeDataConnectorDataTypesSharePoint" + } + }, + teams: { + serializedName: "teams", + type: { + name: "Composite", + className: "OfficeDataConnectorDataTypesTeams" } } } } }; -export const AutomationRuleModifyPropertiesAction: coreClient.CompositeMapper = { - serializedName: "ModifyProperties", +export const TIDataConnectorDataTypes: coreClient.CompositeMapper = { type: { name: "Composite", - className: "AutomationRuleModifyPropertiesAction", - uberParent: "AutomationRuleAction", - polymorphicDiscriminator: - AutomationRuleAction.type.polymorphicDiscriminator, + className: "TIDataConnectorDataTypes", modelProperties: { - ...AutomationRuleAction.type.modelProperties, - actionConfiguration: { - serializedName: "actionConfiguration", + indicators: { + serializedName: "indicators", type: { name: "Composite", - className: "IncidentPropertiesAction" + className: "TIDataConnectorDataTypesIndicators" } } } } }; -export const AutomationRuleRunPlaybookAction: coreClient.CompositeMapper = { - serializedName: "RunPlaybook", +export const TiTaxiiDataConnectorDataTypes: coreClient.CompositeMapper = { type: { name: "Composite", - className: "AutomationRuleRunPlaybookAction", - uberParent: "AutomationRuleAction", - polymorphicDiscriminator: - AutomationRuleAction.type.polymorphicDiscriminator, + className: "TiTaxiiDataConnectorDataTypes", modelProperties: { - ...AutomationRuleAction.type.modelProperties, - actionConfiguration: { - serializedName: "actionConfiguration", + taxiiClient: { + serializedName: "taxiiClient", type: { name: "Composite", - className: "PlaybookActionProperties" + className: "TiTaxiiDataConnectorDataTypesTaxiiClient" } } } } }; -export const ActivityTimelineItem: coreClient.CompositeMapper = { - serializedName: "Activity", +export const CodelessUiConnectorConfigProperties: coreClient.CompositeMapper = { type: { name: "Composite", - className: "ActivityTimelineItem", - uberParent: "EntityTimelineItem", - polymorphicDiscriminator: EntityTimelineItem.type.polymorphicDiscriminator, + className: "CodelessUiConnectorConfigProperties", modelProperties: { - ...EntityTimelineItem.type.modelProperties, - queryId: { - serializedName: "queryId", + title: { + serializedName: "title", required: true, type: { name: "String" } }, - bucketStartTimeUTC: { - serializedName: "bucketStartTimeUTC", - required: true, - type: { - name: "DateTime" - } - }, - bucketEndTimeUTC: { - serializedName: "bucketEndTimeUTC", - required: true, - type: { - name: "DateTime" - } - }, - firstActivityTimeUTC: { - serializedName: "firstActivityTimeUTC", - required: true, - type: { - name: "DateTime" - } - }, - lastActivityTimeUTC: { - serializedName: "lastActivityTimeUTC", + publisher: { + serializedName: "publisher", required: true, type: { - name: "DateTime" + name: "String" } }, - content: { - serializedName: "content", + descriptionMarkdown: { + serializedName: "descriptionMarkdown", required: true, type: { name: "String" } }, - title: { - serializedName: "title", - required: true, + customImage: { + serializedName: "customImage", type: { name: "String" } - } - } - } -}; - -export const BookmarkTimelineItem: coreClient.CompositeMapper = { - serializedName: "Bookmark", - type: { - name: "Composite", - className: "BookmarkTimelineItem", - uberParent: "EntityTimelineItem", - polymorphicDiscriminator: EntityTimelineItem.type.polymorphicDiscriminator, - modelProperties: { - ...EntityTimelineItem.type.modelProperties, - azureResourceId: { - serializedName: "azureResourceId", + }, + graphQueriesTableName: { + serializedName: "graphQueriesTableName", required: true, type: { name: "String" } }, - displayName: { - serializedName: "displayName", + graphQueries: { + serializedName: "graphQueries", + required: true, type: { - name: "String" + name: "Sequence", + element: { + type: { + name: "Composite", + className: "CodelessUiConnectorConfigPropertiesGraphQueriesItem" + } + } } }, - notes: { - serializedName: "notes", + sampleQueries: { + serializedName: "sampleQueries", + required: true, type: { - name: "String" + name: "Sequence", + element: { + type: { + name: "Composite", + className: "CodelessUiConnectorConfigPropertiesSampleQueriesItem" + } + } } }, - endTimeUtc: { - serializedName: "endTimeUtc", + dataTypes: { + serializedName: "dataTypes", + required: true, type: { - name: "DateTime" + name: "Sequence", + element: { + type: { + name: "Composite", + className: "CodelessUiConnectorConfigPropertiesDataTypesItem" + } + } } }, - startTimeUtc: { - serializedName: "startTimeUtc", + connectivityCriteria: { + serializedName: "connectivityCriteria", + required: true, type: { - name: "DateTime" + name: "Sequence", + element: { + type: { + name: "Composite", + className: + "CodelessUiConnectorConfigPropertiesConnectivityCriteriaItem" + } + } } }, - eventTime: { - serializedName: "eventTime", + availability: { + serializedName: "availability", type: { - name: "DateTime" + name: "Composite", + className: "Availability" } }, - createdBy: { - serializedName: "createdBy", + permissions: { + serializedName: "permissions", type: { name: "Composite", - className: "UserInfo" + className: "Permissions" } }, - labels: { - serializedName: "labels", + instructionSteps: { + serializedName: "instructionSteps", + required: true, type: { name: "Sequence", element: { type: { - name: "String" + name: "Composite", + className: + "CodelessUiConnectorConfigPropertiesInstructionStepsItem" } } } @@ -6557,92 +6468,149 @@ export const BookmarkTimelineItem: coreClient.CompositeMapper = { } }; -export const AnomalyTimelineItem: coreClient.CompositeMapper = { - serializedName: "Anomaly", +export const GraphQueries: coreClient.CompositeMapper = { type: { name: "Composite", - className: "AnomalyTimelineItem", - uberParent: "EntityTimelineItem", - polymorphicDiscriminator: EntityTimelineItem.type.polymorphicDiscriminator, + className: "GraphQueries", modelProperties: { - ...EntityTimelineItem.type.modelProperties, - azureResourceId: { - serializedName: "azureResourceId", - required: true, + metricName: { + serializedName: "metricName", type: { name: "String" } }, - productName: { - serializedName: "productName", + legend: { + serializedName: "legend", type: { name: "String" } }, + baseQuery: { + serializedName: "baseQuery", + type: { + name: "String" + } + } + } + } +}; + +export const SampleQueries: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "SampleQueries", + modelProperties: { description: { serializedName: "description", type: { name: "String" } }, - displayName: { - serializedName: "displayName", - required: true, + query: { + serializedName: "query", type: { name: "String" } - }, - endTimeUtc: { - serializedName: "endTimeUtc", - required: true, + } + } + } +}; + +export const LastDataReceivedDataType: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "LastDataReceivedDataType", + modelProperties: { + name: { + serializedName: "name", type: { - name: "DateTime" + name: "String" } }, - startTimeUtc: { - serializedName: "startTimeUtc", - required: true, + lastDataReceivedQuery: { + serializedName: "lastDataReceivedQuery", type: { - name: "DateTime" + name: "String" } - }, - timeGenerated: { - serializedName: "timeGenerated", - required: true, + } + } + } +}; + +export const ConnectivityCriteria: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "ConnectivityCriteria", + modelProperties: { + type: { + serializedName: "type", type: { - name: "DateTime" + name: "String" } }, - vendor: { - serializedName: "vendor", + value: { + serializedName: "value", type: { - name: "String" + name: "Sequence", + element: { + type: { + name: "String" + } + } } - }, - intent: { - serializedName: "intent", + } + } + } +}; + +export const Availability: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "Availability", + modelProperties: { + status: { + defaultValue: 1, + isConstant: true, + serializedName: "status", type: { - name: "String" + name: "Number" } }, - techniques: { - serializedName: "techniques", + isPreview: { + serializedName: "isPreview", + type: { + name: "Boolean" + } + } + } + } +}; + +export const Permissions: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "Permissions", + modelProperties: { + resourceProvider: { + serializedName: "resourceProvider", type: { name: "Sequence", element: { type: { - name: "String" + name: "Composite", + className: "PermissionsResourceProviderItem" } } } }, - reasons: { - serializedName: "reasons", + customs: { + serializedName: "customs", type: { name: "Sequence", element: { type: { - name: "String" + name: "Composite", + className: "PermissionsCustomsItem" } } } @@ -6651,705 +6619,580 @@ export const AnomalyTimelineItem: coreClient.CompositeMapper = { } }; -export const SecurityAlertTimelineItem: coreClient.CompositeMapper = { - serializedName: "SecurityAlert", +export const ResourceProvider: coreClient.CompositeMapper = { type: { name: "Composite", - className: "SecurityAlertTimelineItem", - uberParent: "EntityTimelineItem", - polymorphicDiscriminator: EntityTimelineItem.type.polymorphicDiscriminator, + className: "ResourceProvider", modelProperties: { - ...EntityTimelineItem.type.modelProperties, - azureResourceId: { - serializedName: "azureResourceId", - required: true, + provider: { + serializedName: "provider", type: { name: "String" } }, - productName: { - serializedName: "productName", + permissionsDisplayText: { + serializedName: "permissionsDisplayText", type: { name: "String" } }, - description: { - serializedName: "description", + providerDisplayName: { + serializedName: "providerDisplayName", type: { name: "String" } }, - displayName: { - serializedName: "displayName", - required: true, + scope: { + serializedName: "scope", type: { name: "String" } }, - severity: { - serializedName: "severity", - required: true, + requiredPermissions: { + serializedName: "requiredPermissions", type: { - name: "String" + name: "Composite", + className: "RequiredPermissions" } - }, - endTimeUtc: { - serializedName: "endTimeUtc", - required: true, + } + } + } +}; + +export const RequiredPermissions: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "RequiredPermissions", + modelProperties: { + action: { + serializedName: "action", type: { - name: "DateTime" + name: "Boolean" } }, - startTimeUtc: { - serializedName: "startTimeUtc", - required: true, + write: { + serializedName: "write", type: { - name: "DateTime" + name: "Boolean" } }, - timeGenerated: { - serializedName: "timeGenerated", - required: true, + read: { + serializedName: "read", type: { - name: "DateTime" + name: "Boolean" } }, - alertType: { - serializedName: "alertType", - required: true, + delete: { + serializedName: "delete", type: { - name: "String" + name: "Boolean" } } } } }; -export const InsightQueryItem: coreClient.CompositeMapper = { - serializedName: "Insight", +export const CustomsPermission: coreClient.CompositeMapper = { type: { name: "Composite", - className: "InsightQueryItem", - uberParent: "EntityQueryItem", - polymorphicDiscriminator: EntityQueryItem.type.polymorphicDiscriminator, + className: "CustomsPermission", modelProperties: { - ...EntityQueryItem.type.modelProperties, - properties: { - serializedName: "properties", + name: { + serializedName: "name", type: { - name: "Composite", - className: "InsightQueryItemProperties" + name: "String" + } + }, + description: { + serializedName: "description", + type: { + name: "String" } } } } }; -export const SecurityAlertProperties: coreClient.CompositeMapper = { +export const InstructionSteps: coreClient.CompositeMapper = { type: { name: "Composite", - className: "SecurityAlertProperties", + className: "InstructionSteps", modelProperties: { - ...EntityCommonProperties.type.modelProperties, - alertDisplayName: { - serializedName: "alertDisplayName", - readOnly: true, + title: { + serializedName: "title", type: { name: "String" } }, - alertType: { - serializedName: "alertType", - readOnly: true, + description: { + serializedName: "description", type: { name: "String" } }, - compromisedEntity: { - serializedName: "compromisedEntity", - readOnly: true, - type: { - name: "String" - } - }, - confidenceLevel: { - serializedName: "confidenceLevel", - readOnly: true, - type: { - name: "String" - } - }, - confidenceReasons: { - serializedName: "confidenceReasons", - readOnly: true, + instructions: { + serializedName: "instructions", type: { name: "Sequence", element: { type: { name: "Composite", - className: "SecurityAlertPropertiesConfidenceReasonsItem" + className: "InstructionStepsInstructionsItem" } } } - }, - confidenceScore: { - serializedName: "confidenceScore", - readOnly: true, + } + } + } +}; + +export const ConnectorInstructionModelBase: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "ConnectorInstructionModelBase", + modelProperties: { + parameters: { + serializedName: "parameters", type: { - name: "Number" + name: "Dictionary", + value: { type: { name: "any" } } } }, - confidenceScoreStatus: { - serializedName: "confidenceScoreStatus", - readOnly: true, + type: { + serializedName: "type", + required: true, type: { name: "String" } - }, - description: { - serializedName: "description", - readOnly: true, + } + } + } +}; + +export const CodelessConnectorPollingConfigProperties: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "CodelessConnectorPollingConfigProperties", + modelProperties: { + isActive: { + serializedName: "isActive", type: { - name: "String" + name: "Boolean" } }, - endTimeUtc: { - serializedName: "endTimeUtc", - readOnly: true, + auth: { + serializedName: "auth", type: { - name: "DateTime" + name: "Composite", + className: "CodelessConnectorPollingAuthProperties" } }, - intent: { - serializedName: "intent", - readOnly: true, + request: { + serializedName: "request", type: { - name: "String" + name: "Composite", + className: "CodelessConnectorPollingRequestProperties" } }, - providerAlertId: { - serializedName: "providerAlertId", - readOnly: true, + paging: { + serializedName: "paging", type: { - name: "String" + name: "Composite", + className: "CodelessConnectorPollingPagingProperties" } }, - processingEndTime: { - serializedName: "processingEndTime", - readOnly: true, + response: { + serializedName: "response", type: { - name: "DateTime" + name: "Composite", + className: "CodelessConnectorPollingResponseProperties" } - }, - productComponentName: { - serializedName: "productComponentName", - readOnly: true, + } + } + } +}; + +export const CodelessConnectorPollingAuthProperties: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "CodelessConnectorPollingAuthProperties", + modelProperties: { + authType: { + serializedName: "authType", + required: true, type: { name: "String" } }, - productName: { - serializedName: "productName", - readOnly: true, + apiKeyName: { + serializedName: "apiKeyName", type: { name: "String" } }, - productVersion: { - serializedName: "productVersion", - readOnly: true, + apiKeyIdentifier: { + serializedName: "apiKeyIdentifier", type: { name: "String" } }, - remediationSteps: { - serializedName: "remediationSteps", - readOnly: true, + isApiKeyInPostPayload: { + serializedName: "isApiKeyInPostPayload", type: { - name: "Sequence", - element: { - type: { - name: "String" - } - } + name: "String" } }, - severity: { - serializedName: "severity", + flowName: { + serializedName: "flowName", type: { name: "String" } }, - startTimeUtc: { - serializedName: "startTimeUtc", - readOnly: true, + tokenEndpoint: { + serializedName: "tokenEndpoint", type: { - name: "DateTime" + name: "String" } }, - status: { - serializedName: "status", - readOnly: true, + authorizationEndpoint: { + serializedName: "authorizationEndpoint", type: { name: "String" } }, - systemAlertId: { - serializedName: "systemAlertId", - readOnly: true, + authorizationEndpointQueryParameters: { + serializedName: "authorizationEndpointQueryParameters", type: { - name: "String" + name: "Dictionary", + value: { type: { name: "any" } } } }, - tactics: { - serializedName: "tactics", - readOnly: true, + redirectionEndpoint: { + serializedName: "redirectionEndpoint", type: { - name: "Sequence", - element: { - type: { - name: "String" - } - } + name: "String" } }, - timeGenerated: { - serializedName: "timeGenerated", - readOnly: true, + tokenEndpointHeaders: { + serializedName: "tokenEndpointHeaders", type: { - name: "DateTime" + name: "Dictionary", + value: { type: { name: "any" } } } }, - vendorName: { - serializedName: "vendorName", - readOnly: true, + tokenEndpointQueryParameters: { + serializedName: "tokenEndpointQueryParameters", type: { - name: "String" + name: "Dictionary", + value: { type: { name: "any" } } } }, - alertLink: { - serializedName: "alertLink", - readOnly: true, + isClientSecretInHeader: { + serializedName: "isClientSecretInHeader", type: { - name: "String" + name: "Boolean" } }, - resourceIdentifiers: { - serializedName: "resourceIdentifiers", - readOnly: true, + scope: { + serializedName: "scope", type: { - name: "Sequence", - element: { - type: { - name: "Dictionary", - value: { type: { name: "any" } } - } - } + name: "String" } } } } }; -export const HuntingBookmarkProperties: coreClient.CompositeMapper = { +export const CodelessConnectorPollingRequestProperties: coreClient.CompositeMapper = { type: { name: "Composite", - className: "HuntingBookmarkProperties", + className: "CodelessConnectorPollingRequestProperties", modelProperties: { - ...EntityCommonProperties.type.modelProperties, - created: { - serializedName: "created", - type: { - name: "DateTime" - } - }, - createdBy: { - serializedName: "createdBy", - type: { - name: "Composite", - className: "UserInfo" - } - }, - displayName: { - serializedName: "displayName", + apiEndpoint: { + serializedName: "apiEndpoint", required: true, type: { name: "String" } }, - eventTime: { - serializedName: "eventTime", + rateLimitQps: { + serializedName: "rateLimitQps", type: { - name: "DateTime" + name: "Number" } }, - labels: { - serializedName: "labels", + queryWindowInMin: { + serializedName: "queryWindowInMin", + required: true, type: { - name: "Sequence", - element: { - type: { - name: "String" - } - } + name: "Number" } }, - notes: { - serializedName: "notes", + httpMethod: { + serializedName: "httpMethod", + required: true, type: { name: "String" } }, - query: { - serializedName: "query", + queryTimeFormat: { + serializedName: "queryTimeFormat", required: true, type: { name: "String" } }, - queryResult: { - serializedName: "queryResult", + retryCount: { + serializedName: "retryCount", type: { - name: "String" + name: "Number" } }, - updated: { - serializedName: "updated", - type: { - name: "DateTime" - } - }, - updatedBy: { - serializedName: "updatedBy", + timeoutInSeconds: { + serializedName: "timeoutInSeconds", type: { - name: "Composite", - className: "UserInfo" + name: "Number" } }, - incidentInfo: { - serializedName: "incidentInfo", - type: { - name: "Composite", - className: "IncidentInfo" - } - } - } - } -}; - -export const ThreatIntelligenceIndicatorProperties: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "ThreatIntelligenceIndicatorProperties", - modelProperties: { - ...EntityCommonProperties.type.modelProperties, - threatIntelligenceTags: { - serializedName: "threatIntelligenceTags", + headers: { + serializedName: "headers", type: { - name: "Sequence", - element: { - type: { - name: "String" - } - } + name: "Dictionary", + value: { type: { name: "any" } } } }, - lastUpdatedTimeUtc: { - serializedName: "lastUpdatedTimeUtc", + queryParameters: { + serializedName: "queryParameters", type: { - name: "String" + name: "Dictionary", + value: { type: { name: "any" } } } }, - source: { - serializedName: "source", + queryParametersTemplate: { + serializedName: "queryParametersTemplate", type: { name: "String" } }, - displayName: { - serializedName: "displayName", + startTimeAttributeName: { + serializedName: "startTimeAttributeName", type: { name: "String" } }, - description: { - serializedName: "description", + endTimeAttributeName: { + serializedName: "endTimeAttributeName", type: { name: "String" } - }, - indicatorTypes: { - serializedName: "indicatorTypes", - type: { - name: "Sequence", - element: { - type: { - name: "String" - } - } - } - }, - pattern: { - serializedName: "pattern", + } + } + } +}; + +export const CodelessConnectorPollingPagingProperties: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "CodelessConnectorPollingPagingProperties", + modelProperties: { + pagingType: { + serializedName: "pagingType", + required: true, type: { name: "String" } }, - patternType: { - serializedName: "patternType", + nextPageParaName: { + serializedName: "nextPageParaName", type: { name: "String" } }, - patternVersion: { - serializedName: "patternVersion", + nextPageTokenJsonPath: { + serializedName: "nextPageTokenJsonPath", type: { name: "String" } }, - killChainPhases: { - serializedName: "killChainPhases", + pageCountAttributePath: { + serializedName: "pageCountAttributePath", type: { - name: "Sequence", - element: { - type: { - name: "Composite", - className: "ThreatIntelligenceKillChainPhase" - } - } + name: "String" } }, - parsedPattern: { - serializedName: "parsedPattern", + pageTotalCountAttributePath: { + serializedName: "pageTotalCountAttributePath", type: { - name: "Sequence", - element: { - type: { - name: "Composite", - className: "ThreatIntelligenceParsedPattern" - } - } + name: "String" } }, - externalId: { - serializedName: "externalId", + pageTimeStampAttributePath: { + serializedName: "pageTimeStampAttributePath", type: { name: "String" } }, - createdByRef: { - serializedName: "createdByRef", + searchTheLatestTimeStampFromEventsList: { + serializedName: "searchTheLatestTimeStampFromEventsList", type: { name: "String" } }, - defanged: { - serializedName: "defanged", + pageSizeParaName: { + serializedName: "pageSizeParaName", type: { - name: "Boolean" + name: "String" } }, - externalLastUpdatedTimeUtc: { - serializedName: "externalLastUpdatedTimeUtc", + pageSize: { + serializedName: "pageSize", type: { - name: "String" + name: "Number" } - }, - externalReferences: { - serializedName: "externalReferences", + } + } + } +}; + +export const CodelessConnectorPollingResponseProperties: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "CodelessConnectorPollingResponseProperties", + modelProperties: { + eventsJsonPaths: { + serializedName: "eventsJsonPaths", + required: true, type: { name: "Sequence", element: { type: { - name: "Composite", - className: "ThreatIntelligenceExternalReference" + name: "String" } } } }, - granularMarkings: { - serializedName: "granularMarkings", + successStatusJsonPath: { + serializedName: "successStatusJsonPath", type: { - name: "Sequence", - element: { - type: { - name: "Composite", - className: "ThreatIntelligenceGranularMarkingModel" - } - } + name: "String" } }, - labels: { - serializedName: "labels", + successStatusValue: { + serializedName: "successStatusValue", type: { - name: "Sequence", - element: { - type: { - name: "String" - } - } + name: "String" } }, - revoked: { - serializedName: "revoked", + isGzipCompressed: { + serializedName: "isGzipCompressed", type: { name: "Boolean" } - }, + } + } + } +}; + +export const ThreatIntelligence: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "ThreatIntelligence", + modelProperties: { confidence: { serializedName: "confidence", + readOnly: true, type: { name: "Number" } }, - objectMarkingRefs: { - serializedName: "objectMarkingRefs", - type: { - name: "Sequence", - element: { - type: { - name: "String" - } - } - } - }, - language: { - serializedName: "language", + providerName: { + serializedName: "providerName", + readOnly: true, type: { name: "String" } }, - threatTypes: { - serializedName: "threatTypes", - type: { - name: "Sequence", - element: { - type: { - name: "String" - } - } - } - }, - validFrom: { - serializedName: "validFrom", + reportLink: { + serializedName: "reportLink", + readOnly: true, type: { name: "String" } }, - validUntil: { - serializedName: "validUntil", + threatDescription: { + serializedName: "threatDescription", + readOnly: true, type: { name: "String" } }, - created: { - serializedName: "created", + threatName: { + serializedName: "threatName", + readOnly: true, type: { name: "String" } }, - modified: { - serializedName: "modified", + threatType: { + serializedName: "threatType", + readOnly: true, type: { name: "String" } - }, - extensions: { - serializedName: "extensions", - type: { - name: "Dictionary", - value: { type: { name: "any" } } - } } } } }; -export const AccountEntityProperties: coreClient.CompositeMapper = { +export const GeoLocation: coreClient.CompositeMapper = { type: { name: "Composite", - className: "AccountEntityProperties", + className: "GeoLocation", modelProperties: { - ...EntityCommonProperties.type.modelProperties, - aadTenantId: { - serializedName: "aadTenantId", - readOnly: true, - type: { - name: "String" - } - }, - aadUserId: { - serializedName: "aadUserId", - readOnly: true, - type: { - name: "String" - } - }, - accountName: { - serializedName: "accountName", - readOnly: true, - type: { - name: "String" - } - }, - displayName: { - serializedName: "displayName", + asn: { + serializedName: "asn", readOnly: true, type: { - name: "String" + name: "Number" } }, - hostEntityId: { - serializedName: "hostEntityId", + city: { + serializedName: "city", readOnly: true, type: { name: "String" } }, - isDomainJoined: { - serializedName: "isDomainJoined", - readOnly: true, - type: { - name: "Boolean" - } - }, - ntDomain: { - serializedName: "ntDomain", + countryCode: { + serializedName: "countryCode", readOnly: true, type: { name: "String" } }, - objectGuid: { - serializedName: "objectGuid", - readOnly: true, - type: { - name: "Uuid" - } - }, - puid: { - serializedName: "puid", + countryName: { + serializedName: "countryName", readOnly: true, type: { name: "String" } }, - sid: { - serializedName: "sid", + latitude: { + serializedName: "latitude", readOnly: true, type: { - name: "String" + name: "Number" } }, - upnSuffix: { - serializedName: "upnSuffix", + longitude: { + serializedName: "longitude", readOnly: true, type: { - name: "String" + name: "Number" } }, - dnsDomain: { - serializedName: "dnsDomain", + state: { + serializedName: "state", readOnly: true, type: { name: "String" @@ -7359,22 +7202,37 @@ export const AccountEntityProperties: coreClient.CompositeMapper = { } }; -export const AzureResourceEntityProperties: coreClient.CompositeMapper = { +export const ResourceWithEtag: coreClient.CompositeMapper = { type: { name: "Composite", - className: "AzureResourceEntityProperties", + className: "ResourceWithEtag", modelProperties: { - ...EntityCommonProperties.type.modelProperties, - resourceId: { - serializedName: "resourceId", - readOnly: true, + ...Resource.type.modelProperties, + etag: { + serializedName: "etag", type: { name: "String" } - }, - subscriptionId: { - serializedName: "subscriptionId", - readOnly: true, + } + } + } +}; + +export const AlertRuleTemplate: coreClient.CompositeMapper = { + serializedName: "AlertRuleTemplate", + type: { + name: "Composite", + className: "AlertRuleTemplate", + uberParent: "Resource", + polymorphicDiscriminator: { + serializedName: "kind", + clientName: "kind" + }, + modelProperties: { + ...Resource.type.modelProperties, + kind: { + serializedName: "kind", + required: true, type: { name: "String" } @@ -7383,29 +7241,44 @@ export const AzureResourceEntityProperties: coreClient.CompositeMapper = { } }; -export const CloudApplicationEntityProperties: coreClient.CompositeMapper = { +export const Entity: coreClient.CompositeMapper = { + serializedName: "Entity", type: { name: "Composite", - className: "CloudApplicationEntityProperties", + className: "Entity", + uberParent: "Resource", + polymorphicDiscriminator: { + serializedName: "kind", + clientName: "kind" + }, modelProperties: { - ...EntityCommonProperties.type.modelProperties, - appId: { - serializedName: "appId", - readOnly: true, - type: { - name: "Number" - } - }, - appName: { - serializedName: "appName", - readOnly: true, + ...Resource.type.modelProperties, + kind: { + serializedName: "kind", + required: true, type: { name: "String" } - }, - instanceName: { - serializedName: "instanceName", - readOnly: true, + } + } + } +}; + +export const EntityQueryTemplate: coreClient.CompositeMapper = { + serializedName: "EntityQueryTemplate", + type: { + name: "Composite", + className: "EntityQueryTemplate", + uberParent: "Resource", + polymorphicDiscriminator: { + serializedName: "kind", + clientName: "kind" + }, + modelProperties: { + ...Resource.type.modelProperties, + kind: { + serializedName: "kind", + required: true, type: { name: "String" } @@ -7414,108 +7287,124 @@ export const CloudApplicationEntityProperties: coreClient.CompositeMapper = { } }; -export const DnsEntityProperties: coreClient.CompositeMapper = { +export const FileImport: coreClient.CompositeMapper = { type: { name: "Composite", - className: "DnsEntityProperties", + className: "FileImport", modelProperties: { - ...EntityCommonProperties.type.modelProperties, - dnsServerIpEntityId: { - serializedName: "dnsServerIpEntityId", - readOnly: true, + ...Resource.type.modelProperties, + ingestionMode: { + serializedName: "properties.ingestionMode", type: { name: "String" } }, - domainName: { - serializedName: "domainName", - readOnly: true, + contentType: { + serializedName: "properties.contentType", type: { name: "String" } }, - hostIpAddressEntityId: { - serializedName: "hostIpAddressEntityId", + createdTimeUTC: { + serializedName: "properties.createdTimeUTC", readOnly: true, type: { - name: "String" + name: "DateTime" } }, - ipAddressEntityIds: { - serializedName: "ipAddressEntityIds", + errorFile: { + serializedName: "properties.errorFile", + type: { + name: "Composite", + className: "FileMetadata" + } + }, + errorsPreview: { + serializedName: "properties.errorsPreview", readOnly: true, type: { name: "Sequence", element: { type: { - name: "String" + name: "Composite", + className: "ValidationError" } } } - } - } - } -}; - -export const FileEntityProperties: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "FileEntityProperties", - modelProperties: { - ...EntityCommonProperties.type.modelProperties, - directory: { - serializedName: "directory", + }, + importFile: { + serializedName: "properties.importFile", + type: { + name: "Composite", + className: "FileMetadata" + } + }, + ingestedRecordCount: { + serializedName: "properties.ingestedRecordCount", readOnly: true, + type: { + name: "Number" + } + }, + source: { + serializedName: "properties.source", type: { name: "String" } }, - fileHashEntityIds: { - serializedName: "fileHashEntityIds", + state: { + serializedName: "properties.state", readOnly: true, type: { - name: "Sequence", - element: { - type: { - name: "String" - } - } + name: "String" } }, - fileName: { - serializedName: "fileName", + totalRecordCount: { + serializedName: "properties.totalRecordCount", readOnly: true, type: { - name: "String" + name: "Number" } }, - hostEntityId: { - serializedName: "hostEntityId", + validRecordCount: { + serializedName: "properties.validRecordCount", readOnly: true, type: { - name: "String" + name: "Number" + } + }, + filesValidUntilTimeUTC: { + serializedName: "properties.filesValidUntilTimeUTC", + readOnly: true, + type: { + name: "DateTime" + } + }, + importValidUntilTimeUTC: { + serializedName: "properties.importValidUntilTimeUTC", + readOnly: true, + type: { + name: "DateTime" } } } } }; -export const FileHashEntityProperties: coreClient.CompositeMapper = { +export const OfficeConsent: coreClient.CompositeMapper = { type: { name: "Composite", - className: "FileHashEntityProperties", + className: "OfficeConsent", modelProperties: { - ...EntityCommonProperties.type.modelProperties, - algorithm: { - serializedName: "algorithm", - readOnly: true, + ...Resource.type.modelProperties, + tenantId: { + serializedName: "properties.tenantId", type: { name: "String" } }, - hashValue: { - serializedName: "hashValue", - readOnly: true, + consentId: { + serializedName: "properties.consentId", type: { name: "String" } @@ -7524,206 +7413,341 @@ export const FileHashEntityProperties: coreClient.CompositeMapper = { } }; -export const HostEntityProperties: coreClient.CompositeMapper = { +export const AzureEntityResource: coreClient.CompositeMapper = { type: { name: "Composite", - className: "HostEntityProperties", + className: "AzureEntityResource", modelProperties: { - ...EntityCommonProperties.type.modelProperties, - azureID: { - serializedName: "azureID", + ...Resource.type.modelProperties, + etag: { + serializedName: "etag", readOnly: true, type: { name: "String" } - }, - dnsDomain: { - serializedName: "dnsDomain", - readOnly: true, + } + } + } +}; + +export const ActionResponseProperties: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "ActionResponseProperties", + modelProperties: { + ...ActionPropertiesBase.type.modelProperties, + workflowId: { + serializedName: "workflowId", type: { name: "String" } - }, - hostName: { - serializedName: "hostName", - readOnly: true, + } + } + } +}; + +export const ActionRequestProperties: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "ActionRequestProperties", + modelProperties: { + ...ActionPropertiesBase.type.modelProperties, + triggerUri: { + serializedName: "triggerUri", + required: true, type: { name: "String" } - }, - isDomainJoined: { - serializedName: "isDomainJoined", - readOnly: true, + } + } + } +}; + +export const BooleanConditionProperties: coreClient.CompositeMapper = { + serializedName: "Boolean", + type: { + name: "Composite", + className: "BooleanConditionProperties", + uberParent: "AutomationRuleCondition", + polymorphicDiscriminator: + AutomationRuleCondition.type.polymorphicDiscriminator, + modelProperties: { + ...AutomationRuleCondition.type.modelProperties, + conditionProperties: { + serializedName: "conditionProperties", type: { - name: "Boolean" + name: "Composite", + className: "AutomationRuleBooleanCondition" } - }, - netBiosName: { - serializedName: "netBiosName", - readOnly: true, + } + } + } +}; + +export const PropertyArrayChangedConditionProperties: coreClient.CompositeMapper = { + serializedName: "PropertyArrayChanged", + type: { + name: "Composite", + className: "PropertyArrayChangedConditionProperties", + uberParent: "AutomationRuleCondition", + polymorphicDiscriminator: + AutomationRuleCondition.type.polymorphicDiscriminator, + modelProperties: { + ...AutomationRuleCondition.type.modelProperties, + conditionProperties: { + serializedName: "conditionProperties", type: { - name: "String" + name: "Composite", + className: "AutomationRulePropertyArrayChangedValuesCondition" } - }, - ntDomain: { - serializedName: "ntDomain", - readOnly: true, + } + } + } +}; + +export const PropertyArrayConditionProperties: coreClient.CompositeMapper = { + serializedName: "PropertyArray", + type: { + name: "Composite", + className: "PropertyArrayConditionProperties", + uberParent: "AutomationRuleCondition", + polymorphicDiscriminator: + AutomationRuleCondition.type.polymorphicDiscriminator, + modelProperties: { + ...AutomationRuleCondition.type.modelProperties, + conditionProperties: { + serializedName: "conditionProperties", type: { - name: "String" + name: "Composite", + className: "AutomationRulePropertyArrayValuesCondition" } - }, - omsAgentID: { - serializedName: "omsAgentID", - readOnly: true, + } + } + } +}; + +export const PropertyChangedConditionProperties: coreClient.CompositeMapper = { + serializedName: "PropertyChanged", + type: { + name: "Composite", + className: "PropertyChangedConditionProperties", + uberParent: "AutomationRuleCondition", + polymorphicDiscriminator: + AutomationRuleCondition.type.polymorphicDiscriminator, + modelProperties: { + ...AutomationRuleCondition.type.modelProperties, + conditionProperties: { + serializedName: "conditionProperties", type: { - name: "String" + name: "Composite", + className: "AutomationRulePropertyValuesChangedCondition" } - }, - osFamily: { - serializedName: "osFamily", + } + } + } +}; + +export const PropertyConditionProperties: coreClient.CompositeMapper = { + serializedName: "Property", + type: { + name: "Composite", + className: "PropertyConditionProperties", + uberParent: "AutomationRuleCondition", + polymorphicDiscriminator: + AutomationRuleCondition.type.polymorphicDiscriminator, + modelProperties: { + ...AutomationRuleCondition.type.modelProperties, + conditionProperties: { + serializedName: "conditionProperties", type: { - name: "Enum", - allowedValues: ["Linux", "Windows", "Android", "IOS", "Unknown"] + name: "Composite", + className: "AutomationRulePropertyValuesCondition" } - }, - osVersion: { - serializedName: "osVersion", - readOnly: true, + } + } + } +}; + +export const AutomationRuleAddIncidentTaskAction: coreClient.CompositeMapper = { + serializedName: "AddIncidentTask", + type: { + name: "Composite", + className: "AutomationRuleAddIncidentTaskAction", + uberParent: "AutomationRuleAction", + polymorphicDiscriminator: + AutomationRuleAction.type.polymorphicDiscriminator, + modelProperties: { + ...AutomationRuleAction.type.modelProperties, + actionConfiguration: { + serializedName: "actionConfiguration", type: { - name: "String" + name: "Composite", + className: "AddIncidentTaskActionProperties" } } } } }; -export const IoTDeviceEntityProperties: coreClient.CompositeMapper = { +export const AutomationRuleModifyPropertiesAction: coreClient.CompositeMapper = { + serializedName: "ModifyProperties", type: { name: "Composite", - className: "IoTDeviceEntityProperties", + className: "AutomationRuleModifyPropertiesAction", + uberParent: "AutomationRuleAction", + polymorphicDiscriminator: + AutomationRuleAction.type.polymorphicDiscriminator, modelProperties: { - ...EntityCommonProperties.type.modelProperties, - deviceId: { - serializedName: "deviceId", - readOnly: true, + ...AutomationRuleAction.type.modelProperties, + actionConfiguration: { + serializedName: "actionConfiguration", type: { - name: "String" + name: "Composite", + className: "IncidentPropertiesAction" } - }, - deviceName: { - serializedName: "deviceName", - readOnly: true, + } + } + } +}; + +export const AutomationRuleRunPlaybookAction: coreClient.CompositeMapper = { + serializedName: "RunPlaybook", + type: { + name: "Composite", + className: "AutomationRuleRunPlaybookAction", + uberParent: "AutomationRuleAction", + polymorphicDiscriminator: + AutomationRuleAction.type.polymorphicDiscriminator, + modelProperties: { + ...AutomationRuleAction.type.modelProperties, + actionConfiguration: { + serializedName: "actionConfiguration", + type: { + name: "Composite", + className: "PlaybookActionProperties" + } + } + } + } +}; + +export const ActivityTimelineItem: coreClient.CompositeMapper = { + serializedName: "Activity", + type: { + name: "Composite", + className: "ActivityTimelineItem", + uberParent: "EntityTimelineItem", + polymorphicDiscriminator: EntityTimelineItem.type.polymorphicDiscriminator, + modelProperties: { + ...EntityTimelineItem.type.modelProperties, + queryId: { + serializedName: "queryId", + required: true, type: { name: "String" } }, - source: { - serializedName: "source", - readOnly: true, - type: { - name: "String" - } - }, - iotSecurityAgentId: { - serializedName: "iotSecurityAgentId", - readOnly: true, + bucketStartTimeUTC: { + serializedName: "bucketStartTimeUTC", + required: true, type: { - name: "Uuid" + name: "DateTime" } }, - deviceType: { - serializedName: "deviceType", - readOnly: true, + bucketEndTimeUTC: { + serializedName: "bucketEndTimeUTC", + required: true, type: { - name: "String" + name: "DateTime" } }, - vendor: { - serializedName: "vendor", - readOnly: true, + firstActivityTimeUTC: { + serializedName: "firstActivityTimeUTC", + required: true, type: { - name: "String" + name: "DateTime" } }, - edgeId: { - serializedName: "edgeId", - readOnly: true, + lastActivityTimeUTC: { + serializedName: "lastActivityTimeUTC", + required: true, type: { - name: "String" + name: "DateTime" } }, - macAddress: { - serializedName: "macAddress", - readOnly: true, + content: { + serializedName: "content", + required: true, type: { name: "String" } }, - model: { - serializedName: "model", - readOnly: true, + title: { + serializedName: "title", + required: true, type: { name: "String" } - }, - serialNumber: { - serializedName: "serialNumber", - readOnly: true, + } + } + } +}; + +export const BookmarkTimelineItem: coreClient.CompositeMapper = { + serializedName: "Bookmark", + type: { + name: "Composite", + className: "BookmarkTimelineItem", + uberParent: "EntityTimelineItem", + polymorphicDiscriminator: EntityTimelineItem.type.polymorphicDiscriminator, + modelProperties: { + ...EntityTimelineItem.type.modelProperties, + azureResourceId: { + serializedName: "azureResourceId", + required: true, type: { name: "String" } }, - firmwareVersion: { - serializedName: "firmwareVersion", - readOnly: true, + displayName: { + serializedName: "displayName", type: { name: "String" } }, - operatingSystem: { - serializedName: "operatingSystem", - readOnly: true, + notes: { + serializedName: "notes", type: { name: "String" } }, - iotHubEntityId: { - serializedName: "iotHubEntityId", - readOnly: true, + endTimeUtc: { + serializedName: "endTimeUtc", type: { - name: "String" + name: "DateTime" } }, - hostEntityId: { - serializedName: "hostEntityId", - readOnly: true, + startTimeUtc: { + serializedName: "startTimeUtc", type: { - name: "String" + name: "DateTime" } }, - ipAddressEntityId: { - serializedName: "ipAddressEntityId", - readOnly: true, + eventTime: { + serializedName: "eventTime", type: { - name: "String" + name: "DateTime" } }, - threatIntelligence: { - serializedName: "threatIntelligence", - readOnly: true, + createdBy: { + serializedName: "createdBy", type: { - name: "Sequence", - element: { - type: { - name: "Composite", - className: "ThreatIntelligence" - } - } + name: "Composite", + className: "UserInfo" } }, - protocols: { - serializedName: "protocols", - readOnly: true, + labels: { + serializedName: "labels", type: { name: "Sequence", element: { @@ -7732,126 +7756,189 @@ export const IoTDeviceEntityProperties: coreClient.CompositeMapper = { } } } - }, - owners: { - serializedName: "owners", - readOnly: true, + } + } + } +}; + +export const AnomalyTimelineItem: coreClient.CompositeMapper = { + serializedName: "Anomaly", + type: { + name: "Composite", + className: "AnomalyTimelineItem", + uberParent: "EntityTimelineItem", + polymorphicDiscriminator: EntityTimelineItem.type.polymorphicDiscriminator, + modelProperties: { + ...EntityTimelineItem.type.modelProperties, + azureResourceId: { + serializedName: "azureResourceId", + required: true, type: { - name: "Sequence", - element: { - type: { - name: "String" - } - } + name: "String" } }, - nicEntityIds: { - serializedName: "nicEntityIds", - readOnly: true, + productName: { + serializedName: "productName", type: { - name: "Sequence", - element: { - type: { - name: "String" - } - } + name: "String" } }, - site: { - serializedName: "site", - readOnly: true, + description: { + serializedName: "description", type: { name: "String" } }, - zone: { - serializedName: "zone", - readOnly: true, + displayName: { + serializedName: "displayName", + required: true, type: { name: "String" } }, - sensor: { - serializedName: "sensor", - readOnly: true, + endTimeUtc: { + serializedName: "endTimeUtc", + required: true, type: { - name: "String" + name: "DateTime" } }, - deviceSubType: { - serializedName: "deviceSubType", - readOnly: true, + startTimeUtc: { + serializedName: "startTimeUtc", + required: true, type: { - name: "String" + name: "DateTime" } }, - importance: { - serializedName: "importance", + timeGenerated: { + serializedName: "timeGenerated", + required: true, type: { - name: "String" + name: "DateTime" } }, - purdueLayer: { - serializedName: "purdueLayer", - readOnly: true, + vendor: { + serializedName: "vendor", type: { name: "String" } }, - isAuthorized: { - serializedName: "isAuthorized", - readOnly: true, + intent: { + serializedName: "intent", type: { - name: "Boolean" + name: "String" } }, - isProgramming: { - serializedName: "isProgramming", - readOnly: true, + techniques: { + serializedName: "techniques", type: { - name: "Boolean" + name: "Sequence", + element: { + type: { + name: "String" + } + } } }, - isScanner: { - serializedName: "isScanner", - readOnly: true, + reasons: { + serializedName: "reasons", type: { - name: "Boolean" + name: "Sequence", + element: { + type: { + name: "String" + } + } } } } } }; -export const IpEntityProperties: coreClient.CompositeMapper = { +export const SecurityAlertTimelineItem: coreClient.CompositeMapper = { + serializedName: "SecurityAlert", type: { name: "Composite", - className: "IpEntityProperties", + className: "SecurityAlertTimelineItem", + uberParent: "EntityTimelineItem", + polymorphicDiscriminator: EntityTimelineItem.type.polymorphicDiscriminator, modelProperties: { - ...EntityCommonProperties.type.modelProperties, - address: { - serializedName: "address", - readOnly: true, + ...EntityTimelineItem.type.modelProperties, + azureResourceId: { + serializedName: "azureResourceId", + required: true, type: { name: "String" } }, - location: { - serializedName: "location", + productName: { + serializedName: "productName", type: { - name: "Composite", - className: "GeoLocation" + name: "String" } }, - threatIntelligence: { - serializedName: "threatIntelligence", + description: { + serializedName: "description", + type: { + name: "String" + } + }, + displayName: { + serializedName: "displayName", + required: true, + type: { + name: "String" + } + }, + severity: { + serializedName: "severity", + required: true, + type: { + name: "String" + } + }, + endTimeUtc: { + serializedName: "endTimeUtc", + required: true, + type: { + name: "DateTime" + } + }, + startTimeUtc: { + serializedName: "startTimeUtc", + required: true, + type: { + name: "DateTime" + } + }, + timeGenerated: { + serializedName: "timeGenerated", + required: true, + type: { + name: "DateTime" + } + }, + alertType: { + serializedName: "alertType", + required: true, + type: { + name: "String" + } + }, + intent: { + serializedName: "intent", readOnly: true, + type: { + name: "String" + } + }, + techniques: { + serializedName: "techniques", type: { name: "Sequence", element: { type: { - name: "Composite", - className: "ThreatIntelligence" + name: "String" } } } @@ -7860,180 +7947,145 @@ export const IpEntityProperties: coreClient.CompositeMapper = { } }; -export const MailboxEntityProperties: coreClient.CompositeMapper = { +export const InsightQueryItem: coreClient.CompositeMapper = { + serializedName: "Insight", type: { name: "Composite", - className: "MailboxEntityProperties", + className: "InsightQueryItem", + uberParent: "EntityQueryItem", + polymorphicDiscriminator: EntityQueryItem.type.polymorphicDiscriminator, modelProperties: { - ...EntityCommonProperties.type.modelProperties, - mailboxPrimaryAddress: { - serializedName: "mailboxPrimaryAddress", - readOnly: true, - type: { - name: "String" - } - }, - displayName: { - serializedName: "displayName", - readOnly: true, - type: { - name: "String" - } - }, - upn: { - serializedName: "upn", - readOnly: true, - type: { - name: "String" - } - }, - externalDirectoryObjectId: { - serializedName: "externalDirectoryObjectId", - readOnly: true, + ...EntityQueryItem.type.modelProperties, + properties: { + serializedName: "properties", type: { - name: "Uuid" + name: "Composite", + className: "InsightQueryItemProperties" } } } } }; -export const MailClusterEntityProperties: coreClient.CompositeMapper = { +export const SecurityAlertProperties: coreClient.CompositeMapper = { type: { name: "Composite", - className: "MailClusterEntityProperties", + className: "SecurityAlertProperties", modelProperties: { ...EntityCommonProperties.type.modelProperties, - networkMessageIds: { - serializedName: "networkMessageIds", + alertDisplayName: { + serializedName: "alertDisplayName", readOnly: true, type: { - name: "Sequence", - element: { - type: { - name: "String" - } - } + name: "String" } }, - countByDeliveryStatus: { - serializedName: "countByDeliveryStatus", + alertType: { + serializedName: "alertType", readOnly: true, type: { - name: "Dictionary", - value: { type: { name: "any" } } + name: "String" } }, - countByThreatType: { - serializedName: "countByThreatType", + compromisedEntity: { + serializedName: "compromisedEntity", readOnly: true, type: { - name: "Dictionary", - value: { type: { name: "any" } } + name: "String" } }, - countByProtectionStatus: { - serializedName: "countByProtectionStatus", + confidenceLevel: { + serializedName: "confidenceLevel", readOnly: true, type: { - name: "Dictionary", - value: { type: { name: "any" } } + name: "String" } }, - threats: { - serializedName: "threats", + confidenceReasons: { + serializedName: "confidenceReasons", readOnly: true, type: { name: "Sequence", element: { type: { - name: "String" + name: "Composite", + className: "SecurityAlertPropertiesConfidenceReasonsItem" } } } }, - query: { - serializedName: "query", + confidenceScore: { + serializedName: "confidenceScore", readOnly: true, type: { - name: "String" + name: "Number" } }, - queryTime: { - serializedName: "queryTime", + confidenceScoreStatus: { + serializedName: "confidenceScoreStatus", readOnly: true, type: { - name: "DateTime" + name: "String" } }, - mailCount: { - serializedName: "mailCount", + description: { + serializedName: "description", readOnly: true, type: { - name: "Number" + name: "String" } }, - isVolumeAnomaly: { - serializedName: "isVolumeAnomaly", + endTimeUtc: { + serializedName: "endTimeUtc", readOnly: true, type: { - name: "Boolean" + name: "DateTime" } }, - source: { - serializedName: "source", + intent: { + serializedName: "intent", readOnly: true, type: { name: "String" } }, - clusterSourceIdentifier: { - serializedName: "clusterSourceIdentifier", + providerAlertId: { + serializedName: "providerAlertId", readOnly: true, type: { name: "String" } }, - clusterSourceType: { - serializedName: "clusterSourceType", + processingEndTime: { + serializedName: "processingEndTime", readOnly: true, type: { - name: "String" + name: "DateTime" } }, - clusterQueryStartTime: { - serializedName: "clusterQueryStartTime", + productComponentName: { + serializedName: "productComponentName", readOnly: true, type: { - name: "DateTime" + name: "String" } }, - clusterQueryEndTime: { - serializedName: "clusterQueryEndTime", + productName: { + serializedName: "productName", readOnly: true, type: { - name: "DateTime" + name: "String" } }, - clusterGroup: { - serializedName: "clusterGroup", + productVersion: { + serializedName: "productVersion", readOnly: true, type: { name: "String" } - } - } - } -}; - -export const MailMessageEntityProperties: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "MailMessageEntityProperties", - modelProperties: { - ...EntityCommonProperties.type.modelProperties, - fileEntityIds: { - serializedName: "fileEntityIds", + }, + remediationSteps: { + serializedName: "remediationSteps", readOnly: true, type: { name: "Sequence", @@ -8044,27 +8096,35 @@ export const MailMessageEntityProperties: coreClient.CompositeMapper = { } } }, - recipient: { - serializedName: "recipient", + severity: { + serializedName: "severity", + type: { + name: "String" + } + }, + startTimeUtc: { + serializedName: "startTimeUtc", + readOnly: true, + type: { + name: "DateTime" + } + }, + status: { + serializedName: "status", readOnly: true, type: { name: "String" } }, - urls: { - serializedName: "urls", + systemAlertId: { + serializedName: "systemAlertId", readOnly: true, type: { - name: "Sequence", - element: { - type: { - name: "String" - } - } + name: "String" } }, - threats: { - serializedName: "threats", + tactics: { + serializedName: "tactics", readOnly: true, type: { name: "Sequence", @@ -8075,93 +8135,138 @@ export const MailMessageEntityProperties: coreClient.CompositeMapper = { } } }, - p1Sender: { - serializedName: "p1Sender", + timeGenerated: { + serializedName: "timeGenerated", readOnly: true, type: { - name: "String" + name: "DateTime" } }, - p1SenderDisplayName: { - serializedName: "p1SenderDisplayName", + vendorName: { + serializedName: "vendorName", readOnly: true, type: { name: "String" } }, - p1SenderDomain: { - serializedName: "p1SenderDomain", + alertLink: { + serializedName: "alertLink", readOnly: true, type: { name: "String" } }, - senderIP: { - serializedName: "senderIP", + resourceIdentifiers: { + serializedName: "resourceIdentifiers", readOnly: true, type: { - name: "String" + name: "Sequence", + element: { + type: { + name: "Dictionary", + value: { type: { name: "any" } } + } + } } - }, - p2Sender: { - serializedName: "p2Sender", - readOnly: true, + } + } + } +}; + +export const HuntingBookmarkProperties: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "HuntingBookmarkProperties", + modelProperties: { + ...EntityCommonProperties.type.modelProperties, + created: { + serializedName: "created", type: { - name: "String" + name: "DateTime" } }, - p2SenderDisplayName: { - serializedName: "p2SenderDisplayName", - readOnly: true, + createdBy: { + serializedName: "createdBy", type: { - name: "String" + name: "Composite", + className: "UserInfo" } }, - p2SenderDomain: { - serializedName: "p2SenderDomain", - readOnly: true, + displayName: { + serializedName: "displayName", + required: true, type: { name: "String" } }, - receiveDate: { - serializedName: "receiveDate", - readOnly: true, + eventTime: { + serializedName: "eventTime", type: { name: "DateTime" } }, - networkMessageId: { - serializedName: "networkMessageId", - readOnly: true, + labels: { + serializedName: "labels", type: { - name: "Uuid" + name: "Sequence", + element: { + type: { + name: "String" + } + } } }, - internetMessageId: { - serializedName: "internetMessageId", - readOnly: true, + notes: { + serializedName: "notes", type: { name: "String" } }, - subject: { - serializedName: "subject", - readOnly: true, + query: { + serializedName: "query", + required: true, type: { name: "String" } }, - language: { - serializedName: "language", - readOnly: true, + queryResult: { + serializedName: "queryResult", type: { name: "String" } }, - threatDetectionMethods: { - serializedName: "threatDetectionMethods", - readOnly: true, + updated: { + serializedName: "updated", + type: { + name: "DateTime" + } + }, + updatedBy: { + serializedName: "updatedBy", + type: { + name: "Composite", + className: "UserInfo" + } + }, + incidentInfo: { + serializedName: "incidentInfo", + type: { + name: "Composite", + className: "IncidentInfo" + } + } + } + } +}; + +export const ThreatIntelligenceIndicatorProperties: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "ThreatIntelligenceIndicatorProperties", + modelProperties: { + ...EntityCommonProperties.type.modelProperties, + threatIntelligenceTags: { + serializedName: "threatIntelligenceTags", type: { name: "Sequence", element: { @@ -8171,361 +8276,302 @@ export const MailMessageEntityProperties: coreClient.CompositeMapper = { } } }, - bodyFingerprintBin1: { - serializedName: "bodyFingerprintBin1", + lastUpdatedTimeUtc: { + serializedName: "lastUpdatedTimeUtc", type: { - name: "Number" + name: "String" } }, - bodyFingerprintBin2: { - serializedName: "bodyFingerprintBin2", + source: { + serializedName: "source", type: { - name: "Number" + name: "String" } }, - bodyFingerprintBin3: { - serializedName: "bodyFingerprintBin3", + displayName: { + serializedName: "displayName", type: { - name: "Number" + name: "String" } }, - bodyFingerprintBin4: { - serializedName: "bodyFingerprintBin4", + description: { + serializedName: "description", type: { - name: "Number" + name: "String" } }, - bodyFingerprintBin5: { - serializedName: "bodyFingerprintBin5", + indicatorTypes: { + serializedName: "indicatorTypes", type: { - name: "Number" + name: "Sequence", + element: { + type: { + name: "String" + } + } } }, - antispamDirection: { - serializedName: "antispamDirection", + pattern: { + serializedName: "pattern", type: { name: "String" } }, - deliveryAction: { - serializedName: "deliveryAction", + patternType: { + serializedName: "patternType", type: { - name: "Enum", - allowedValues: [ - "Unknown", - "DeliveredAsSpam", - "Delivered", - "Blocked", - "Replaced" - ] + name: "String" } }, - deliveryLocation: { - serializedName: "deliveryLocation", - type: { - name: "Enum", - allowedValues: [ - "Unknown", - "Inbox", - "JunkFolder", - "DeletedFolder", - "Quarantine", - "External", - "Failed", - "Dropped", - "Forwarded" - ] - } - } - } - } -}; - -export const MalwareEntityProperties: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "MalwareEntityProperties", - modelProperties: { - ...EntityCommonProperties.type.modelProperties, - category: { - serializedName: "category", - readOnly: true, + patternVersion: { + serializedName: "patternVersion", type: { name: "String" } }, - fileEntityIds: { - serializedName: "fileEntityIds", - readOnly: true, + killChainPhases: { + serializedName: "killChainPhases", type: { name: "Sequence", element: { type: { - name: "String" + name: "Composite", + className: "ThreatIntelligenceKillChainPhase" } } } }, - malwareName: { - serializedName: "malwareName", - readOnly: true, - type: { - name: "String" - } - }, - processEntityIds: { - serializedName: "processEntityIds", - readOnly: true, + parsedPattern: { + serializedName: "parsedPattern", type: { name: "Sequence", element: { type: { - name: "String" + name: "Composite", + className: "ThreatIntelligenceParsedPattern" } } } - } - } - } -}; - -export const ProcessEntityProperties: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "ProcessEntityProperties", - modelProperties: { - ...EntityCommonProperties.type.modelProperties, - accountEntityId: { - serializedName: "accountEntityId", - readOnly: true, + }, + externalId: { + serializedName: "externalId", type: { name: "String" } }, - commandLine: { - serializedName: "commandLine", - readOnly: true, + createdByRef: { + serializedName: "createdByRef", type: { name: "String" } }, - creationTimeUtc: { - serializedName: "creationTimeUtc", - readOnly: true, + defanged: { + serializedName: "defanged", type: { - name: "DateTime" + name: "Boolean" } }, - elevationToken: { - serializedName: "elevationToken", + externalLastUpdatedTimeUtc: { + serializedName: "externalLastUpdatedTimeUtc", type: { - name: "Enum", - allowedValues: ["Default", "Full", "Limited"] + name: "String" } }, - hostEntityId: { - serializedName: "hostEntityId", - readOnly: true, + externalReferences: { + serializedName: "externalReferences", type: { - name: "String" + name: "Sequence", + element: { + type: { + name: "Composite", + className: "ThreatIntelligenceExternalReference" + } + } } }, - hostLogonSessionEntityId: { - serializedName: "hostLogonSessionEntityId", - readOnly: true, + granularMarkings: { + serializedName: "granularMarkings", type: { - name: "String" + name: "Sequence", + element: { + type: { + name: "Composite", + className: "ThreatIntelligenceGranularMarkingModel" + } + } } }, - imageFileEntityId: { - serializedName: "imageFileEntityId", - readOnly: true, + labels: { + serializedName: "labels", type: { - name: "String" + name: "Sequence", + element: { + type: { + name: "String" + } + } } }, - parentProcessEntityId: { - serializedName: "parentProcessEntityId", - readOnly: true, + revoked: { + serializedName: "revoked", type: { - name: "String" + name: "Boolean" } }, - processId: { - serializedName: "processId", - readOnly: true, + confidence: { + serializedName: "confidence", type: { - name: "String" + name: "Number" } - } - } - } -}; - -export const RegistryKeyEntityProperties: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "RegistryKeyEntityProperties", - modelProperties: { - ...EntityCommonProperties.type.modelProperties, - hive: { - serializedName: "hive", - readOnly: true, + }, + objectMarkingRefs: { + serializedName: "objectMarkingRefs", type: { - name: "String" + name: "Sequence", + element: { + type: { + name: "String" + } + } } }, - key: { - serializedName: "key", - readOnly: true, + language: { + serializedName: "language", type: { name: "String" } - } - } - } -}; - -export const RegistryValueEntityProperties: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "RegistryValueEntityProperties", - modelProperties: { - ...EntityCommonProperties.type.modelProperties, - keyEntityId: { - serializedName: "keyEntityId", - readOnly: true, + }, + threatTypes: { + serializedName: "threatTypes", + type: { + name: "Sequence", + element: { + type: { + name: "String" + } + } + } + }, + validFrom: { + serializedName: "validFrom", type: { name: "String" } }, - valueData: { - serializedName: "valueData", - readOnly: true, + validUntil: { + serializedName: "validUntil", type: { name: "String" } }, - valueName: { - serializedName: "valueName", - readOnly: true, + created: { + serializedName: "created", type: { name: "String" } }, - valueType: { - serializedName: "valueType", - readOnly: true, + modified: { + serializedName: "modified", type: { name: "String" } + }, + extensions: { + serializedName: "extensions", + type: { + name: "Dictionary", + value: { type: { name: "any" } } + } } } } }; -export const SecurityGroupEntityProperties: coreClient.CompositeMapper = { +export const AccountEntityProperties: coreClient.CompositeMapper = { type: { name: "Composite", - className: "SecurityGroupEntityProperties", + className: "AccountEntityProperties", modelProperties: { ...EntityCommonProperties.type.modelProperties, - distinguishedName: { - serializedName: "distinguishedName", + aadTenantId: { + serializedName: "aadTenantId", readOnly: true, type: { name: "String" } }, - objectGuid: { - serializedName: "objectGuid", + aadUserId: { + serializedName: "aadUserId", readOnly: true, type: { - name: "Uuid" + name: "String" } }, - sid: { - serializedName: "sid", + accountName: { + serializedName: "accountName", readOnly: true, type: { name: "String" } - } - } - } -}; - -export const SubmissionMailEntityProperties: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "SubmissionMailEntityProperties", - modelProperties: { - ...EntityCommonProperties.type.modelProperties, - networkMessageId: { - serializedName: "networkMessageId", - readOnly: true, - type: { - name: "Uuid" - } }, - submissionId: { - serializedName: "submissionId", + displayName: { + serializedName: "displayName", readOnly: true, type: { - name: "Uuid" + name: "String" } }, - submitter: { - serializedName: "submitter", + hostEntityId: { + serializedName: "hostEntityId", readOnly: true, type: { name: "String" } }, - submissionDate: { - serializedName: "submissionDate", + isDomainJoined: { + serializedName: "isDomainJoined", readOnly: true, type: { - name: "DateTime" + name: "Boolean" } }, - timestamp: { - serializedName: "timestamp", + ntDomain: { + serializedName: "ntDomain", readOnly: true, type: { - name: "DateTime" + name: "String" } }, - recipient: { - serializedName: "recipient", + objectGuid: { + serializedName: "objectGuid", readOnly: true, type: { - name: "String" + name: "Uuid" } }, - sender: { - serializedName: "sender", + puid: { + serializedName: "puid", readOnly: true, type: { name: "String" } }, - senderIp: { - serializedName: "senderIp", + sid: { + serializedName: "sid", readOnly: true, type: { name: "String" } }, - subject: { - serializedName: "subject", + upnSuffix: { + serializedName: "upnSuffix", readOnly: true, type: { name: "String" } }, - reportType: { - serializedName: "reportType", + dnsDomain: { + serializedName: "dnsDomain", readOnly: true, type: { name: "String" @@ -8535,14 +8581,21 @@ export const SubmissionMailEntityProperties: coreClient.CompositeMapper = { } }; -export const UrlEntityProperties: coreClient.CompositeMapper = { +export const AzureResourceEntityProperties: coreClient.CompositeMapper = { type: { name: "Composite", - className: "UrlEntityProperties", + className: "AzureResourceEntityProperties", modelProperties: { ...EntityCommonProperties.type.modelProperties, - url: { - serializedName: "url", + resourceId: { + serializedName: "resourceId", + readOnly: true, + type: { + name: "String" + } + }, + subscriptionId: { + serializedName: "subscriptionId", readOnly: true, type: { name: "String" @@ -8552,182 +8605,115 @@ export const UrlEntityProperties: coreClient.CompositeMapper = { } }; -export const NicEntityProperties: coreClient.CompositeMapper = { +export const CloudApplicationEntityProperties: coreClient.CompositeMapper = { type: { name: "Composite", - className: "NicEntityProperties", + className: "CloudApplicationEntityProperties", modelProperties: { ...EntityCommonProperties.type.modelProperties, - macAddress: { - serializedName: "macAddress", + appId: { + serializedName: "appId", readOnly: true, type: { - name: "String" + name: "Number" } }, - ipAddressEntityId: { - serializedName: "ipAddressEntityId", + appName: { + serializedName: "appName", readOnly: true, type: { name: "String" } }, - vlans: { - serializedName: "vlans", + instanceName: { + serializedName: "instanceName", readOnly: true, type: { - name: "Sequence", - element: { - type: { - name: "String" - } - } + name: "String" } } } } }; -export const AADCheckRequirements: coreClient.CompositeMapper = { - serializedName: "AzureActiveDirectory", +export const DnsEntityProperties: coreClient.CompositeMapper = { type: { name: "Composite", - className: "AADCheckRequirements", - uberParent: "DataConnectorsCheckRequirements", - polymorphicDiscriminator: - DataConnectorsCheckRequirements.type.polymorphicDiscriminator, + className: "DnsEntityProperties", modelProperties: { - ...DataConnectorsCheckRequirements.type.modelProperties, - tenantId: { - serializedName: "properties.tenantId", + ...EntityCommonProperties.type.modelProperties, + dnsServerIpEntityId: { + serializedName: "dnsServerIpEntityId", + readOnly: true, type: { name: "String" } - } - } - } -}; - -export const AatpCheckRequirements: coreClient.CompositeMapper = { - serializedName: "AzureAdvancedThreatProtection", - type: { - name: "Composite", - className: "AatpCheckRequirements", - uberParent: "DataConnectorsCheckRequirements", - polymorphicDiscriminator: - DataConnectorsCheckRequirements.type.polymorphicDiscriminator, - modelProperties: { - ...DataConnectorsCheckRequirements.type.modelProperties, - tenantId: { - serializedName: "properties.tenantId", + }, + domainName: { + serializedName: "domainName", + readOnly: true, type: { name: "String" } - } - } - } -}; - -export const ASCCheckRequirements: coreClient.CompositeMapper = { - serializedName: "AzureSecurityCenter", - type: { - name: "Composite", - className: "ASCCheckRequirements", - uberParent: "DataConnectorsCheckRequirements", - polymorphicDiscriminator: - DataConnectorsCheckRequirements.type.polymorphicDiscriminator, - modelProperties: { - ...DataConnectorsCheckRequirements.type.modelProperties, - subscriptionId: { - serializedName: "properties.subscriptionId", + }, + hostIpAddressEntityId: { + serializedName: "hostIpAddressEntityId", + readOnly: true, type: { name: "String" } + }, + ipAddressEntityIds: { + serializedName: "ipAddressEntityIds", + readOnly: true, + type: { + name: "Sequence", + element: { + type: { + name: "String" + } + } + } } } } }; -export const AwsCloudTrailCheckRequirements: coreClient.CompositeMapper = { - serializedName: "AmazonWebServicesCloudTrail", - type: { - name: "Composite", - className: "AwsCloudTrailCheckRequirements", - uberParent: "DataConnectorsCheckRequirements", - polymorphicDiscriminator: - DataConnectorsCheckRequirements.type.polymorphicDiscriminator, - modelProperties: { - ...DataConnectorsCheckRequirements.type.modelProperties - } - } -}; - -export const AwsS3CheckRequirements: coreClient.CompositeMapper = { - serializedName: "AmazonWebServicesS3", - type: { - name: "Composite", - className: "AwsS3CheckRequirements", - uberParent: "DataConnectorsCheckRequirements", - polymorphicDiscriminator: - DataConnectorsCheckRequirements.type.polymorphicDiscriminator, - modelProperties: { - ...DataConnectorsCheckRequirements.type.modelProperties - } - } -}; - -export const Dynamics365CheckRequirements: coreClient.CompositeMapper = { - serializedName: "Dynamics365", +export const FileEntityProperties: coreClient.CompositeMapper = { type: { name: "Composite", - className: "Dynamics365CheckRequirements", - uberParent: "DataConnectorsCheckRequirements", - polymorphicDiscriminator: - DataConnectorsCheckRequirements.type.polymorphicDiscriminator, + className: "FileEntityProperties", modelProperties: { - ...DataConnectorsCheckRequirements.type.modelProperties, - tenantId: { - serializedName: "properties.tenantId", + ...EntityCommonProperties.type.modelProperties, + directory: { + serializedName: "directory", + readOnly: true, type: { name: "String" } - } - } - } -}; - -export const McasCheckRequirements: coreClient.CompositeMapper = { - serializedName: "MicrosoftCloudAppSecurity", - type: { - name: "Composite", - className: "McasCheckRequirements", - uberParent: "DataConnectorsCheckRequirements", - polymorphicDiscriminator: - DataConnectorsCheckRequirements.type.polymorphicDiscriminator, - modelProperties: { - ...DataConnectorsCheckRequirements.type.modelProperties, - tenantId: { - serializedName: "properties.tenantId", + }, + fileHashEntityIds: { + serializedName: "fileHashEntityIds", + readOnly: true, + type: { + name: "Sequence", + element: { + type: { + name: "String" + } + } + } + }, + fileName: { + serializedName: "fileName", + readOnly: true, type: { name: "String" } - } - } - } -}; - -export const MdatpCheckRequirements: coreClient.CompositeMapper = { - serializedName: "MicrosoftDefenderAdvancedThreatProtection", - type: { - name: "Composite", - className: "MdatpCheckRequirements", - uberParent: "DataConnectorsCheckRequirements", - polymorphicDiscriminator: - DataConnectorsCheckRequirements.type.polymorphicDiscriminator, - modelProperties: { - ...DataConnectorsCheckRequirements.type.modelProperties, - tenantId: { - serializedName: "properties.tenantId", + }, + hostEntityId: { + serializedName: "hostEntityId", + readOnly: true, type: { name: "String" } @@ -8736,38 +8722,22 @@ export const MdatpCheckRequirements: coreClient.CompositeMapper = { } }; -export const MstiCheckRequirements: coreClient.CompositeMapper = { - serializedName: "MicrosoftThreatIntelligence", +export const FileHashEntityProperties: coreClient.CompositeMapper = { type: { name: "Composite", - className: "MstiCheckRequirements", - uberParent: "DataConnectorsCheckRequirements", - polymorphicDiscriminator: - DataConnectorsCheckRequirements.type.polymorphicDiscriminator, + className: "FileHashEntityProperties", modelProperties: { - ...DataConnectorsCheckRequirements.type.modelProperties, - tenantId: { - serializedName: "properties.tenantId", + ...EntityCommonProperties.type.modelProperties, + algorithm: { + serializedName: "algorithm", + readOnly: true, type: { name: "String" } - } - } - } -}; - -export const MtpCheckRequirements: coreClient.CompositeMapper = { - serializedName: "MicrosoftThreatProtection", - type: { - name: "Composite", - className: "MtpCheckRequirements", - uberParent: "DataConnectorsCheckRequirements", - polymorphicDiscriminator: - DataConnectorsCheckRequirements.type.polymorphicDiscriminator, - modelProperties: { - ...DataConnectorsCheckRequirements.type.modelProperties, - tenantId: { - serializedName: "properties.tenantId", + }, + hashValue: { + serializedName: "hashValue", + readOnly: true, type: { name: "String" } @@ -8776,343 +8746,218 @@ export const MtpCheckRequirements: coreClient.CompositeMapper = { } }; -export const OfficeATPCheckRequirements: coreClient.CompositeMapper = { - serializedName: "OfficeATP", +export const HostEntityProperties: coreClient.CompositeMapper = { type: { name: "Composite", - className: "OfficeATPCheckRequirements", - uberParent: "DataConnectorsCheckRequirements", - polymorphicDiscriminator: - DataConnectorsCheckRequirements.type.polymorphicDiscriminator, + className: "HostEntityProperties", modelProperties: { - ...DataConnectorsCheckRequirements.type.modelProperties, - tenantId: { - serializedName: "properties.tenantId", + ...EntityCommonProperties.type.modelProperties, + azureID: { + serializedName: "azureID", + readOnly: true, type: { name: "String" } - } - } - } -}; - -export const OfficeIRMCheckRequirements: coreClient.CompositeMapper = { - serializedName: "OfficeIRM", - type: { - name: "Composite", - className: "OfficeIRMCheckRequirements", - uberParent: "DataConnectorsCheckRequirements", - polymorphicDiscriminator: - DataConnectorsCheckRequirements.type.polymorphicDiscriminator, - modelProperties: { - ...DataConnectorsCheckRequirements.type.modelProperties, - tenantId: { - serializedName: "properties.tenantId", + }, + dnsDomain: { + serializedName: "dnsDomain", + readOnly: true, type: { name: "String" } - } - } - } -}; - -export const Office365ProjectCheckRequirements: coreClient.CompositeMapper = { - serializedName: "Office365Project", - type: { - name: "Composite", - className: "Office365ProjectCheckRequirements", - uberParent: "DataConnectorsCheckRequirements", - polymorphicDiscriminator: - DataConnectorsCheckRequirements.type.polymorphicDiscriminator, - modelProperties: { - ...DataConnectorsCheckRequirements.type.modelProperties, - tenantId: { - serializedName: "properties.tenantId", + }, + hostName: { + serializedName: "hostName", + readOnly: true, type: { name: "String" } - } - } - } -}; - -export const OfficePowerBICheckRequirements: coreClient.CompositeMapper = { - serializedName: "OfficePowerBI", - type: { - name: "Composite", - className: "OfficePowerBICheckRequirements", - uberParent: "DataConnectorsCheckRequirements", - polymorphicDiscriminator: - DataConnectorsCheckRequirements.type.polymorphicDiscriminator, - modelProperties: { - ...DataConnectorsCheckRequirements.type.modelProperties, - tenantId: { - serializedName: "properties.tenantId", + }, + isDomainJoined: { + serializedName: "isDomainJoined", + readOnly: true, type: { - name: "String" + name: "Boolean" } - } - } - } -}; - -export const TICheckRequirements: coreClient.CompositeMapper = { - serializedName: "ThreatIntelligence", - type: { - name: "Composite", - className: "TICheckRequirements", - uberParent: "DataConnectorsCheckRequirements", - polymorphicDiscriminator: - DataConnectorsCheckRequirements.type.polymorphicDiscriminator, - modelProperties: { - ...DataConnectorsCheckRequirements.type.modelProperties, - tenantId: { - serializedName: "properties.tenantId", + }, + netBiosName: { + serializedName: "netBiosName", + readOnly: true, type: { name: "String" } - } - } - } -}; - -export const TiTaxiiCheckRequirements: coreClient.CompositeMapper = { - serializedName: "ThreatIntelligenceTaxii", - type: { - name: "Composite", - className: "TiTaxiiCheckRequirements", - uberParent: "DataConnectorsCheckRequirements", - polymorphicDiscriminator: - DataConnectorsCheckRequirements.type.polymorphicDiscriminator, - modelProperties: { - ...DataConnectorsCheckRequirements.type.modelProperties, - tenantId: { - serializedName: "properties.tenantId", + }, + ntDomain: { + serializedName: "ntDomain", + readOnly: true, type: { name: "String" } - } - } - } -}; - -export const IoTCheckRequirements: coreClient.CompositeMapper = { - serializedName: "IOT", - type: { - name: "Composite", - className: "IoTCheckRequirements", - uberParent: "DataConnectorsCheckRequirements", - polymorphicDiscriminator: - DataConnectorsCheckRequirements.type.polymorphicDiscriminator, - modelProperties: { - ...DataConnectorsCheckRequirements.type.modelProperties, - subscriptionId: { - serializedName: "properties.subscriptionId", + }, + omsAgentID: { + serializedName: "omsAgentID", + readOnly: true, type: { name: "String" } - } - } - } -}; - -export const AlertRuleTemplateWithMitreProperties: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "AlertRuleTemplateWithMitreProperties", - modelProperties: { - ...AlertRuleTemplatePropertiesBase.type.modelProperties, - tactics: { - serializedName: "tactics", + }, + osFamily: { + serializedName: "osFamily", type: { - name: "Sequence", - element: { - type: { - name: "String" - } - } + name: "Enum", + allowedValues: ["Linux", "Windows", "Android", "IOS", "Unknown"] } }, - techniques: { - serializedName: "techniques", + osVersion: { + serializedName: "osVersion", + readOnly: true, type: { - name: "Sequence", - element: { - type: { - name: "String" - } - } + name: "String" } } } } }; -export const MicrosoftSecurityIncidentCreationAlertRuleTemplateProperties: coreClient.CompositeMapper = { +export const IoTDeviceEntityProperties: coreClient.CompositeMapper = { type: { name: "Composite", - className: "MicrosoftSecurityIncidentCreationAlertRuleTemplateProperties", + className: "IoTDeviceEntityProperties", modelProperties: { - ...AlertRuleTemplatePropertiesBase.type.modelProperties, - displayNamesFilter: { - serializedName: "displayNamesFilter", + ...EntityCommonProperties.type.modelProperties, + deviceId: { + serializedName: "deviceId", + readOnly: true, type: { - name: "Sequence", - element: { - type: { - name: "String" - } - } + name: "String" } }, - displayNamesExcludeFilter: { - serializedName: "displayNamesExcludeFilter", + deviceName: { + serializedName: "deviceName", + readOnly: true, type: { - name: "Sequence", - element: { - type: { - name: "String" - } - } + name: "String" } }, - productFilter: { - serializedName: "productFilter", + source: { + serializedName: "source", + readOnly: true, type: { name: "String" } }, - severitiesFilter: { - serializedName: "severitiesFilter", + iotSecurityAgentId: { + serializedName: "iotSecurityAgentId", + readOnly: true, type: { - name: "Sequence", - element: { - type: { - name: "String" - } - } + name: "Uuid" } - } - } - } -}; - -export const NrtAlertRuleTemplateProperties: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "NrtAlertRuleTemplateProperties", - modelProperties: { - ...AlertRuleTemplateWithMitreProperties.type.modelProperties, - ...QueryBasedAlertRuleTemplateProperties.type.modelProperties - } - } -}; - -export const MicrosoftSecurityIncidentCreationAlertRuleProperties: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "MicrosoftSecurityIncidentCreationAlertRuleProperties", - modelProperties: { - ...MicrosoftSecurityIncidentCreationAlertRuleCommonProperties.type - .modelProperties, - alertRuleTemplateName: { - serializedName: "alertRuleTemplateName", + }, + deviceType: { + serializedName: "deviceType", + readOnly: true, type: { name: "String" } }, - description: { - serializedName: "description", + vendor: { + serializedName: "vendor", + readOnly: true, type: { name: "String" } }, - displayName: { - serializedName: "displayName", - required: true, + edgeId: { + serializedName: "edgeId", + readOnly: true, type: { name: "String" } }, - enabled: { - serializedName: "enabled", - required: true, + macAddress: { + serializedName: "macAddress", + readOnly: true, type: { - name: "Boolean" + name: "String" } }, - lastModifiedUtc: { - serializedName: "lastModifiedUtc", + model: { + serializedName: "model", readOnly: true, type: { - name: "DateTime" + name: "String" } - } - } - } -}; - -export const ScheduledAlertRuleProperties: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "ScheduledAlertRuleProperties", - modelProperties: { - ...ScheduledAlertRuleCommonProperties.type.modelProperties, - alertRuleTemplateName: { - serializedName: "alertRuleTemplateName", + }, + serialNumber: { + serializedName: "serialNumber", + readOnly: true, type: { name: "String" } }, - templateVersion: { - serializedName: "templateVersion", + firmwareVersion: { + serializedName: "firmwareVersion", + readOnly: true, type: { name: "String" } }, - description: { - serializedName: "description", + operatingSystem: { + serializedName: "operatingSystem", + readOnly: true, type: { name: "String" } }, - displayName: { - serializedName: "displayName", - required: true, + iotHubEntityId: { + serializedName: "iotHubEntityId", + readOnly: true, type: { name: "String" } }, - enabled: { - serializedName: "enabled", - required: true, + hostEntityId: { + serializedName: "hostEntityId", + readOnly: true, type: { - name: "Boolean" + name: "String" } }, - lastModifiedUtc: { - serializedName: "lastModifiedUtc", + ipAddressEntityId: { + serializedName: "ipAddressEntityId", readOnly: true, type: { - name: "DateTime" + name: "String" } }, - suppressionDuration: { - serializedName: "suppressionDuration", - required: true, + threatIntelligence: { + serializedName: "threatIntelligence", + readOnly: true, type: { - name: "TimeSpan" + name: "Sequence", + element: { + type: { + name: "Composite", + className: "ThreatIntelligence" + } + } } }, - suppressionEnabled: { - serializedName: "suppressionEnabled", - required: true, + protocols: { + serializedName: "protocols", + readOnly: true, type: { - name: "Boolean" + name: "Sequence", + element: { + type: { + name: "String" + } + } } }, - tactics: { - serializedName: "tactics", + owners: { + serializedName: "owners", + readOnly: true, type: { name: "Sequence", element: { @@ -9122,8 +8967,9 @@ export const ScheduledAlertRuleProperties: coreClient.CompositeMapper = { } } }, - techniques: { - serializedName: "techniques", + nicEntityIds: { + serializedName: "nicEntityIds", + readOnly: true, type: { name: "Sequence", element: { @@ -9133,925 +8979,3145 @@ export const ScheduledAlertRuleProperties: coreClient.CompositeMapper = { } } }, - incidentConfiguration: { - serializedName: "incidentConfiguration", + site: { + serializedName: "site", + readOnly: true, type: { - name: "Composite", - className: "IncidentConfiguration" + name: "String" } - } - } - } -}; - -export const InsightQueryItemProperties: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "InsightQueryItemProperties", - modelProperties: { - ...EntityQueryItemProperties.type.modelProperties, - displayName: { - serializedName: "displayName", + }, + zone: { + serializedName: "zone", + readOnly: true, type: { name: "String" } }, - description: { - serializedName: "description", + sensor: { + serializedName: "sensor", + readOnly: true, type: { name: "String" } }, - baseQuery: { - serializedName: "baseQuery", + deviceSubType: { + serializedName: "deviceSubType", + readOnly: true, type: { name: "String" } }, - tableQuery: { - serializedName: "tableQuery", + importance: { + serializedName: "importance", type: { - name: "Composite", - className: "InsightQueryItemPropertiesTableQuery" + name: "String" } }, - chartQuery: { - serializedName: "chartQuery", + purdueLayer: { + serializedName: "purdueLayer", + readOnly: true, type: { - name: "Dictionary", - value: { type: { name: "any" } } + name: "String" } }, - additionalQuery: { - serializedName: "additionalQuery", + isAuthorized: { + serializedName: "isAuthorized", + readOnly: true, type: { - name: "Composite", - className: "InsightQueryItemPropertiesAdditionalQuery" + name: "Boolean" } }, - defaultTimeRange: { - serializedName: "defaultTimeRange", + isProgramming: { + serializedName: "isProgramming", + readOnly: true, type: { - name: "Composite", - className: "InsightQueryItemPropertiesDefaultTimeRange" + name: "Boolean" } }, - referenceTimeRange: { - serializedName: "referenceTimeRange", + isScanner: { + serializedName: "isScanner", + readOnly: true, type: { - name: "Composite", - className: "InsightQueryItemPropertiesReferenceTimeRange" + name: "Boolean" } } } } }; -export const AADCheckRequirementsProperties: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "AADCheckRequirementsProperties", - modelProperties: { - ...DataConnectorTenantId.type.modelProperties - } - } -}; - -export const AatpCheckRequirementsProperties: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "AatpCheckRequirementsProperties", - modelProperties: { - ...DataConnectorTenantId.type.modelProperties - } - } -}; - -export const Dynamics365CheckRequirementsProperties: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "Dynamics365CheckRequirementsProperties", - modelProperties: { - ...DataConnectorTenantId.type.modelProperties - } - } -}; - -export const McasCheckRequirementsProperties: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "McasCheckRequirementsProperties", - modelProperties: { - ...DataConnectorTenantId.type.modelProperties - } - } -}; - -export const MdatpCheckRequirementsProperties: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "MdatpCheckRequirementsProperties", - modelProperties: { - ...DataConnectorTenantId.type.modelProperties - } - } -}; - -export const MstiCheckRequirementsProperties: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "MstiCheckRequirementsProperties", - modelProperties: { - ...DataConnectorTenantId.type.modelProperties - } - } -}; - -export const MTPCheckRequirementsProperties: coreClient.CompositeMapper = { +export const IpEntityProperties: coreClient.CompositeMapper = { type: { name: "Composite", - className: "MTPCheckRequirementsProperties", + className: "IpEntityProperties", modelProperties: { - ...DataConnectorTenantId.type.modelProperties + ...EntityCommonProperties.type.modelProperties, + address: { + serializedName: "address", + readOnly: true, + type: { + name: "String" + } + }, + location: { + serializedName: "location", + type: { + name: "Composite", + className: "GeoLocation" + } + }, + threatIntelligence: { + serializedName: "threatIntelligence", + readOnly: true, + type: { + name: "Sequence", + element: { + type: { + name: "Composite", + className: "ThreatIntelligence" + } + } + } + } } } }; -export const OfficeATPCheckRequirementsProperties: coreClient.CompositeMapper = { +export const MailboxEntityProperties: coreClient.CompositeMapper = { type: { name: "Composite", - className: "OfficeATPCheckRequirementsProperties", + className: "MailboxEntityProperties", modelProperties: { - ...DataConnectorTenantId.type.modelProperties + ...EntityCommonProperties.type.modelProperties, + mailboxPrimaryAddress: { + serializedName: "mailboxPrimaryAddress", + readOnly: true, + type: { + name: "String" + } + }, + displayName: { + serializedName: "displayName", + readOnly: true, + type: { + name: "String" + } + }, + upn: { + serializedName: "upn", + readOnly: true, + type: { + name: "String" + } + }, + externalDirectoryObjectId: { + serializedName: "externalDirectoryObjectId", + readOnly: true, + type: { + name: "Uuid" + } + } } } }; -export const OfficeIRMCheckRequirementsProperties: coreClient.CompositeMapper = { +export const MailClusterEntityProperties: coreClient.CompositeMapper = { type: { name: "Composite", - className: "OfficeIRMCheckRequirementsProperties", + className: "MailClusterEntityProperties", modelProperties: { - ...DataConnectorTenantId.type.modelProperties - } - } -}; - -export const Office365ProjectCheckRequirementsProperties: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "Office365ProjectCheckRequirementsProperties", - modelProperties: { - ...DataConnectorTenantId.type.modelProperties - } - } -}; - -export const OfficePowerBICheckRequirementsProperties: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "OfficePowerBICheckRequirementsProperties", - modelProperties: { - ...DataConnectorTenantId.type.modelProperties - } - } -}; - -export const TICheckRequirementsProperties: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "TICheckRequirementsProperties", - modelProperties: { - ...DataConnectorTenantId.type.modelProperties - } - } -}; - -export const TiTaxiiCheckRequirementsProperties: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "TiTaxiiCheckRequirementsProperties", - modelProperties: { - ...DataConnectorTenantId.type.modelProperties - } - } -}; - -export const AADDataConnectorProperties: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "AADDataConnectorProperties", - modelProperties: { - ...DataConnectorTenantId.type.modelProperties, - ...DataConnectorWithAlertsProperties.type.modelProperties - } - } -}; - -export const MstiDataConnectorProperties: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "MstiDataConnectorProperties", - modelProperties: { - ...DataConnectorTenantId.type.modelProperties, - dataTypes: { - serializedName: "dataTypes", + ...EntityCommonProperties.type.modelProperties, + networkMessageIds: { + serializedName: "networkMessageIds", + readOnly: true, type: { - name: "Composite", - className: "MstiDataConnectorDataTypes" + name: "Sequence", + element: { + type: { + name: "String" + } + } } - } - } - } -}; - -export const MTPDataConnectorProperties: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "MTPDataConnectorProperties", - modelProperties: { - ...DataConnectorTenantId.type.modelProperties, - dataTypes: { - serializedName: "dataTypes", + }, + countByDeliveryStatus: { + serializedName: "countByDeliveryStatus", + readOnly: true, type: { - name: "Composite", - className: "MTPDataConnectorDataTypes" + name: "Dictionary", + value: { type: { name: "any" } } } - } - } - } -}; - -export const AatpDataConnectorProperties: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "AatpDataConnectorProperties", - modelProperties: { - ...DataConnectorTenantId.type.modelProperties, - ...DataConnectorWithAlertsProperties.type.modelProperties - } - } -}; - -export const McasDataConnectorProperties: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "McasDataConnectorProperties", - modelProperties: { - ...DataConnectorTenantId.type.modelProperties, - dataTypes: { - serializedName: "dataTypes", + }, + countByThreatType: { + serializedName: "countByThreatType", + readOnly: true, type: { - name: "Composite", - className: "McasDataConnectorDataTypes" + name: "Dictionary", + value: { type: { name: "any" } } } - } - } - } -}; - -export const Dynamics365DataConnectorProperties: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "Dynamics365DataConnectorProperties", - modelProperties: { - ...DataConnectorTenantId.type.modelProperties, - dataTypes: { - serializedName: "dataTypes", + }, + countByProtectionStatus: { + serializedName: "countByProtectionStatus", + readOnly: true, type: { - name: "Composite", - className: "Dynamics365DataConnectorDataTypes" + name: "Dictionary", + value: { type: { name: "any" } } } - } - } - } -}; - -export const OfficeATPDataConnectorProperties: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "OfficeATPDataConnectorProperties", - modelProperties: { - ...DataConnectorTenantId.type.modelProperties, - ...DataConnectorWithAlertsProperties.type.modelProperties - } - } -}; - -export const Office365ProjectDataConnectorProperties: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "Office365ProjectDataConnectorProperties", - modelProperties: { - ...DataConnectorTenantId.type.modelProperties, - dataTypes: { - serializedName: "dataTypes", + }, + threats: { + serializedName: "threats", + readOnly: true, type: { - name: "Composite", - className: "Office365ProjectConnectorDataTypes" + name: "Sequence", + element: { + type: { + name: "String" + } + } + } + }, + query: { + serializedName: "query", + readOnly: true, + type: { + name: "String" + } + }, + queryTime: { + serializedName: "queryTime", + readOnly: true, + type: { + name: "DateTime" + } + }, + mailCount: { + serializedName: "mailCount", + readOnly: true, + type: { + name: "Number" + } + }, + isVolumeAnomaly: { + serializedName: "isVolumeAnomaly", + readOnly: true, + type: { + name: "Boolean" + } + }, + source: { + serializedName: "source", + readOnly: true, + type: { + name: "String" + } + }, + clusterSourceIdentifier: { + serializedName: "clusterSourceIdentifier", + readOnly: true, + type: { + name: "String" + } + }, + clusterSourceType: { + serializedName: "clusterSourceType", + readOnly: true, + type: { + name: "String" + } + }, + clusterQueryStartTime: { + serializedName: "clusterQueryStartTime", + readOnly: true, + type: { + name: "DateTime" + } + }, + clusterQueryEndTime: { + serializedName: "clusterQueryEndTime", + readOnly: true, + type: { + name: "DateTime" + } + }, + clusterGroup: { + serializedName: "clusterGroup", + readOnly: true, + type: { + name: "String" } } } } }; -export const OfficePowerBIDataConnectorProperties: coreClient.CompositeMapper = { +export const MailMessageEntityProperties: coreClient.CompositeMapper = { type: { name: "Composite", - className: "OfficePowerBIDataConnectorProperties", + className: "MailMessageEntityProperties", modelProperties: { - ...DataConnectorTenantId.type.modelProperties, - dataTypes: { - serializedName: "dataTypes", + ...EntityCommonProperties.type.modelProperties, + fileEntityIds: { + serializedName: "fileEntityIds", + readOnly: true, type: { - name: "Composite", - className: "OfficePowerBIConnectorDataTypes" + name: "Sequence", + element: { + type: { + name: "String" + } + } } - } - } - } -}; - -export const OfficeIRMDataConnectorProperties: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "OfficeIRMDataConnectorProperties", - modelProperties: { - ...DataConnectorTenantId.type.modelProperties, - ...DataConnectorWithAlertsProperties.type.modelProperties - } - } -}; - -export const MdatpDataConnectorProperties: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "MdatpDataConnectorProperties", - modelProperties: { - ...DataConnectorTenantId.type.modelProperties, - ...DataConnectorWithAlertsProperties.type.modelProperties - } - } -}; - -export const OfficeDataConnectorProperties: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "OfficeDataConnectorProperties", - modelProperties: { - ...DataConnectorTenantId.type.modelProperties, - dataTypes: { - serializedName: "dataTypes", + }, + recipient: { + serializedName: "recipient", + readOnly: true, type: { - name: "Composite", - className: "OfficeDataConnectorDataTypes" + name: "String" } - } - } - } -}; - -export const TIDataConnectorProperties: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "TIDataConnectorProperties", - modelProperties: { - ...DataConnectorTenantId.type.modelProperties, - tipLookbackPeriod: { - serializedName: "tipLookbackPeriod", - nullable: true, + }, + urls: { + serializedName: "urls", + readOnly: true, type: { - name: "DateTime" + name: "Sequence", + element: { + type: { + name: "String" + } + } } }, - dataTypes: { - serializedName: "dataTypes", + threats: { + serializedName: "threats", + readOnly: true, type: { - name: "Composite", - className: "TIDataConnectorDataTypes" + name: "Sequence", + element: { + type: { + name: "String" + } + } } - } - } - } -}; - -export const TiTaxiiDataConnectorProperties: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "TiTaxiiDataConnectorProperties", - modelProperties: { - ...DataConnectorTenantId.type.modelProperties, - workspaceId: { - serializedName: "workspaceId", + }, + p1Sender: { + serializedName: "p1Sender", + readOnly: true, type: { name: "String" } }, - friendlyName: { - serializedName: "friendlyName", + p1SenderDisplayName: { + serializedName: "p1SenderDisplayName", + readOnly: true, type: { name: "String" } }, - taxiiServer: { - serializedName: "taxiiServer", + p1SenderDomain: { + serializedName: "p1SenderDomain", + readOnly: true, type: { name: "String" } }, - collectionId: { - serializedName: "collectionId", + senderIP: { + serializedName: "senderIP", + readOnly: true, type: { name: "String" } }, - userName: { - serializedName: "userName", + p2Sender: { + serializedName: "p2Sender", + readOnly: true, type: { name: "String" } }, - password: { - serializedName: "password", + p2SenderDisplayName: { + serializedName: "p2SenderDisplayName", + readOnly: true, type: { name: "String" } }, - taxiiLookbackPeriod: { - serializedName: "taxiiLookbackPeriod", - nullable: true, + p2SenderDomain: { + serializedName: "p2SenderDomain", + readOnly: true, type: { - name: "DateTime" + name: "String" } }, - pollingFrequency: { - serializedName: "pollingFrequency", - required: true, - nullable: true, + receiveDate: { + serializedName: "receiveDate", + readOnly: true, type: { - name: "String" + name: "DateTime" } }, - dataTypes: { - serializedName: "dataTypes", + networkMessageId: { + serializedName: "networkMessageId", + readOnly: true, type: { - name: "Composite", - className: "TiTaxiiDataConnectorDataTypes" + name: "Uuid" } - } - } - } -}; - -export const ASCDataConnectorProperties: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "ASCDataConnectorProperties", - modelProperties: { - ...DataConnectorWithAlertsProperties.type.modelProperties, - subscriptionId: { - serializedName: "subscriptionId", + }, + internetMessageId: { + serializedName: "internetMessageId", + readOnly: true, type: { name: "String" } - } - } - } -}; - -export const IoTDataConnectorProperties: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "IoTDataConnectorProperties", - modelProperties: { - ...DataConnectorWithAlertsProperties.type.modelProperties, - subscriptionId: { - serializedName: "subscriptionId", + }, + subject: { + serializedName: "subject", + readOnly: true, type: { name: "String" } - } - } - } -}; - -export const McasDataConnectorDataTypes: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "McasDataConnectorDataTypes", - modelProperties: { - ...AlertsDataTypeOfDataConnector.type.modelProperties, - discoveryLogs: { - serializedName: "discoveryLogs", - type: { - name: "Composite", - className: "DataConnectorDataTypeCommon" - } - } - } - } -}; - -export const MstiDataConnectorDataTypesBingSafetyPhishingURL: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "MstiDataConnectorDataTypesBingSafetyPhishingURL", - modelProperties: { - ...DataConnectorDataTypeCommon.type.modelProperties, - lookbackPeriod: { - serializedName: "lookbackPeriod", - required: true, + }, + language: { + serializedName: "language", + readOnly: true, type: { name: "String" } - } - } - } -}; - -export const MstiDataConnectorDataTypesMicrosoftEmergingThreatFeed: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "MstiDataConnectorDataTypesMicrosoftEmergingThreatFeed", - modelProperties: { - ...DataConnectorDataTypeCommon.type.modelProperties, - lookbackPeriod: { - serializedName: "lookbackPeriod", - required: true, + }, + threatDetectionMethods: { + serializedName: "threatDetectionMethods", + readOnly: true, type: { - name: "String" + name: "Sequence", + element: { + type: { + name: "String" + } + } } - } - } - } -}; - -export const MTPDataConnectorDataTypesIncidents: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "MTPDataConnectorDataTypesIncidents", - modelProperties: { - ...DataConnectorDataTypeCommon.type.modelProperties + }, + bodyFingerprintBin1: { + serializedName: "bodyFingerprintBin1", + type: { + name: "Number" + } + }, + bodyFingerprintBin2: { + serializedName: "bodyFingerprintBin2", + type: { + name: "Number" + } + }, + bodyFingerprintBin3: { + serializedName: "bodyFingerprintBin3", + type: { + name: "Number" + } + }, + bodyFingerprintBin4: { + serializedName: "bodyFingerprintBin4", + type: { + name: "Number" + } + }, + bodyFingerprintBin5: { + serializedName: "bodyFingerprintBin5", + type: { + name: "Number" + } + }, + antispamDirection: { + serializedName: "antispamDirection", + type: { + name: "String" + } + }, + deliveryAction: { + serializedName: "deliveryAction", + type: { + name: "Enum", + allowedValues: [ + "Unknown", + "DeliveredAsSpam", + "Delivered", + "Blocked", + "Replaced" + ] + } + }, + deliveryLocation: { + serializedName: "deliveryLocation", + type: { + name: "Enum", + allowedValues: [ + "Unknown", + "Inbox", + "JunkFolder", + "DeletedFolder", + "Quarantine", + "External", + "Failed", + "Dropped", + "Forwarded" + ] + } + } } } }; -export const AwsCloudTrailDataConnectorDataTypesLogs: coreClient.CompositeMapper = { +export const MalwareEntityProperties: coreClient.CompositeMapper = { type: { name: "Composite", - className: "AwsCloudTrailDataConnectorDataTypesLogs", + className: "MalwareEntityProperties", modelProperties: { - ...DataConnectorDataTypeCommon.type.modelProperties + ...EntityCommonProperties.type.modelProperties, + category: { + serializedName: "category", + readOnly: true, + type: { + name: "String" + } + }, + fileEntityIds: { + serializedName: "fileEntityIds", + readOnly: true, + type: { + name: "Sequence", + element: { + type: { + name: "String" + } + } + } + }, + malwareName: { + serializedName: "malwareName", + readOnly: true, + type: { + name: "String" + } + }, + processEntityIds: { + serializedName: "processEntityIds", + readOnly: true, + type: { + name: "Sequence", + element: { + type: { + name: "String" + } + } + } + } } } }; -export const AwsS3DataConnectorDataTypesLogs: coreClient.CompositeMapper = { +export const ProcessEntityProperties: coreClient.CompositeMapper = { type: { name: "Composite", - className: "AwsS3DataConnectorDataTypesLogs", + className: "ProcessEntityProperties", modelProperties: { - ...DataConnectorDataTypeCommon.type.modelProperties + ...EntityCommonProperties.type.modelProperties, + accountEntityId: { + serializedName: "accountEntityId", + readOnly: true, + type: { + name: "String" + } + }, + commandLine: { + serializedName: "commandLine", + readOnly: true, + type: { + name: "String" + } + }, + creationTimeUtc: { + serializedName: "creationTimeUtc", + readOnly: true, + type: { + name: "DateTime" + } + }, + elevationToken: { + serializedName: "elevationToken", + type: { + name: "Enum", + allowedValues: ["Default", "Full", "Limited"] + } + }, + hostEntityId: { + serializedName: "hostEntityId", + readOnly: true, + type: { + name: "String" + } + }, + hostLogonSessionEntityId: { + serializedName: "hostLogonSessionEntityId", + readOnly: true, + type: { + name: "String" + } + }, + imageFileEntityId: { + serializedName: "imageFileEntityId", + readOnly: true, + type: { + name: "String" + } + }, + parentProcessEntityId: { + serializedName: "parentProcessEntityId", + readOnly: true, + type: { + name: "String" + } + }, + processId: { + serializedName: "processId", + readOnly: true, + type: { + name: "String" + } + } } } }; -export const Dynamics365DataConnectorDataTypesDynamics365CdsActivities: coreClient.CompositeMapper = { +export const RegistryKeyEntityProperties: coreClient.CompositeMapper = { type: { name: "Composite", - className: "Dynamics365DataConnectorDataTypesDynamics365CdsActivities", + className: "RegistryKeyEntityProperties", modelProperties: { - ...DataConnectorDataTypeCommon.type.modelProperties + ...EntityCommonProperties.type.modelProperties, + hive: { + serializedName: "hive", + readOnly: true, + type: { + name: "String" + } + }, + key: { + serializedName: "key", + readOnly: true, + type: { + name: "String" + } + } } } }; -export const Office365ProjectConnectorDataTypesLogs: coreClient.CompositeMapper = { +export const RegistryValueEntityProperties: coreClient.CompositeMapper = { type: { name: "Composite", - className: "Office365ProjectConnectorDataTypesLogs", + className: "RegistryValueEntityProperties", modelProperties: { - ...DataConnectorDataTypeCommon.type.modelProperties + ...EntityCommonProperties.type.modelProperties, + keyEntityId: { + serializedName: "keyEntityId", + readOnly: true, + type: { + name: "String" + } + }, + valueData: { + serializedName: "valueData", + readOnly: true, + type: { + name: "String" + } + }, + valueName: { + serializedName: "valueName", + readOnly: true, + type: { + name: "String" + } + }, + valueType: { + serializedName: "valueType", + readOnly: true, + type: { + name: "String" + } + } } } }; -export const OfficePowerBIConnectorDataTypesLogs: coreClient.CompositeMapper = { +export const SecurityGroupEntityProperties: coreClient.CompositeMapper = { type: { name: "Composite", - className: "OfficePowerBIConnectorDataTypesLogs", + className: "SecurityGroupEntityProperties", modelProperties: { - ...DataConnectorDataTypeCommon.type.modelProperties - } - } -}; - -export const OfficeDataConnectorDataTypesExchange: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "OfficeDataConnectorDataTypesExchange", - modelProperties: { - ...DataConnectorDataTypeCommon.type.modelProperties + ...EntityCommonProperties.type.modelProperties, + distinguishedName: { + serializedName: "distinguishedName", + readOnly: true, + type: { + name: "String" + } + }, + objectGuid: { + serializedName: "objectGuid", + readOnly: true, + type: { + name: "Uuid" + } + }, + sid: { + serializedName: "sid", + readOnly: true, + type: { + name: "String" + } + } } } }; -export const OfficeDataConnectorDataTypesSharePoint: coreClient.CompositeMapper = { +export const SubmissionMailEntityProperties: coreClient.CompositeMapper = { type: { name: "Composite", - className: "OfficeDataConnectorDataTypesSharePoint", + className: "SubmissionMailEntityProperties", modelProperties: { - ...DataConnectorDataTypeCommon.type.modelProperties + ...EntityCommonProperties.type.modelProperties, + networkMessageId: { + serializedName: "networkMessageId", + readOnly: true, + type: { + name: "Uuid" + } + }, + submissionId: { + serializedName: "submissionId", + readOnly: true, + type: { + name: "Uuid" + } + }, + submitter: { + serializedName: "submitter", + readOnly: true, + type: { + name: "String" + } + }, + submissionDate: { + serializedName: "submissionDate", + readOnly: true, + type: { + name: "DateTime" + } + }, + timestamp: { + serializedName: "timestamp", + readOnly: true, + type: { + name: "DateTime" + } + }, + recipient: { + serializedName: "recipient", + readOnly: true, + type: { + name: "String" + } + }, + sender: { + serializedName: "sender", + readOnly: true, + type: { + name: "String" + } + }, + senderIp: { + serializedName: "senderIp", + readOnly: true, + type: { + name: "String" + } + }, + subject: { + serializedName: "subject", + readOnly: true, + type: { + name: "String" + } + }, + reportType: { + serializedName: "reportType", + readOnly: true, + type: { + name: "String" + } + } } } }; -export const OfficeDataConnectorDataTypesTeams: coreClient.CompositeMapper = { +export const UrlEntityProperties: coreClient.CompositeMapper = { type: { name: "Composite", - className: "OfficeDataConnectorDataTypesTeams", + className: "UrlEntityProperties", modelProperties: { - ...DataConnectorDataTypeCommon.type.modelProperties + ...EntityCommonProperties.type.modelProperties, + url: { + serializedName: "url", + readOnly: true, + type: { + name: "String" + } + } } } }; -export const TIDataConnectorDataTypesIndicators: coreClient.CompositeMapper = { +export const NicEntityProperties: coreClient.CompositeMapper = { type: { name: "Composite", - className: "TIDataConnectorDataTypesIndicators", + className: "NicEntityProperties", modelProperties: { - ...DataConnectorDataTypeCommon.type.modelProperties + ...EntityCommonProperties.type.modelProperties, + macAddress: { + serializedName: "macAddress", + readOnly: true, + type: { + name: "String" + } + }, + ipAddressEntityId: { + serializedName: "ipAddressEntityId", + readOnly: true, + type: { + name: "String" + } + }, + vlans: { + serializedName: "vlans", + readOnly: true, + type: { + name: "Sequence", + element: { + type: { + name: "String" + } + } + } + } } } }; -export const TiTaxiiDataConnectorDataTypesTaxiiClient: coreClient.CompositeMapper = { +export const AADCheckRequirements: coreClient.CompositeMapper = { + serializedName: "AzureActiveDirectory", type: { name: "Composite", - className: "TiTaxiiDataConnectorDataTypesTaxiiClient", + className: "AADCheckRequirements", + uberParent: "DataConnectorsCheckRequirements", + polymorphicDiscriminator: + DataConnectorsCheckRequirements.type.polymorphicDiscriminator, modelProperties: { - ...DataConnectorDataTypeCommon.type.modelProperties + ...DataConnectorsCheckRequirements.type.modelProperties, + tenantId: { + serializedName: "properties.tenantId", + type: { + name: "String" + } + } } } }; -export const CodelessUiConnectorConfigPropertiesGraphQueriesItem: coreClient.CompositeMapper = { +export const AatpCheckRequirements: coreClient.CompositeMapper = { + serializedName: "AzureAdvancedThreatProtection", type: { name: "Composite", - className: "CodelessUiConnectorConfigPropertiesGraphQueriesItem", + className: "AatpCheckRequirements", + uberParent: "DataConnectorsCheckRequirements", + polymorphicDiscriminator: + DataConnectorsCheckRequirements.type.polymorphicDiscriminator, modelProperties: { - ...GraphQueries.type.modelProperties + ...DataConnectorsCheckRequirements.type.modelProperties, + tenantId: { + serializedName: "properties.tenantId", + type: { + name: "String" + } + } } } }; -export const CodelessUiConnectorConfigPropertiesSampleQueriesItem: coreClient.CompositeMapper = { +export const ASCCheckRequirements: coreClient.CompositeMapper = { + serializedName: "AzureSecurityCenter", type: { name: "Composite", - className: "CodelessUiConnectorConfigPropertiesSampleQueriesItem", + className: "ASCCheckRequirements", + uberParent: "DataConnectorsCheckRequirements", + polymorphicDiscriminator: + DataConnectorsCheckRequirements.type.polymorphicDiscriminator, modelProperties: { - ...SampleQueries.type.modelProperties + ...DataConnectorsCheckRequirements.type.modelProperties, + subscriptionId: { + serializedName: "properties.subscriptionId", + type: { + name: "String" + } + } } } }; -export const CodelessUiConnectorConfigPropertiesDataTypesItem: coreClient.CompositeMapper = { +export const AwsCloudTrailCheckRequirements: coreClient.CompositeMapper = { + serializedName: "AmazonWebServicesCloudTrail", type: { name: "Composite", - className: "CodelessUiConnectorConfigPropertiesDataTypesItem", + className: "AwsCloudTrailCheckRequirements", + uberParent: "DataConnectorsCheckRequirements", + polymorphicDiscriminator: + DataConnectorsCheckRequirements.type.polymorphicDiscriminator, modelProperties: { - ...LastDataReceivedDataType.type.modelProperties + ...DataConnectorsCheckRequirements.type.modelProperties } } }; -export const CodelessUiConnectorConfigPropertiesConnectivityCriteriaItem: coreClient.CompositeMapper = { +export const AwsS3CheckRequirements: coreClient.CompositeMapper = { + serializedName: "AmazonWebServicesS3", type: { name: "Composite", - className: "CodelessUiConnectorConfigPropertiesConnectivityCriteriaItem", + className: "AwsS3CheckRequirements", + uberParent: "DataConnectorsCheckRequirements", + polymorphicDiscriminator: + DataConnectorsCheckRequirements.type.polymorphicDiscriminator, modelProperties: { - ...ConnectivityCriteria.type.modelProperties + ...DataConnectorsCheckRequirements.type.modelProperties } } }; -export const PermissionsResourceProviderItem: coreClient.CompositeMapper = { +export const Dynamics365CheckRequirements: coreClient.CompositeMapper = { + serializedName: "Dynamics365", type: { name: "Composite", - className: "PermissionsResourceProviderItem", + className: "Dynamics365CheckRequirements", + uberParent: "DataConnectorsCheckRequirements", + polymorphicDiscriminator: + DataConnectorsCheckRequirements.type.polymorphicDiscriminator, modelProperties: { - ...ResourceProvider.type.modelProperties + ...DataConnectorsCheckRequirements.type.modelProperties, + tenantId: { + serializedName: "properties.tenantId", + type: { + name: "String" + } + } } } }; -export const Customs: coreClient.CompositeMapper = { +export const McasCheckRequirements: coreClient.CompositeMapper = { + serializedName: "MicrosoftCloudAppSecurity", type: { name: "Composite", - className: "Customs", + className: "McasCheckRequirements", + uberParent: "DataConnectorsCheckRequirements", + polymorphicDiscriminator: + DataConnectorsCheckRequirements.type.polymorphicDiscriminator, modelProperties: { - ...CustomsPermission.type.modelProperties + ...DataConnectorsCheckRequirements.type.modelProperties, + tenantId: { + serializedName: "properties.tenantId", + type: { + name: "String" + } + } } } }; -export const CodelessUiConnectorConfigPropertiesInstructionStepsItem: coreClient.CompositeMapper = { +export const MdatpCheckRequirements: coreClient.CompositeMapper = { + serializedName: "MicrosoftDefenderAdvancedThreatProtection", type: { name: "Composite", - className: "CodelessUiConnectorConfigPropertiesInstructionStepsItem", + className: "MdatpCheckRequirements", + uberParent: "DataConnectorsCheckRequirements", + polymorphicDiscriminator: + DataConnectorsCheckRequirements.type.polymorphicDiscriminator, modelProperties: { - ...InstructionSteps.type.modelProperties - } + ...DataConnectorsCheckRequirements.type.modelProperties, + tenantId: { + serializedName: "properties.tenantId", + type: { + name: "String" + } + } + } + } +}; + +export const MstiCheckRequirements: coreClient.CompositeMapper = { + serializedName: "MicrosoftThreatIntelligence", + type: { + name: "Composite", + className: "MstiCheckRequirements", + uberParent: "DataConnectorsCheckRequirements", + polymorphicDiscriminator: + DataConnectorsCheckRequirements.type.polymorphicDiscriminator, + modelProperties: { + ...DataConnectorsCheckRequirements.type.modelProperties, + tenantId: { + serializedName: "properties.tenantId", + type: { + name: "String" + } + } + } + } +}; + +export const MtpCheckRequirements: coreClient.CompositeMapper = { + serializedName: "MicrosoftThreatProtection", + type: { + name: "Composite", + className: "MtpCheckRequirements", + uberParent: "DataConnectorsCheckRequirements", + polymorphicDiscriminator: + DataConnectorsCheckRequirements.type.polymorphicDiscriminator, + modelProperties: { + ...DataConnectorsCheckRequirements.type.modelProperties, + tenantId: { + serializedName: "properties.tenantId", + type: { + name: "String" + } + } + } + } +}; + +export const OfficeATPCheckRequirements: coreClient.CompositeMapper = { + serializedName: "OfficeATP", + type: { + name: "Composite", + className: "OfficeATPCheckRequirements", + uberParent: "DataConnectorsCheckRequirements", + polymorphicDiscriminator: + DataConnectorsCheckRequirements.type.polymorphicDiscriminator, + modelProperties: { + ...DataConnectorsCheckRequirements.type.modelProperties, + tenantId: { + serializedName: "properties.tenantId", + type: { + name: "String" + } + } + } + } +}; + +export const OfficeIRMCheckRequirements: coreClient.CompositeMapper = { + serializedName: "OfficeIRM", + type: { + name: "Composite", + className: "OfficeIRMCheckRequirements", + uberParent: "DataConnectorsCheckRequirements", + polymorphicDiscriminator: + DataConnectorsCheckRequirements.type.polymorphicDiscriminator, + modelProperties: { + ...DataConnectorsCheckRequirements.type.modelProperties, + tenantId: { + serializedName: "properties.tenantId", + type: { + name: "String" + } + } + } + } +}; + +export const MicrosoftPurviewInformationProtectionCheckRequirements: coreClient.CompositeMapper = { + serializedName: "MicrosoftPurviewInformationProtection", + type: { + name: "Composite", + className: "MicrosoftPurviewInformationProtectionCheckRequirements", + uberParent: "DataConnectorsCheckRequirements", + polymorphicDiscriminator: + DataConnectorsCheckRequirements.type.polymorphicDiscriminator, + modelProperties: { + ...DataConnectorsCheckRequirements.type.modelProperties, + tenantId: { + serializedName: "properties.tenantId", + type: { + name: "String" + } + } + } + } +}; + +export const Office365ProjectCheckRequirements: coreClient.CompositeMapper = { + serializedName: "Office365Project", + type: { + name: "Composite", + className: "Office365ProjectCheckRequirements", + uberParent: "DataConnectorsCheckRequirements", + polymorphicDiscriminator: + DataConnectorsCheckRequirements.type.polymorphicDiscriminator, + modelProperties: { + ...DataConnectorsCheckRequirements.type.modelProperties, + tenantId: { + serializedName: "properties.tenantId", + type: { + name: "String" + } + } + } + } +}; + +export const OfficePowerBICheckRequirements: coreClient.CompositeMapper = { + serializedName: "OfficePowerBI", + type: { + name: "Composite", + className: "OfficePowerBICheckRequirements", + uberParent: "DataConnectorsCheckRequirements", + polymorphicDiscriminator: + DataConnectorsCheckRequirements.type.polymorphicDiscriminator, + modelProperties: { + ...DataConnectorsCheckRequirements.type.modelProperties, + tenantId: { + serializedName: "properties.tenantId", + type: { + name: "String" + } + } + } + } +}; + +export const TICheckRequirements: coreClient.CompositeMapper = { + serializedName: "ThreatIntelligence", + type: { + name: "Composite", + className: "TICheckRequirements", + uberParent: "DataConnectorsCheckRequirements", + polymorphicDiscriminator: + DataConnectorsCheckRequirements.type.polymorphicDiscriminator, + modelProperties: { + ...DataConnectorsCheckRequirements.type.modelProperties, + tenantId: { + serializedName: "properties.tenantId", + type: { + name: "String" + } + } + } + } +}; + +export const TiTaxiiCheckRequirements: coreClient.CompositeMapper = { + serializedName: "ThreatIntelligenceTaxii", + type: { + name: "Composite", + className: "TiTaxiiCheckRequirements", + uberParent: "DataConnectorsCheckRequirements", + polymorphicDiscriminator: + DataConnectorsCheckRequirements.type.polymorphicDiscriminator, + modelProperties: { + ...DataConnectorsCheckRequirements.type.modelProperties, + tenantId: { + serializedName: "properties.tenantId", + type: { + name: "String" + } + } + } + } +}; + +export const IoTCheckRequirements: coreClient.CompositeMapper = { + serializedName: "IOT", + type: { + name: "Composite", + className: "IoTCheckRequirements", + uberParent: "DataConnectorsCheckRequirements", + polymorphicDiscriminator: + DataConnectorsCheckRequirements.type.polymorphicDiscriminator, + modelProperties: { + ...DataConnectorsCheckRequirements.type.modelProperties, + subscriptionId: { + serializedName: "properties.subscriptionId", + type: { + name: "String" + } + } + } + } +}; + +export const AlertRuleTemplateWithMitreProperties: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "AlertRuleTemplateWithMitreProperties", + modelProperties: { + ...AlertRuleTemplatePropertiesBase.type.modelProperties, + tactics: { + serializedName: "tactics", + type: { + name: "Sequence", + element: { + type: { + name: "String" + } + } + } + }, + techniques: { + serializedName: "techniques", + type: { + name: "Sequence", + element: { + type: { + name: "String" + } + } + } + } + } + } +}; + +export const MicrosoftSecurityIncidentCreationAlertRuleTemplateProperties: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "MicrosoftSecurityIncidentCreationAlertRuleTemplateProperties", + modelProperties: { + ...AlertRuleTemplatePropertiesBase.type.modelProperties, + displayNamesFilter: { + serializedName: "displayNamesFilter", + type: { + name: "Sequence", + element: { + type: { + name: "String" + } + } + } + }, + displayNamesExcludeFilter: { + serializedName: "displayNamesExcludeFilter", + type: { + name: "Sequence", + element: { + type: { + name: "String" + } + } + } + }, + productFilter: { + serializedName: "productFilter", + type: { + name: "String" + } + }, + severitiesFilter: { + serializedName: "severitiesFilter", + type: { + name: "Sequence", + element: { + type: { + name: "String" + } + } + } + } + } + } +}; + +export const NrtAlertRuleTemplateProperties: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "NrtAlertRuleTemplateProperties", + modelProperties: { + ...AlertRuleTemplateWithMitreProperties.type.modelProperties, + ...QueryBasedAlertRuleTemplateProperties.type.modelProperties + } + } +}; + +export const MicrosoftSecurityIncidentCreationAlertRuleProperties: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "MicrosoftSecurityIncidentCreationAlertRuleProperties", + modelProperties: { + ...MicrosoftSecurityIncidentCreationAlertRuleCommonProperties.type + .modelProperties, + alertRuleTemplateName: { + serializedName: "alertRuleTemplateName", + type: { + name: "String" + } + }, + description: { + serializedName: "description", + type: { + name: "String" + } + }, + displayName: { + serializedName: "displayName", + required: true, + type: { + name: "String" + } + }, + enabled: { + serializedName: "enabled", + required: true, + type: { + name: "Boolean" + } + }, + lastModifiedUtc: { + serializedName: "lastModifiedUtc", + readOnly: true, + type: { + name: "DateTime" + } + } + } + } +}; + +export const ScheduledAlertRuleProperties: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "ScheduledAlertRuleProperties", + modelProperties: { + ...ScheduledAlertRuleCommonProperties.type.modelProperties, + alertRuleTemplateName: { + serializedName: "alertRuleTemplateName", + type: { + name: "String" + } + }, + templateVersion: { + serializedName: "templateVersion", + type: { + name: "String" + } + }, + description: { + serializedName: "description", + type: { + name: "String" + } + }, + displayName: { + serializedName: "displayName", + required: true, + type: { + name: "String" + } + }, + enabled: { + serializedName: "enabled", + required: true, + type: { + name: "Boolean" + } + }, + lastModifiedUtc: { + serializedName: "lastModifiedUtc", + readOnly: true, + type: { + name: "DateTime" + } + }, + suppressionDuration: { + serializedName: "suppressionDuration", + required: true, + type: { + name: "TimeSpan" + } + }, + suppressionEnabled: { + serializedName: "suppressionEnabled", + required: true, + type: { + name: "Boolean" + } + }, + tactics: { + serializedName: "tactics", + type: { + name: "Sequence", + element: { + type: { + name: "String" + } + } + } + }, + techniques: { + serializedName: "techniques", + type: { + name: "Sequence", + element: { + type: { + name: "String" + } + } + } + }, + incidentConfiguration: { + serializedName: "incidentConfiguration", + type: { + name: "Composite", + className: "IncidentConfiguration" + } + } + } + } +}; + +export const InsightQueryItemProperties: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "InsightQueryItemProperties", + modelProperties: { + ...EntityQueryItemProperties.type.modelProperties, + displayName: { + serializedName: "displayName", + type: { + name: "String" + } + }, + description: { + serializedName: "description", + type: { + name: "String" + } + }, + baseQuery: { + serializedName: "baseQuery", + type: { + name: "String" + } + }, + tableQuery: { + serializedName: "tableQuery", + type: { + name: "Composite", + className: "InsightQueryItemPropertiesTableQuery" + } + }, + chartQuery: { + serializedName: "chartQuery", + type: { + name: "Dictionary", + value: { type: { name: "any" } } + } + }, + additionalQuery: { + serializedName: "additionalQuery", + type: { + name: "Composite", + className: "InsightQueryItemPropertiesAdditionalQuery" + } + }, + defaultTimeRange: { + serializedName: "defaultTimeRange", + type: { + name: "Composite", + className: "InsightQueryItemPropertiesDefaultTimeRange" + } + }, + referenceTimeRange: { + serializedName: "referenceTimeRange", + type: { + name: "Composite", + className: "InsightQueryItemPropertiesReferenceTimeRange" + } + } + } + } +}; + +export const AADCheckRequirementsProperties: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "AADCheckRequirementsProperties", + modelProperties: { + ...DataConnectorTenantId.type.modelProperties + } + } +}; + +export const AatpCheckRequirementsProperties: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "AatpCheckRequirementsProperties", + modelProperties: { + ...DataConnectorTenantId.type.modelProperties + } + } +}; + +export const Dynamics365CheckRequirementsProperties: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "Dynamics365CheckRequirementsProperties", + modelProperties: { + ...DataConnectorTenantId.type.modelProperties + } + } +}; + +export const McasCheckRequirementsProperties: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "McasCheckRequirementsProperties", + modelProperties: { + ...DataConnectorTenantId.type.modelProperties + } + } +}; + +export const MdatpCheckRequirementsProperties: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "MdatpCheckRequirementsProperties", + modelProperties: { + ...DataConnectorTenantId.type.modelProperties + } + } +}; + +export const MstiCheckRequirementsProperties: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "MstiCheckRequirementsProperties", + modelProperties: { + ...DataConnectorTenantId.type.modelProperties + } + } +}; + +export const MTPCheckRequirementsProperties: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "MTPCheckRequirementsProperties", + modelProperties: { + ...DataConnectorTenantId.type.modelProperties + } + } +}; + +export const OfficeATPCheckRequirementsProperties: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "OfficeATPCheckRequirementsProperties", + modelProperties: { + ...DataConnectorTenantId.type.modelProperties + } + } +}; + +export const OfficeIRMCheckRequirementsProperties: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "OfficeIRMCheckRequirementsProperties", + modelProperties: { + ...DataConnectorTenantId.type.modelProperties + } + } +}; + +export const MicrosoftPurviewInformationProtectionCheckRequirementsProperties: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: + "MicrosoftPurviewInformationProtectionCheckRequirementsProperties", + modelProperties: { + ...DataConnectorTenantId.type.modelProperties + } + } +}; + +export const Office365ProjectCheckRequirementsProperties: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "Office365ProjectCheckRequirementsProperties", + modelProperties: { + ...DataConnectorTenantId.type.modelProperties + } + } +}; + +export const OfficePowerBICheckRequirementsProperties: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "OfficePowerBICheckRequirementsProperties", + modelProperties: { + ...DataConnectorTenantId.type.modelProperties + } + } +}; + +export const TICheckRequirementsProperties: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "TICheckRequirementsProperties", + modelProperties: { + ...DataConnectorTenantId.type.modelProperties + } + } +}; + +export const TiTaxiiCheckRequirementsProperties: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "TiTaxiiCheckRequirementsProperties", + modelProperties: { + ...DataConnectorTenantId.type.modelProperties + } + } +}; + +export const AADDataConnectorProperties: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "AADDataConnectorProperties", + modelProperties: { + ...DataConnectorTenantId.type.modelProperties, + ...DataConnectorWithAlertsProperties.type.modelProperties + } + } +}; + +export const MstiDataConnectorProperties: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "MstiDataConnectorProperties", + modelProperties: { + ...DataConnectorTenantId.type.modelProperties, + dataTypes: { + serializedName: "dataTypes", + type: { + name: "Composite", + className: "MstiDataConnectorDataTypes" + } + } + } + } +}; + +export const MTPDataConnectorProperties: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "MTPDataConnectorProperties", + modelProperties: { + ...DataConnectorTenantId.type.modelProperties, + dataTypes: { + serializedName: "dataTypes", + type: { + name: "Composite", + className: "MTPDataConnectorDataTypes" + } + }, + filteredProviders: { + serializedName: "filteredProviders", + type: { + name: "Composite", + className: "MtpFilteredProviders" + } + } + } + } +}; + +export const AatpDataConnectorProperties: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "AatpDataConnectorProperties", + modelProperties: { + ...DataConnectorTenantId.type.modelProperties, + ...DataConnectorWithAlertsProperties.type.modelProperties + } + } +}; + +export const McasDataConnectorProperties: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "McasDataConnectorProperties", + modelProperties: { + ...DataConnectorTenantId.type.modelProperties, + dataTypes: { + serializedName: "dataTypes", + type: { + name: "Composite", + className: "McasDataConnectorDataTypes" + } + } + } + } +}; + +export const Dynamics365DataConnectorProperties: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "Dynamics365DataConnectorProperties", + modelProperties: { + ...DataConnectorTenantId.type.modelProperties, + dataTypes: { + serializedName: "dataTypes", + type: { + name: "Composite", + className: "Dynamics365DataConnectorDataTypes" + } + } + } + } +}; + +export const OfficeATPDataConnectorProperties: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "OfficeATPDataConnectorProperties", + modelProperties: { + ...DataConnectorTenantId.type.modelProperties, + ...DataConnectorWithAlertsProperties.type.modelProperties + } + } +}; + +export const MicrosoftPurviewInformationProtectionDataConnectorProperties: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "MicrosoftPurviewInformationProtectionDataConnectorProperties", + modelProperties: { + ...DataConnectorTenantId.type.modelProperties, + dataTypes: { + serializedName: "dataTypes", + type: { + name: "Composite", + className: "MicrosoftPurviewInformationProtectionConnectorDataTypes" + } + } + } + } +}; + +export const Office365ProjectDataConnectorProperties: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "Office365ProjectDataConnectorProperties", + modelProperties: { + ...DataConnectorTenantId.type.modelProperties, + dataTypes: { + serializedName: "dataTypes", + type: { + name: "Composite", + className: "Office365ProjectConnectorDataTypes" + } + } + } + } +}; + +export const OfficePowerBIDataConnectorProperties: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "OfficePowerBIDataConnectorProperties", + modelProperties: { + ...DataConnectorTenantId.type.modelProperties, + dataTypes: { + serializedName: "dataTypes", + type: { + name: "Composite", + className: "OfficePowerBIConnectorDataTypes" + } + } + } + } +}; + +export const OfficeIRMDataConnectorProperties: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "OfficeIRMDataConnectorProperties", + modelProperties: { + ...DataConnectorTenantId.type.modelProperties, + ...DataConnectorWithAlertsProperties.type.modelProperties + } + } +}; + +export const MdatpDataConnectorProperties: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "MdatpDataConnectorProperties", + modelProperties: { + ...DataConnectorTenantId.type.modelProperties, + ...DataConnectorWithAlertsProperties.type.modelProperties + } + } +}; + +export const OfficeDataConnectorProperties: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "OfficeDataConnectorProperties", + modelProperties: { + ...DataConnectorTenantId.type.modelProperties, + dataTypes: { + serializedName: "dataTypes", + type: { + name: "Composite", + className: "OfficeDataConnectorDataTypes" + } + } + } + } +}; + +export const TIDataConnectorProperties: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "TIDataConnectorProperties", + modelProperties: { + ...DataConnectorTenantId.type.modelProperties, + tipLookbackPeriod: { + serializedName: "tipLookbackPeriod", + nullable: true, + type: { + name: "DateTime" + } + }, + dataTypes: { + serializedName: "dataTypes", + type: { + name: "Composite", + className: "TIDataConnectorDataTypes" + } + } + } + } +}; + +export const TiTaxiiDataConnectorProperties: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "TiTaxiiDataConnectorProperties", + modelProperties: { + ...DataConnectorTenantId.type.modelProperties, + workspaceId: { + serializedName: "workspaceId", + type: { + name: "String" + } + }, + friendlyName: { + serializedName: "friendlyName", + type: { + name: "String" + } + }, + taxiiServer: { + serializedName: "taxiiServer", + type: { + name: "String" + } + }, + collectionId: { + serializedName: "collectionId", + type: { + name: "String" + } + }, + userName: { + serializedName: "userName", + type: { + name: "String" + } + }, + password: { + serializedName: "password", + type: { + name: "String" + } + }, + taxiiLookbackPeriod: { + serializedName: "taxiiLookbackPeriod", + nullable: true, + type: { + name: "DateTime" + } + }, + pollingFrequency: { + serializedName: "pollingFrequency", + required: true, + nullable: true, + type: { + name: "String" + } + }, + dataTypes: { + serializedName: "dataTypes", + type: { + name: "Composite", + className: "TiTaxiiDataConnectorDataTypes" + } + } + } + } +}; + +export const ASCDataConnectorProperties: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "ASCDataConnectorProperties", + modelProperties: { + ...DataConnectorWithAlertsProperties.type.modelProperties, + subscriptionId: { + serializedName: "subscriptionId", + type: { + name: "String" + } + } + } + } +}; + +export const IoTDataConnectorProperties: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "IoTDataConnectorProperties", + modelProperties: { + ...DataConnectorWithAlertsProperties.type.modelProperties, + subscriptionId: { + serializedName: "subscriptionId", + type: { + name: "String" + } + } + } + } +}; + +export const McasDataConnectorDataTypes: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "McasDataConnectorDataTypes", + modelProperties: { + ...AlertsDataTypeOfDataConnector.type.modelProperties, + discoveryLogs: { + serializedName: "discoveryLogs", + type: { + name: "Composite", + className: "DataConnectorDataTypeCommon" + } + } + } + } +}; + +export const MstiDataConnectorDataTypesMicrosoftEmergingThreatFeed: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "MstiDataConnectorDataTypesMicrosoftEmergingThreatFeed", + modelProperties: { + ...DataConnectorDataTypeCommon.type.modelProperties, + lookbackPeriod: { + serializedName: "lookbackPeriod", + required: true, + type: { + name: "String" + } + } + } + } +}; + +export const MTPDataConnectorDataTypesIncidents: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "MTPDataConnectorDataTypesIncidents", + modelProperties: { + ...DataConnectorDataTypeCommon.type.modelProperties + } + } +}; + +export const MTPDataConnectorDataTypesAlerts: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "MTPDataConnectorDataTypesAlerts", + modelProperties: { + ...DataConnectorDataTypeCommon.type.modelProperties + } + } +}; + +export const AwsCloudTrailDataConnectorDataTypesLogs: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "AwsCloudTrailDataConnectorDataTypesLogs", + modelProperties: { + ...DataConnectorDataTypeCommon.type.modelProperties + } + } +}; + +export const AwsS3DataConnectorDataTypesLogs: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "AwsS3DataConnectorDataTypesLogs", + modelProperties: { + ...DataConnectorDataTypeCommon.type.modelProperties + } + } +}; + +export const Dynamics365DataConnectorDataTypesDynamics365CdsActivities: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "Dynamics365DataConnectorDataTypesDynamics365CdsActivities", + modelProperties: { + ...DataConnectorDataTypeCommon.type.modelProperties + } + } +}; + +export const MicrosoftPurviewInformationProtectionConnectorDataTypesLogs: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "MicrosoftPurviewInformationProtectionConnectorDataTypesLogs", + modelProperties: { + ...DataConnectorDataTypeCommon.type.modelProperties + } + } +}; + +export const Office365ProjectConnectorDataTypesLogs: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "Office365ProjectConnectorDataTypesLogs", + modelProperties: { + ...DataConnectorDataTypeCommon.type.modelProperties + } + } +}; + +export const OfficePowerBIConnectorDataTypesLogs: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "OfficePowerBIConnectorDataTypesLogs", + modelProperties: { + ...DataConnectorDataTypeCommon.type.modelProperties + } + } +}; + +export const OfficeDataConnectorDataTypesExchange: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "OfficeDataConnectorDataTypesExchange", + modelProperties: { + ...DataConnectorDataTypeCommon.type.modelProperties + } + } +}; + +export const OfficeDataConnectorDataTypesSharePoint: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "OfficeDataConnectorDataTypesSharePoint", + modelProperties: { + ...DataConnectorDataTypeCommon.type.modelProperties + } + } +}; + +export const OfficeDataConnectorDataTypesTeams: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "OfficeDataConnectorDataTypesTeams", + modelProperties: { + ...DataConnectorDataTypeCommon.type.modelProperties + } + } +}; + +export const TIDataConnectorDataTypesIndicators: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "TIDataConnectorDataTypesIndicators", + modelProperties: { + ...DataConnectorDataTypeCommon.type.modelProperties + } + } +}; + +export const TiTaxiiDataConnectorDataTypesTaxiiClient: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "TiTaxiiDataConnectorDataTypesTaxiiClient", + modelProperties: { + ...DataConnectorDataTypeCommon.type.modelProperties + } + } +}; + +export const CodelessUiConnectorConfigPropertiesGraphQueriesItem: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "CodelessUiConnectorConfigPropertiesGraphQueriesItem", + modelProperties: { + ...GraphQueries.type.modelProperties + } + } +}; + +export const CodelessUiConnectorConfigPropertiesSampleQueriesItem: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "CodelessUiConnectorConfigPropertiesSampleQueriesItem", + modelProperties: { + ...SampleQueries.type.modelProperties + } + } +}; + +export const CodelessUiConnectorConfigPropertiesDataTypesItem: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "CodelessUiConnectorConfigPropertiesDataTypesItem", + modelProperties: { + ...LastDataReceivedDataType.type.modelProperties + } + } +}; + +export const CodelessUiConnectorConfigPropertiesConnectivityCriteriaItem: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "CodelessUiConnectorConfigPropertiesConnectivityCriteriaItem", + modelProperties: { + ...ConnectivityCriteria.type.modelProperties + } + } +}; + +export const PermissionsResourceProviderItem: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "PermissionsResourceProviderItem", + modelProperties: { + ...ResourceProvider.type.modelProperties + } + } +}; + +export const Customs: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "Customs", + modelProperties: { + ...CustomsPermission.type.modelProperties + } + } +}; + +export const CodelessUiConnectorConfigPropertiesInstructionStepsItem: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "CodelessUiConnectorConfigPropertiesInstructionStepsItem", + modelProperties: { + ...InstructionSteps.type.modelProperties + } + } +}; + +export const InstructionStepsInstructionsItem: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "InstructionStepsInstructionsItem", + modelProperties: { + ...ConnectorInstructionModelBase.type.modelProperties + } + } +}; + +export const AlertRule: coreClient.CompositeMapper = { + serializedName: "AlertRule", + type: { + name: "Composite", + className: "AlertRule", + uberParent: "ResourceWithEtag", + polymorphicDiscriminator: { + serializedName: "kind", + clientName: "kind" + }, + modelProperties: { + ...ResourceWithEtag.type.modelProperties, + kind: { + serializedName: "kind", + required: true, + type: { + name: "String" + } + } + } + } +}; + +export const ActionResponse: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "ActionResponse", + modelProperties: { + ...ResourceWithEtag.type.modelProperties, + logicAppResourceId: { + serializedName: "properties.logicAppResourceId", + type: { + name: "String" + } + }, + workflowId: { + serializedName: "properties.workflowId", + type: { + name: "String" + } + } + } + } +}; + +export const ActionRequest: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "ActionRequest", + modelProperties: { + ...ResourceWithEtag.type.modelProperties, + logicAppResourceId: { + serializedName: "properties.logicAppResourceId", + type: { + name: "String" + } + }, + triggerUri: { + serializedName: "properties.triggerUri", + type: { + name: "String" + } + } + } + } +}; + +export const AutomationRule: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "AutomationRule", + modelProperties: { + ...ResourceWithEtag.type.modelProperties, + displayName: { + constraints: { + MaxLength: 500 + }, + serializedName: "properties.displayName", + required: true, + type: { + name: "String" + } + }, + order: { + constraints: { + InclusiveMaximum: 1000, + InclusiveMinimum: 1 + }, + serializedName: "properties.order", + required: true, + type: { + name: "Number" + } + }, + triggeringLogic: { + serializedName: "properties.triggeringLogic", + type: { + name: "Composite", + className: "AutomationRuleTriggeringLogic" + } + }, + actions: { + constraints: { + MaxItems: 20 + }, + serializedName: "properties.actions", + required: true, + type: { + name: "Sequence", + element: { + type: { + name: "Composite", + className: "AutomationRuleAction" + } + } + } + }, + lastModifiedTimeUtc: { + serializedName: "properties.lastModifiedTimeUtc", + readOnly: true, + type: { + name: "DateTime" + } + }, + createdTimeUtc: { + serializedName: "properties.createdTimeUtc", + readOnly: true, + type: { + name: "DateTime" + } + }, + lastModifiedBy: { + serializedName: "properties.lastModifiedBy", + type: { + name: "Composite", + className: "ClientInfo" + } + }, + createdBy: { + serializedName: "properties.createdBy", + type: { + name: "Composite", + className: "ClientInfo" + } + } + } + } +}; + +export const Bookmark: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "Bookmark", + modelProperties: { + ...ResourceWithEtag.type.modelProperties, + created: { + serializedName: "properties.created", + type: { + name: "DateTime" + } + }, + createdBy: { + serializedName: "properties.createdBy", + type: { + name: "Composite", + className: "UserInfo" + } + }, + displayName: { + serializedName: "properties.displayName", + type: { + name: "String" + } + }, + labels: { + serializedName: "properties.labels", + type: { + name: "Sequence", + element: { + type: { + name: "String" + } + } + } + }, + notes: { + serializedName: "properties.notes", + type: { + name: "String" + } + }, + query: { + serializedName: "properties.query", + type: { + name: "String" + } + }, + queryResult: { + serializedName: "properties.queryResult", + type: { + name: "String" + } + }, + updated: { + serializedName: "properties.updated", + type: { + name: "DateTime" + } + }, + updatedBy: { + serializedName: "properties.updatedBy", + type: { + name: "Composite", + className: "UserInfo" + } + }, + eventTime: { + serializedName: "properties.eventTime", + type: { + name: "DateTime" + } + }, + queryStartTime: { + serializedName: "properties.queryStartTime", + type: { + name: "DateTime" + } + }, + queryEndTime: { + serializedName: "properties.queryEndTime", + type: { + name: "DateTime" + } + }, + incidentInfo: { + serializedName: "properties.incidentInfo", + type: { + name: "Composite", + className: "IncidentInfo" + } + }, + entityMappings: { + serializedName: "properties.entityMappings", + type: { + name: "Sequence", + element: { + type: { + name: "Composite", + className: "BookmarkEntityMappings" + } + } + } + }, + tactics: { + serializedName: "properties.tactics", + type: { + name: "Sequence", + element: { + type: { + name: "String" + } + } + } + }, + techniques: { + serializedName: "properties.techniques", + type: { + name: "Sequence", + element: { + type: { + name: "String" + } + } + } + } + } + } +}; + +export const Relation: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "Relation", + modelProperties: { + ...ResourceWithEtag.type.modelProperties, + relatedResourceId: { + serializedName: "properties.relatedResourceId", + type: { + name: "String" + } + }, + relatedResourceName: { + serializedName: "properties.relatedResourceName", + readOnly: true, + type: { + name: "String" + } + }, + relatedResourceType: { + serializedName: "properties.relatedResourceType", + readOnly: true, + type: { + name: "String" + } + }, + relatedResourceKind: { + serializedName: "properties.relatedResourceKind", + readOnly: true, + type: { + name: "String" + } + } + } } }; -export const InstructionStepsInstructionsItem: coreClient.CompositeMapper = { +export const PackageModel: coreClient.CompositeMapper = { type: { name: "Composite", - className: "InstructionStepsInstructionsItem", + className: "PackageModel", modelProperties: { - ...ConnectorInstructionModelBase.type.modelProperties + ...ResourceWithEtag.type.modelProperties, + contentId: { + serializedName: "properties.contentId", + type: { + name: "String" + } + }, + contentKind: { + serializedName: "properties.contentKind", + type: { + name: "String" + } + }, + contentSchemaVersion: { + serializedName: "properties.contentSchemaVersion", + type: { + name: "String" + } + }, + isNew: { + serializedName: "properties.isNew", + type: { + name: "String" + } + }, + isPreview: { + serializedName: "properties.isPreview", + type: { + name: "String" + } + }, + isFeatured: { + serializedName: "properties.isFeatured", + type: { + name: "String" + } + }, + version: { + serializedName: "properties.version", + type: { + name: "String" + } + }, + displayName: { + serializedName: "properties.displayName", + type: { + name: "String" + } + }, + description: { + serializedName: "properties.description", + type: { + name: "String" + } + }, + publisherDisplayName: { + serializedName: "properties.publisherDisplayName", + type: { + name: "String" + } + }, + source: { + serializedName: "properties.source", + type: { + name: "Composite", + className: "MetadataSource" + } + }, + author: { + serializedName: "properties.author", + type: { + name: "Composite", + className: "MetadataAuthor" + } + }, + support: { + serializedName: "properties.support", + type: { + name: "Composite", + className: "MetadataSupport" + } + }, + dependencies: { + serializedName: "properties.dependencies", + type: { + name: "Composite", + className: "MetadataDependencies" + } + }, + providers: { + serializedName: "properties.providers", + type: { + name: "Sequence", + element: { + type: { + name: "String" + } + } + } + }, + firstPublishDate: { + serializedName: "properties.firstPublishDate", + type: { + name: "Date" + } + }, + lastPublishDate: { + serializedName: "properties.lastPublishDate", + type: { + name: "Date" + } + }, + categories: { + serializedName: "properties.categories", + type: { + name: "Composite", + className: "MetadataCategories" + } + }, + threatAnalysisTactics: { + serializedName: "properties.threatAnalysisTactics", + type: { + name: "Sequence", + element: { + type: { + name: "String" + } + } + } + }, + threatAnalyticsTechniques: { + serializedName: "properties.threatAnalyticsTechniques", + type: { + name: "Sequence", + element: { + type: { + name: "String" + } + } + } + }, + icon: { + serializedName: "properties.icon", + type: { + name: "String" + } + } } } }; -export const AlertRule: coreClient.CompositeMapper = { - serializedName: "AlertRule", +export const PackageModelAutoGenerated: coreClient.CompositeMapper = { type: { name: "Composite", - className: "AlertRule", - uberParent: "ResourceWithEtag", - polymorphicDiscriminator: { - serializedName: "kind", - clientName: "kind" - }, + className: "PackageModelAutoGenerated", modelProperties: { ...ResourceWithEtag.type.modelProperties, - kind: { - serializedName: "kind", - required: true, + contentId: { + serializedName: "properties.contentId", + type: { + name: "String" + } + }, + contentKind: { + serializedName: "properties.contentKind", + type: { + name: "String" + } + }, + installedVersion: { + serializedName: "properties.installedVersion", + type: { + name: "String" + } + }, + contentSchemaVersion: { + serializedName: "properties.contentSchemaVersion", + type: { + name: "String" + } + }, + resourceId: { + serializedName: "properties.resourceId", + type: { + name: "String" + } + }, + isNew: { + serializedName: "properties.isNew", + type: { + name: "String" + } + }, + isPreview: { + serializedName: "properties.isPreview", + type: { + name: "String" + } + }, + isFeatured: { + serializedName: "properties.isFeatured", + type: { + name: "String" + } + }, + version: { + serializedName: "properties.version", + type: { + name: "String" + } + }, + displayName: { + serializedName: "properties.displayName", + type: { + name: "String" + } + }, + description: { + serializedName: "properties.description", + type: { + name: "String" + } + }, + publisherDisplayName: { + serializedName: "properties.publisherDisplayName", + type: { + name: "String" + } + }, + source: { + serializedName: "properties.source", + type: { + name: "Composite", + className: "MetadataSource" + } + }, + author: { + serializedName: "properties.author", + type: { + name: "Composite", + className: "MetadataAuthor" + } + }, + support: { + serializedName: "properties.support", + type: { + name: "Composite", + className: "MetadataSupport" + } + }, + dependencies: { + serializedName: "properties.dependencies", + type: { + name: "Composite", + className: "MetadataDependencies" + } + }, + providers: { + serializedName: "properties.providers", + type: { + name: "Sequence", + element: { + type: { + name: "String" + } + } + } + }, + firstPublishDate: { + serializedName: "properties.firstPublishDate", + type: { + name: "Date" + } + }, + lastPublishDate: { + serializedName: "properties.lastPublishDate", + type: { + name: "Date" + } + }, + categories: { + serializedName: "properties.categories", + type: { + name: "Composite", + className: "MetadataCategories" + } + }, + threatAnalysisTactics: { + serializedName: "properties.threatAnalysisTactics", + type: { + name: "Sequence", + element: { + type: { + name: "String" + } + } + } + }, + threatAnalyticsTechniques: { + serializedName: "properties.threatAnalyticsTechniques", + type: { + name: "Sequence", + element: { + type: { + name: "String" + } + } + } + }, + icon: { + serializedName: "properties.icon", type: { name: "String" } + }, + packagedContent: { + serializedName: "properties.packagedContent", + type: { + name: "Dictionary", + value: { type: { name: "any" } } + } } } } }; -export const ActionResponse: coreClient.CompositeMapper = { +export const TemplateModel: coreClient.CompositeMapper = { type: { name: "Composite", - className: "ActionResponse", + className: "TemplateModel", modelProperties: { ...ResourceWithEtag.type.modelProperties, - logicAppResourceId: { - serializedName: "properties.logicAppResourceId", + contentId: { + serializedName: "properties.contentId", type: { name: "String" } }, - workflowId: { - serializedName: "properties.workflowId", + parentId: { + serializedName: "properties.parentId", type: { name: "String" } - } - } - } -}; - -export const ActionRequest: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "ActionRequest", - modelProperties: { - ...ResourceWithEtag.type.modelProperties, - logicAppResourceId: { - serializedName: "properties.logicAppResourceId", + }, + version: { + serializedName: "properties.version", type: { name: "String" } }, - triggerUri: { - serializedName: "properties.triggerUri", + displayName: { + serializedName: "properties.displayName", + type: { + name: "String" + } + }, + contentKind: { + serializedName: "properties.contentKind", + type: { + name: "String" + } + }, + source: { + serializedName: "properties.source", + type: { + name: "Composite", + className: "MetadataSource" + } + }, + author: { + serializedName: "properties.author", + type: { + name: "Composite", + className: "MetadataAuthor" + } + }, + support: { + serializedName: "properties.support", + type: { + name: "Composite", + className: "MetadataSupport" + } + }, + dependencies: { + serializedName: "properties.dependencies", + type: { + name: "Composite", + className: "MetadataDependencies" + } + }, + categories: { + serializedName: "properties.categories", + type: { + name: "Composite", + className: "MetadataCategories" + } + }, + providers: { + serializedName: "properties.providers", + type: { + name: "Sequence", + element: { + type: { + name: "String" + } + } + } + }, + firstPublishDate: { + serializedName: "properties.firstPublishDate", + type: { + name: "Date" + } + }, + lastPublishDate: { + serializedName: "properties.lastPublishDate", + type: { + name: "Date" + } + }, + customVersion: { + serializedName: "properties.customVersion", + type: { + name: "String" + } + }, + contentSchemaVersion: { + serializedName: "properties.contentSchemaVersion", + type: { + name: "String" + } + }, + icon: { + serializedName: "properties.icon", + type: { + name: "String" + } + }, + threatAnalysisTactics: { + serializedName: "properties.threatAnalysisTactics", + type: { + name: "Sequence", + element: { + type: { + name: "String" + } + } + } + }, + threatAnalysisTechniques: { + serializedName: "properties.threatAnalysisTechniques", + type: { + name: "Sequence", + element: { + type: { + name: "String" + } + } + } + }, + previewImages: { + serializedName: "properties.previewImages", + type: { + name: "Sequence", + element: { + type: { + name: "String" + } + } + } + }, + previewImagesDark: { + serializedName: "properties.previewImagesDark", + type: { + name: "Sequence", + element: { + type: { + name: "String" + } + } + } + }, + packageId: { + serializedName: "properties.packageId", + type: { + name: "String" + } + }, + packageKind: { + serializedName: "properties.packageKind", + type: { + name: "String" + } + }, + packageName: { + serializedName: "properties.packageName", type: { name: "String" } + }, + packagedContent: { + serializedName: "properties.packagedContent", + type: { + name: "Dictionary", + value: { type: { name: "any" } } + } } } } }; -export const AutomationRule: coreClient.CompositeMapper = { +export const TemplateModelAutoGenerated: coreClient.CompositeMapper = { type: { name: "Composite", - className: "AutomationRule", + className: "TemplateModelAutoGenerated", modelProperties: { ...ResourceWithEtag.type.modelProperties, + contentId: { + serializedName: "properties.contentId", + type: { + name: "String" + } + }, + version: { + serializedName: "properties.version", + type: { + name: "String" + } + }, displayName: { - constraints: { - MaxLength: 500 - }, serializedName: "properties.displayName", - required: true, type: { name: "String" } }, - order: { - constraints: { - InclusiveMaximum: 1000, - InclusiveMinimum: 1 - }, - serializedName: "properties.order", - required: true, + contentKind: { + serializedName: "properties.contentKind", + type: { + name: "String" + } + }, + source: { + serializedName: "properties.source", + type: { + name: "Composite", + className: "MetadataSource" + } + }, + author: { + serializedName: "properties.author", + type: { + name: "Composite", + className: "MetadataAuthor" + } + }, + support: { + serializedName: "properties.support", type: { - name: "Number" + name: "Composite", + className: "MetadataSupport" } }, - triggeringLogic: { - serializedName: "properties.triggeringLogic", + dependencies: { + serializedName: "properties.dependencies", type: { name: "Composite", - className: "AutomationRuleTriggeringLogic" + className: "MetadataDependencies" } }, - actions: { - constraints: { - MaxItems: 20 - }, - serializedName: "properties.actions", - required: true, + categories: { + serializedName: "properties.categories", + type: { + name: "Composite", + className: "MetadataCategories" + } + }, + providers: { + serializedName: "properties.providers", type: { name: "Sequence", element: { type: { - name: "Composite", - className: "AutomationRuleAction" + name: "String" } } } }, - lastModifiedTimeUtc: { - serializedName: "properties.lastModifiedTimeUtc", - readOnly: true, + firstPublishDate: { + serializedName: "properties.firstPublishDate", type: { - name: "DateTime" + name: "Date" } }, - createdTimeUtc: { - serializedName: "properties.createdTimeUtc", - readOnly: true, + lastPublishDate: { + serializedName: "properties.lastPublishDate", type: { - name: "DateTime" + name: "Date" } }, - lastModifiedBy: { - serializedName: "properties.lastModifiedBy", + customVersion: { + serializedName: "properties.customVersion", type: { - name: "Composite", - className: "ClientInfo" + name: "String" } }, - createdBy: { - serializedName: "properties.createdBy", + contentSchemaVersion: { + serializedName: "properties.contentSchemaVersion", type: { - name: "Composite", - className: "ClientInfo" + name: "String" } - } - } - } -}; - -export const Bookmark: coreClient.CompositeMapper = { - type: { - name: "Composite", - className: "Bookmark", - modelProperties: { - ...ResourceWithEtag.type.modelProperties, - created: { - serializedName: "properties.created", + }, + icon: { + serializedName: "properties.icon", type: { - name: "DateTime" + name: "String" } }, - createdBy: { - serializedName: "properties.createdBy", + threatAnalysisTactics: { + serializedName: "properties.threatAnalysisTactics", type: { - name: "Composite", - className: "UserInfo" + name: "Sequence", + element: { + type: { + name: "String" + } + } } }, - displayName: { - serializedName: "properties.displayName", + threatAnalysisTechniques: { + serializedName: "properties.threatAnalysisTechniques", type: { - name: "String" + name: "Sequence", + element: { + type: { + name: "String" + } + } } }, - labels: { - serializedName: "properties.labels", + previewImages: { + serializedName: "properties.previewImages", type: { name: "Sequence", element: { @@ -10061,76 +12127,136 @@ export const Bookmark: coreClient.CompositeMapper = { } } }, - notes: { - serializedName: "properties.notes", + previewImagesDark: { + serializedName: "properties.previewImagesDark", type: { - name: "String" + name: "Sequence", + element: { + type: { + name: "String" + } + } } }, - query: { - serializedName: "properties.query", + packageId: { + serializedName: "properties.packageId", type: { name: "String" } }, - queryResult: { - serializedName: "properties.queryResult", + packageKind: { + serializedName: "properties.packageKind", type: { name: "String" } }, - updated: { - serializedName: "properties.updated", + packageName: { + serializedName: "properties.packageName", type: { - name: "DateTime" + name: "String" } }, - updatedBy: { - serializedName: "properties.updatedBy", + mainTemplate: { + serializedName: "properties.mainTemplate", type: { - name: "Composite", - className: "UserInfo" + name: "Dictionary", + value: { type: { name: "any" } } } - }, - eventTime: { - serializedName: "properties.eventTime", + } + } + } +}; + +export const EntityQuery: coreClient.CompositeMapper = { + serializedName: "EntityQuery", + type: { + name: "Composite", + className: "EntityQuery", + uberParent: "ResourceWithEtag", + polymorphicDiscriminator: { + serializedName: "kind", + clientName: "kind" + }, + modelProperties: { + ...ResourceWithEtag.type.modelProperties, + kind: { + serializedName: "kind", + required: true, type: { - name: "DateTime" + name: "String" + } + } + } + } +}; + +export const CustomEntityQuery: coreClient.CompositeMapper = { + serializedName: "CustomEntityQuery", + type: { + name: "Composite", + className: "CustomEntityQuery", + uberParent: "ResourceWithEtag", + polymorphicDiscriminator: { + serializedName: "kind", + clientName: "kind" + }, + modelProperties: { + ...ResourceWithEtag.type.modelProperties, + kind: { + serializedName: "kind", + required: true, + type: { + name: "String" + } + } + } + } +}; + +export const Hunt: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "Hunt", + modelProperties: { + ...ResourceWithEtag.type.modelProperties, + displayName: { + serializedName: "properties.displayName", + type: { + name: "String" } }, - queryStartTime: { - serializedName: "properties.queryStartTime", + description: { + serializedName: "properties.description", type: { - name: "DateTime" + name: "String" } }, - queryEndTime: { - serializedName: "properties.queryEndTime", + status: { + serializedName: "properties.status", type: { - name: "DateTime" + name: "String" } }, - incidentInfo: { - serializedName: "properties.incidentInfo", + hypothesisStatus: { + defaultValue: "Unknown", + serializedName: "properties.hypothesisStatus", type: { - name: "Composite", - className: "IncidentInfo" + name: "String" } }, - entityMappings: { - serializedName: "properties.entityMappings", + attackTactics: { + serializedName: "properties.attackTactics", type: { name: "Sequence", element: { type: { - name: "Composite", - className: "BookmarkEntityMappings" + name: "String" } } } }, - tactics: { - serializedName: "properties.tactics", + attackTechniques: { + serializedName: "properties.attackTechniques", type: { name: "Sequence", element: { @@ -10140,8 +12266,8 @@ export const Bookmark: coreClient.CompositeMapper = { } } }, - techniques: { - serializedName: "properties.techniques", + labels: { + serializedName: "properties.labels", type: { name: "Sequence", element: { @@ -10150,15 +12276,22 @@ export const Bookmark: coreClient.CompositeMapper = { } } } + }, + owner: { + serializedName: "properties.owner", + type: { + name: "Composite", + className: "HuntOwner" + } } } } }; -export const Relation: coreClient.CompositeMapper = { +export const HuntRelation: coreClient.CompositeMapper = { type: { name: "Composite", - className: "Relation", + className: "HuntRelation", modelProperties: { ...ResourceWithEtag.type.modelProperties, relatedResourceId: { @@ -10174,8 +12307,8 @@ export const Relation: coreClient.CompositeMapper = { name: "String" } }, - relatedResourceType: { - serializedName: "properties.relatedResourceType", + relationType: { + serializedName: "properties.relationType", readOnly: true, type: { name: "String" @@ -10187,49 +12320,30 @@ export const Relation: coreClient.CompositeMapper = { type: { name: "String" } - } - } - } -}; - -export const EntityQuery: coreClient.CompositeMapper = { - serializedName: "EntityQuery", - type: { - name: "Composite", - className: "EntityQuery", - uberParent: "ResourceWithEtag", - polymorphicDiscriminator: { - serializedName: "kind", - clientName: "kind" - }, - modelProperties: { - ...ResourceWithEtag.type.modelProperties, - kind: { - serializedName: "kind", - required: true, + }, + labels: { + serializedName: "properties.labels", type: { - name: "String" + name: "Sequence", + element: { + type: { + name: "String" + } + } } } } } }; -export const CustomEntityQuery: coreClient.CompositeMapper = { - serializedName: "CustomEntityQuery", +export const HuntComment: coreClient.CompositeMapper = { type: { name: "Composite", - className: "CustomEntityQuery", - uberParent: "ResourceWithEtag", - polymorphicDiscriminator: { - serializedName: "kind", - clientName: "kind" - }, + className: "HuntComment", modelProperties: { ...ResourceWithEtag.type.modelProperties, - kind: { - serializedName: "kind", - required: true, + message: { + serializedName: "properties.message", type: { name: "String" } @@ -10244,62 +12358,53 @@ export const Incident: coreClient.CompositeMapper = { className: "Incident", modelProperties: { ...ResourceWithEtag.type.modelProperties, - additionalData: { - serializedName: "properties.additionalData", - type: { - name: "Composite", - className: "IncidentAdditionalData" - } - }, - classification: { - serializedName: "properties.classification", + title: { + serializedName: "properties.title", type: { name: "String" } }, - classificationComment: { - serializedName: "properties.classificationComment", + description: { + serializedName: "properties.description", type: { name: "String" } }, - classificationReason: { - serializedName: "properties.classificationReason", + severity: { + serializedName: "properties.severity", type: { name: "String" } }, - createdTimeUtc: { - serializedName: "properties.createdTimeUtc", - readOnly: true, + status: { + serializedName: "properties.status", type: { - name: "DateTime" + name: "String" } }, - description: { - serializedName: "properties.description", + classification: { + serializedName: "properties.classification", type: { name: "String" } }, - firstActivityTimeUtc: { - serializedName: "properties.firstActivityTimeUtc", + classificationReason: { + serializedName: "properties.classificationReason", type: { - name: "DateTime" + name: "String" } }, - incidentUrl: { - serializedName: "properties.incidentUrl", - readOnly: true, + classificationComment: { + serializedName: "properties.classificationComment", type: { name: "String" } }, - incidentNumber: { - serializedName: "properties.incidentNumber", - readOnly: true, + owner: { + serializedName: "properties.owner", type: { - name: "Number" + name: "Composite", + className: "IncidentOwnerInfo" } }, labels: { @@ -10314,16 +12419,10 @@ export const Incident: coreClient.CompositeMapper = { } } }, - providerName: { - serializedName: "properties.providerName", - type: { - name: "String" - } - }, - providerIncidentId: { - serializedName: "properties.providerIncidentId", + firstActivityTimeUtc: { + serializedName: "properties.firstActivityTimeUtc", type: { - name: "String" + name: "DateTime" } }, lastActivityTimeUtc: { @@ -10339,11 +12438,25 @@ export const Incident: coreClient.CompositeMapper = { name: "DateTime" } }, - owner: { - serializedName: "properties.owner", + createdTimeUtc: { + serializedName: "properties.createdTimeUtc", + readOnly: true, + type: { + name: "DateTime" + } + }, + incidentNumber: { + serializedName: "properties.incidentNumber", + readOnly: true, + type: { + name: "Number" + } + }, + additionalData: { + serializedName: "properties.additionalData", type: { name: "Composite", - className: "IncidentOwnerInfo" + className: "IncidentAdditionalData" } }, relatedAnalyticRuleIds: { @@ -10358,14 +12471,23 @@ export const Incident: coreClient.CompositeMapper = { } } }, - severity: { - serializedName: "properties.severity", + incidentUrl: { + serializedName: "properties.incidentUrl", + readOnly: true, type: { name: "String" } }, - status: { - serializedName: "properties.status", + providerName: { + serializedName: "properties.providerName", + readOnly: true, + type: { + name: "String" + } + }, + providerIncidentId: { + serializedName: "properties.providerIncidentId", + readOnly: true, type: { name: "String" } @@ -10376,12 +12498,6 @@ export const Incident: coreClient.CompositeMapper = { name: "Composite", className: "TeamInformation" } - }, - title: { - serializedName: "properties.title", - type: { - name: "String" - } } } } @@ -10393,6 +12509,12 @@ export const IncidentComment: coreClient.CompositeMapper = { className: "IncidentComment", modelProperties: { ...ResourceWithEtag.type.modelProperties, + message: { + serializedName: "properties.message", + type: { + name: "String" + } + }, createdTimeUtc: { serializedName: "properties.createdTimeUtc", readOnly: true, @@ -10407,14 +12529,66 @@ export const IncidentComment: coreClient.CompositeMapper = { name: "DateTime" } }, - message: { - serializedName: "properties.message", + author: { + serializedName: "properties.author", + type: { + name: "Composite", + className: "ClientInfo" + } + } + } + } +}; + +export const IncidentTask: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "IncidentTask", + modelProperties: { + ...ResourceWithEtag.type.modelProperties, + title: { + serializedName: "properties.title", + required: true, type: { name: "String" } }, - author: { - serializedName: "properties.author", + description: { + serializedName: "properties.description", + type: { + name: "String" + } + }, + status: { + serializedName: "properties.status", + required: true, + type: { + name: "String" + } + }, + createdTimeUtc: { + serializedName: "properties.createdTimeUtc", + readOnly: true, + type: { + name: "DateTime" + } + }, + lastModifiedTimeUtc: { + serializedName: "properties.lastModifiedTimeUtc", + readOnly: true, + type: { + name: "DateTime" + } + }, + createdBy: { + serializedName: "properties.createdBy", + type: { + name: "Composite", + className: "ClientInfo" + } + }, + lastModifiedBy: { + serializedName: "properties.lastModifiedBy", type: { name: "Composite", className: "ClientInfo" @@ -10479,7 +12653,7 @@ export const MetadataModel: coreClient.CompositeMapper = { serializedName: "properties.dependencies", type: { name: "Composite", - className: "MetadataDependencies" + className: "MetadataDependenciesAutoGenerated" } }, categories: { @@ -10633,7 +12807,7 @@ export const MetadataPatch: coreClient.CompositeMapper = { serializedName: "properties.dependencies", type: { name: "Composite", - className: "MetadataDependencies" + className: "MetadataDependenciesAutoGenerated" } }, categories: { @@ -10889,6 +13063,51 @@ export const ThreatIntelligenceInformation: coreClient.CompositeMapper = { } }; +export const TriggeredAnalyticsRuleRun: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "TriggeredAnalyticsRuleRun", + modelProperties: { + ...ResourceWithEtag.type.modelProperties, + executionTimeUtc: { + serializedName: "properties.executionTimeUtc", + required: true, + type: { + name: "DateTime" + } + }, + ruleId: { + serializedName: "properties.ruleId", + required: true, + type: { + name: "String" + } + }, + triggeredAnalyticsRuleRunId: { + serializedName: "properties.triggeredAnalyticsRuleRunId", + required: true, + type: { + name: "String" + } + }, + provisioningState: { + serializedName: "properties.provisioningState", + required: true, + type: { + name: "String" + } + }, + ruleRunAdditionalData: { + serializedName: "properties.ruleRunAdditionalData", + type: { + name: "Dictionary", + value: { type: { name: "any" } } + } + } + } + } +}; + export const Watchlist: coreClient.CompositeMapper = { type: { name: "Composite", @@ -11077,29 +13296,79 @@ export const WatchlistItem: coreClient.CompositeMapper = { createdBy: { serializedName: "properties.createdBy", type: { - name: "Composite", - className: "UserInfo" + name: "Composite", + className: "UserInfo" + } + }, + updatedBy: { + serializedName: "properties.updatedBy", + type: { + name: "Composite", + className: "UserInfo" + } + }, + itemsKeyValue: { + serializedName: "properties.itemsKeyValue", + type: { + name: "Dictionary", + value: { type: { name: "any" } } + } + }, + entityMapping: { + serializedName: "properties.entityMapping", + type: { + name: "Dictionary", + value: { type: { name: "any" } } + } + } + } + } +}; + +export const Job: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "Job", + modelProperties: { + ...ResourceWithEtag.type.modelProperties, + endTime: { + serializedName: "properties.endTime", + readOnly: true, + type: { + name: "DateTime" + } + }, + items: { + serializedName: "properties.items", + type: { + name: "Sequence", + element: { + type: { + name: "Composite", + className: "JobItem" + } + } } }, - updatedBy: { - serializedName: "properties.updatedBy", + provisioningState: { + serializedName: "properties.provisioningState", + readOnly: true, type: { - name: "Composite", - className: "UserInfo" + name: "String" } }, - itemsKeyValue: { - serializedName: "properties.itemsKeyValue", + startTime: { + serializedName: "properties.startTime", + readOnly: true, type: { - name: "Dictionary", - value: { type: { name: "any" } } + name: "DateTime" } }, - entityMapping: { - serializedName: "properties.entityMapping", + errorMessage: { + serializedName: "properties.errorMessage", + readOnly: true, type: { - name: "Dictionary", - value: { type: { name: "any" } } + name: "String" } } } @@ -11672,6 +13941,18 @@ export const ScheduledAlertRuleTemplate: coreClient.CompositeMapper = { name: "Composite", className: "AlertDetailsOverride" } + }, + sentinelEntitiesMappings: { + serializedName: "properties.sentinelEntitiesMappings", + type: { + name: "Sequence", + element: { + type: { + name: "Composite", + className: "SentinelEntityMapping" + } + } + } } } } @@ -11808,6 +14089,18 @@ export const NrtAlertRuleTemplate: coreClient.CompositeMapper = { name: "Composite", className: "EventGroupingSettings" } + }, + sentinelEntitiesMappings: { + serializedName: "properties.sentinelEntitiesMappings", + type: { + name: "Sequence", + element: { + type: { + name: "Composite", + className: "SentinelEntityMapping" + } + } + } } } } @@ -11827,9 +14120,7 @@ export const SecurityAlert: coreClient.CompositeMapper = { readOnly: true, type: { name: "Dictionary", - value: { - type: { name: "Dictionary", value: { type: { name: "any" } } } - } + value: { type: { name: "any" } } } }, friendlyName: { @@ -12053,9 +14344,7 @@ export const HuntingBookmark: coreClient.CompositeMapper = { readOnly: true, type: { name: "Dictionary", - value: { - type: { name: "Dictionary", value: { type: { name: "any" } } } - } + value: { type: { name: "any" } } } }, friendlyName: { @@ -12157,9 +14446,7 @@ export const AccountEntity: coreClient.CompositeMapper = { readOnly: true, type: { name: "Dictionary", - value: { - type: { name: "Dictionary", value: { type: { name: "any" } } } - } + value: { type: { name: "any" } } } }, friendlyName: { @@ -12271,9 +14558,7 @@ export const AzureResourceEntity: coreClient.CompositeMapper = { readOnly: true, type: { name: "Dictionary", - value: { - type: { name: "Dictionary", value: { type: { name: "any" } } } - } + value: { type: { name: "any" } } } }, friendlyName: { @@ -12315,9 +14600,7 @@ export const CloudApplicationEntity: coreClient.CompositeMapper = { readOnly: true, type: { name: "Dictionary", - value: { - type: { name: "Dictionary", value: { type: { name: "any" } } } - } + value: { type: { name: "any" } } } }, friendlyName: { @@ -12366,9 +14649,7 @@ export const DnsEntity: coreClient.CompositeMapper = { readOnly: true, type: { name: "Dictionary", - value: { - type: { name: "Dictionary", value: { type: { name: "any" } } } - } + value: { type: { name: "any" } } } }, friendlyName: { @@ -12429,9 +14710,7 @@ export const FileEntity: coreClient.CompositeMapper = { readOnly: true, type: { name: "Dictionary", - value: { - type: { name: "Dictionary", value: { type: { name: "any" } } } - } + value: { type: { name: "any" } } } }, friendlyName: { @@ -12492,9 +14771,7 @@ export const FileHashEntity: coreClient.CompositeMapper = { readOnly: true, type: { name: "Dictionary", - value: { - type: { name: "Dictionary", value: { type: { name: "any" } } } - } + value: { type: { name: "any" } } } }, friendlyName: { @@ -12536,9 +14813,7 @@ export const HostEntity: coreClient.CompositeMapper = { readOnly: true, type: { name: "Dictionary", - value: { - type: { name: "Dictionary", value: { type: { name: "any" } } } - } + value: { type: { name: "any" } } } }, friendlyName: { @@ -12629,9 +14904,7 @@ export const IoTDeviceEntity: coreClient.CompositeMapper = { readOnly: true, type: { name: "Dictionary", - value: { - type: { name: "Dictionary", value: { type: { name: "any" } } } - } + value: { type: { name: "any" } } } }, friendlyName: { @@ -12875,9 +15148,7 @@ export const IpEntity: coreClient.CompositeMapper = { readOnly: true, type: { name: "Dictionary", - value: { - type: { name: "Dictionary", value: { type: { name: "any" } } } - } + value: { type: { name: "any" } } } }, friendlyName: { @@ -12932,9 +15203,7 @@ export const MailboxEntity: coreClient.CompositeMapper = { readOnly: true, type: { name: "Dictionary", - value: { - type: { name: "Dictionary", value: { type: { name: "any" } } } - } + value: { type: { name: "any" } } } }, friendlyName: { @@ -12990,9 +15259,7 @@ export const MailClusterEntity: coreClient.CompositeMapper = { readOnly: true, type: { name: "Dictionary", - value: { - type: { name: "Dictionary", value: { type: { name: "any" } } } - } + value: { type: { name: "any" } } } }, friendlyName: { @@ -13138,9 +15405,7 @@ export const MailMessageEntity: coreClient.CompositeMapper = { readOnly: true, type: { name: "Dictionary", - value: { - type: { name: "Dictionary", value: { type: { name: "any" } } } - } + value: { type: { name: "any" } } } }, friendlyName: { @@ -13373,9 +15638,7 @@ export const MalwareEntity: coreClient.CompositeMapper = { readOnly: true, type: { name: "Dictionary", - value: { - type: { name: "Dictionary", value: { type: { name: "any" } } } - } + value: { type: { name: "any" } } } }, friendlyName: { @@ -13441,9 +15704,7 @@ export const ProcessEntity: coreClient.CompositeMapper = { readOnly: true, type: { name: "Dictionary", - value: { - type: { name: "Dictionary", value: { type: { name: "any" } } } - } + value: { type: { name: "any" } } } }, friendlyName: { @@ -13534,9 +15795,7 @@ export const RegistryKeyEntity: coreClient.CompositeMapper = { readOnly: true, type: { name: "Dictionary", - value: { - type: { name: "Dictionary", value: { type: { name: "any" } } } - } + value: { type: { name: "any" } } } }, friendlyName: { @@ -13578,9 +15837,7 @@ export const RegistryValueEntity: coreClient.CompositeMapper = { readOnly: true, type: { name: "Dictionary", - value: { - type: { name: "Dictionary", value: { type: { name: "any" } } } - } + value: { type: { name: "any" } } } }, friendlyName: { @@ -13636,9 +15893,7 @@ export const SecurityGroupEntity: coreClient.CompositeMapper = { readOnly: true, type: { name: "Dictionary", - value: { - type: { name: "Dictionary", value: { type: { name: "any" } } } - } + value: { type: { name: "any" } } } }, friendlyName: { @@ -13687,9 +15942,7 @@ export const SubmissionMailEntity: coreClient.CompositeMapper = { readOnly: true, type: { name: "Dictionary", - value: { - type: { name: "Dictionary", value: { type: { name: "any" } } } - } + value: { type: { name: "any" } } } }, friendlyName: { @@ -13787,9 +16040,7 @@ export const UrlEntity: coreClient.CompositeMapper = { readOnly: true, type: { name: "Dictionary", - value: { - type: { name: "Dictionary", value: { type: { name: "any" } } } - } + value: { type: { name: "any" } } } }, friendlyName: { @@ -13824,9 +16075,7 @@ export const NicEntity: coreClient.CompositeMapper = { readOnly: true, type: { name: "Dictionary", - value: { - type: { name: "Dictionary", value: { type: { name: "any" } } } - } + value: { type: { name: "any" } } } }, friendlyName: { @@ -13947,6 +16196,119 @@ export const ActivityEntityQueryTemplate: coreClient.CompositeMapper = { } }; +export const WorkspaceManagerGroup: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "WorkspaceManagerGroup", + modelProperties: { + ...AzureEntityResource.type.modelProperties, + description: { + serializedName: "properties.description", + type: { + name: "String" + } + }, + displayName: { + serializedName: "properties.displayName", + type: { + name: "String" + } + }, + memberResourceNames: { + serializedName: "properties.memberResourceNames", + type: { + name: "Sequence", + element: { + type: { + name: "String" + } + } + } + } + } + } +}; + +export const WorkspaceManagerAssignment: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "WorkspaceManagerAssignment", + modelProperties: { + ...AzureEntityResource.type.modelProperties, + targetResourceName: { + serializedName: "properties.targetResourceName", + type: { + name: "String" + } + }, + lastJobEndTime: { + serializedName: "properties.lastJobEndTime", + readOnly: true, + type: { + name: "DateTime" + } + }, + lastJobProvisioningState: { + serializedName: "properties.lastJobProvisioningState", + readOnly: true, + type: { + name: "String" + } + }, + items: { + serializedName: "properties.items", + type: { + name: "Sequence", + element: { + type: { + name: "Composite", + className: "AssignmentItem" + } + } + } + } + } + } +}; + +export const WorkspaceManagerConfiguration: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "WorkspaceManagerConfiguration", + modelProperties: { + ...AzureEntityResource.type.modelProperties, + mode: { + serializedName: "properties.mode", + type: { + name: "String" + } + } + } + } +}; + +export const WorkspaceManagerMember: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "WorkspaceManagerMember", + modelProperties: { + ...AzureEntityResource.type.modelProperties, + targetWorkspaceId: { + serializedName: "properties.targetWorkspaceId", + type: { + name: "String" + } + }, + targetWorkspaceTenantId: { + serializedName: "properties.targetWorkspaceTenantId", + type: { + name: "String" + } + } + } + } +}; + export const MLBehaviorAnalyticsAlertRuleTemplateProperties: coreClient.CompositeMapper = { type: { name: "Composite", @@ -14408,6 +16770,18 @@ export const ScheduledAlertRule: coreClient.CompositeMapper = { className: "AlertDetailsOverride" } }, + sentinelEntitiesMappings: { + serializedName: "properties.sentinelEntitiesMappings", + type: { + name: "Sequence", + element: { + type: { + name: "Composite", + className: "SentinelEntityMapping" + } + } + } + }, alertRuleTemplateName: { serializedName: "properties.alertRuleTemplateName", type: { @@ -14621,6 +16995,18 @@ export const NrtAlertRule: coreClient.CompositeMapper = { name: "Composite", className: "EventGroupingSettings" } + }, + sentinelEntitiesMappings: { + serializedName: "properties.sentinelEntitiesMappings", + type: { + name: "Sequence", + element: { + type: { + name: "Composite", + className: "SentinelEntityMapping" + } + } + } } } } @@ -15099,9 +17485,7 @@ export const ThreatIntelligenceIndicatorModel: coreClient.CompositeMapper = { readOnly: true, type: { name: "Dictionary", - value: { - type: { name: "Dictionary", value: { type: { name: "any" } } } - } + value: { type: { name: "any" } } } }, friendlyName: { @@ -15406,6 +17790,13 @@ export const MTPDataConnector: coreClient.CompositeMapper = { name: "Composite", className: "MTPDataConnectorDataTypes" } + }, + filteredProviders: { + serializedName: "properties.filteredProviders", + type: { + name: "Composite", + className: "MtpFilteredProviders" + } } } } @@ -15610,6 +18001,32 @@ export const OfficeATPDataConnector: coreClient.CompositeMapper = { } }; +export const MicrosoftPurviewInformationProtectionDataConnector: coreClient.CompositeMapper = { + serializedName: "MicrosoftPurviewInformationProtection", + type: { + name: "Composite", + className: "MicrosoftPurviewInformationProtectionDataConnector", + uberParent: "DataConnector", + polymorphicDiscriminator: DataConnector.type.polymorphicDiscriminator, + modelProperties: { + ...DataConnector.type.modelProperties, + tenantId: { + serializedName: "properties.tenantId", + type: { + name: "String" + } + }, + dataTypes: { + serializedName: "properties.dataTypes", + type: { + name: "Composite", + className: "MicrosoftPurviewInformationProtectionConnectorDataTypes" + } + } + } + } +}; + export const Office365ProjectDataConnector: coreClient.CompositeMapper = { serializedName: "Office365Project", type: { @@ -15922,6 +18339,21 @@ export const CodelessApiPollingDataConnector: coreClient.CompositeMapper = { } }; +export const AlertRuleTriggerRuleRunHeaders: coreClient.CompositeMapper = { + type: { + name: "Composite", + className: "AlertRuleTriggerRuleRunHeaders", + modelProperties: { + location: { + serializedName: "location", + type: { + name: "String" + } + } + } + } +}; + export const WatchlistsDeleteHeaders: coreClient.CompositeMapper = { type: { name: "Composite", @@ -15966,6 +18398,7 @@ export let discriminators = { "AutomationRuleCondition.PropertyArray": PropertyArrayConditionProperties, "AutomationRuleCondition.PropertyChanged": PropertyChangedConditionProperties, "AutomationRuleCondition.Property": PropertyConditionProperties, + "AutomationRuleAction.AddIncidentTask": AutomationRuleAddIncidentTaskAction, "AutomationRuleAction.ModifyProperties": AutomationRuleModifyPropertiesAction, "AutomationRuleAction.RunPlaybook": AutomationRuleRunPlaybookAction, "EntityTimelineItem.Activity": ActivityTimelineItem, @@ -15985,6 +18418,7 @@ export let discriminators = { "DataConnectorsCheckRequirements.MicrosoftThreatProtection": MtpCheckRequirements, "DataConnectorsCheckRequirements.OfficeATP": OfficeATPCheckRequirements, "DataConnectorsCheckRequirements.OfficeIRM": OfficeIRMCheckRequirements, + "DataConnectorsCheckRequirements.MicrosoftPurviewInformationProtection": MicrosoftPurviewInformationProtectionCheckRequirements, "DataConnectorsCheckRequirements.Office365Project": Office365ProjectCheckRequirements, "DataConnectorsCheckRequirements.OfficePowerBI": OfficePowerBICheckRequirements, "DataConnectorsCheckRequirements.ThreatIntelligence": TICheckRequirements, @@ -16051,6 +18485,7 @@ export let discriminators = { "DataConnector.MicrosoftCloudAppSecurity": McasDataConnector, "DataConnector.Dynamics365": Dynamics365DataConnector, "DataConnector.OfficeATP": OfficeATPDataConnector, + "DataConnector.MicrosoftPurviewInformationProtection": MicrosoftPurviewInformationProtectionDataConnector, "DataConnector.Office365Project": Office365ProjectDataConnector, "DataConnector.OfficePowerBI": OfficePowerBIDataConnector, "DataConnector.OfficeIRM": OfficeIRMDataConnector, diff --git a/sdk/securityinsight/arm-securityinsight/src/models/parameters.ts b/sdk/securityinsight/arm-securityinsight/src/models/parameters.ts index dd3bcead9d0b..f14854465eeb 100644 --- a/sdk/securityinsight/arm-securityinsight/src/models/parameters.ts +++ b/sdk/securityinsight/arm-securityinsight/src/models/parameters.ts @@ -15,18 +15,25 @@ import { AlertRule as AlertRuleMapper, ActionRequest as ActionRequestMapper, AutomationRule as AutomationRuleMapper, + EntityManualTriggerRequestBody as EntityManualTriggerRequestBodyMapper, + EntityExpandParameters as EntityExpandParametersMapper, + EntityGetInsightsParameters as EntityGetInsightsParametersMapper, ManualTriggerRequestBody as ManualTriggerRequestBodyMapper, Incident as IncidentMapper, - TeamProperties as TeamPropertiesMapper, + TeamInformation as TeamInformationMapper, Bookmark as BookmarkMapper, Relation as RelationMapper, BookmarkExpandParameters as BookmarkExpandParametersMapper, - EntityExpandParameters as EntityExpandParametersMapper, - EntityGetInsightsParameters as EntityGetInsightsParametersMapper, + PackageModel as PackageModelMapper, + TemplateModelAutoGenerated as TemplateModelAutoGeneratedMapper, EntityTimelineParameters as EntityTimelineParametersMapper, CustomEntityQuery as CustomEntityQueryMapper, FileImport as FileImportMapper, + Hunt as HuntMapper, + HuntRelation as HuntRelationMapper, + HuntComment as HuntCommentMapper, IncidentComment as IncidentCommentMapper, + IncidentTask as IncidentTaskMapper, MetadataModel as MetadataModelMapper, MetadataPatch as MetadataPatchMapper, SentinelOnboardingState as SentinelOnboardingStateMapper, @@ -36,8 +43,13 @@ import { ThreatIntelligenceIndicatorModel as ThreatIntelligenceIndicatorModelMapper, ThreatIntelligenceFilteringCriteria as ThreatIntelligenceFilteringCriteriaMapper, ThreatIntelligenceAppendTags as ThreatIntelligenceAppendTagsMapper, + AnalyticsRuleRunTrigger as AnalyticsRuleRunTriggerMapper, Watchlist as WatchlistMapper, WatchlistItem as WatchlistItemMapper, + WorkspaceManagerGroup as WorkspaceManagerGroupMapper, + WorkspaceManagerAssignment as WorkspaceManagerAssignmentMapper, + WorkspaceManagerConfiguration as WorkspaceManagerConfigurationMapper, + WorkspaceManagerMember as WorkspaceManagerMemberMapper, DataConnector as DataConnectorMapper, DataConnectorConnectBody as DataConnectorConnectBodyMapper, DataConnectorsCheckRequirements as DataConnectorsCheckRequirementsMapper @@ -70,7 +82,7 @@ export const $host: OperationURLParameter = { export const apiVersion: OperationQueryParameter = { parameterPath: "apiVersion", mapper: { - defaultValue: "2022-09-01-preview", + defaultValue: "2023-04-01-preview", isConstant: true, serializedName: "api-version", type: { @@ -112,6 +124,7 @@ export const workspaceName: OperationURLParameter = { parameterPath: "workspaceName", mapper: { constraints: { + Pattern: new RegExp("^[A-Za-z0-9][A-Za-z0-9-]+[A-Za-z0-9]$"), MaxLength: 90, MinLength: 1 }, @@ -207,6 +220,54 @@ export const automationRuleToUpsert: OperationParameter = { }; export const requestBody: OperationParameter = { + parameterPath: ["options", "requestBody"], + mapper: EntityManualTriggerRequestBodyMapper +}; + +export const entityIdentifier: OperationURLParameter = { + parameterPath: "entityIdentifier", + mapper: { + serializedName: "entityIdentifier", + required: true, + type: { + name: "String" + } + } +}; + +export const entityId: OperationURLParameter = { + parameterPath: "entityId", + mapper: { + serializedName: "entityId", + required: true, + type: { + name: "String" + } + } +}; + +export const parameters: OperationParameter = { + parameterPath: "parameters", + mapper: EntityExpandParametersMapper +}; + +export const kind: OperationQueryParameter = { + parameterPath: "kind", + mapper: { + serializedName: "kind", + required: true, + type: { + name: "String" + } + } +}; + +export const parameters1: OperationParameter = { + parameterPath: "parameters", + mapper: EntityGetInsightsParametersMapper +}; + +export const requestBody1: OperationParameter = { parameterPath: ["options", "requestBody"], mapper: ManualTriggerRequestBodyMapper }; @@ -280,7 +341,7 @@ export const incident: OperationParameter = { export const teamProperties: OperationParameter = { parameterPath: "teamProperties", - mapper: TeamPropertiesMapper + mapper: TeamInformationMapper }; export const bookmarkId: OperationURLParameter = { @@ -315,15 +376,15 @@ export const relation: OperationParameter = { mapper: RelationMapper }; -export const parameters: OperationParameter = { +export const parameters2: OperationParameter = { parameterPath: "parameters", mapper: BookmarkExpandParametersMapper }; -export const ipAddress: OperationQueryParameter = { - parameterPath: "ipAddress", +export const packageId: OperationURLParameter = { + parameterPath: "packageId", mapper: { - serializedName: "ipAddress", + serializedName: "packageId", required: true, type: { name: "String" @@ -331,10 +392,15 @@ export const ipAddress: OperationQueryParameter = { } }; -export const domain: OperationQueryParameter = { - parameterPath: "domain", +export const packageInstallationProperties: OperationParameter = { + parameterPath: "packageInstallationProperties", + mapper: PackageModelMapper +}; + +export const templateId: OperationURLParameter = { + parameterPath: "templateId", mapper: { - serializedName: "domain", + serializedName: "templateId", required: true, type: { name: "String" @@ -342,10 +408,15 @@ export const domain: OperationQueryParameter = { } }; -export const entityId: OperationURLParameter = { - parameterPath: "entityId", +export const templateInstallationProperties: OperationParameter = { + parameterPath: "templateInstallationProperties", + mapper: TemplateModelAutoGeneratedMapper +}; + +export const ipAddress: OperationQueryParameter = { + parameterPath: "ipAddress", mapper: { - serializedName: "entityId", + serializedName: "ipAddress", required: true, type: { name: "String" @@ -353,15 +424,10 @@ export const entityId: OperationURLParameter = { } }; -export const parameters1: OperationParameter = { - parameterPath: "parameters", - mapper: EntityExpandParametersMapper -}; - -export const kind: OperationQueryParameter = { - parameterPath: "kind", +export const domain: OperationQueryParameter = { + parameterPath: "domain", mapper: { - serializedName: "kind", + serializedName: "domain", required: true, type: { name: "String" @@ -369,11 +435,6 @@ export const kind: OperationQueryParameter = { } }; -export const parameters2: OperationParameter = { - parameterPath: "parameters", - mapper: EntityGetInsightsParametersMapper -}; - export const parameters3: OperationParameter = { parameterPath: "parameters", mapper: EntityTimelineParametersMapper @@ -444,6 +505,54 @@ export const fileImport: OperationParameter = { mapper: FileImportMapper }; +export const huntId: OperationURLParameter = { + parameterPath: "huntId", + mapper: { + serializedName: "huntId", + required: true, + type: { + name: "String" + } + } +}; + +export const hunt: OperationParameter = { + parameterPath: "hunt", + mapper: HuntMapper +}; + +export const huntRelationId: OperationURLParameter = { + parameterPath: "huntRelationId", + mapper: { + serializedName: "huntRelationId", + required: true, + type: { + name: "String" + } + } +}; + +export const huntRelation: OperationParameter = { + parameterPath: "huntRelation", + mapper: HuntRelationMapper +}; + +export const huntCommentId: OperationURLParameter = { + parameterPath: "huntCommentId", + mapper: { + serializedName: "huntCommentId", + required: true, + type: { + name: "String" + } + } +}; + +export const huntComment: OperationParameter = { + parameterPath: "huntComment", + mapper: HuntCommentMapper +}; + export const incidentCommentId: OperationURLParameter = { parameterPath: "incidentCommentId", mapper: { @@ -460,6 +569,22 @@ export const incidentComment: OperationParameter = { mapper: IncidentCommentMapper }; +export const incidentTaskId: OperationURLParameter = { + parameterPath: "incidentTaskId", + mapper: { + serializedName: "incidentTaskId", + required: true, + type: { + name: "String" + } + } +}; + +export const incidentTask: OperationParameter = { + parameterPath: "incidentTask", + mapper: IncidentTaskMapper +}; + export const skip: OperationQueryParameter = { parameterPath: ["options", "skip"], mapper: { @@ -473,6 +598,9 @@ export const skip: OperationQueryParameter = { export const metadataName: OperationURLParameter = { parameterPath: "metadataName", mapper: { + constraints: { + Pattern: new RegExp("^\\S+$") + }, serializedName: "metadataName", required: true, type: { @@ -518,6 +646,34 @@ export const sentinelOnboardingStateParameter: OperationParameter = { mapper: SentinelOnboardingStateMapper }; +export const recommendationId: OperationURLParameter = { + parameterPath: "recommendationId", + mapper: { + serializedName: "recommendationId", + required: true, + type: { + name: "Uuid" + } + } +}; + +export const recommendationPatch: OperationParameter = { + parameterPath: "recommendationPatch", + mapper: { + serializedName: "recommendationPatch", + required: true, + type: { + name: "Sequence", + element: { + type: { + name: "Composite", + className: "RecommendationPatch" + } + } + } + } +}; + export const settingsResourceName: OperationURLParameter = { parameterPath: "settingsResourceName", mapper: { @@ -608,6 +764,22 @@ export const threatIntelligenceReplaceTags: OperationParameter = { mapper: ThreatIntelligenceIndicatorModelMapper }; +export const ruleRunId: OperationURLParameter = { + parameterPath: "ruleRunId", + mapper: { + serializedName: "ruleRunId", + required: true, + type: { + name: "String" + } + } +}; + +export const analyticsRuleRunTriggerParameter: OperationParameter = { + parameterPath: "analyticsRuleRunTriggerParameter", + mapper: AnalyticsRuleRunTriggerMapper +}; + export const watchlistAlias: OperationURLParameter = { parameterPath: "watchlistAlias", mapper: { @@ -640,6 +812,96 @@ export const watchlistItem: OperationParameter = { mapper: WatchlistItemMapper }; +export const workspaceManagerGroupName: OperationURLParameter = { + parameterPath: "workspaceManagerGroupName", + mapper: { + constraints: { + Pattern: new RegExp("^[A-Za-z0-9][A-Za-z0-9-]+[A-Za-z0-9]$") + }, + serializedName: "workspaceManagerGroupName", + required: true, + type: { + name: "String" + } + } +}; + +export const workspaceManagerGroup: OperationParameter = { + parameterPath: "workspaceManagerGroup", + mapper: WorkspaceManagerGroupMapper +}; + +export const workspaceManagerAssignmentName: OperationURLParameter = { + parameterPath: "workspaceManagerAssignmentName", + mapper: { + constraints: { + Pattern: new RegExp("^[A-Za-z0-9][A-Za-z0-9-]+[A-Za-z0-9]$") + }, + serializedName: "workspaceManagerAssignmentName", + required: true, + type: { + name: "String" + } + } +}; + +export const workspaceManagerAssignment: OperationParameter = { + parameterPath: "workspaceManagerAssignment", + mapper: WorkspaceManagerAssignmentMapper +}; + +export const jobName: OperationURLParameter = { + parameterPath: "jobName", + mapper: { + constraints: { + Pattern: new RegExp("^[A-Za-z0-9][A-Za-z0-9-]+[A-Za-z0-9]$") + }, + serializedName: "jobName", + required: true, + type: { + name: "String" + } + } +}; + +export const workspaceManagerConfigurationName: OperationURLParameter = { + parameterPath: "workspaceManagerConfigurationName", + mapper: { + constraints: { + Pattern: new RegExp("^[A-Za-z0-9][A-Za-z0-9-]+[A-Za-z0-9]$") + }, + serializedName: "workspaceManagerConfigurationName", + required: true, + type: { + name: "String" + } + } +}; + +export const workspaceManagerConfiguration: OperationParameter = { + parameterPath: "workspaceManagerConfiguration", + mapper: WorkspaceManagerConfigurationMapper +}; + +export const workspaceManagerMemberName: OperationURLParameter = { + parameterPath: "workspaceManagerMemberName", + mapper: { + constraints: { + Pattern: new RegExp("^[A-Za-z0-9][A-Za-z0-9-]+[A-Za-z0-9]$") + }, + serializedName: "workspaceManagerMemberName", + required: true, + type: { + name: "String" + } + } +}; + +export const workspaceManagerMember: OperationParameter = { + parameterPath: "workspaceManagerMember", + mapper: WorkspaceManagerMemberMapper +}; + export const dataConnectorId: OperationURLParameter = { parameterPath: "dataConnectorId", mapper: { diff --git a/sdk/securityinsight/arm-securityinsight/src/operations/alertRuleOperations.ts b/sdk/securityinsight/arm-securityinsight/src/operations/alertRuleOperations.ts new file mode 100644 index 000000000000..d296c8917879 --- /dev/null +++ b/sdk/securityinsight/arm-securityinsight/src/operations/alertRuleOperations.ts @@ -0,0 +1,181 @@ +/* + * Copyright (c) Microsoft Corporation. + * Licensed under the MIT License. + * + * Code generated by Microsoft (R) AutoRest Code Generator. + * Changes may cause incorrect behavior and will be lost if the code is regenerated. + */ + +import { AlertRuleOperations } from "../operationsInterfaces"; +import * as coreClient from "@azure/core-client"; +import * as Mappers from "../models/mappers"; +import * as Parameters from "../models/parameters"; +import { SecurityInsights } from "../securityInsights"; +import { + SimplePollerLike, + OperationState, + createHttpPoller +} from "@azure/core-lro"; +import { createLroSpec } from "../lroImpl"; +import { + AnalyticsRuleRunTrigger, + AlertRuleTriggerRuleRunOptionalParams, + AlertRuleTriggerRuleRunResponse +} from "../models"; + +/** Class containing AlertRuleOperations operations. */ +export class AlertRuleOperationsImpl implements AlertRuleOperations { + private readonly client: SecurityInsights; + + /** + * Initialize a new instance of the class AlertRuleOperations class. + * @param client Reference to the service client + */ + constructor(client: SecurityInsights) { + this.client = client; + } + + /** + * triggers analytics rule run + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param ruleId Alert rule ID + * @param analyticsRuleRunTriggerParameter The Analytics Rule Run Trigger parameter + * @param options The options parameters. + */ + async beginTriggerRuleRun( + resourceGroupName: string, + workspaceName: string, + ruleId: string, + analyticsRuleRunTriggerParameter: AnalyticsRuleRunTrigger, + options?: AlertRuleTriggerRuleRunOptionalParams + ): Promise< + SimplePollerLike< + OperationState, + AlertRuleTriggerRuleRunResponse + > + > { + const directSendOperation = async ( + args: coreClient.OperationArguments, + spec: coreClient.OperationSpec + ): Promise => { + return this.client.sendOperationRequest(args, spec); + }; + const sendOperationFn = async ( + args: coreClient.OperationArguments, + spec: coreClient.OperationSpec + ) => { + let currentRawResponse: + | coreClient.FullOperationResponse + | undefined = undefined; + const providedCallback = args.options?.onResponse; + const callback: coreClient.RawResponseCallback = ( + rawResponse: coreClient.FullOperationResponse, + flatResponse: unknown + ) => { + currentRawResponse = rawResponse; + providedCallback?.(rawResponse, flatResponse); + }; + const updatedArgs = { + ...args, + options: { + ...args.options, + onResponse: callback + } + }; + const flatResponse = await directSendOperation(updatedArgs, spec); + return { + flatResponse, + rawResponse: { + statusCode: currentRawResponse!.status, + body: currentRawResponse!.parsedBody, + headers: currentRawResponse!.headers.toJSON() + } + }; + }; + + const lro = createLroSpec({ + sendOperationFn, + args: { + resourceGroupName, + workspaceName, + ruleId, + analyticsRuleRunTriggerParameter, + options + }, + spec: triggerRuleRunOperationSpec + }); + const poller = await createHttpPoller< + AlertRuleTriggerRuleRunResponse, + OperationState + >(lro, { + restoreFrom: options?.resumeFrom, + intervalInMs: options?.updateIntervalInMs, + resourceLocationConfig: "location" + }); + await poller.poll(); + return poller; + } + + /** + * triggers analytics rule run + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param ruleId Alert rule ID + * @param analyticsRuleRunTriggerParameter The Analytics Rule Run Trigger parameter + * @param options The options parameters. + */ + async beginTriggerRuleRunAndWait( + resourceGroupName: string, + workspaceName: string, + ruleId: string, + analyticsRuleRunTriggerParameter: AnalyticsRuleRunTrigger, + options?: AlertRuleTriggerRuleRunOptionalParams + ): Promise { + const poller = await this.beginTriggerRuleRun( + resourceGroupName, + workspaceName, + ruleId, + analyticsRuleRunTriggerParameter, + options + ); + return poller.pollUntilDone(); + } +} +// Operation Specifications +const serializer = coreClient.createSerializer(Mappers, /* isXml */ false); + +const triggerRuleRunOperationSpec: coreClient.OperationSpec = { + path: + "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/alertRules/{ruleId}/triggerRuleRun", + httpMethod: "POST", + responses: { + 200: { + headersMapper: Mappers.AlertRuleTriggerRuleRunHeaders + }, + 201: { + headersMapper: Mappers.AlertRuleTriggerRuleRunHeaders + }, + 202: { + headersMapper: Mappers.AlertRuleTriggerRuleRunHeaders + }, + 204: { + headersMapper: Mappers.AlertRuleTriggerRuleRunHeaders + }, + default: { + bodyMapper: Mappers.CloudError + } + }, + requestBody: Parameters.analyticsRuleRunTriggerParameter, + queryParameters: [Parameters.apiVersion], + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName, + Parameters.ruleId + ], + headerParameters: [Parameters.accept, Parameters.contentType], + mediaType: "json", + serializer +}; diff --git a/sdk/securityinsight/arm-securityinsight/src/operations/bookmarkOperations.ts b/sdk/securityinsight/arm-securityinsight/src/operations/bookmarkOperations.ts index cd0a944ecdca..846da8040277 100644 --- a/sdk/securityinsight/arm-securityinsight/src/operations/bookmarkOperations.ts +++ b/sdk/securityinsight/arm-securityinsight/src/operations/bookmarkOperations.ts @@ -65,7 +65,7 @@ const expandOperationSpec: coreClient.OperationSpec = { bodyMapper: Mappers.CloudError } }, - requestBody: Parameters.parameters, + requestBody: Parameters.parameters2, queryParameters: [Parameters.apiVersion], urlParameters: [ Parameters.$host, diff --git a/sdk/securityinsight/arm-securityinsight/src/operations/contentPackage.ts b/sdk/securityinsight/arm-securityinsight/src/operations/contentPackage.ts new file mode 100644 index 000000000000..3731abbbd299 --- /dev/null +++ b/sdk/securityinsight/arm-securityinsight/src/operations/contentPackage.ts @@ -0,0 +1,131 @@ +/* + * Copyright (c) Microsoft Corporation. + * Licensed under the MIT License. + * + * Code generated by Microsoft (R) AutoRest Code Generator. + * Changes may cause incorrect behavior and will be lost if the code is regenerated. + */ + +import { ContentPackage } from "../operationsInterfaces"; +import * as coreClient from "@azure/core-client"; +import * as Mappers from "../models/mappers"; +import * as Parameters from "../models/parameters"; +import { SecurityInsights } from "../securityInsights"; +import { + PackageModel, + ContentPackageInstallOptionalParams, + ContentPackageInstallResponse, + ContentPackageUninstallOptionalParams +} from "../models"; + +/** Class containing ContentPackage operations. */ +export class ContentPackageImpl implements ContentPackage { + private readonly client: SecurityInsights; + + /** + * Initialize a new instance of the class ContentPackage class. + * @param client Reference to the service client + */ + constructor(client: SecurityInsights) { + this.client = client; + } + + /** + * Install a package to the workspace. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param packageId package Id + * @param packageInstallationProperties Package installation properties + * @param options The options parameters. + */ + install( + resourceGroupName: string, + workspaceName: string, + packageId: string, + packageInstallationProperties: PackageModel, + options?: ContentPackageInstallOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { + resourceGroupName, + workspaceName, + packageId, + packageInstallationProperties, + options + }, + installOperationSpec + ); + } + + /** + * Uninstall a package from the workspace. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param packageId package Id + * @param options The options parameters. + */ + uninstall( + resourceGroupName: string, + workspaceName: string, + packageId: string, + options?: ContentPackageUninstallOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { resourceGroupName, workspaceName, packageId, options }, + uninstallOperationSpec + ); + } +} +// Operation Specifications +const serializer = coreClient.createSerializer(Mappers, /* isXml */ false); + +const installOperationSpec: coreClient.OperationSpec = { + path: + "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/contentPackages/{packageId}", + httpMethod: "PUT", + responses: { + 200: { + bodyMapper: Mappers.PackageModel + }, + 201: { + bodyMapper: Mappers.PackageModel + }, + default: { + bodyMapper: Mappers.CloudError + } + }, + requestBody: Parameters.packageInstallationProperties, + queryParameters: [Parameters.apiVersion], + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName, + Parameters.packageId + ], + headerParameters: [Parameters.accept, Parameters.contentType], + mediaType: "json", + serializer +}; +const uninstallOperationSpec: coreClient.OperationSpec = { + path: + "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/contentPackages/{packageId}", + httpMethod: "DELETE", + responses: { + 200: {}, + 204: {}, + default: { + bodyMapper: Mappers.CloudError + } + }, + queryParameters: [Parameters.apiVersion], + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName, + Parameters.packageId + ], + headerParameters: [Parameters.accept], + serializer +}; diff --git a/sdk/securityinsight/arm-securityinsight/src/operations/contentPackages.ts b/sdk/securityinsight/arm-securityinsight/src/operations/contentPackages.ts new file mode 100644 index 000000000000..e65e8657b309 --- /dev/null +++ b/sdk/securityinsight/arm-securityinsight/src/operations/contentPackages.ts @@ -0,0 +1,244 @@ +/* + * Copyright (c) Microsoft Corporation. + * Licensed under the MIT License. + * + * Code generated by Microsoft (R) AutoRest Code Generator. + * Changes may cause incorrect behavior and will be lost if the code is regenerated. + */ + +import { PagedAsyncIterableIterator, PageSettings } from "@azure/core-paging"; +import { setContinuationToken } from "../pagingHelper"; +import { ContentPackages } from "../operationsInterfaces"; +import * as coreClient from "@azure/core-client"; +import * as Mappers from "../models/mappers"; +import * as Parameters from "../models/parameters"; +import { SecurityInsights } from "../securityInsights"; +import { + PackageModel, + ContentPackagesListNextOptionalParams, + ContentPackagesListOptionalParams, + ContentPackagesListResponse, + ContentPackagesGetOptionalParams, + ContentPackagesGetResponse, + ContentPackagesListNextResponse +} from "../models"; + +/// +/** Class containing ContentPackages operations. */ +export class ContentPackagesImpl implements ContentPackages { + private readonly client: SecurityInsights; + + /** + * Initialize a new instance of the class ContentPackages class. + * @param client Reference to the service client + */ + constructor(client: SecurityInsights) { + this.client = client; + } + + /** + * Gets all installed packages. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param options The options parameters. + */ + public list( + resourceGroupName: string, + workspaceName: string, + options?: ContentPackagesListOptionalParams + ): PagedAsyncIterableIterator { + const iter = this.listPagingAll(resourceGroupName, workspaceName, options); + return { + next() { + return iter.next(); + }, + [Symbol.asyncIterator]() { + return this; + }, + byPage: (settings?: PageSettings) => { + if (settings?.maxPageSize) { + throw new Error("maxPageSize is not supported by this operation."); + } + return this.listPagingPage( + resourceGroupName, + workspaceName, + options, + settings + ); + } + }; + } + + private async *listPagingPage( + resourceGroupName: string, + workspaceName: string, + options?: ContentPackagesListOptionalParams, + settings?: PageSettings + ): AsyncIterableIterator { + let result: ContentPackagesListResponse; + let continuationToken = settings?.continuationToken; + if (!continuationToken) { + result = await this._list(resourceGroupName, workspaceName, options); + let page = result.value || []; + continuationToken = result.nextLink; + setContinuationToken(page, continuationToken); + yield page; + } + while (continuationToken) { + result = await this._listNext( + resourceGroupName, + workspaceName, + continuationToken, + options + ); + continuationToken = result.nextLink; + let page = result.value || []; + setContinuationToken(page, continuationToken); + yield page; + } + } + + private async *listPagingAll( + resourceGroupName: string, + workspaceName: string, + options?: ContentPackagesListOptionalParams + ): AsyncIterableIterator { + for await (const page of this.listPagingPage( + resourceGroupName, + workspaceName, + options + )) { + yield* page; + } + } + + /** + * Gets all installed packages. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param options The options parameters. + */ + private _list( + resourceGroupName: string, + workspaceName: string, + options?: ContentPackagesListOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { resourceGroupName, workspaceName, options }, + listOperationSpec + ); + } + + /** + * Gets an installed packages by its id. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param packageId package Id + * @param options The options parameters. + */ + get( + resourceGroupName: string, + workspaceName: string, + packageId: string, + options?: ContentPackagesGetOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { resourceGroupName, workspaceName, packageId, options }, + getOperationSpec + ); + } + + /** + * ListNext + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param nextLink The nextLink from the previous successful call to the List method. + * @param options The options parameters. + */ + private _listNext( + resourceGroupName: string, + workspaceName: string, + nextLink: string, + options?: ContentPackagesListNextOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { resourceGroupName, workspaceName, nextLink, options }, + listNextOperationSpec + ); + } +} +// Operation Specifications +const serializer = coreClient.createSerializer(Mappers, /* isXml */ false); + +const listOperationSpec: coreClient.OperationSpec = { + path: + "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/contentPackages", + httpMethod: "GET", + responses: { + 200: { + bodyMapper: Mappers.PackageList + }, + default: { + bodyMapper: Mappers.CloudError + } + }, + queryParameters: [ + Parameters.apiVersion, + Parameters.filter, + Parameters.orderby, + Parameters.top, + Parameters.skipToken + ], + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName + ], + headerParameters: [Parameters.accept], + serializer +}; +const getOperationSpec: coreClient.OperationSpec = { + path: + "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/contentPackages/{packageId}", + httpMethod: "GET", + responses: { + 200: { + bodyMapper: Mappers.PackageModel + }, + default: { + bodyMapper: Mappers.CloudError + } + }, + queryParameters: [Parameters.apiVersion], + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName, + Parameters.packageId + ], + headerParameters: [Parameters.accept], + serializer +}; +const listNextOperationSpec: coreClient.OperationSpec = { + path: "{nextLink}", + httpMethod: "GET", + responses: { + 200: { + bodyMapper: Mappers.PackageList + }, + default: { + bodyMapper: Mappers.CloudError + } + }, + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName, + Parameters.nextLink + ], + headerParameters: [Parameters.accept], + serializer +}; diff --git a/sdk/securityinsight/arm-securityinsight/src/operations/contentTemplate.ts b/sdk/securityinsight/arm-securityinsight/src/operations/contentTemplate.ts new file mode 100644 index 000000000000..9e95bb6f2eb9 --- /dev/null +++ b/sdk/securityinsight/arm-securityinsight/src/operations/contentTemplate.ts @@ -0,0 +1,175 @@ +/* + * Copyright (c) Microsoft Corporation. + * Licensed under the MIT License. + * + * Code generated by Microsoft (R) AutoRest Code Generator. + * Changes may cause incorrect behavior and will be lost if the code is regenerated. + */ + +import { ContentTemplate } from "../operationsInterfaces"; +import * as coreClient from "@azure/core-client"; +import * as Mappers from "../models/mappers"; +import * as Parameters from "../models/parameters"; +import { SecurityInsights } from "../securityInsights"; +import { + TemplateModelAutoGenerated, + ContentTemplateInstallOptionalParams, + ContentTemplateInstallResponse, + ContentTemplateGetOptionalParams, + ContentTemplateGetResponse, + ContentTemplateDeleteOptionalParams +} from "../models"; + +/** Class containing ContentTemplate operations. */ +export class ContentTemplateImpl implements ContentTemplate { + private readonly client: SecurityInsights; + + /** + * Initialize a new instance of the class ContentTemplate class. + * @param client Reference to the service client + */ + constructor(client: SecurityInsights) { + this.client = client; + } + + /** + * Install a template. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param templateId template Id + * @param templateInstallationProperties Template installation properties + * @param options The options parameters. + */ + install( + resourceGroupName: string, + workspaceName: string, + templateId: string, + templateInstallationProperties: TemplateModelAutoGenerated, + options?: ContentTemplateInstallOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { + resourceGroupName, + workspaceName, + templateId, + templateInstallationProperties, + options + }, + installOperationSpec + ); + } + + /** + * Gets a template byt its identifier. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param templateId template Id + * @param options The options parameters. + */ + get( + resourceGroupName: string, + workspaceName: string, + templateId: string, + options?: ContentTemplateGetOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { resourceGroupName, workspaceName, templateId, options }, + getOperationSpec + ); + } + + /** + * Delete an installed template. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param templateId template Id + * @param options The options parameters. + */ + delete( + resourceGroupName: string, + workspaceName: string, + templateId: string, + options?: ContentTemplateDeleteOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { resourceGroupName, workspaceName, templateId, options }, + deleteOperationSpec + ); + } +} +// Operation Specifications +const serializer = coreClient.createSerializer(Mappers, /* isXml */ false); + +const installOperationSpec: coreClient.OperationSpec = { + path: + "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/contentTemplates/{templateId}", + httpMethod: "PUT", + responses: { + 200: { + bodyMapper: Mappers.TemplateModelAutoGenerated + }, + 201: { + bodyMapper: Mappers.TemplateModelAutoGenerated + }, + default: { + bodyMapper: Mappers.CloudError + } + }, + requestBody: Parameters.templateInstallationProperties, + queryParameters: [Parameters.apiVersion], + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName, + Parameters.templateId + ], + headerParameters: [Parameters.accept, Parameters.contentType], + mediaType: "json", + serializer +}; +const getOperationSpec: coreClient.OperationSpec = { + path: + "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/contentTemplates/{templateId}", + httpMethod: "GET", + responses: { + 200: { + bodyMapper: Mappers.TemplateModelAutoGenerated + }, + default: { + bodyMapper: Mappers.CloudError + } + }, + queryParameters: [Parameters.apiVersion], + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName, + Parameters.templateId + ], + headerParameters: [Parameters.accept], + serializer +}; +const deleteOperationSpec: coreClient.OperationSpec = { + path: + "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/contentTemplates/{templateId}", + httpMethod: "DELETE", + responses: { + 200: {}, + 204: {}, + default: { + bodyMapper: Mappers.CloudError + } + }, + queryParameters: [Parameters.apiVersion], + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName, + Parameters.templateId + ], + headerParameters: [Parameters.accept], + serializer +}; diff --git a/sdk/securityinsight/arm-securityinsight/src/operations/contentTemplates.ts b/sdk/securityinsight/arm-securityinsight/src/operations/contentTemplates.ts new file mode 100644 index 000000000000..7edc19f9be72 --- /dev/null +++ b/sdk/securityinsight/arm-securityinsight/src/operations/contentTemplates.ts @@ -0,0 +1,200 @@ +/* + * Copyright (c) Microsoft Corporation. + * Licensed under the MIT License. + * + * Code generated by Microsoft (R) AutoRest Code Generator. + * Changes may cause incorrect behavior and will be lost if the code is regenerated. + */ + +import { PagedAsyncIterableIterator, PageSettings } from "@azure/core-paging"; +import { setContinuationToken } from "../pagingHelper"; +import { ContentTemplates } from "../operationsInterfaces"; +import * as coreClient from "@azure/core-client"; +import * as Mappers from "../models/mappers"; +import * as Parameters from "../models/parameters"; +import { SecurityInsights } from "../securityInsights"; +import { + TemplateModelAutoGenerated, + ContentTemplatesListNextOptionalParams, + ContentTemplatesListOptionalParams, + ContentTemplatesListResponse, + ContentTemplatesListNextResponse +} from "../models"; + +/// +/** Class containing ContentTemplates operations. */ +export class ContentTemplatesImpl implements ContentTemplates { + private readonly client: SecurityInsights; + + /** + * Initialize a new instance of the class ContentTemplates class. + * @param client Reference to the service client + */ + constructor(client: SecurityInsights) { + this.client = client; + } + + /** + * Gets all installed templates. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param options The options parameters. + */ + public list( + resourceGroupName: string, + workspaceName: string, + options?: ContentTemplatesListOptionalParams + ): PagedAsyncIterableIterator { + const iter = this.listPagingAll(resourceGroupName, workspaceName, options); + return { + next() { + return iter.next(); + }, + [Symbol.asyncIterator]() { + return this; + }, + byPage: (settings?: PageSettings) => { + if (settings?.maxPageSize) { + throw new Error("maxPageSize is not supported by this operation."); + } + return this.listPagingPage( + resourceGroupName, + workspaceName, + options, + settings + ); + } + }; + } + + private async *listPagingPage( + resourceGroupName: string, + workspaceName: string, + options?: ContentTemplatesListOptionalParams, + settings?: PageSettings + ): AsyncIterableIterator { + let result: ContentTemplatesListResponse; + let continuationToken = settings?.continuationToken; + if (!continuationToken) { + result = await this._list(resourceGroupName, workspaceName, options); + let page = result.value || []; + continuationToken = result.nextLink; + setContinuationToken(page, continuationToken); + yield page; + } + while (continuationToken) { + result = await this._listNext( + resourceGroupName, + workspaceName, + continuationToken, + options + ); + continuationToken = result.nextLink; + let page = result.value || []; + setContinuationToken(page, continuationToken); + yield page; + } + } + + private async *listPagingAll( + resourceGroupName: string, + workspaceName: string, + options?: ContentTemplatesListOptionalParams + ): AsyncIterableIterator { + for await (const page of this.listPagingPage( + resourceGroupName, + workspaceName, + options + )) { + yield* page; + } + } + + /** + * Gets all installed templates. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param options The options parameters. + */ + private _list( + resourceGroupName: string, + workspaceName: string, + options?: ContentTemplatesListOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { resourceGroupName, workspaceName, options }, + listOperationSpec + ); + } + + /** + * ListNext + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param nextLink The nextLink from the previous successful call to the List method. + * @param options The options parameters. + */ + private _listNext( + resourceGroupName: string, + workspaceName: string, + nextLink: string, + options?: ContentTemplatesListNextOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { resourceGroupName, workspaceName, nextLink, options }, + listNextOperationSpec + ); + } +} +// Operation Specifications +const serializer = coreClient.createSerializer(Mappers, /* isXml */ false); + +const listOperationSpec: coreClient.OperationSpec = { + path: + "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/contentTemplates", + httpMethod: "GET", + responses: { + 200: { + bodyMapper: Mappers.TemplateListAutoGenerated + }, + default: { + bodyMapper: Mappers.CloudError + } + }, + queryParameters: [ + Parameters.apiVersion, + Parameters.filter, + Parameters.orderby, + Parameters.top, + Parameters.skipToken + ], + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName + ], + headerParameters: [Parameters.accept], + serializer +}; +const listNextOperationSpec: coreClient.OperationSpec = { + path: "{nextLink}", + httpMethod: "GET", + responses: { + 200: { + bodyMapper: Mappers.TemplateListAutoGenerated + }, + default: { + bodyMapper: Mappers.CloudError + } + }, + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName, + Parameters.nextLink + ], + headerParameters: [Parameters.accept], + serializer +}; diff --git a/sdk/securityinsight/arm-securityinsight/src/operations/entities.ts b/sdk/securityinsight/arm-securityinsight/src/operations/entities.ts index bb7626cae02f..04f800510bd5 100644 --- a/sdk/securityinsight/arm-securityinsight/src/operations/entities.ts +++ b/sdk/securityinsight/arm-securityinsight/src/operations/entities.ts @@ -18,6 +18,7 @@ import { EntitiesListNextOptionalParams, EntitiesListOptionalParams, EntitiesListResponse, + EntitiesRunPlaybookOptionalParams, EntitiesGetOptionalParams, EntitiesGetResponse, EntityExpandParameters, @@ -121,6 +122,25 @@ export class EntitiesImpl implements Entities { } } + /** + * Triggers playbook on a specific entity. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param entityIdentifier Entity identifier. + * @param options The options parameters. + */ + runPlaybook( + resourceGroupName: string, + workspaceName: string, + entityIdentifier: string, + options?: EntitiesRunPlaybookOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { resourceGroupName, workspaceName, entityIdentifier, options }, + runPlaybookOperationSpec + ); + } + /** * Gets all entities. * @param resourceGroupName The name of the resource group. The name is case insensitive. @@ -242,6 +262,29 @@ export class EntitiesImpl implements Entities { // Operation Specifications const serializer = coreClient.createSerializer(Mappers, /* isXml */ false); +const runPlaybookOperationSpec: coreClient.OperationSpec = { + path: + "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/entities/{entityIdentifier}/runPlaybook", + httpMethod: "POST", + responses: { + 204: {}, + default: { + bodyMapper: Mappers.CloudError + } + }, + requestBody: Parameters.requestBody, + queryParameters: [Parameters.apiVersion], + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName, + Parameters.entityIdentifier + ], + headerParameters: [Parameters.accept, Parameters.contentType], + mediaType: "json", + serializer +}; const listOperationSpec: coreClient.OperationSpec = { path: "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/entities", @@ -299,7 +342,7 @@ const expandOperationSpec: coreClient.OperationSpec = { bodyMapper: Mappers.CloudError } }, - requestBody: Parameters.parameters1, + requestBody: Parameters.parameters, queryParameters: [Parameters.apiVersion], urlParameters: [ Parameters.$host, @@ -347,7 +390,7 @@ const getInsightsOperationSpec: coreClient.OperationSpec = { bodyMapper: Mappers.CloudError } }, - requestBody: Parameters.parameters2, + requestBody: Parameters.parameters1, queryParameters: [Parameters.apiVersion], urlParameters: [ Parameters.$host, diff --git a/sdk/securityinsight/arm-securityinsight/src/operations/entityRelations.ts b/sdk/securityinsight/arm-securityinsight/src/operations/entityRelations.ts index e76d8ca12d13..68100fb6d6cf 100644 --- a/sdk/securityinsight/arm-securityinsight/src/operations/entityRelations.ts +++ b/sdk/securityinsight/arm-securityinsight/src/operations/entityRelations.ts @@ -70,8 +70,8 @@ const getRelationOperationSpec: coreClient.OperationSpec = { Parameters.subscriptionId, Parameters.resourceGroupName, Parameters.workspaceName, - Parameters.relationName, - Parameters.entityId + Parameters.entityId, + Parameters.relationName ], headerParameters: [Parameters.accept], serializer diff --git a/sdk/securityinsight/arm-securityinsight/src/operations/fileImports.ts b/sdk/securityinsight/arm-securityinsight/src/operations/fileImports.ts index 2c61c29c476c..54c08b6e6cb3 100644 --- a/sdk/securityinsight/arm-securityinsight/src/operations/fileImports.ts +++ b/sdk/securityinsight/arm-securityinsight/src/operations/fileImports.ts @@ -13,8 +13,12 @@ import * as coreClient from "@azure/core-client"; import * as Mappers from "../models/mappers"; import * as Parameters from "../models/parameters"; import { SecurityInsights } from "../securityInsights"; -import { PollerLike, PollOperationState, LroEngine } from "@azure/core-lro"; -import { LroImpl } from "../lroImpl"; +import { + SimplePollerLike, + OperationState, + createHttpPoller +} from "@azure/core-lro"; +import { createLroSpec } from "../lroImpl"; import { FileImport, FileImportsListNextOptionalParams, @@ -188,8 +192,8 @@ export class FileImportsImpl implements FileImports { fileImportId: string, options?: FileImportsDeleteOptionalParams ): Promise< - PollerLike< - PollOperationState, + SimplePollerLike< + OperationState, FileImportsDeleteResponse > > { @@ -199,7 +203,7 @@ export class FileImportsImpl implements FileImports { ): Promise => { return this.client.sendOperationRequest(args, spec); }; - const sendOperation = async ( + const sendOperationFn = async ( args: coreClient.OperationArguments, spec: coreClient.OperationSpec ) => { @@ -232,15 +236,18 @@ export class FileImportsImpl implements FileImports { }; }; - const lro = new LroImpl( - sendOperation, - { resourceGroupName, workspaceName, fileImportId, options }, - deleteOperationSpec - ); - const poller = new LroEngine(lro, { - resumeFrom: options?.resumeFrom, + const lro = createLroSpec({ + sendOperationFn, + args: { resourceGroupName, workspaceName, fileImportId, options }, + spec: deleteOperationSpec + }); + const poller = await createHttpPoller< + FileImportsDeleteResponse, + OperationState + >(lro, { + restoreFrom: options?.resumeFrom, intervalInMs: options?.updateIntervalInMs, - lroResourceLocationConfig: "location" + resourceLocationConfig: "location" }); await poller.poll(); return poller; diff --git a/sdk/securityinsight/arm-securityinsight/src/operations/get.ts b/sdk/securityinsight/arm-securityinsight/src/operations/get.ts new file mode 100644 index 000000000000..3b420b7b9785 --- /dev/null +++ b/sdk/securityinsight/arm-securityinsight/src/operations/get.ts @@ -0,0 +1,75 @@ +/* + * Copyright (c) Microsoft Corporation. + * Licensed under the MIT License. + * + * Code generated by Microsoft (R) AutoRest Code Generator. + * Changes may cause incorrect behavior and will be lost if the code is regenerated. + */ + +import { Get } from "../operationsInterfaces"; +import * as coreClient from "@azure/core-client"; +import * as Mappers from "../models/mappers"; +import * as Parameters from "../models/parameters"; +import { SecurityInsights } from "../securityInsights"; +import { + GetSingleRecommendationOptionalParams, + GetSingleRecommendationResponse +} from "../models"; + +/** Class containing Get operations. */ +export class GetImpl implements Get { + private readonly client: SecurityInsights; + + /** + * Initialize a new instance of the class Get class. + * @param client Reference to the service client + */ + constructor(client: SecurityInsights) { + this.client = client; + } + + /** + * Gets a recommendation by its id. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param recommendationId Recommendation Id. + * @param options The options parameters. + */ + singleRecommendation( + resourceGroupName: string, + workspaceName: string, + recommendationId: string, + options?: GetSingleRecommendationOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { resourceGroupName, workspaceName, recommendationId, options }, + singleRecommendationOperationSpec + ); + } +} +// Operation Specifications +const serializer = coreClient.createSerializer(Mappers, /* isXml */ false); + +const singleRecommendationOperationSpec: coreClient.OperationSpec = { + path: + "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/recommendations/{recommendationId}", + httpMethod: "GET", + responses: { + 200: { + bodyMapper: Mappers.Recommendation + }, + default: { + bodyMapper: Mappers.CloudError + } + }, + queryParameters: [Parameters.apiVersion], + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName, + Parameters.recommendationId + ], + headerParameters: [Parameters.accept], + serializer +}; diff --git a/sdk/securityinsight/arm-securityinsight/src/operations/getRecommendations.ts b/sdk/securityinsight/arm-securityinsight/src/operations/getRecommendations.ts new file mode 100644 index 000000000000..b354ff342f93 --- /dev/null +++ b/sdk/securityinsight/arm-securityinsight/src/operations/getRecommendations.ts @@ -0,0 +1,72 @@ +/* + * Copyright (c) Microsoft Corporation. + * Licensed under the MIT License. + * + * Code generated by Microsoft (R) AutoRest Code Generator. + * Changes may cause incorrect behavior and will be lost if the code is regenerated. + */ + +import { GetRecommendations } from "../operationsInterfaces"; +import * as coreClient from "@azure/core-client"; +import * as Mappers from "../models/mappers"; +import * as Parameters from "../models/parameters"; +import { SecurityInsights } from "../securityInsights"; +import { + GetRecommendationsListOptionalParams, + GetRecommendationsListResponse +} from "../models"; + +/** Class containing GetRecommendations operations. */ +export class GetRecommendationsImpl implements GetRecommendations { + private readonly client: SecurityInsights; + + /** + * Initialize a new instance of the class GetRecommendations class. + * @param client Reference to the service client + */ + constructor(client: SecurityInsights) { + this.client = client; + } + + /** + * Gets a list of all recommendations. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param options The options parameters. + */ + list( + resourceGroupName: string, + workspaceName: string, + options?: GetRecommendationsListOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { resourceGroupName, workspaceName, options }, + listOperationSpec + ); + } +} +// Operation Specifications +const serializer = coreClient.createSerializer(Mappers, /* isXml */ false); + +const listOperationSpec: coreClient.OperationSpec = { + path: + "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/recommendations", + httpMethod: "GET", + responses: { + 200: { + bodyMapper: Mappers.RecommendationList + }, + default: { + bodyMapper: Mappers.CloudError + } + }, + queryParameters: [Parameters.apiVersion], + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName + ], + headerParameters: [Parameters.accept], + serializer +}; diff --git a/sdk/securityinsight/arm-securityinsight/src/operations/getTriggeredAnalyticsRuleRuns.ts b/sdk/securityinsight/arm-securityinsight/src/operations/getTriggeredAnalyticsRuleRuns.ts new file mode 100644 index 000000000000..c6813493406d --- /dev/null +++ b/sdk/securityinsight/arm-securityinsight/src/operations/getTriggeredAnalyticsRuleRuns.ts @@ -0,0 +1,195 @@ +/* + * Copyright (c) Microsoft Corporation. + * Licensed under the MIT License. + * + * Code generated by Microsoft (R) AutoRest Code Generator. + * Changes may cause incorrect behavior and will be lost if the code is regenerated. + */ + +import { PagedAsyncIterableIterator, PageSettings } from "@azure/core-paging"; +import { setContinuationToken } from "../pagingHelper"; +import { GetTriggeredAnalyticsRuleRuns } from "../operationsInterfaces"; +import * as coreClient from "@azure/core-client"; +import * as Mappers from "../models/mappers"; +import * as Parameters from "../models/parameters"; +import { SecurityInsights } from "../securityInsights"; +import { + TriggeredAnalyticsRuleRun, + GetTriggeredAnalyticsRuleRunsListNextOptionalParams, + GetTriggeredAnalyticsRuleRunsListOptionalParams, + GetTriggeredAnalyticsRuleRunsListResponse, + GetTriggeredAnalyticsRuleRunsListNextResponse +} from "../models"; + +/// +/** Class containing GetTriggeredAnalyticsRuleRuns operations. */ +export class GetTriggeredAnalyticsRuleRunsImpl + implements GetTriggeredAnalyticsRuleRuns { + private readonly client: SecurityInsights; + + /** + * Initialize a new instance of the class GetTriggeredAnalyticsRuleRuns class. + * @param client Reference to the service client + */ + constructor(client: SecurityInsights) { + this.client = client; + } + + /** + * Gets the triggered analytics rule runs. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param options The options parameters. + */ + public list( + resourceGroupName: string, + workspaceName: string, + options?: GetTriggeredAnalyticsRuleRunsListOptionalParams + ): PagedAsyncIterableIterator { + const iter = this.listPagingAll(resourceGroupName, workspaceName, options); + return { + next() { + return iter.next(); + }, + [Symbol.asyncIterator]() { + return this; + }, + byPage: (settings?: PageSettings) => { + if (settings?.maxPageSize) { + throw new Error("maxPageSize is not supported by this operation."); + } + return this.listPagingPage( + resourceGroupName, + workspaceName, + options, + settings + ); + } + }; + } + + private async *listPagingPage( + resourceGroupName: string, + workspaceName: string, + options?: GetTriggeredAnalyticsRuleRunsListOptionalParams, + settings?: PageSettings + ): AsyncIterableIterator { + let result: GetTriggeredAnalyticsRuleRunsListResponse; + let continuationToken = settings?.continuationToken; + if (!continuationToken) { + result = await this._list(resourceGroupName, workspaceName, options); + let page = result.value || []; + continuationToken = result.nextLink; + setContinuationToken(page, continuationToken); + yield page; + } + while (continuationToken) { + result = await this._listNext( + resourceGroupName, + workspaceName, + continuationToken, + options + ); + continuationToken = result.nextLink; + let page = result.value || []; + setContinuationToken(page, continuationToken); + yield page; + } + } + + private async *listPagingAll( + resourceGroupName: string, + workspaceName: string, + options?: GetTriggeredAnalyticsRuleRunsListOptionalParams + ): AsyncIterableIterator { + for await (const page of this.listPagingPage( + resourceGroupName, + workspaceName, + options + )) { + yield* page; + } + } + + /** + * Gets the triggered analytics rule runs. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param options The options parameters. + */ + private _list( + resourceGroupName: string, + workspaceName: string, + options?: GetTriggeredAnalyticsRuleRunsListOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { resourceGroupName, workspaceName, options }, + listOperationSpec + ); + } + + /** + * ListNext + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param nextLink The nextLink from the previous successful call to the List method. + * @param options The options parameters. + */ + private _listNext( + resourceGroupName: string, + workspaceName: string, + nextLink: string, + options?: GetTriggeredAnalyticsRuleRunsListNextOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { resourceGroupName, workspaceName, nextLink, options }, + listNextOperationSpec + ); + } +} +// Operation Specifications +const serializer = coreClient.createSerializer(Mappers, /* isXml */ false); + +const listOperationSpec: coreClient.OperationSpec = { + path: + "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/triggeredAnalyticsRuleRuns", + httpMethod: "GET", + responses: { + 200: { + bodyMapper: Mappers.TriggeredAnalyticsRuleRuns + }, + default: { + bodyMapper: Mappers.CloudError + } + }, + queryParameters: [Parameters.apiVersion], + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName + ], + headerParameters: [Parameters.accept], + serializer +}; +const listNextOperationSpec: coreClient.OperationSpec = { + path: "{nextLink}", + httpMethod: "GET", + responses: { + 200: { + bodyMapper: Mappers.TriggeredAnalyticsRuleRuns + }, + default: { + bodyMapper: Mappers.CloudError + } + }, + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName, + Parameters.nextLink + ], + headerParameters: [Parameters.accept], + serializer +}; diff --git a/sdk/securityinsight/arm-securityinsight/src/operations/huntComments.ts b/sdk/securityinsight/arm-securityinsight/src/operations/huntComments.ts new file mode 100644 index 000000000000..696429328d4d --- /dev/null +++ b/sdk/securityinsight/arm-securityinsight/src/operations/huntComments.ts @@ -0,0 +1,376 @@ +/* + * Copyright (c) Microsoft Corporation. + * Licensed under the MIT License. + * + * Code generated by Microsoft (R) AutoRest Code Generator. + * Changes may cause incorrect behavior and will be lost if the code is regenerated. + */ + +import { PagedAsyncIterableIterator, PageSettings } from "@azure/core-paging"; +import { setContinuationToken } from "../pagingHelper"; +import { HuntComments } from "../operationsInterfaces"; +import * as coreClient from "@azure/core-client"; +import * as Mappers from "../models/mappers"; +import * as Parameters from "../models/parameters"; +import { SecurityInsights } from "../securityInsights"; +import { + HuntComment, + HuntCommentsListNextOptionalParams, + HuntCommentsListOptionalParams, + HuntCommentsListResponse, + HuntCommentsGetOptionalParams, + HuntCommentsGetResponse, + HuntCommentsDeleteOptionalParams, + HuntCommentsCreateOrUpdateOptionalParams, + HuntCommentsCreateOrUpdateResponse, + HuntCommentsListNextResponse +} from "../models"; + +/// +/** Class containing HuntComments operations. */ +export class HuntCommentsImpl implements HuntComments { + private readonly client: SecurityInsights; + + /** + * Initialize a new instance of the class HuntComments class. + * @param client Reference to the service client + */ + constructor(client: SecurityInsights) { + this.client = client; + } + + /** + * Gets all hunt comments + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param huntId The hunt id (GUID) + * @param options The options parameters. + */ + public list( + resourceGroupName: string, + workspaceName: string, + huntId: string, + options?: HuntCommentsListOptionalParams + ): PagedAsyncIterableIterator { + const iter = this.listPagingAll( + resourceGroupName, + workspaceName, + huntId, + options + ); + return { + next() { + return iter.next(); + }, + [Symbol.asyncIterator]() { + return this; + }, + byPage: (settings?: PageSettings) => { + if (settings?.maxPageSize) { + throw new Error("maxPageSize is not supported by this operation."); + } + return this.listPagingPage( + resourceGroupName, + workspaceName, + huntId, + options, + settings + ); + } + }; + } + + private async *listPagingPage( + resourceGroupName: string, + workspaceName: string, + huntId: string, + options?: HuntCommentsListOptionalParams, + settings?: PageSettings + ): AsyncIterableIterator { + let result: HuntCommentsListResponse; + let continuationToken = settings?.continuationToken; + if (!continuationToken) { + result = await this._list( + resourceGroupName, + workspaceName, + huntId, + options + ); + let page = result.value || []; + continuationToken = result.nextLink; + setContinuationToken(page, continuationToken); + yield page; + } + while (continuationToken) { + result = await this._listNext( + resourceGroupName, + workspaceName, + huntId, + continuationToken, + options + ); + continuationToken = result.nextLink; + let page = result.value || []; + setContinuationToken(page, continuationToken); + yield page; + } + } + + private async *listPagingAll( + resourceGroupName: string, + workspaceName: string, + huntId: string, + options?: HuntCommentsListOptionalParams + ): AsyncIterableIterator { + for await (const page of this.listPagingPage( + resourceGroupName, + workspaceName, + huntId, + options + )) { + yield* page; + } + } + + /** + * Gets all hunt comments + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param huntId The hunt id (GUID) + * @param options The options parameters. + */ + private _list( + resourceGroupName: string, + workspaceName: string, + huntId: string, + options?: HuntCommentsListOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { resourceGroupName, workspaceName, huntId, options }, + listOperationSpec + ); + } + + /** + * Gets a hunt comment + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param huntId The hunt id (GUID) + * @param huntCommentId The hunt comment id (GUID) + * @param options The options parameters. + */ + get( + resourceGroupName: string, + workspaceName: string, + huntId: string, + huntCommentId: string, + options?: HuntCommentsGetOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { resourceGroupName, workspaceName, huntId, huntCommentId, options }, + getOperationSpec + ); + } + + /** + * Delete a hunt comment. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param huntId The hunt id (GUID) + * @param huntCommentId The hunt comment id (GUID) + * @param options The options parameters. + */ + delete( + resourceGroupName: string, + workspaceName: string, + huntId: string, + huntCommentId: string, + options?: HuntCommentsDeleteOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { resourceGroupName, workspaceName, huntId, huntCommentId, options }, + deleteOperationSpec + ); + } + + /** + * Creates or updates a hunt relation. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param huntId The hunt id (GUID) + * @param huntCommentId The hunt comment id (GUID) + * @param huntComment The hunt comment + * @param options The options parameters. + */ + createOrUpdate( + resourceGroupName: string, + workspaceName: string, + huntId: string, + huntCommentId: string, + huntComment: HuntComment, + options?: HuntCommentsCreateOrUpdateOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { + resourceGroupName, + workspaceName, + huntId, + huntCommentId, + huntComment, + options + }, + createOrUpdateOperationSpec + ); + } + + /** + * ListNext + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param huntId The hunt id (GUID) + * @param nextLink The nextLink from the previous successful call to the List method. + * @param options The options parameters. + */ + private _listNext( + resourceGroupName: string, + workspaceName: string, + huntId: string, + nextLink: string, + options?: HuntCommentsListNextOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { resourceGroupName, workspaceName, huntId, nextLink, options }, + listNextOperationSpec + ); + } +} +// Operation Specifications +const serializer = coreClient.createSerializer(Mappers, /* isXml */ false); + +const listOperationSpec: coreClient.OperationSpec = { + path: + "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/hunts/{huntId}/comments", + httpMethod: "GET", + responses: { + 200: { + bodyMapper: Mappers.HuntCommentList + }, + default: { + bodyMapper: Mappers.CloudError + } + }, + queryParameters: [ + Parameters.apiVersion, + Parameters.filter, + Parameters.orderby, + Parameters.top, + Parameters.skipToken + ], + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName, + Parameters.huntId + ], + headerParameters: [Parameters.accept], + serializer +}; +const getOperationSpec: coreClient.OperationSpec = { + path: + "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/hunts/{huntId}/comments/{huntCommentId}", + httpMethod: "GET", + responses: { + 200: { + bodyMapper: Mappers.HuntComment + }, + default: { + bodyMapper: Mappers.CloudError + } + }, + queryParameters: [Parameters.apiVersion], + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName, + Parameters.huntId, + Parameters.huntCommentId + ], + headerParameters: [Parameters.accept], + serializer +}; +const deleteOperationSpec: coreClient.OperationSpec = { + path: + "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/hunts/{huntId}/comments/{huntCommentId}", + httpMethod: "DELETE", + responses: { + 200: {}, + 204: {}, + default: { + bodyMapper: Mappers.CloudError + } + }, + queryParameters: [Parameters.apiVersion], + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName, + Parameters.huntId, + Parameters.huntCommentId + ], + headerParameters: [Parameters.accept], + serializer +}; +const createOrUpdateOperationSpec: coreClient.OperationSpec = { + path: + "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/hunts/{huntId}/comments/{huntCommentId}", + httpMethod: "PUT", + responses: { + 200: { + bodyMapper: Mappers.HuntComment + }, + 201: { + bodyMapper: Mappers.HuntComment + }, + default: { + bodyMapper: Mappers.CloudError + } + }, + requestBody: Parameters.huntComment, + queryParameters: [Parameters.apiVersion], + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName, + Parameters.huntId, + Parameters.huntCommentId + ], + headerParameters: [Parameters.accept, Parameters.contentType], + mediaType: "json", + serializer +}; +const listNextOperationSpec: coreClient.OperationSpec = { + path: "{nextLink}", + httpMethod: "GET", + responses: { + 200: { + bodyMapper: Mappers.HuntCommentList + }, + default: { + bodyMapper: Mappers.CloudError + } + }, + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName, + Parameters.nextLink, + Parameters.huntId + ], + headerParameters: [Parameters.accept], + serializer +}; diff --git a/sdk/securityinsight/arm-securityinsight/src/operations/huntRelations.ts b/sdk/securityinsight/arm-securityinsight/src/operations/huntRelations.ts new file mode 100644 index 000000000000..3988d013b4b4 --- /dev/null +++ b/sdk/securityinsight/arm-securityinsight/src/operations/huntRelations.ts @@ -0,0 +1,376 @@ +/* + * Copyright (c) Microsoft Corporation. + * Licensed under the MIT License. + * + * Code generated by Microsoft (R) AutoRest Code Generator. + * Changes may cause incorrect behavior and will be lost if the code is regenerated. + */ + +import { PagedAsyncIterableIterator, PageSettings } from "@azure/core-paging"; +import { setContinuationToken } from "../pagingHelper"; +import { HuntRelations } from "../operationsInterfaces"; +import * as coreClient from "@azure/core-client"; +import * as Mappers from "../models/mappers"; +import * as Parameters from "../models/parameters"; +import { SecurityInsights } from "../securityInsights"; +import { + HuntRelation, + HuntRelationsListNextOptionalParams, + HuntRelationsListOptionalParams, + HuntRelationsListResponse, + HuntRelationsGetOptionalParams, + HuntRelationsGetResponse, + HuntRelationsDeleteOptionalParams, + HuntRelationsCreateOrUpdateOptionalParams, + HuntRelationsCreateOrUpdateResponse, + HuntRelationsListNextResponse +} from "../models"; + +/// +/** Class containing HuntRelations operations. */ +export class HuntRelationsImpl implements HuntRelations { + private readonly client: SecurityInsights; + + /** + * Initialize a new instance of the class HuntRelations class. + * @param client Reference to the service client + */ + constructor(client: SecurityInsights) { + this.client = client; + } + + /** + * Gets all hunt relations + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param huntId The hunt id (GUID) + * @param options The options parameters. + */ + public list( + resourceGroupName: string, + workspaceName: string, + huntId: string, + options?: HuntRelationsListOptionalParams + ): PagedAsyncIterableIterator { + const iter = this.listPagingAll( + resourceGroupName, + workspaceName, + huntId, + options + ); + return { + next() { + return iter.next(); + }, + [Symbol.asyncIterator]() { + return this; + }, + byPage: (settings?: PageSettings) => { + if (settings?.maxPageSize) { + throw new Error("maxPageSize is not supported by this operation."); + } + return this.listPagingPage( + resourceGroupName, + workspaceName, + huntId, + options, + settings + ); + } + }; + } + + private async *listPagingPage( + resourceGroupName: string, + workspaceName: string, + huntId: string, + options?: HuntRelationsListOptionalParams, + settings?: PageSettings + ): AsyncIterableIterator { + let result: HuntRelationsListResponse; + let continuationToken = settings?.continuationToken; + if (!continuationToken) { + result = await this._list( + resourceGroupName, + workspaceName, + huntId, + options + ); + let page = result.value || []; + continuationToken = result.nextLink; + setContinuationToken(page, continuationToken); + yield page; + } + while (continuationToken) { + result = await this._listNext( + resourceGroupName, + workspaceName, + huntId, + continuationToken, + options + ); + continuationToken = result.nextLink; + let page = result.value || []; + setContinuationToken(page, continuationToken); + yield page; + } + } + + private async *listPagingAll( + resourceGroupName: string, + workspaceName: string, + huntId: string, + options?: HuntRelationsListOptionalParams + ): AsyncIterableIterator { + for await (const page of this.listPagingPage( + resourceGroupName, + workspaceName, + huntId, + options + )) { + yield* page; + } + } + + /** + * Gets all hunt relations + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param huntId The hunt id (GUID) + * @param options The options parameters. + */ + private _list( + resourceGroupName: string, + workspaceName: string, + huntId: string, + options?: HuntRelationsListOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { resourceGroupName, workspaceName, huntId, options }, + listOperationSpec + ); + } + + /** + * Gets a hunt relation + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param huntId The hunt id (GUID) + * @param huntRelationId The hunt relation id (GUID) + * @param options The options parameters. + */ + get( + resourceGroupName: string, + workspaceName: string, + huntId: string, + huntRelationId: string, + options?: HuntRelationsGetOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { resourceGroupName, workspaceName, huntId, huntRelationId, options }, + getOperationSpec + ); + } + + /** + * Delete a hunt relation. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param huntId The hunt id (GUID) + * @param huntRelationId The hunt relation id (GUID) + * @param options The options parameters. + */ + delete( + resourceGroupName: string, + workspaceName: string, + huntId: string, + huntRelationId: string, + options?: HuntRelationsDeleteOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { resourceGroupName, workspaceName, huntId, huntRelationId, options }, + deleteOperationSpec + ); + } + + /** + * Creates or updates a hunt relation. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param huntId The hunt id (GUID) + * @param huntRelationId The hunt relation id (GUID) + * @param huntRelation The hunt relation + * @param options The options parameters. + */ + createOrUpdate( + resourceGroupName: string, + workspaceName: string, + huntId: string, + huntRelationId: string, + huntRelation: HuntRelation, + options?: HuntRelationsCreateOrUpdateOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { + resourceGroupName, + workspaceName, + huntId, + huntRelationId, + huntRelation, + options + }, + createOrUpdateOperationSpec + ); + } + + /** + * ListNext + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param huntId The hunt id (GUID) + * @param nextLink The nextLink from the previous successful call to the List method. + * @param options The options parameters. + */ + private _listNext( + resourceGroupName: string, + workspaceName: string, + huntId: string, + nextLink: string, + options?: HuntRelationsListNextOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { resourceGroupName, workspaceName, huntId, nextLink, options }, + listNextOperationSpec + ); + } +} +// Operation Specifications +const serializer = coreClient.createSerializer(Mappers, /* isXml */ false); + +const listOperationSpec: coreClient.OperationSpec = { + path: + "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/hunts/{huntId}/relations", + httpMethod: "GET", + responses: { + 200: { + bodyMapper: Mappers.HuntRelationList + }, + default: { + bodyMapper: Mappers.CloudError + } + }, + queryParameters: [ + Parameters.apiVersion, + Parameters.filter, + Parameters.orderby, + Parameters.top, + Parameters.skipToken + ], + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName, + Parameters.huntId + ], + headerParameters: [Parameters.accept], + serializer +}; +const getOperationSpec: coreClient.OperationSpec = { + path: + "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/hunts/{huntId}/relations/{huntRelationId}", + httpMethod: "GET", + responses: { + 200: { + bodyMapper: Mappers.HuntRelation + }, + default: { + bodyMapper: Mappers.CloudError + } + }, + queryParameters: [Parameters.apiVersion], + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName, + Parameters.huntId, + Parameters.huntRelationId + ], + headerParameters: [Parameters.accept], + serializer +}; +const deleteOperationSpec: coreClient.OperationSpec = { + path: + "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/hunts/{huntId}/relations/{huntRelationId}", + httpMethod: "DELETE", + responses: { + 200: {}, + 204: {}, + default: { + bodyMapper: Mappers.CloudError + } + }, + queryParameters: [Parameters.apiVersion], + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName, + Parameters.huntId, + Parameters.huntRelationId + ], + headerParameters: [Parameters.accept], + serializer +}; +const createOrUpdateOperationSpec: coreClient.OperationSpec = { + path: + "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/hunts/{huntId}/relations/{huntRelationId}", + httpMethod: "PUT", + responses: { + 200: { + bodyMapper: Mappers.HuntRelation + }, + 201: { + bodyMapper: Mappers.HuntRelation + }, + default: { + bodyMapper: Mappers.CloudError + } + }, + requestBody: Parameters.huntRelation, + queryParameters: [Parameters.apiVersion], + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName, + Parameters.huntId, + Parameters.huntRelationId + ], + headerParameters: [Parameters.accept, Parameters.contentType], + mediaType: "json", + serializer +}; +const listNextOperationSpec: coreClient.OperationSpec = { + path: "{nextLink}", + httpMethod: "GET", + responses: { + 200: { + bodyMapper: Mappers.HuntRelationList + }, + default: { + bodyMapper: Mappers.CloudError + } + }, + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName, + Parameters.nextLink, + Parameters.huntId + ], + headerParameters: [Parameters.accept], + serializer +}; diff --git a/sdk/securityinsight/arm-securityinsight/src/operations/hunts.ts b/sdk/securityinsight/arm-securityinsight/src/operations/hunts.ts new file mode 100644 index 000000000000..0570089177ed --- /dev/null +++ b/sdk/securityinsight/arm-securityinsight/src/operations/hunts.ts @@ -0,0 +1,337 @@ +/* + * Copyright (c) Microsoft Corporation. + * Licensed under the MIT License. + * + * Code generated by Microsoft (R) AutoRest Code Generator. + * Changes may cause incorrect behavior and will be lost if the code is regenerated. + */ + +import { PagedAsyncIterableIterator, PageSettings } from "@azure/core-paging"; +import { setContinuationToken } from "../pagingHelper"; +import { Hunts } from "../operationsInterfaces"; +import * as coreClient from "@azure/core-client"; +import * as Mappers from "../models/mappers"; +import * as Parameters from "../models/parameters"; +import { SecurityInsights } from "../securityInsights"; +import { + Hunt, + HuntsListNextOptionalParams, + HuntsListOptionalParams, + HuntsListResponse, + HuntsGetOptionalParams, + HuntsGetResponse, + HuntsDeleteOptionalParams, + HuntsCreateOrUpdateOptionalParams, + HuntsCreateOrUpdateResponse, + HuntsListNextResponse +} from "../models"; + +/// +/** Class containing Hunts operations. */ +export class HuntsImpl implements Hunts { + private readonly client: SecurityInsights; + + /** + * Initialize a new instance of the class Hunts class. + * @param client Reference to the service client + */ + constructor(client: SecurityInsights) { + this.client = client; + } + + /** + * Gets all hunts, without relations and comments. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param options The options parameters. + */ + public list( + resourceGroupName: string, + workspaceName: string, + options?: HuntsListOptionalParams + ): PagedAsyncIterableIterator { + const iter = this.listPagingAll(resourceGroupName, workspaceName, options); + return { + next() { + return iter.next(); + }, + [Symbol.asyncIterator]() { + return this; + }, + byPage: (settings?: PageSettings) => { + if (settings?.maxPageSize) { + throw new Error("maxPageSize is not supported by this operation."); + } + return this.listPagingPage( + resourceGroupName, + workspaceName, + options, + settings + ); + } + }; + } + + private async *listPagingPage( + resourceGroupName: string, + workspaceName: string, + options?: HuntsListOptionalParams, + settings?: PageSettings + ): AsyncIterableIterator { + let result: HuntsListResponse; + let continuationToken = settings?.continuationToken; + if (!continuationToken) { + result = await this._list(resourceGroupName, workspaceName, options); + let page = result.value || []; + continuationToken = result.nextLink; + setContinuationToken(page, continuationToken); + yield page; + } + while (continuationToken) { + result = await this._listNext( + resourceGroupName, + workspaceName, + continuationToken, + options + ); + continuationToken = result.nextLink; + let page = result.value || []; + setContinuationToken(page, continuationToken); + yield page; + } + } + + private async *listPagingAll( + resourceGroupName: string, + workspaceName: string, + options?: HuntsListOptionalParams + ): AsyncIterableIterator { + for await (const page of this.listPagingPage( + resourceGroupName, + workspaceName, + options + )) { + yield* page; + } + } + + /** + * Gets all hunts, without relations and comments. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param options The options parameters. + */ + private _list( + resourceGroupName: string, + workspaceName: string, + options?: HuntsListOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { resourceGroupName, workspaceName, options }, + listOperationSpec + ); + } + + /** + * Gets a hunt, without relations and comments. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param huntId The hunt id (GUID) + * @param options The options parameters. + */ + get( + resourceGroupName: string, + workspaceName: string, + huntId: string, + options?: HuntsGetOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { resourceGroupName, workspaceName, huntId, options }, + getOperationSpec + ); + } + + /** + * Delete a hunt. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param huntId The hunt id (GUID) + * @param options The options parameters. + */ + delete( + resourceGroupName: string, + workspaceName: string, + huntId: string, + options?: HuntsDeleteOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { resourceGroupName, workspaceName, huntId, options }, + deleteOperationSpec + ); + } + + /** + * Create or update a hunt + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param huntId The hunt id (GUID) + * @param hunt The hunt + * @param options The options parameters. + */ + createOrUpdate( + resourceGroupName: string, + workspaceName: string, + huntId: string, + hunt: Hunt, + options?: HuntsCreateOrUpdateOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { resourceGroupName, workspaceName, huntId, hunt, options }, + createOrUpdateOperationSpec + ); + } + + /** + * ListNext + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param nextLink The nextLink from the previous successful call to the List method. + * @param options The options parameters. + */ + private _listNext( + resourceGroupName: string, + workspaceName: string, + nextLink: string, + options?: HuntsListNextOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { resourceGroupName, workspaceName, nextLink, options }, + listNextOperationSpec + ); + } +} +// Operation Specifications +const serializer = coreClient.createSerializer(Mappers, /* isXml */ false); + +const listOperationSpec: coreClient.OperationSpec = { + path: + "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/hunts", + httpMethod: "GET", + responses: { + 200: { + bodyMapper: Mappers.HuntList + }, + default: { + bodyMapper: Mappers.CloudError + } + }, + queryParameters: [ + Parameters.apiVersion, + Parameters.filter, + Parameters.orderby, + Parameters.top, + Parameters.skipToken + ], + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName + ], + headerParameters: [Parameters.accept], + serializer +}; +const getOperationSpec: coreClient.OperationSpec = { + path: + "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/hunts/{huntId}", + httpMethod: "GET", + responses: { + 200: { + bodyMapper: Mappers.Hunt + }, + default: { + bodyMapper: Mappers.CloudError + } + }, + queryParameters: [Parameters.apiVersion], + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName, + Parameters.huntId + ], + headerParameters: [Parameters.accept], + serializer +}; +const deleteOperationSpec: coreClient.OperationSpec = { + path: + "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/hunts/{huntId}", + httpMethod: "DELETE", + responses: { + 200: {}, + 204: {}, + default: { + bodyMapper: Mappers.CloudError + } + }, + queryParameters: [Parameters.apiVersion], + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName, + Parameters.huntId + ], + headerParameters: [Parameters.accept], + serializer +}; +const createOrUpdateOperationSpec: coreClient.OperationSpec = { + path: + "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/hunts/{huntId}", + httpMethod: "PUT", + responses: { + 200: { + bodyMapper: Mappers.Hunt + }, + 201: { + bodyMapper: Mappers.Hunt + }, + default: { + bodyMapper: Mappers.CloudError + } + }, + requestBody: Parameters.hunt, + queryParameters: [Parameters.apiVersion], + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName, + Parameters.huntId + ], + headerParameters: [Parameters.accept, Parameters.contentType], + mediaType: "json", + serializer +}; +const listNextOperationSpec: coreClient.OperationSpec = { + path: "{nextLink}", + httpMethod: "GET", + responses: { + 200: { + bodyMapper: Mappers.HuntList + }, + default: { + bodyMapper: Mappers.CloudError + } + }, + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName, + Parameters.nextLink + ], + headerParameters: [Parameters.accept], + serializer +}; diff --git a/sdk/securityinsight/arm-securityinsight/src/operations/incidentTasks.ts b/sdk/securityinsight/arm-securityinsight/src/operations/incidentTasks.ts new file mode 100644 index 000000000000..fa1f14f92b19 --- /dev/null +++ b/sdk/securityinsight/arm-securityinsight/src/operations/incidentTasks.ts @@ -0,0 +1,370 @@ +/* + * Copyright (c) Microsoft Corporation. + * Licensed under the MIT License. + * + * Code generated by Microsoft (R) AutoRest Code Generator. + * Changes may cause incorrect behavior and will be lost if the code is regenerated. + */ + +import { PagedAsyncIterableIterator, PageSettings } from "@azure/core-paging"; +import { setContinuationToken } from "../pagingHelper"; +import { IncidentTasks } from "../operationsInterfaces"; +import * as coreClient from "@azure/core-client"; +import * as Mappers from "../models/mappers"; +import * as Parameters from "../models/parameters"; +import { SecurityInsights } from "../securityInsights"; +import { + IncidentTask, + IncidentTasksListNextOptionalParams, + IncidentTasksListOptionalParams, + IncidentTasksListResponse, + IncidentTasksGetOptionalParams, + IncidentTasksGetResponse, + IncidentTasksCreateOrUpdateOptionalParams, + IncidentTasksCreateOrUpdateResponse, + IncidentTasksDeleteOptionalParams, + IncidentTasksListNextResponse +} from "../models"; + +/// +/** Class containing IncidentTasks operations. */ +export class IncidentTasksImpl implements IncidentTasks { + private readonly client: SecurityInsights; + + /** + * Initialize a new instance of the class IncidentTasks class. + * @param client Reference to the service client + */ + constructor(client: SecurityInsights) { + this.client = client; + } + + /** + * Gets all incident tasks. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param incidentId Incident ID + * @param options The options parameters. + */ + public list( + resourceGroupName: string, + workspaceName: string, + incidentId: string, + options?: IncidentTasksListOptionalParams + ): PagedAsyncIterableIterator { + const iter = this.listPagingAll( + resourceGroupName, + workspaceName, + incidentId, + options + ); + return { + next() { + return iter.next(); + }, + [Symbol.asyncIterator]() { + return this; + }, + byPage: (settings?: PageSettings) => { + if (settings?.maxPageSize) { + throw new Error("maxPageSize is not supported by this operation."); + } + return this.listPagingPage( + resourceGroupName, + workspaceName, + incidentId, + options, + settings + ); + } + }; + } + + private async *listPagingPage( + resourceGroupName: string, + workspaceName: string, + incidentId: string, + options?: IncidentTasksListOptionalParams, + settings?: PageSettings + ): AsyncIterableIterator { + let result: IncidentTasksListResponse; + let continuationToken = settings?.continuationToken; + if (!continuationToken) { + result = await this._list( + resourceGroupName, + workspaceName, + incidentId, + options + ); + let page = result.value || []; + continuationToken = result.nextLink; + setContinuationToken(page, continuationToken); + yield page; + } + while (continuationToken) { + result = await this._listNext( + resourceGroupName, + workspaceName, + incidentId, + continuationToken, + options + ); + continuationToken = result.nextLink; + let page = result.value || []; + setContinuationToken(page, continuationToken); + yield page; + } + } + + private async *listPagingAll( + resourceGroupName: string, + workspaceName: string, + incidentId: string, + options?: IncidentTasksListOptionalParams + ): AsyncIterableIterator { + for await (const page of this.listPagingPage( + resourceGroupName, + workspaceName, + incidentId, + options + )) { + yield* page; + } + } + + /** + * Gets all incident tasks. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param incidentId Incident ID + * @param options The options parameters. + */ + private _list( + resourceGroupName: string, + workspaceName: string, + incidentId: string, + options?: IncidentTasksListOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { resourceGroupName, workspaceName, incidentId, options }, + listOperationSpec + ); + } + + /** + * Gets an incident task. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param incidentId Incident ID + * @param incidentTaskId Incident task ID + * @param options The options parameters. + */ + get( + resourceGroupName: string, + workspaceName: string, + incidentId: string, + incidentTaskId: string, + options?: IncidentTasksGetOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { resourceGroupName, workspaceName, incidentId, incidentTaskId, options }, + getOperationSpec + ); + } + + /** + * Creates or updates the incident task. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param incidentId Incident ID + * @param incidentTaskId Incident task ID + * @param incidentTask The incident task + * @param options The options parameters. + */ + createOrUpdate( + resourceGroupName: string, + workspaceName: string, + incidentId: string, + incidentTaskId: string, + incidentTask: IncidentTask, + options?: IncidentTasksCreateOrUpdateOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { + resourceGroupName, + workspaceName, + incidentId, + incidentTaskId, + incidentTask, + options + }, + createOrUpdateOperationSpec + ); + } + + /** + * Delete the incident task. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param incidentId Incident ID + * @param incidentTaskId Incident task ID + * @param options The options parameters. + */ + delete( + resourceGroupName: string, + workspaceName: string, + incidentId: string, + incidentTaskId: string, + options?: IncidentTasksDeleteOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { resourceGroupName, workspaceName, incidentId, incidentTaskId, options }, + deleteOperationSpec + ); + } + + /** + * ListNext + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param incidentId Incident ID + * @param nextLink The nextLink from the previous successful call to the List method. + * @param options The options parameters. + */ + private _listNext( + resourceGroupName: string, + workspaceName: string, + incidentId: string, + nextLink: string, + options?: IncidentTasksListNextOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { resourceGroupName, workspaceName, incidentId, nextLink, options }, + listNextOperationSpec + ); + } +} +// Operation Specifications +const serializer = coreClient.createSerializer(Mappers, /* isXml */ false); + +const listOperationSpec: coreClient.OperationSpec = { + path: + "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/incidents/{incidentId}/tasks", + httpMethod: "GET", + responses: { + 200: { + bodyMapper: Mappers.IncidentTaskList + }, + default: { + bodyMapper: Mappers.CloudError + } + }, + queryParameters: [Parameters.apiVersion], + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName, + Parameters.incidentId + ], + headerParameters: [Parameters.accept], + serializer +}; +const getOperationSpec: coreClient.OperationSpec = { + path: + "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/incidents/{incidentId}/tasks/{incidentTaskId}", + httpMethod: "GET", + responses: { + 200: { + bodyMapper: Mappers.IncidentTask + }, + default: { + bodyMapper: Mappers.CloudError + } + }, + queryParameters: [Parameters.apiVersion], + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName, + Parameters.incidentId, + Parameters.incidentTaskId + ], + headerParameters: [Parameters.accept], + serializer +}; +const createOrUpdateOperationSpec: coreClient.OperationSpec = { + path: + "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/incidents/{incidentId}/tasks/{incidentTaskId}", + httpMethod: "PUT", + responses: { + 200: { + bodyMapper: Mappers.IncidentTask + }, + 201: { + bodyMapper: Mappers.IncidentTask + }, + default: { + bodyMapper: Mappers.CloudError + } + }, + requestBody: Parameters.incidentTask, + queryParameters: [Parameters.apiVersion], + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName, + Parameters.incidentId, + Parameters.incidentTaskId + ], + headerParameters: [Parameters.accept, Parameters.contentType], + mediaType: "json", + serializer +}; +const deleteOperationSpec: coreClient.OperationSpec = { + path: + "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/incidents/{incidentId}/tasks/{incidentTaskId}", + httpMethod: "DELETE", + responses: { + 200: {}, + 204: {}, + default: { + bodyMapper: Mappers.CloudError + } + }, + queryParameters: [Parameters.apiVersion], + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName, + Parameters.incidentId, + Parameters.incidentTaskId + ], + headerParameters: [Parameters.accept], + serializer +}; +const listNextOperationSpec: coreClient.OperationSpec = { + path: "{nextLink}", + httpMethod: "GET", + responses: { + 200: { + bodyMapper: Mappers.IncidentTaskList + }, + default: { + bodyMapper: Mappers.CloudError + } + }, + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName, + Parameters.nextLink, + Parameters.incidentId + ], + headerParameters: [Parameters.accept], + serializer +}; diff --git a/sdk/securityinsight/arm-securityinsight/src/operations/incidents.ts b/sdk/securityinsight/arm-securityinsight/src/operations/incidents.ts index f4ed7f0e348b..3eda00aced3d 100644 --- a/sdk/securityinsight/arm-securityinsight/src/operations/incidents.ts +++ b/sdk/securityinsight/arm-securityinsight/src/operations/incidents.ts @@ -25,7 +25,7 @@ import { IncidentsCreateOrUpdateOptionalParams, IncidentsCreateOrUpdateResponse, IncidentsDeleteOptionalParams, - TeamProperties, + TeamInformation, IncidentsCreateTeamOptionalParams, IncidentsCreateTeamResponse, IncidentsListAlertsOptionalParams, @@ -234,7 +234,7 @@ export class IncidentsImpl implements Incidents { resourceGroupName: string, workspaceName: string, incidentId: string, - teamProperties: TeamProperties, + teamProperties: TeamInformation, options?: IncidentsCreateTeamOptionalParams ): Promise { return this.client.sendOperationRequest( @@ -336,7 +336,7 @@ const runPlaybookOperationSpec: coreClient.OperationSpec = { bodyMapper: Mappers.CloudError } }, - requestBody: Parameters.requestBody, + requestBody: Parameters.requestBody1, queryParameters: [Parameters.apiVersion], urlParameters: [ Parameters.$host, diff --git a/sdk/securityinsight/arm-securityinsight/src/operations/index.ts b/sdk/securityinsight/arm-securityinsight/src/operations/index.ts index 6f66d834535e..6aa54b7ab3dd 100644 --- a/sdk/securityinsight/arm-securityinsight/src/operations/index.ts +++ b/sdk/securityinsight/arm-securityinsight/src/operations/index.ts @@ -10,24 +10,39 @@ export * from "./alertRules"; export * from "./actions"; export * from "./alertRuleTemplates"; export * from "./automationRules"; +export * from "./entities"; export * from "./incidents"; export * from "./bookmarks"; export * from "./bookmarkRelations"; export * from "./bookmarkOperations"; +export * from "./contentPackages"; +export * from "./contentPackage"; +export * from "./productPackages"; +export * from "./productPackage"; +export * from "./productTemplates"; +export * from "./productTemplate"; +export * from "./contentTemplates"; +export * from "./contentTemplate"; export * from "./iPGeodata"; export * from "./domainWhois"; -export * from "./entities"; export * from "./entitiesGetTimeline"; export * from "./entitiesRelations"; export * from "./entityRelations"; export * from "./entityQueries"; export * from "./entityQueryTemplates"; export * from "./fileImports"; +export * from "./hunts"; +export * from "./huntRelations"; +export * from "./huntComments"; export * from "./incidentComments"; export * from "./incidentRelations"; +export * from "./incidentTasks"; export * from "./metadata"; export * from "./officeConsents"; export * from "./sentinelOnboardingStates"; +export * from "./getRecommendations"; +export * from "./get"; +export * from "./update"; export * from "./securityMLAnalyticsSettings"; export * from "./productSettings"; export * from "./sourceControlOperations"; @@ -35,8 +50,16 @@ export * from "./sourceControls"; export * from "./threatIntelligenceIndicator"; export * from "./threatIntelligenceIndicators"; export * from "./threatIntelligenceIndicatorMetrics"; +export * from "./triggeredAnalyticsRuleRunOperations"; +export * from "./getTriggeredAnalyticsRuleRuns"; +export * from "./alertRuleOperations"; export * from "./watchlists"; export * from "./watchlistItems"; +export * from "./workspaceManagerGroups"; +export * from "./workspaceManagerAssignments"; +export * from "./workspaceManagerAssignmentJobs"; +export * from "./workspaceManagerConfigurations"; +export * from "./workspaceManagerMembers"; export * from "./dataConnectors"; export * from "./dataConnectorsCheckRequirementsOperations"; export * from "./operations"; diff --git a/sdk/securityinsight/arm-securityinsight/src/operations/productPackage.ts b/sdk/securityinsight/arm-securityinsight/src/operations/productPackage.ts new file mode 100644 index 000000000000..027e50610ae4 --- /dev/null +++ b/sdk/securityinsight/arm-securityinsight/src/operations/productPackage.ts @@ -0,0 +1,75 @@ +/* + * Copyright (c) Microsoft Corporation. + * Licensed under the MIT License. + * + * Code generated by Microsoft (R) AutoRest Code Generator. + * Changes may cause incorrect behavior and will be lost if the code is regenerated. + */ + +import { ProductPackage } from "../operationsInterfaces"; +import * as coreClient from "@azure/core-client"; +import * as Mappers from "../models/mappers"; +import * as Parameters from "../models/parameters"; +import { SecurityInsights } from "../securityInsights"; +import { + ProductPackageGetOptionalParams, + ProductPackageGetResponse +} from "../models"; + +/** Class containing ProductPackage operations. */ +export class ProductPackageImpl implements ProductPackage { + private readonly client: SecurityInsights; + + /** + * Initialize a new instance of the class ProductPackage class. + * @param client Reference to the service client + */ + constructor(client: SecurityInsights) { + this.client = client; + } + + /** + * Gets a package by its identifier from the catalog. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param packageId package Id + * @param options The options parameters. + */ + get( + resourceGroupName: string, + workspaceName: string, + packageId: string, + options?: ProductPackageGetOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { resourceGroupName, workspaceName, packageId, options }, + getOperationSpec + ); + } +} +// Operation Specifications +const serializer = coreClient.createSerializer(Mappers, /* isXml */ false); + +const getOperationSpec: coreClient.OperationSpec = { + path: + "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/contentProductPackages/{packageId}", + httpMethod: "GET", + responses: { + 200: { + bodyMapper: Mappers.PackageModelAutoGenerated + }, + default: { + bodyMapper: Mappers.CloudError + } + }, + queryParameters: [Parameters.apiVersion], + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName, + Parameters.packageId + ], + headerParameters: [Parameters.accept], + serializer +}; diff --git a/sdk/securityinsight/arm-securityinsight/src/operations/productPackages.ts b/sdk/securityinsight/arm-securityinsight/src/operations/productPackages.ts new file mode 100644 index 000000000000..0997ecff5dc3 --- /dev/null +++ b/sdk/securityinsight/arm-securityinsight/src/operations/productPackages.ts @@ -0,0 +1,200 @@ +/* + * Copyright (c) Microsoft Corporation. + * Licensed under the MIT License. + * + * Code generated by Microsoft (R) AutoRest Code Generator. + * Changes may cause incorrect behavior and will be lost if the code is regenerated. + */ + +import { PagedAsyncIterableIterator, PageSettings } from "@azure/core-paging"; +import { setContinuationToken } from "../pagingHelper"; +import { ProductPackages } from "../operationsInterfaces"; +import * as coreClient from "@azure/core-client"; +import * as Mappers from "../models/mappers"; +import * as Parameters from "../models/parameters"; +import { SecurityInsights } from "../securityInsights"; +import { + PackageModelAutoGenerated, + ProductPackagesListNextOptionalParams, + ProductPackagesListOptionalParams, + ProductPackagesListResponse, + ProductPackagesListNextResponse +} from "../models"; + +/// +/** Class containing ProductPackages operations. */ +export class ProductPackagesImpl implements ProductPackages { + private readonly client: SecurityInsights; + + /** + * Initialize a new instance of the class ProductPackages class. + * @param client Reference to the service client + */ + constructor(client: SecurityInsights) { + this.client = client; + } + + /** + * Gets all packages from the catalog. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param options The options parameters. + */ + public list( + resourceGroupName: string, + workspaceName: string, + options?: ProductPackagesListOptionalParams + ): PagedAsyncIterableIterator { + const iter = this.listPagingAll(resourceGroupName, workspaceName, options); + return { + next() { + return iter.next(); + }, + [Symbol.asyncIterator]() { + return this; + }, + byPage: (settings?: PageSettings) => { + if (settings?.maxPageSize) { + throw new Error("maxPageSize is not supported by this operation."); + } + return this.listPagingPage( + resourceGroupName, + workspaceName, + options, + settings + ); + } + }; + } + + private async *listPagingPage( + resourceGroupName: string, + workspaceName: string, + options?: ProductPackagesListOptionalParams, + settings?: PageSettings + ): AsyncIterableIterator { + let result: ProductPackagesListResponse; + let continuationToken = settings?.continuationToken; + if (!continuationToken) { + result = await this._list(resourceGroupName, workspaceName, options); + let page = result.value || []; + continuationToken = result.nextLink; + setContinuationToken(page, continuationToken); + yield page; + } + while (continuationToken) { + result = await this._listNext( + resourceGroupName, + workspaceName, + continuationToken, + options + ); + continuationToken = result.nextLink; + let page = result.value || []; + setContinuationToken(page, continuationToken); + yield page; + } + } + + private async *listPagingAll( + resourceGroupName: string, + workspaceName: string, + options?: ProductPackagesListOptionalParams + ): AsyncIterableIterator { + for await (const page of this.listPagingPage( + resourceGroupName, + workspaceName, + options + )) { + yield* page; + } + } + + /** + * Gets all packages from the catalog. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param options The options parameters. + */ + private _list( + resourceGroupName: string, + workspaceName: string, + options?: ProductPackagesListOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { resourceGroupName, workspaceName, options }, + listOperationSpec + ); + } + + /** + * ListNext + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param nextLink The nextLink from the previous successful call to the List method. + * @param options The options parameters. + */ + private _listNext( + resourceGroupName: string, + workspaceName: string, + nextLink: string, + options?: ProductPackagesListNextOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { resourceGroupName, workspaceName, nextLink, options }, + listNextOperationSpec + ); + } +} +// Operation Specifications +const serializer = coreClient.createSerializer(Mappers, /* isXml */ false); + +const listOperationSpec: coreClient.OperationSpec = { + path: + "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/contentProductPackages", + httpMethod: "GET", + responses: { + 200: { + bodyMapper: Mappers.PackageListAutoGenerated + }, + default: { + bodyMapper: Mappers.CloudError + } + }, + queryParameters: [ + Parameters.apiVersion, + Parameters.filter, + Parameters.orderby, + Parameters.top, + Parameters.skipToken + ], + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName + ], + headerParameters: [Parameters.accept], + serializer +}; +const listNextOperationSpec: coreClient.OperationSpec = { + path: "{nextLink}", + httpMethod: "GET", + responses: { + 200: { + bodyMapper: Mappers.PackageListAutoGenerated + }, + default: { + bodyMapper: Mappers.CloudError + } + }, + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName, + Parameters.nextLink + ], + headerParameters: [Parameters.accept], + serializer +}; diff --git a/sdk/securityinsight/arm-securityinsight/src/operations/productTemplate.ts b/sdk/securityinsight/arm-securityinsight/src/operations/productTemplate.ts new file mode 100644 index 000000000000..192847f4c01e --- /dev/null +++ b/sdk/securityinsight/arm-securityinsight/src/operations/productTemplate.ts @@ -0,0 +1,75 @@ +/* + * Copyright (c) Microsoft Corporation. + * Licensed under the MIT License. + * + * Code generated by Microsoft (R) AutoRest Code Generator. + * Changes may cause incorrect behavior and will be lost if the code is regenerated. + */ + +import { ProductTemplate } from "../operationsInterfaces"; +import * as coreClient from "@azure/core-client"; +import * as Mappers from "../models/mappers"; +import * as Parameters from "../models/parameters"; +import { SecurityInsights } from "../securityInsights"; +import { + ProductTemplateGetOptionalParams, + ProductTemplateGetResponse +} from "../models"; + +/** Class containing ProductTemplate operations. */ +export class ProductTemplateImpl implements ProductTemplate { + private readonly client: SecurityInsights; + + /** + * Initialize a new instance of the class ProductTemplate class. + * @param client Reference to the service client + */ + constructor(client: SecurityInsights) { + this.client = client; + } + + /** + * Gets a template by its identifier. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param templateId template Id + * @param options The options parameters. + */ + get( + resourceGroupName: string, + workspaceName: string, + templateId: string, + options?: ProductTemplateGetOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { resourceGroupName, workspaceName, templateId, options }, + getOperationSpec + ); + } +} +// Operation Specifications +const serializer = coreClient.createSerializer(Mappers, /* isXml */ false); + +const getOperationSpec: coreClient.OperationSpec = { + path: + "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/contentproducttemplates/{templateId}", + httpMethod: "GET", + responses: { + 200: { + bodyMapper: Mappers.TemplateModel + }, + default: { + bodyMapper: Mappers.CloudError + } + }, + queryParameters: [Parameters.apiVersion], + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName, + Parameters.templateId + ], + headerParameters: [Parameters.accept], + serializer +}; diff --git a/sdk/securityinsight/arm-securityinsight/src/operations/productTemplates.ts b/sdk/securityinsight/arm-securityinsight/src/operations/productTemplates.ts new file mode 100644 index 000000000000..aadfd19a3ab6 --- /dev/null +++ b/sdk/securityinsight/arm-securityinsight/src/operations/productTemplates.ts @@ -0,0 +1,200 @@ +/* + * Copyright (c) Microsoft Corporation. + * Licensed under the MIT License. + * + * Code generated by Microsoft (R) AutoRest Code Generator. + * Changes may cause incorrect behavior and will be lost if the code is regenerated. + */ + +import { PagedAsyncIterableIterator, PageSettings } from "@azure/core-paging"; +import { setContinuationToken } from "../pagingHelper"; +import { ProductTemplates } from "../operationsInterfaces"; +import * as coreClient from "@azure/core-client"; +import * as Mappers from "../models/mappers"; +import * as Parameters from "../models/parameters"; +import { SecurityInsights } from "../securityInsights"; +import { + TemplateModel, + ProductTemplatesListNextOptionalParams, + ProductTemplatesListOptionalParams, + ProductTemplatesListResponse, + ProductTemplatesListNextResponse +} from "../models"; + +/// +/** Class containing ProductTemplates operations. */ +export class ProductTemplatesImpl implements ProductTemplates { + private readonly client: SecurityInsights; + + /** + * Initialize a new instance of the class ProductTemplates class. + * @param client Reference to the service client + */ + constructor(client: SecurityInsights) { + this.client = client; + } + + /** + * Gets all templates in the catalog. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param options The options parameters. + */ + public list( + resourceGroupName: string, + workspaceName: string, + options?: ProductTemplatesListOptionalParams + ): PagedAsyncIterableIterator { + const iter = this.listPagingAll(resourceGroupName, workspaceName, options); + return { + next() { + return iter.next(); + }, + [Symbol.asyncIterator]() { + return this; + }, + byPage: (settings?: PageSettings) => { + if (settings?.maxPageSize) { + throw new Error("maxPageSize is not supported by this operation."); + } + return this.listPagingPage( + resourceGroupName, + workspaceName, + options, + settings + ); + } + }; + } + + private async *listPagingPage( + resourceGroupName: string, + workspaceName: string, + options?: ProductTemplatesListOptionalParams, + settings?: PageSettings + ): AsyncIterableIterator { + let result: ProductTemplatesListResponse; + let continuationToken = settings?.continuationToken; + if (!continuationToken) { + result = await this._list(resourceGroupName, workspaceName, options); + let page = result.value || []; + continuationToken = result.nextLink; + setContinuationToken(page, continuationToken); + yield page; + } + while (continuationToken) { + result = await this._listNext( + resourceGroupName, + workspaceName, + continuationToken, + options + ); + continuationToken = result.nextLink; + let page = result.value || []; + setContinuationToken(page, continuationToken); + yield page; + } + } + + private async *listPagingAll( + resourceGroupName: string, + workspaceName: string, + options?: ProductTemplatesListOptionalParams + ): AsyncIterableIterator { + for await (const page of this.listPagingPage( + resourceGroupName, + workspaceName, + options + )) { + yield* page; + } + } + + /** + * Gets all templates in the catalog. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param options The options parameters. + */ + private _list( + resourceGroupName: string, + workspaceName: string, + options?: ProductTemplatesListOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { resourceGroupName, workspaceName, options }, + listOperationSpec + ); + } + + /** + * ListNext + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param nextLink The nextLink from the previous successful call to the List method. + * @param options The options parameters. + */ + private _listNext( + resourceGroupName: string, + workspaceName: string, + nextLink: string, + options?: ProductTemplatesListNextOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { resourceGroupName, workspaceName, nextLink, options }, + listNextOperationSpec + ); + } +} +// Operation Specifications +const serializer = coreClient.createSerializer(Mappers, /* isXml */ false); + +const listOperationSpec: coreClient.OperationSpec = { + path: + "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/contentProductTemplates", + httpMethod: "GET", + responses: { + 200: { + bodyMapper: Mappers.TemplateList + }, + default: { + bodyMapper: Mappers.CloudError + } + }, + queryParameters: [ + Parameters.apiVersion, + Parameters.filter, + Parameters.orderby, + Parameters.top, + Parameters.skipToken + ], + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName + ], + headerParameters: [Parameters.accept], + serializer +}; +const listNextOperationSpec: coreClient.OperationSpec = { + path: "{nextLink}", + httpMethod: "GET", + responses: { + 200: { + bodyMapper: Mappers.TemplateList + }, + default: { + bodyMapper: Mappers.CloudError + } + }, + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName, + Parameters.nextLink + ], + headerParameters: [Parameters.accept], + serializer +}; diff --git a/sdk/securityinsight/arm-securityinsight/src/operations/triggeredAnalyticsRuleRunOperations.ts b/sdk/securityinsight/arm-securityinsight/src/operations/triggeredAnalyticsRuleRunOperations.ts new file mode 100644 index 000000000000..2c3565718cc0 --- /dev/null +++ b/sdk/securityinsight/arm-securityinsight/src/operations/triggeredAnalyticsRuleRunOperations.ts @@ -0,0 +1,76 @@ +/* + * Copyright (c) Microsoft Corporation. + * Licensed under the MIT License. + * + * Code generated by Microsoft (R) AutoRest Code Generator. + * Changes may cause incorrect behavior and will be lost if the code is regenerated. + */ + +import { TriggeredAnalyticsRuleRunOperations } from "../operationsInterfaces"; +import * as coreClient from "@azure/core-client"; +import * as Mappers from "../models/mappers"; +import * as Parameters from "../models/parameters"; +import { SecurityInsights } from "../securityInsights"; +import { + TriggeredAnalyticsRuleRunGetOptionalParams, + TriggeredAnalyticsRuleRunGetResponse +} from "../models"; + +/** Class containing TriggeredAnalyticsRuleRunOperations operations. */ +export class TriggeredAnalyticsRuleRunOperationsImpl + implements TriggeredAnalyticsRuleRunOperations { + private readonly client: SecurityInsights; + + /** + * Initialize a new instance of the class TriggeredAnalyticsRuleRunOperations class. + * @param client Reference to the service client + */ + constructor(client: SecurityInsights) { + this.client = client; + } + + /** + * Gets the triggered analytics rule run. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param ruleRunId the triggered rule id + * @param options The options parameters. + */ + get( + resourceGroupName: string, + workspaceName: string, + ruleRunId: string, + options?: TriggeredAnalyticsRuleRunGetOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { resourceGroupName, workspaceName, ruleRunId, options }, + getOperationSpec + ); + } +} +// Operation Specifications +const serializer = coreClient.createSerializer(Mappers, /* isXml */ false); + +const getOperationSpec: coreClient.OperationSpec = { + path: + "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/triggeredAnalyticsRuleRuns/{ruleRunId}", + httpMethod: "GET", + responses: { + 200: { + bodyMapper: Mappers.TriggeredAnalyticsRuleRun + }, + default: { + bodyMapper: Mappers.CloudError + } + }, + queryParameters: [Parameters.apiVersion], + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName, + Parameters.ruleRunId + ], + headerParameters: [Parameters.accept], + serializer +}; diff --git a/sdk/securityinsight/arm-securityinsight/src/operations/update.ts b/sdk/securityinsight/arm-securityinsight/src/operations/update.ts new file mode 100644 index 000000000000..d6ff55439104 --- /dev/null +++ b/sdk/securityinsight/arm-securityinsight/src/operations/update.ts @@ -0,0 +1,180 @@ +/* + * Copyright (c) Microsoft Corporation. + * Licensed under the MIT License. + * + * Code generated by Microsoft (R) AutoRest Code Generator. + * Changes may cause incorrect behavior and will be lost if the code is regenerated. + */ + +import { Update } from "../operationsInterfaces"; +import * as coreClient from "@azure/core-client"; +import * as Mappers from "../models/mappers"; +import * as Parameters from "../models/parameters"; +import { SecurityInsights } from "../securityInsights"; +import { + SimplePollerLike, + OperationState, + createHttpPoller +} from "@azure/core-lro"; +import { createLroSpec } from "../lroImpl"; +import { + RecommendationPatch, + UpdateRecommendationOptionalParams, + UpdateRecommendationResponse +} from "../models"; + +/** Class containing Update operations. */ +export class UpdateImpl implements Update { + private readonly client: SecurityInsights; + + /** + * Initialize a new instance of the class Update class. + * @param client Reference to the service client + */ + constructor(client: SecurityInsights) { + this.client = client; + } + + /** + * Patch a recommendation. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param recommendationId Recommendation Id. + * @param recommendationPatch Recommendation Fields to Update. + * @param options The options parameters. + */ + async beginRecommendation( + resourceGroupName: string, + workspaceName: string, + recommendationId: string, + recommendationPatch: RecommendationPatch[], + options?: UpdateRecommendationOptionalParams + ): Promise< + SimplePollerLike< + OperationState, + UpdateRecommendationResponse + > + > { + const directSendOperation = async ( + args: coreClient.OperationArguments, + spec: coreClient.OperationSpec + ): Promise => { + return this.client.sendOperationRequest(args, spec); + }; + const sendOperationFn = async ( + args: coreClient.OperationArguments, + spec: coreClient.OperationSpec + ) => { + let currentRawResponse: + | coreClient.FullOperationResponse + | undefined = undefined; + const providedCallback = args.options?.onResponse; + const callback: coreClient.RawResponseCallback = ( + rawResponse: coreClient.FullOperationResponse, + flatResponse: unknown + ) => { + currentRawResponse = rawResponse; + providedCallback?.(rawResponse, flatResponse); + }; + const updatedArgs = { + ...args, + options: { + ...args.options, + onResponse: callback + } + }; + const flatResponse = await directSendOperation(updatedArgs, spec); + return { + flatResponse, + rawResponse: { + statusCode: currentRawResponse!.status, + body: currentRawResponse!.parsedBody, + headers: currentRawResponse!.headers.toJSON() + } + }; + }; + + const lro = createLroSpec({ + sendOperationFn, + args: { + resourceGroupName, + workspaceName, + recommendationId, + recommendationPatch, + options + }, + spec: recommendationOperationSpec + }); + const poller = await createHttpPoller< + UpdateRecommendationResponse, + OperationState + >(lro, { + restoreFrom: options?.resumeFrom, + intervalInMs: options?.updateIntervalInMs + }); + await poller.poll(); + return poller; + } + + /** + * Patch a recommendation. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param recommendationId Recommendation Id. + * @param recommendationPatch Recommendation Fields to Update. + * @param options The options parameters. + */ + async beginRecommendationAndWait( + resourceGroupName: string, + workspaceName: string, + recommendationId: string, + recommendationPatch: RecommendationPatch[], + options?: UpdateRecommendationOptionalParams + ): Promise { + const poller = await this.beginRecommendation( + resourceGroupName, + workspaceName, + recommendationId, + recommendationPatch, + options + ); + return poller.pollUntilDone(); + } +} +// Operation Specifications +const serializer = coreClient.createSerializer(Mappers, /* isXml */ false); + +const recommendationOperationSpec: coreClient.OperationSpec = { + path: + "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/recommendations/{recommendationId}", + httpMethod: "PATCH", + responses: { + 200: { + bodyMapper: Mappers.Recommendation + }, + 201: { + bodyMapper: Mappers.Recommendation + }, + 202: { + bodyMapper: Mappers.Recommendation + }, + 204: { + bodyMapper: Mappers.Recommendation + }, + default: { + bodyMapper: Mappers.CloudError + } + }, + requestBody: Parameters.recommendationPatch, + queryParameters: [Parameters.apiVersion], + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName, + Parameters.recommendationId + ], + headerParameters: [Parameters.accept, Parameters.contentType], + mediaType: "json", + serializer +}; diff --git a/sdk/securityinsight/arm-securityinsight/src/operations/workspaceManagerAssignmentJobs.ts b/sdk/securityinsight/arm-securityinsight/src/operations/workspaceManagerAssignmentJobs.ts new file mode 100644 index 000000000000..1f933d3ffb19 --- /dev/null +++ b/sdk/securityinsight/arm-securityinsight/src/operations/workspaceManagerAssignmentJobs.ts @@ -0,0 +1,387 @@ +/* + * Copyright (c) Microsoft Corporation. + * Licensed under the MIT License. + * + * Code generated by Microsoft (R) AutoRest Code Generator. + * Changes may cause incorrect behavior and will be lost if the code is regenerated. + */ + +import { PagedAsyncIterableIterator, PageSettings } from "@azure/core-paging"; +import { setContinuationToken } from "../pagingHelper"; +import { WorkspaceManagerAssignmentJobs } from "../operationsInterfaces"; +import * as coreClient from "@azure/core-client"; +import * as Mappers from "../models/mappers"; +import * as Parameters from "../models/parameters"; +import { SecurityInsights } from "../securityInsights"; +import { + Job, + WorkspaceManagerAssignmentJobsListNextOptionalParams, + WorkspaceManagerAssignmentJobsListOptionalParams, + WorkspaceManagerAssignmentJobsListResponse, + WorkspaceManagerAssignmentJobsCreateOptionalParams, + WorkspaceManagerAssignmentJobsCreateResponse, + WorkspaceManagerAssignmentJobsGetOptionalParams, + WorkspaceManagerAssignmentJobsGetResponse, + WorkspaceManagerAssignmentJobsDeleteOptionalParams, + WorkspaceManagerAssignmentJobsListNextResponse +} from "../models"; + +/// +/** Class containing WorkspaceManagerAssignmentJobs operations. */ +export class WorkspaceManagerAssignmentJobsImpl + implements WorkspaceManagerAssignmentJobs { + private readonly client: SecurityInsights; + + /** + * Initialize a new instance of the class WorkspaceManagerAssignmentJobs class. + * @param client Reference to the service client + */ + constructor(client: SecurityInsights) { + this.client = client; + } + + /** + * Get all jobs for the specified workspace manager assignment + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param workspaceManagerAssignmentName The name of the workspace manager assignment + * @param options The options parameters. + */ + public list( + resourceGroupName: string, + workspaceName: string, + workspaceManagerAssignmentName: string, + options?: WorkspaceManagerAssignmentJobsListOptionalParams + ): PagedAsyncIterableIterator { + const iter = this.listPagingAll( + resourceGroupName, + workspaceName, + workspaceManagerAssignmentName, + options + ); + return { + next() { + return iter.next(); + }, + [Symbol.asyncIterator]() { + return this; + }, + byPage: (settings?: PageSettings) => { + if (settings?.maxPageSize) { + throw new Error("maxPageSize is not supported by this operation."); + } + return this.listPagingPage( + resourceGroupName, + workspaceName, + workspaceManagerAssignmentName, + options, + settings + ); + } + }; + } + + private async *listPagingPage( + resourceGroupName: string, + workspaceName: string, + workspaceManagerAssignmentName: string, + options?: WorkspaceManagerAssignmentJobsListOptionalParams, + settings?: PageSettings + ): AsyncIterableIterator { + let result: WorkspaceManagerAssignmentJobsListResponse; + let continuationToken = settings?.continuationToken; + if (!continuationToken) { + result = await this._list( + resourceGroupName, + workspaceName, + workspaceManagerAssignmentName, + options + ); + let page = result.value || []; + continuationToken = result.nextLink; + setContinuationToken(page, continuationToken); + yield page; + } + while (continuationToken) { + result = await this._listNext( + resourceGroupName, + workspaceName, + workspaceManagerAssignmentName, + continuationToken, + options + ); + continuationToken = result.nextLink; + let page = result.value || []; + setContinuationToken(page, continuationToken); + yield page; + } + } + + private async *listPagingAll( + resourceGroupName: string, + workspaceName: string, + workspaceManagerAssignmentName: string, + options?: WorkspaceManagerAssignmentJobsListOptionalParams + ): AsyncIterableIterator { + for await (const page of this.listPagingPage( + resourceGroupName, + workspaceName, + workspaceManagerAssignmentName, + options + )) { + yield* page; + } + } + + /** + * Get all jobs for the specified workspace manager assignment + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param workspaceManagerAssignmentName The name of the workspace manager assignment + * @param options The options parameters. + */ + private _list( + resourceGroupName: string, + workspaceName: string, + workspaceManagerAssignmentName: string, + options?: WorkspaceManagerAssignmentJobsListOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { + resourceGroupName, + workspaceName, + workspaceManagerAssignmentName, + options + }, + listOperationSpec + ); + } + + /** + * Create a job for the specified workspace manager assignment + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param workspaceManagerAssignmentName The name of the workspace manager assignment + * @param options The options parameters. + */ + create( + resourceGroupName: string, + workspaceName: string, + workspaceManagerAssignmentName: string, + options?: WorkspaceManagerAssignmentJobsCreateOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { + resourceGroupName, + workspaceName, + workspaceManagerAssignmentName, + options + }, + createOperationSpec + ); + } + + /** + * Gets a job + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param workspaceManagerAssignmentName The name of the workspace manager assignment + * @param jobName The job name + * @param options The options parameters. + */ + get( + resourceGroupName: string, + workspaceName: string, + workspaceManagerAssignmentName: string, + jobName: string, + options?: WorkspaceManagerAssignmentJobsGetOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { + resourceGroupName, + workspaceName, + workspaceManagerAssignmentName, + jobName, + options + }, + getOperationSpec + ); + } + + /** + * Deletes the specified job from the specified workspace manager assignment + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param workspaceManagerAssignmentName The name of the workspace manager assignment + * @param jobName The job name + * @param options The options parameters. + */ + delete( + resourceGroupName: string, + workspaceName: string, + workspaceManagerAssignmentName: string, + jobName: string, + options?: WorkspaceManagerAssignmentJobsDeleteOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { + resourceGroupName, + workspaceName, + workspaceManagerAssignmentName, + jobName, + options + }, + deleteOperationSpec + ); + } + + /** + * ListNext + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param workspaceManagerAssignmentName The name of the workspace manager assignment + * @param nextLink The nextLink from the previous successful call to the List method. + * @param options The options parameters. + */ + private _listNext( + resourceGroupName: string, + workspaceName: string, + workspaceManagerAssignmentName: string, + nextLink: string, + options?: WorkspaceManagerAssignmentJobsListNextOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { + resourceGroupName, + workspaceName, + workspaceManagerAssignmentName, + nextLink, + options + }, + listNextOperationSpec + ); + } +} +// Operation Specifications +const serializer = coreClient.createSerializer(Mappers, /* isXml */ false); + +const listOperationSpec: coreClient.OperationSpec = { + path: + "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/workspaceManagerAssignments/{workspaceManagerAssignmentName}/jobs", + httpMethod: "GET", + responses: { + 200: { + bodyMapper: Mappers.JobList + }, + default: { + bodyMapper: Mappers.ErrorResponse + } + }, + queryParameters: [ + Parameters.apiVersion, + Parameters.orderby, + Parameters.top, + Parameters.skipToken + ], + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName, + Parameters.workspaceManagerAssignmentName + ], + headerParameters: [Parameters.accept], + serializer +}; +const createOperationSpec: coreClient.OperationSpec = { + path: + "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/workspaceManagerAssignments/{workspaceManagerAssignmentName}/jobs", + httpMethod: "POST", + responses: { + 200: { + bodyMapper: Mappers.Job + }, + default: { + bodyMapper: Mappers.ErrorResponse + } + }, + queryParameters: [Parameters.apiVersion], + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName, + Parameters.workspaceManagerAssignmentName + ], + headerParameters: [Parameters.accept], + serializer +}; +const getOperationSpec: coreClient.OperationSpec = { + path: + "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/workspaceManagerAssignments/{workspaceManagerAssignmentName}/jobs/{jobName}", + httpMethod: "GET", + responses: { + 200: { + bodyMapper: Mappers.Job + }, + default: { + bodyMapper: Mappers.ErrorResponse + } + }, + queryParameters: [Parameters.apiVersion], + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName, + Parameters.workspaceManagerAssignmentName, + Parameters.jobName + ], + headerParameters: [Parameters.accept], + serializer +}; +const deleteOperationSpec: coreClient.OperationSpec = { + path: + "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/workspaceManagerAssignments/{workspaceManagerAssignmentName}/jobs/{jobName}", + httpMethod: "DELETE", + responses: { + 200: {}, + 204: {}, + default: { + bodyMapper: Mappers.ErrorResponse + } + }, + queryParameters: [Parameters.apiVersion], + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName, + Parameters.workspaceManagerAssignmentName, + Parameters.jobName + ], + headerParameters: [Parameters.accept], + serializer +}; +const listNextOperationSpec: coreClient.OperationSpec = { + path: "{nextLink}", + httpMethod: "GET", + responses: { + 200: { + bodyMapper: Mappers.JobList + }, + default: { + bodyMapper: Mappers.ErrorResponse + } + }, + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName, + Parameters.nextLink, + Parameters.workspaceManagerAssignmentName + ], + headerParameters: [Parameters.accept], + serializer +}; diff --git a/sdk/securityinsight/arm-securityinsight/src/operations/workspaceManagerAssignments.ts b/sdk/securityinsight/arm-securityinsight/src/operations/workspaceManagerAssignments.ts new file mode 100644 index 000000000000..2e3b3be3faca --- /dev/null +++ b/sdk/securityinsight/arm-securityinsight/src/operations/workspaceManagerAssignments.ts @@ -0,0 +1,353 @@ +/* + * Copyright (c) Microsoft Corporation. + * Licensed under the MIT License. + * + * Code generated by Microsoft (R) AutoRest Code Generator. + * Changes may cause incorrect behavior and will be lost if the code is regenerated. + */ + +import { PagedAsyncIterableIterator, PageSettings } from "@azure/core-paging"; +import { setContinuationToken } from "../pagingHelper"; +import { WorkspaceManagerAssignments } from "../operationsInterfaces"; +import * as coreClient from "@azure/core-client"; +import * as Mappers from "../models/mappers"; +import * as Parameters from "../models/parameters"; +import { SecurityInsights } from "../securityInsights"; +import { + WorkspaceManagerAssignment, + WorkspaceManagerAssignmentsListNextOptionalParams, + WorkspaceManagerAssignmentsListOptionalParams, + WorkspaceManagerAssignmentsListResponse, + WorkspaceManagerAssignmentsGetOptionalParams, + WorkspaceManagerAssignmentsGetResponse, + WorkspaceManagerAssignmentsCreateOrUpdateOptionalParams, + WorkspaceManagerAssignmentsCreateOrUpdateResponse, + WorkspaceManagerAssignmentsDeleteOptionalParams, + WorkspaceManagerAssignmentsListNextResponse +} from "../models"; + +/// +/** Class containing WorkspaceManagerAssignments operations. */ +export class WorkspaceManagerAssignmentsImpl + implements WorkspaceManagerAssignments { + private readonly client: SecurityInsights; + + /** + * Initialize a new instance of the class WorkspaceManagerAssignments class. + * @param client Reference to the service client + */ + constructor(client: SecurityInsights) { + this.client = client; + } + + /** + * Get all workspace manager assignments for the Sentinel workspace manager. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param options The options parameters. + */ + public list( + resourceGroupName: string, + workspaceName: string, + options?: WorkspaceManagerAssignmentsListOptionalParams + ): PagedAsyncIterableIterator { + const iter = this.listPagingAll(resourceGroupName, workspaceName, options); + return { + next() { + return iter.next(); + }, + [Symbol.asyncIterator]() { + return this; + }, + byPage: (settings?: PageSettings) => { + if (settings?.maxPageSize) { + throw new Error("maxPageSize is not supported by this operation."); + } + return this.listPagingPage( + resourceGroupName, + workspaceName, + options, + settings + ); + } + }; + } + + private async *listPagingPage( + resourceGroupName: string, + workspaceName: string, + options?: WorkspaceManagerAssignmentsListOptionalParams, + settings?: PageSettings + ): AsyncIterableIterator { + let result: WorkspaceManagerAssignmentsListResponse; + let continuationToken = settings?.continuationToken; + if (!continuationToken) { + result = await this._list(resourceGroupName, workspaceName, options); + let page = result.value || []; + continuationToken = result.nextLink; + setContinuationToken(page, continuationToken); + yield page; + } + while (continuationToken) { + result = await this._listNext( + resourceGroupName, + workspaceName, + continuationToken, + options + ); + continuationToken = result.nextLink; + let page = result.value || []; + setContinuationToken(page, continuationToken); + yield page; + } + } + + private async *listPagingAll( + resourceGroupName: string, + workspaceName: string, + options?: WorkspaceManagerAssignmentsListOptionalParams + ): AsyncIterableIterator { + for await (const page of this.listPagingPage( + resourceGroupName, + workspaceName, + options + )) { + yield* page; + } + } + + /** + * Get all workspace manager assignments for the Sentinel workspace manager. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param options The options parameters. + */ + private _list( + resourceGroupName: string, + workspaceName: string, + options?: WorkspaceManagerAssignmentsListOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { resourceGroupName, workspaceName, options }, + listOperationSpec + ); + } + + /** + * Gets a workspace manager assignment + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param workspaceManagerAssignmentName The name of the workspace manager assignment + * @param options The options parameters. + */ + get( + resourceGroupName: string, + workspaceName: string, + workspaceManagerAssignmentName: string, + options?: WorkspaceManagerAssignmentsGetOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { + resourceGroupName, + workspaceName, + workspaceManagerAssignmentName, + options + }, + getOperationSpec + ); + } + + /** + * Creates or updates a workspace manager assignment. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param workspaceManagerAssignmentName The name of the workspace manager assignment + * @param workspaceManagerAssignment The workspace manager assignment + * @param options The options parameters. + */ + createOrUpdate( + resourceGroupName: string, + workspaceName: string, + workspaceManagerAssignmentName: string, + workspaceManagerAssignment: WorkspaceManagerAssignment, + options?: WorkspaceManagerAssignmentsCreateOrUpdateOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { + resourceGroupName, + workspaceName, + workspaceManagerAssignmentName, + workspaceManagerAssignment, + options + }, + createOrUpdateOperationSpec + ); + } + + /** + * Deletes a workspace manager assignment + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param workspaceManagerAssignmentName The name of the workspace manager assignment + * @param options The options parameters. + */ + delete( + resourceGroupName: string, + workspaceName: string, + workspaceManagerAssignmentName: string, + options?: WorkspaceManagerAssignmentsDeleteOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { + resourceGroupName, + workspaceName, + workspaceManagerAssignmentName, + options + }, + deleteOperationSpec + ); + } + + /** + * ListNext + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param nextLink The nextLink from the previous successful call to the List method. + * @param options The options parameters. + */ + private _listNext( + resourceGroupName: string, + workspaceName: string, + nextLink: string, + options?: WorkspaceManagerAssignmentsListNextOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { resourceGroupName, workspaceName, nextLink, options }, + listNextOperationSpec + ); + } +} +// Operation Specifications +const serializer = coreClient.createSerializer(Mappers, /* isXml */ false); + +const listOperationSpec: coreClient.OperationSpec = { + path: + "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/workspaceManagerAssignments", + httpMethod: "GET", + responses: { + 200: { + bodyMapper: Mappers.WorkspaceManagerAssignmentList + }, + default: { + bodyMapper: Mappers.ErrorResponse + } + }, + queryParameters: [ + Parameters.apiVersion, + Parameters.orderby, + Parameters.top, + Parameters.skipToken + ], + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName + ], + headerParameters: [Parameters.accept], + serializer +}; +const getOperationSpec: coreClient.OperationSpec = { + path: + "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/workspaceManagerAssignments/{workspaceManagerAssignmentName}", + httpMethod: "GET", + responses: { + 200: { + bodyMapper: Mappers.WorkspaceManagerAssignment + }, + default: { + bodyMapper: Mappers.ErrorResponse + } + }, + queryParameters: [Parameters.apiVersion], + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName, + Parameters.workspaceManagerAssignmentName + ], + headerParameters: [Parameters.accept], + serializer +}; +const createOrUpdateOperationSpec: coreClient.OperationSpec = { + path: + "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/workspaceManagerAssignments/{workspaceManagerAssignmentName}", + httpMethod: "PUT", + responses: { + 200: { + bodyMapper: Mappers.WorkspaceManagerAssignment + }, + 201: { + bodyMapper: Mappers.WorkspaceManagerAssignment + }, + default: { + bodyMapper: Mappers.ErrorResponse + } + }, + requestBody: Parameters.workspaceManagerAssignment, + queryParameters: [Parameters.apiVersion], + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName, + Parameters.workspaceManagerAssignmentName + ], + headerParameters: [Parameters.accept, Parameters.contentType], + mediaType: "json", + serializer +}; +const deleteOperationSpec: coreClient.OperationSpec = { + path: + "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/workspaceManagerAssignments/{workspaceManagerAssignmentName}", + httpMethod: "DELETE", + responses: { + 200: {}, + 204: {}, + default: { + bodyMapper: Mappers.ErrorResponse + } + }, + queryParameters: [Parameters.apiVersion], + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName, + Parameters.workspaceManagerAssignmentName + ], + headerParameters: [Parameters.accept], + serializer +}; +const listNextOperationSpec: coreClient.OperationSpec = { + path: "{nextLink}", + httpMethod: "GET", + responses: { + 200: { + bodyMapper: Mappers.WorkspaceManagerAssignmentList + }, + default: { + bodyMapper: Mappers.ErrorResponse + } + }, + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName, + Parameters.nextLink + ], + headerParameters: [Parameters.accept], + serializer +}; diff --git a/sdk/securityinsight/arm-securityinsight/src/operations/workspaceManagerConfigurations.ts b/sdk/securityinsight/arm-securityinsight/src/operations/workspaceManagerConfigurations.ts new file mode 100644 index 000000000000..a36af1270b4d --- /dev/null +++ b/sdk/securityinsight/arm-securityinsight/src/operations/workspaceManagerConfigurations.ts @@ -0,0 +1,353 @@ +/* + * Copyright (c) Microsoft Corporation. + * Licensed under the MIT License. + * + * Code generated by Microsoft (R) AutoRest Code Generator. + * Changes may cause incorrect behavior and will be lost if the code is regenerated. + */ + +import { PagedAsyncIterableIterator, PageSettings } from "@azure/core-paging"; +import { setContinuationToken } from "../pagingHelper"; +import { WorkspaceManagerConfigurations } from "../operationsInterfaces"; +import * as coreClient from "@azure/core-client"; +import * as Mappers from "../models/mappers"; +import * as Parameters from "../models/parameters"; +import { SecurityInsights } from "../securityInsights"; +import { + WorkspaceManagerConfiguration, + WorkspaceManagerConfigurationsListNextOptionalParams, + WorkspaceManagerConfigurationsListOptionalParams, + WorkspaceManagerConfigurationsListResponse, + WorkspaceManagerConfigurationsGetOptionalParams, + WorkspaceManagerConfigurationsGetResponse, + WorkspaceManagerConfigurationsDeleteOptionalParams, + WorkspaceManagerConfigurationsCreateOrUpdateOptionalParams, + WorkspaceManagerConfigurationsCreateOrUpdateResponse, + WorkspaceManagerConfigurationsListNextResponse +} from "../models"; + +/// +/** Class containing WorkspaceManagerConfigurations operations. */ +export class WorkspaceManagerConfigurationsImpl + implements WorkspaceManagerConfigurations { + private readonly client: SecurityInsights; + + /** + * Initialize a new instance of the class WorkspaceManagerConfigurations class. + * @param client Reference to the service client + */ + constructor(client: SecurityInsights) { + this.client = client; + } + + /** + * Gets all workspace manager configurations for a Sentinel workspace. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param options The options parameters. + */ + public list( + resourceGroupName: string, + workspaceName: string, + options?: WorkspaceManagerConfigurationsListOptionalParams + ): PagedAsyncIterableIterator { + const iter = this.listPagingAll(resourceGroupName, workspaceName, options); + return { + next() { + return iter.next(); + }, + [Symbol.asyncIterator]() { + return this; + }, + byPage: (settings?: PageSettings) => { + if (settings?.maxPageSize) { + throw new Error("maxPageSize is not supported by this operation."); + } + return this.listPagingPage( + resourceGroupName, + workspaceName, + options, + settings + ); + } + }; + } + + private async *listPagingPage( + resourceGroupName: string, + workspaceName: string, + options?: WorkspaceManagerConfigurationsListOptionalParams, + settings?: PageSettings + ): AsyncIterableIterator { + let result: WorkspaceManagerConfigurationsListResponse; + let continuationToken = settings?.continuationToken; + if (!continuationToken) { + result = await this._list(resourceGroupName, workspaceName, options); + let page = result.value || []; + continuationToken = result.nextLink; + setContinuationToken(page, continuationToken); + yield page; + } + while (continuationToken) { + result = await this._listNext( + resourceGroupName, + workspaceName, + continuationToken, + options + ); + continuationToken = result.nextLink; + let page = result.value || []; + setContinuationToken(page, continuationToken); + yield page; + } + } + + private async *listPagingAll( + resourceGroupName: string, + workspaceName: string, + options?: WorkspaceManagerConfigurationsListOptionalParams + ): AsyncIterableIterator { + for await (const page of this.listPagingPage( + resourceGroupName, + workspaceName, + options + )) { + yield* page; + } + } + + /** + * Gets all workspace manager configurations for a Sentinel workspace. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param options The options parameters. + */ + private _list( + resourceGroupName: string, + workspaceName: string, + options?: WorkspaceManagerConfigurationsListOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { resourceGroupName, workspaceName, options }, + listOperationSpec + ); + } + + /** + * Gets a workspace manager configuration + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param workspaceManagerConfigurationName The name of the workspace manager configuration + * @param options The options parameters. + */ + get( + resourceGroupName: string, + workspaceName: string, + workspaceManagerConfigurationName: string, + options?: WorkspaceManagerConfigurationsGetOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { + resourceGroupName, + workspaceName, + workspaceManagerConfigurationName, + options + }, + getOperationSpec + ); + } + + /** + * Deletes a workspace manager configuration + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param workspaceManagerConfigurationName The name of the workspace manager configuration + * @param options The options parameters. + */ + delete( + resourceGroupName: string, + workspaceName: string, + workspaceManagerConfigurationName: string, + options?: WorkspaceManagerConfigurationsDeleteOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { + resourceGroupName, + workspaceName, + workspaceManagerConfigurationName, + options + }, + deleteOperationSpec + ); + } + + /** + * Creates or updates a workspace manager configuration. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param workspaceManagerConfigurationName The name of the workspace manager configuration + * @param workspaceManagerConfiguration The workspace manager configuration + * @param options The options parameters. + */ + createOrUpdate( + resourceGroupName: string, + workspaceName: string, + workspaceManagerConfigurationName: string, + workspaceManagerConfiguration: WorkspaceManagerConfiguration, + options?: WorkspaceManagerConfigurationsCreateOrUpdateOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { + resourceGroupName, + workspaceName, + workspaceManagerConfigurationName, + workspaceManagerConfiguration, + options + }, + createOrUpdateOperationSpec + ); + } + + /** + * ListNext + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param nextLink The nextLink from the previous successful call to the List method. + * @param options The options parameters. + */ + private _listNext( + resourceGroupName: string, + workspaceName: string, + nextLink: string, + options?: WorkspaceManagerConfigurationsListNextOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { resourceGroupName, workspaceName, nextLink, options }, + listNextOperationSpec + ); + } +} +// Operation Specifications +const serializer = coreClient.createSerializer(Mappers, /* isXml */ false); + +const listOperationSpec: coreClient.OperationSpec = { + path: + "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/workspaceManagerConfigurations", + httpMethod: "GET", + responses: { + 200: { + bodyMapper: Mappers.WorkspaceManagerConfigurationList + }, + default: { + bodyMapper: Mappers.ErrorResponse + } + }, + queryParameters: [ + Parameters.apiVersion, + Parameters.orderby, + Parameters.top, + Parameters.skipToken + ], + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName + ], + headerParameters: [Parameters.accept], + serializer +}; +const getOperationSpec: coreClient.OperationSpec = { + path: + "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/workspaceManagerConfigurations/{workspaceManagerConfigurationName}", + httpMethod: "GET", + responses: { + 200: { + bodyMapper: Mappers.WorkspaceManagerConfiguration + }, + default: { + bodyMapper: Mappers.ErrorResponse + } + }, + queryParameters: [Parameters.apiVersion], + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName, + Parameters.workspaceManagerConfigurationName + ], + headerParameters: [Parameters.accept], + serializer +}; +const deleteOperationSpec: coreClient.OperationSpec = { + path: + "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/workspaceManagerConfigurations/{workspaceManagerConfigurationName}", + httpMethod: "DELETE", + responses: { + 200: {}, + 204: {}, + default: { + bodyMapper: Mappers.ErrorResponse + } + }, + queryParameters: [Parameters.apiVersion], + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName, + Parameters.workspaceManagerConfigurationName + ], + headerParameters: [Parameters.accept], + serializer +}; +const createOrUpdateOperationSpec: coreClient.OperationSpec = { + path: + "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/workspaceManagerConfigurations/{workspaceManagerConfigurationName}", + httpMethod: "PUT", + responses: { + 200: { + bodyMapper: Mappers.WorkspaceManagerConfiguration + }, + 201: { + bodyMapper: Mappers.WorkspaceManagerConfiguration + }, + default: { + bodyMapper: Mappers.ErrorResponse + } + }, + requestBody: Parameters.workspaceManagerConfiguration, + queryParameters: [Parameters.apiVersion], + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName, + Parameters.workspaceManagerConfigurationName + ], + headerParameters: [Parameters.accept, Parameters.contentType], + mediaType: "json", + serializer +}; +const listNextOperationSpec: coreClient.OperationSpec = { + path: "{nextLink}", + httpMethod: "GET", + responses: { + 200: { + bodyMapper: Mappers.WorkspaceManagerConfigurationList + }, + default: { + bodyMapper: Mappers.ErrorResponse + } + }, + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName, + Parameters.nextLink + ], + headerParameters: [Parameters.accept], + serializer +}; diff --git a/sdk/securityinsight/arm-securityinsight/src/operations/workspaceManagerGroups.ts b/sdk/securityinsight/arm-securityinsight/src/operations/workspaceManagerGroups.ts new file mode 100644 index 000000000000..c5783093b8dc --- /dev/null +++ b/sdk/securityinsight/arm-securityinsight/src/operations/workspaceManagerGroups.ts @@ -0,0 +1,342 @@ +/* + * Copyright (c) Microsoft Corporation. + * Licensed under the MIT License. + * + * Code generated by Microsoft (R) AutoRest Code Generator. + * Changes may cause incorrect behavior and will be lost if the code is regenerated. + */ + +import { PagedAsyncIterableIterator, PageSettings } from "@azure/core-paging"; +import { setContinuationToken } from "../pagingHelper"; +import { WorkspaceManagerGroups } from "../operationsInterfaces"; +import * as coreClient from "@azure/core-client"; +import * as Mappers from "../models/mappers"; +import * as Parameters from "../models/parameters"; +import { SecurityInsights } from "../securityInsights"; +import { + WorkspaceManagerGroup, + WorkspaceManagerGroupsListNextOptionalParams, + WorkspaceManagerGroupsListOptionalParams, + WorkspaceManagerGroupsListResponse, + WorkspaceManagerGroupsGetOptionalParams, + WorkspaceManagerGroupsGetResponse, + WorkspaceManagerGroupsCreateOrUpdateOptionalParams, + WorkspaceManagerGroupsCreateOrUpdateResponse, + WorkspaceManagerGroupsDeleteOptionalParams, + WorkspaceManagerGroupsListNextResponse +} from "../models"; + +/// +/** Class containing WorkspaceManagerGroups operations. */ +export class WorkspaceManagerGroupsImpl implements WorkspaceManagerGroups { + private readonly client: SecurityInsights; + + /** + * Initialize a new instance of the class WorkspaceManagerGroups class. + * @param client Reference to the service client + */ + constructor(client: SecurityInsights) { + this.client = client; + } + + /** + * Gets all workspace manager groups in the Sentinel workspace manager + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param options The options parameters. + */ + public list( + resourceGroupName: string, + workspaceName: string, + options?: WorkspaceManagerGroupsListOptionalParams + ): PagedAsyncIterableIterator { + const iter = this.listPagingAll(resourceGroupName, workspaceName, options); + return { + next() { + return iter.next(); + }, + [Symbol.asyncIterator]() { + return this; + }, + byPage: (settings?: PageSettings) => { + if (settings?.maxPageSize) { + throw new Error("maxPageSize is not supported by this operation."); + } + return this.listPagingPage( + resourceGroupName, + workspaceName, + options, + settings + ); + } + }; + } + + private async *listPagingPage( + resourceGroupName: string, + workspaceName: string, + options?: WorkspaceManagerGroupsListOptionalParams, + settings?: PageSettings + ): AsyncIterableIterator { + let result: WorkspaceManagerGroupsListResponse; + let continuationToken = settings?.continuationToken; + if (!continuationToken) { + result = await this._list(resourceGroupName, workspaceName, options); + let page = result.value || []; + continuationToken = result.nextLink; + setContinuationToken(page, continuationToken); + yield page; + } + while (continuationToken) { + result = await this._listNext( + resourceGroupName, + workspaceName, + continuationToken, + options + ); + continuationToken = result.nextLink; + let page = result.value || []; + setContinuationToken(page, continuationToken); + yield page; + } + } + + private async *listPagingAll( + resourceGroupName: string, + workspaceName: string, + options?: WorkspaceManagerGroupsListOptionalParams + ): AsyncIterableIterator { + for await (const page of this.listPagingPage( + resourceGroupName, + workspaceName, + options + )) { + yield* page; + } + } + + /** + * Gets all workspace manager groups in the Sentinel workspace manager + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param options The options parameters. + */ + private _list( + resourceGroupName: string, + workspaceName: string, + options?: WorkspaceManagerGroupsListOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { resourceGroupName, workspaceName, options }, + listOperationSpec + ); + } + + /** + * Gets a workspace manager group + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param workspaceManagerGroupName The name of the workspace manager group + * @param options The options parameters. + */ + get( + resourceGroupName: string, + workspaceName: string, + workspaceManagerGroupName: string, + options?: WorkspaceManagerGroupsGetOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { resourceGroupName, workspaceName, workspaceManagerGroupName, options }, + getOperationSpec + ); + } + + /** + * Creates or updates a workspace manager group. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param workspaceManagerGroupName The name of the workspace manager group + * @param workspaceManagerGroup The workspace manager group object + * @param options The options parameters. + */ + createOrUpdate( + resourceGroupName: string, + workspaceName: string, + workspaceManagerGroupName: string, + workspaceManagerGroup: WorkspaceManagerGroup, + options?: WorkspaceManagerGroupsCreateOrUpdateOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { + resourceGroupName, + workspaceName, + workspaceManagerGroupName, + workspaceManagerGroup, + options + }, + createOrUpdateOperationSpec + ); + } + + /** + * Deletes a workspace manager group + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param workspaceManagerGroupName The name of the workspace manager group + * @param options The options parameters. + */ + delete( + resourceGroupName: string, + workspaceName: string, + workspaceManagerGroupName: string, + options?: WorkspaceManagerGroupsDeleteOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { resourceGroupName, workspaceName, workspaceManagerGroupName, options }, + deleteOperationSpec + ); + } + + /** + * ListNext + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param nextLink The nextLink from the previous successful call to the List method. + * @param options The options parameters. + */ + private _listNext( + resourceGroupName: string, + workspaceName: string, + nextLink: string, + options?: WorkspaceManagerGroupsListNextOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { resourceGroupName, workspaceName, nextLink, options }, + listNextOperationSpec + ); + } +} +// Operation Specifications +const serializer = coreClient.createSerializer(Mappers, /* isXml */ false); + +const listOperationSpec: coreClient.OperationSpec = { + path: + "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/workspaceManagerGroups", + httpMethod: "GET", + responses: { + 200: { + bodyMapper: Mappers.WorkspaceManagerGroupList + }, + default: { + bodyMapper: Mappers.ErrorResponse + } + }, + queryParameters: [ + Parameters.apiVersion, + Parameters.orderby, + Parameters.top, + Parameters.skipToken + ], + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName + ], + headerParameters: [Parameters.accept], + serializer +}; +const getOperationSpec: coreClient.OperationSpec = { + path: + "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/workspaceManagerGroups/{workspaceManagerGroupName}", + httpMethod: "GET", + responses: { + 200: { + bodyMapper: Mappers.WorkspaceManagerGroup + }, + default: { + bodyMapper: Mappers.ErrorResponse + } + }, + queryParameters: [Parameters.apiVersion], + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName, + Parameters.workspaceManagerGroupName + ], + headerParameters: [Parameters.accept], + serializer +}; +const createOrUpdateOperationSpec: coreClient.OperationSpec = { + path: + "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/workspaceManagerGroups/{workspaceManagerGroupName}", + httpMethod: "PUT", + responses: { + 200: { + bodyMapper: Mappers.WorkspaceManagerGroup + }, + 201: { + bodyMapper: Mappers.WorkspaceManagerGroup + }, + default: { + bodyMapper: Mappers.ErrorResponse + } + }, + requestBody: Parameters.workspaceManagerGroup, + queryParameters: [Parameters.apiVersion], + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName, + Parameters.workspaceManagerGroupName + ], + headerParameters: [Parameters.accept, Parameters.contentType], + mediaType: "json", + serializer +}; +const deleteOperationSpec: coreClient.OperationSpec = { + path: + "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/workspaceManagerGroups/{workspaceManagerGroupName}", + httpMethod: "DELETE", + responses: { + 200: {}, + 204: {}, + default: { + bodyMapper: Mappers.ErrorResponse + } + }, + queryParameters: [Parameters.apiVersion], + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName, + Parameters.workspaceManagerGroupName + ], + headerParameters: [Parameters.accept], + serializer +}; +const listNextOperationSpec: coreClient.OperationSpec = { + path: "{nextLink}", + httpMethod: "GET", + responses: { + 200: { + bodyMapper: Mappers.WorkspaceManagerGroupList + }, + default: { + bodyMapper: Mappers.ErrorResponse + } + }, + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName, + Parameters.nextLink + ], + headerParameters: [Parameters.accept], + serializer +}; diff --git a/sdk/securityinsight/arm-securityinsight/src/operations/workspaceManagerMembers.ts b/sdk/securityinsight/arm-securityinsight/src/operations/workspaceManagerMembers.ts new file mode 100644 index 000000000000..225d3d113c87 --- /dev/null +++ b/sdk/securityinsight/arm-securityinsight/src/operations/workspaceManagerMembers.ts @@ -0,0 +1,342 @@ +/* + * Copyright (c) Microsoft Corporation. + * Licensed under the MIT License. + * + * Code generated by Microsoft (R) AutoRest Code Generator. + * Changes may cause incorrect behavior and will be lost if the code is regenerated. + */ + +import { PagedAsyncIterableIterator, PageSettings } from "@azure/core-paging"; +import { setContinuationToken } from "../pagingHelper"; +import { WorkspaceManagerMembers } from "../operationsInterfaces"; +import * as coreClient from "@azure/core-client"; +import * as Mappers from "../models/mappers"; +import * as Parameters from "../models/parameters"; +import { SecurityInsights } from "../securityInsights"; +import { + WorkspaceManagerMember, + WorkspaceManagerMembersListNextOptionalParams, + WorkspaceManagerMembersListOptionalParams, + WorkspaceManagerMembersListResponse, + WorkspaceManagerMembersGetOptionalParams, + WorkspaceManagerMembersGetResponse, + WorkspaceManagerMembersCreateOrUpdateOptionalParams, + WorkspaceManagerMembersCreateOrUpdateResponse, + WorkspaceManagerMembersDeleteOptionalParams, + WorkspaceManagerMembersListNextResponse +} from "../models"; + +/// +/** Class containing WorkspaceManagerMembers operations. */ +export class WorkspaceManagerMembersImpl implements WorkspaceManagerMembers { + private readonly client: SecurityInsights; + + /** + * Initialize a new instance of the class WorkspaceManagerMembers class. + * @param client Reference to the service client + */ + constructor(client: SecurityInsights) { + this.client = client; + } + + /** + * Gets all workspace manager members that exist for the given Sentinel workspace manager + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param options The options parameters. + */ + public list( + resourceGroupName: string, + workspaceName: string, + options?: WorkspaceManagerMembersListOptionalParams + ): PagedAsyncIterableIterator { + const iter = this.listPagingAll(resourceGroupName, workspaceName, options); + return { + next() { + return iter.next(); + }, + [Symbol.asyncIterator]() { + return this; + }, + byPage: (settings?: PageSettings) => { + if (settings?.maxPageSize) { + throw new Error("maxPageSize is not supported by this operation."); + } + return this.listPagingPage( + resourceGroupName, + workspaceName, + options, + settings + ); + } + }; + } + + private async *listPagingPage( + resourceGroupName: string, + workspaceName: string, + options?: WorkspaceManagerMembersListOptionalParams, + settings?: PageSettings + ): AsyncIterableIterator { + let result: WorkspaceManagerMembersListResponse; + let continuationToken = settings?.continuationToken; + if (!continuationToken) { + result = await this._list(resourceGroupName, workspaceName, options); + let page = result.value || []; + continuationToken = result.nextLink; + setContinuationToken(page, continuationToken); + yield page; + } + while (continuationToken) { + result = await this._listNext( + resourceGroupName, + workspaceName, + continuationToken, + options + ); + continuationToken = result.nextLink; + let page = result.value || []; + setContinuationToken(page, continuationToken); + yield page; + } + } + + private async *listPagingAll( + resourceGroupName: string, + workspaceName: string, + options?: WorkspaceManagerMembersListOptionalParams + ): AsyncIterableIterator { + for await (const page of this.listPagingPage( + resourceGroupName, + workspaceName, + options + )) { + yield* page; + } + } + + /** + * Gets all workspace manager members that exist for the given Sentinel workspace manager + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param options The options parameters. + */ + private _list( + resourceGroupName: string, + workspaceName: string, + options?: WorkspaceManagerMembersListOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { resourceGroupName, workspaceName, options }, + listOperationSpec + ); + } + + /** + * Gets a workspace manager member + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param workspaceManagerMemberName The name of the workspace manager member + * @param options The options parameters. + */ + get( + resourceGroupName: string, + workspaceName: string, + workspaceManagerMemberName: string, + options?: WorkspaceManagerMembersGetOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { resourceGroupName, workspaceName, workspaceManagerMemberName, options }, + getOperationSpec + ); + } + + /** + * Creates or updates a workspace manager member + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param workspaceManagerMemberName The name of the workspace manager member + * @param workspaceManagerMember The workspace manager member object + * @param options The options parameters. + */ + createOrUpdate( + resourceGroupName: string, + workspaceName: string, + workspaceManagerMemberName: string, + workspaceManagerMember: WorkspaceManagerMember, + options?: WorkspaceManagerMembersCreateOrUpdateOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { + resourceGroupName, + workspaceName, + workspaceManagerMemberName, + workspaceManagerMember, + options + }, + createOrUpdateOperationSpec + ); + } + + /** + * Deletes a workspace manager member + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param workspaceManagerMemberName The name of the workspace manager member + * @param options The options parameters. + */ + delete( + resourceGroupName: string, + workspaceName: string, + workspaceManagerMemberName: string, + options?: WorkspaceManagerMembersDeleteOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { resourceGroupName, workspaceName, workspaceManagerMemberName, options }, + deleteOperationSpec + ); + } + + /** + * ListNext + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param nextLink The nextLink from the previous successful call to the List method. + * @param options The options parameters. + */ + private _listNext( + resourceGroupName: string, + workspaceName: string, + nextLink: string, + options?: WorkspaceManagerMembersListNextOptionalParams + ): Promise { + return this.client.sendOperationRequest( + { resourceGroupName, workspaceName, nextLink, options }, + listNextOperationSpec + ); + } +} +// Operation Specifications +const serializer = coreClient.createSerializer(Mappers, /* isXml */ false); + +const listOperationSpec: coreClient.OperationSpec = { + path: + "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/workspaceManagerMembers/", + httpMethod: "GET", + responses: { + 200: { + bodyMapper: Mappers.WorkspaceManagerMembersList + }, + default: { + bodyMapper: Mappers.ErrorResponse + } + }, + queryParameters: [ + Parameters.apiVersion, + Parameters.orderby, + Parameters.top, + Parameters.skipToken + ], + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName + ], + headerParameters: [Parameters.accept], + serializer +}; +const getOperationSpec: coreClient.OperationSpec = { + path: + "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/workspaceManagerMembers/{workspaceManagerMemberName}", + httpMethod: "GET", + responses: { + 200: { + bodyMapper: Mappers.WorkspaceManagerMember + }, + default: { + bodyMapper: Mappers.ErrorResponse + } + }, + queryParameters: [Parameters.apiVersion], + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName, + Parameters.workspaceManagerMemberName + ], + headerParameters: [Parameters.accept], + serializer +}; +const createOrUpdateOperationSpec: coreClient.OperationSpec = { + path: + "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/workspaceManagerMembers/{workspaceManagerMemberName}", + httpMethod: "PUT", + responses: { + 200: { + bodyMapper: Mappers.WorkspaceManagerMember + }, + 201: { + bodyMapper: Mappers.WorkspaceManagerMember + }, + default: { + bodyMapper: Mappers.ErrorResponse + } + }, + requestBody: Parameters.workspaceManagerMember, + queryParameters: [Parameters.apiVersion], + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName, + Parameters.workspaceManagerMemberName + ], + headerParameters: [Parameters.accept, Parameters.contentType], + mediaType: "json", + serializer +}; +const deleteOperationSpec: coreClient.OperationSpec = { + path: + "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/workspaceManagerMembers/{workspaceManagerMemberName}", + httpMethod: "DELETE", + responses: { + 200: {}, + 204: {}, + default: { + bodyMapper: Mappers.ErrorResponse + } + }, + queryParameters: [Parameters.apiVersion], + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName, + Parameters.workspaceManagerMemberName + ], + headerParameters: [Parameters.accept], + serializer +}; +const listNextOperationSpec: coreClient.OperationSpec = { + path: "{nextLink}", + httpMethod: "GET", + responses: { + 200: { + bodyMapper: Mappers.WorkspaceManagerMembersList + }, + default: { + bodyMapper: Mappers.ErrorResponse + } + }, + urlParameters: [ + Parameters.$host, + Parameters.subscriptionId, + Parameters.resourceGroupName, + Parameters.workspaceName, + Parameters.nextLink + ], + headerParameters: [Parameters.accept], + serializer +}; diff --git a/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/alertRuleOperations.ts b/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/alertRuleOperations.ts new file mode 100644 index 000000000000..65409feac5fa --- /dev/null +++ b/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/alertRuleOperations.ts @@ -0,0 +1,53 @@ +/* + * Copyright (c) Microsoft Corporation. + * Licensed under the MIT License. + * + * Code generated by Microsoft (R) AutoRest Code Generator. + * Changes may cause incorrect behavior and will be lost if the code is regenerated. + */ + +import { SimplePollerLike, OperationState } from "@azure/core-lro"; +import { + AnalyticsRuleRunTrigger, + AlertRuleTriggerRuleRunOptionalParams, + AlertRuleTriggerRuleRunResponse +} from "../models"; + +/** Interface representing a AlertRuleOperations. */ +export interface AlertRuleOperations { + /** + * triggers analytics rule run + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param ruleId Alert rule ID + * @param analyticsRuleRunTriggerParameter The Analytics Rule Run Trigger parameter + * @param options The options parameters. + */ + beginTriggerRuleRun( + resourceGroupName: string, + workspaceName: string, + ruleId: string, + analyticsRuleRunTriggerParameter: AnalyticsRuleRunTrigger, + options?: AlertRuleTriggerRuleRunOptionalParams + ): Promise< + SimplePollerLike< + OperationState, + AlertRuleTriggerRuleRunResponse + > + >; + /** + * triggers analytics rule run + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param ruleId Alert rule ID + * @param analyticsRuleRunTriggerParameter The Analytics Rule Run Trigger parameter + * @param options The options parameters. + */ + beginTriggerRuleRunAndWait( + resourceGroupName: string, + workspaceName: string, + ruleId: string, + analyticsRuleRunTriggerParameter: AnalyticsRuleRunTrigger, + options?: AlertRuleTriggerRuleRunOptionalParams + ): Promise; +} diff --git a/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/contentPackage.ts b/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/contentPackage.ts new file mode 100644 index 000000000000..164dee4d9d59 --- /dev/null +++ b/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/contentPackage.ts @@ -0,0 +1,46 @@ +/* + * Copyright (c) Microsoft Corporation. + * Licensed under the MIT License. + * + * Code generated by Microsoft (R) AutoRest Code Generator. + * Changes may cause incorrect behavior and will be lost if the code is regenerated. + */ + +import { + PackageModel, + ContentPackageInstallOptionalParams, + ContentPackageInstallResponse, + ContentPackageUninstallOptionalParams +} from "../models"; + +/** Interface representing a ContentPackage. */ +export interface ContentPackage { + /** + * Install a package to the workspace. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param packageId package Id + * @param packageInstallationProperties Package installation properties + * @param options The options parameters. + */ + install( + resourceGroupName: string, + workspaceName: string, + packageId: string, + packageInstallationProperties: PackageModel, + options?: ContentPackageInstallOptionalParams + ): Promise; + /** + * Uninstall a package from the workspace. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param packageId package Id + * @param options The options parameters. + */ + uninstall( + resourceGroupName: string, + workspaceName: string, + packageId: string, + options?: ContentPackageUninstallOptionalParams + ): Promise; +} diff --git a/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/contentPackages.ts b/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/contentPackages.ts new file mode 100644 index 000000000000..7eb1124132b5 --- /dev/null +++ b/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/contentPackages.ts @@ -0,0 +1,44 @@ +/* + * Copyright (c) Microsoft Corporation. + * Licensed under the MIT License. + * + * Code generated by Microsoft (R) AutoRest Code Generator. + * Changes may cause incorrect behavior and will be lost if the code is regenerated. + */ + +import { PagedAsyncIterableIterator } from "@azure/core-paging"; +import { + PackageModel, + ContentPackagesListOptionalParams, + ContentPackagesGetOptionalParams, + ContentPackagesGetResponse +} from "../models"; + +/// +/** Interface representing a ContentPackages. */ +export interface ContentPackages { + /** + * Gets all installed packages. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param options The options parameters. + */ + list( + resourceGroupName: string, + workspaceName: string, + options?: ContentPackagesListOptionalParams + ): PagedAsyncIterableIterator; + /** + * Gets an installed packages by its id. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param packageId package Id + * @param options The options parameters. + */ + get( + resourceGroupName: string, + workspaceName: string, + packageId: string, + options?: ContentPackagesGetOptionalParams + ): Promise; +} diff --git a/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/contentTemplate.ts b/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/contentTemplate.ts new file mode 100644 index 000000000000..3a98bb06cc92 --- /dev/null +++ b/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/contentTemplate.ts @@ -0,0 +1,61 @@ +/* + * Copyright (c) Microsoft Corporation. + * Licensed under the MIT License. + * + * Code generated by Microsoft (R) AutoRest Code Generator. + * Changes may cause incorrect behavior and will be lost if the code is regenerated. + */ + +import { + TemplateModelAutoGenerated, + ContentTemplateInstallOptionalParams, + ContentTemplateInstallResponse, + ContentTemplateGetOptionalParams, + ContentTemplateGetResponse, + ContentTemplateDeleteOptionalParams +} from "../models"; + +/** Interface representing a ContentTemplate. */ +export interface ContentTemplate { + /** + * Install a template. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param templateId template Id + * @param templateInstallationProperties Template installation properties + * @param options The options parameters. + */ + install( + resourceGroupName: string, + workspaceName: string, + templateId: string, + templateInstallationProperties: TemplateModelAutoGenerated, + options?: ContentTemplateInstallOptionalParams + ): Promise; + /** + * Gets a template byt its identifier. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param templateId template Id + * @param options The options parameters. + */ + get( + resourceGroupName: string, + workspaceName: string, + templateId: string, + options?: ContentTemplateGetOptionalParams + ): Promise; + /** + * Delete an installed template. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param templateId template Id + * @param options The options parameters. + */ + delete( + resourceGroupName: string, + workspaceName: string, + templateId: string, + options?: ContentTemplateDeleteOptionalParams + ): Promise; +} diff --git a/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/contentTemplates.ts b/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/contentTemplates.ts new file mode 100644 index 000000000000..eab8715f2c8d --- /dev/null +++ b/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/contentTemplates.ts @@ -0,0 +1,29 @@ +/* + * Copyright (c) Microsoft Corporation. + * Licensed under the MIT License. + * + * Code generated by Microsoft (R) AutoRest Code Generator. + * Changes may cause incorrect behavior and will be lost if the code is regenerated. + */ + +import { PagedAsyncIterableIterator } from "@azure/core-paging"; +import { + TemplateModelAutoGenerated, + ContentTemplatesListOptionalParams +} from "../models"; + +/// +/** Interface representing a ContentTemplates. */ +export interface ContentTemplates { + /** + * Gets all installed templates. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param options The options parameters. + */ + list( + resourceGroupName: string, + workspaceName: string, + options?: ContentTemplatesListOptionalParams + ): PagedAsyncIterableIterator; +} diff --git a/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/entities.ts b/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/entities.ts index ac24d1939afa..4a8ae16ec998 100644 --- a/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/entities.ts +++ b/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/entities.ts @@ -10,6 +10,7 @@ import { PagedAsyncIterableIterator } from "@azure/core-paging"; import { EntityUnion, EntitiesListOptionalParams, + EntitiesRunPlaybookOptionalParams, EntitiesGetOptionalParams, EntitiesGetResponse, EntityExpandParameters, @@ -37,6 +38,19 @@ export interface Entities { workspaceName: string, options?: EntitiesListOptionalParams ): PagedAsyncIterableIterator; + /** + * Triggers playbook on a specific entity. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param entityIdentifier Entity identifier. + * @param options The options parameters. + */ + runPlaybook( + resourceGroupName: string, + workspaceName: string, + entityIdentifier: string, + options?: EntitiesRunPlaybookOptionalParams + ): Promise; /** * Gets an entity. * @param resourceGroupName The name of the resource group. The name is case insensitive. diff --git a/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/fileImports.ts b/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/fileImports.ts index 4cd0209b551b..c25bcdcbf704 100644 --- a/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/fileImports.ts +++ b/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/fileImports.ts @@ -7,7 +7,7 @@ */ import { PagedAsyncIterableIterator } from "@azure/core-paging"; -import { PollerLike, PollOperationState } from "@azure/core-lro"; +import { SimplePollerLike, OperationState } from "@azure/core-lro"; import { FileImport, FileImportsListOptionalParams, @@ -74,8 +74,8 @@ export interface FileImports { fileImportId: string, options?: FileImportsDeleteOptionalParams ): Promise< - PollerLike< - PollOperationState, + SimplePollerLike< + OperationState, FileImportsDeleteResponse > >; diff --git a/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/get.ts b/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/get.ts new file mode 100644 index 000000000000..8384596c454c --- /dev/null +++ b/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/get.ts @@ -0,0 +1,29 @@ +/* + * Copyright (c) Microsoft Corporation. + * Licensed under the MIT License. + * + * Code generated by Microsoft (R) AutoRest Code Generator. + * Changes may cause incorrect behavior and will be lost if the code is regenerated. + */ + +import { + GetSingleRecommendationOptionalParams, + GetSingleRecommendationResponse +} from "../models"; + +/** Interface representing a Get. */ +export interface Get { + /** + * Gets a recommendation by its id. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param recommendationId Recommendation Id. + * @param options The options parameters. + */ + singleRecommendation( + resourceGroupName: string, + workspaceName: string, + recommendationId: string, + options?: GetSingleRecommendationOptionalParams + ): Promise; +} diff --git a/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/getRecommendations.ts b/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/getRecommendations.ts new file mode 100644 index 000000000000..3c68d7feb9c2 --- /dev/null +++ b/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/getRecommendations.ts @@ -0,0 +1,27 @@ +/* + * Copyright (c) Microsoft Corporation. + * Licensed under the MIT License. + * + * Code generated by Microsoft (R) AutoRest Code Generator. + * Changes may cause incorrect behavior and will be lost if the code is regenerated. + */ + +import { + GetRecommendationsListOptionalParams, + GetRecommendationsListResponse +} from "../models"; + +/** Interface representing a GetRecommendations. */ +export interface GetRecommendations { + /** + * Gets a list of all recommendations. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param options The options parameters. + */ + list( + resourceGroupName: string, + workspaceName: string, + options?: GetRecommendationsListOptionalParams + ): Promise; +} diff --git a/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/getTriggeredAnalyticsRuleRuns.ts b/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/getTriggeredAnalyticsRuleRuns.ts new file mode 100644 index 000000000000..f1c077beeeaa --- /dev/null +++ b/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/getTriggeredAnalyticsRuleRuns.ts @@ -0,0 +1,29 @@ +/* + * Copyright (c) Microsoft Corporation. + * Licensed under the MIT License. + * + * Code generated by Microsoft (R) AutoRest Code Generator. + * Changes may cause incorrect behavior and will be lost if the code is regenerated. + */ + +import { PagedAsyncIterableIterator } from "@azure/core-paging"; +import { + TriggeredAnalyticsRuleRun, + GetTriggeredAnalyticsRuleRunsListOptionalParams +} from "../models"; + +/// +/** Interface representing a GetTriggeredAnalyticsRuleRuns. */ +export interface GetTriggeredAnalyticsRuleRuns { + /** + * Gets the triggered analytics rule runs. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param options The options parameters. + */ + list( + resourceGroupName: string, + workspaceName: string, + options?: GetTriggeredAnalyticsRuleRunsListOptionalParams + ): PagedAsyncIterableIterator; +} diff --git a/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/huntComments.ts b/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/huntComments.ts new file mode 100644 index 000000000000..97f77b87fa15 --- /dev/null +++ b/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/huntComments.ts @@ -0,0 +1,83 @@ +/* + * Copyright (c) Microsoft Corporation. + * Licensed under the MIT License. + * + * Code generated by Microsoft (R) AutoRest Code Generator. + * Changes may cause incorrect behavior and will be lost if the code is regenerated. + */ + +import { PagedAsyncIterableIterator } from "@azure/core-paging"; +import { + HuntComment, + HuntCommentsListOptionalParams, + HuntCommentsGetOptionalParams, + HuntCommentsGetResponse, + HuntCommentsDeleteOptionalParams, + HuntCommentsCreateOrUpdateOptionalParams, + HuntCommentsCreateOrUpdateResponse +} from "../models"; + +/// +/** Interface representing a HuntComments. */ +export interface HuntComments { + /** + * Gets all hunt comments + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param huntId The hunt id (GUID) + * @param options The options parameters. + */ + list( + resourceGroupName: string, + workspaceName: string, + huntId: string, + options?: HuntCommentsListOptionalParams + ): PagedAsyncIterableIterator; + /** + * Gets a hunt comment + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param huntId The hunt id (GUID) + * @param huntCommentId The hunt comment id (GUID) + * @param options The options parameters. + */ + get( + resourceGroupName: string, + workspaceName: string, + huntId: string, + huntCommentId: string, + options?: HuntCommentsGetOptionalParams + ): Promise; + /** + * Delete a hunt comment. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param huntId The hunt id (GUID) + * @param huntCommentId The hunt comment id (GUID) + * @param options The options parameters. + */ + delete( + resourceGroupName: string, + workspaceName: string, + huntId: string, + huntCommentId: string, + options?: HuntCommentsDeleteOptionalParams + ): Promise; + /** + * Creates or updates a hunt relation. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param huntId The hunt id (GUID) + * @param huntCommentId The hunt comment id (GUID) + * @param huntComment The hunt comment + * @param options The options parameters. + */ + createOrUpdate( + resourceGroupName: string, + workspaceName: string, + huntId: string, + huntCommentId: string, + huntComment: HuntComment, + options?: HuntCommentsCreateOrUpdateOptionalParams + ): Promise; +} diff --git a/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/huntRelations.ts b/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/huntRelations.ts new file mode 100644 index 000000000000..212769ec0194 --- /dev/null +++ b/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/huntRelations.ts @@ -0,0 +1,83 @@ +/* + * Copyright (c) Microsoft Corporation. + * Licensed under the MIT License. + * + * Code generated by Microsoft (R) AutoRest Code Generator. + * Changes may cause incorrect behavior and will be lost if the code is regenerated. + */ + +import { PagedAsyncIterableIterator } from "@azure/core-paging"; +import { + HuntRelation, + HuntRelationsListOptionalParams, + HuntRelationsGetOptionalParams, + HuntRelationsGetResponse, + HuntRelationsDeleteOptionalParams, + HuntRelationsCreateOrUpdateOptionalParams, + HuntRelationsCreateOrUpdateResponse +} from "../models"; + +/// +/** Interface representing a HuntRelations. */ +export interface HuntRelations { + /** + * Gets all hunt relations + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param huntId The hunt id (GUID) + * @param options The options parameters. + */ + list( + resourceGroupName: string, + workspaceName: string, + huntId: string, + options?: HuntRelationsListOptionalParams + ): PagedAsyncIterableIterator; + /** + * Gets a hunt relation + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param huntId The hunt id (GUID) + * @param huntRelationId The hunt relation id (GUID) + * @param options The options parameters. + */ + get( + resourceGroupName: string, + workspaceName: string, + huntId: string, + huntRelationId: string, + options?: HuntRelationsGetOptionalParams + ): Promise; + /** + * Delete a hunt relation. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param huntId The hunt id (GUID) + * @param huntRelationId The hunt relation id (GUID) + * @param options The options parameters. + */ + delete( + resourceGroupName: string, + workspaceName: string, + huntId: string, + huntRelationId: string, + options?: HuntRelationsDeleteOptionalParams + ): Promise; + /** + * Creates or updates a hunt relation. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param huntId The hunt id (GUID) + * @param huntRelationId The hunt relation id (GUID) + * @param huntRelation The hunt relation + * @param options The options parameters. + */ + createOrUpdate( + resourceGroupName: string, + workspaceName: string, + huntId: string, + huntRelationId: string, + huntRelation: HuntRelation, + options?: HuntRelationsCreateOrUpdateOptionalParams + ): Promise; +} diff --git a/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/hunts.ts b/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/hunts.ts new file mode 100644 index 000000000000..687cb244f5c4 --- /dev/null +++ b/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/hunts.ts @@ -0,0 +1,75 @@ +/* + * Copyright (c) Microsoft Corporation. + * Licensed under the MIT License. + * + * Code generated by Microsoft (R) AutoRest Code Generator. + * Changes may cause incorrect behavior and will be lost if the code is regenerated. + */ + +import { PagedAsyncIterableIterator } from "@azure/core-paging"; +import { + Hunt, + HuntsListOptionalParams, + HuntsGetOptionalParams, + HuntsGetResponse, + HuntsDeleteOptionalParams, + HuntsCreateOrUpdateOptionalParams, + HuntsCreateOrUpdateResponse +} from "../models"; + +/// +/** Interface representing a Hunts. */ +export interface Hunts { + /** + * Gets all hunts, without relations and comments. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param options The options parameters. + */ + list( + resourceGroupName: string, + workspaceName: string, + options?: HuntsListOptionalParams + ): PagedAsyncIterableIterator; + /** + * Gets a hunt, without relations and comments. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param huntId The hunt id (GUID) + * @param options The options parameters. + */ + get( + resourceGroupName: string, + workspaceName: string, + huntId: string, + options?: HuntsGetOptionalParams + ): Promise; + /** + * Delete a hunt. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param huntId The hunt id (GUID) + * @param options The options parameters. + */ + delete( + resourceGroupName: string, + workspaceName: string, + huntId: string, + options?: HuntsDeleteOptionalParams + ): Promise; + /** + * Create or update a hunt + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param huntId The hunt id (GUID) + * @param hunt The hunt + * @param options The options parameters. + */ + createOrUpdate( + resourceGroupName: string, + workspaceName: string, + huntId: string, + hunt: Hunt, + options?: HuntsCreateOrUpdateOptionalParams + ): Promise; +} diff --git a/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/incidentTasks.ts b/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/incidentTasks.ts new file mode 100644 index 000000000000..68e3fc281f99 --- /dev/null +++ b/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/incidentTasks.ts @@ -0,0 +1,83 @@ +/* + * Copyright (c) Microsoft Corporation. + * Licensed under the MIT License. + * + * Code generated by Microsoft (R) AutoRest Code Generator. + * Changes may cause incorrect behavior and will be lost if the code is regenerated. + */ + +import { PagedAsyncIterableIterator } from "@azure/core-paging"; +import { + IncidentTask, + IncidentTasksListOptionalParams, + IncidentTasksGetOptionalParams, + IncidentTasksGetResponse, + IncidentTasksCreateOrUpdateOptionalParams, + IncidentTasksCreateOrUpdateResponse, + IncidentTasksDeleteOptionalParams +} from "../models"; + +/// +/** Interface representing a IncidentTasks. */ +export interface IncidentTasks { + /** + * Gets all incident tasks. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param incidentId Incident ID + * @param options The options parameters. + */ + list( + resourceGroupName: string, + workspaceName: string, + incidentId: string, + options?: IncidentTasksListOptionalParams + ): PagedAsyncIterableIterator; + /** + * Gets an incident task. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param incidentId Incident ID + * @param incidentTaskId Incident task ID + * @param options The options parameters. + */ + get( + resourceGroupName: string, + workspaceName: string, + incidentId: string, + incidentTaskId: string, + options?: IncidentTasksGetOptionalParams + ): Promise; + /** + * Creates or updates the incident task. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param incidentId Incident ID + * @param incidentTaskId Incident task ID + * @param incidentTask The incident task + * @param options The options parameters. + */ + createOrUpdate( + resourceGroupName: string, + workspaceName: string, + incidentId: string, + incidentTaskId: string, + incidentTask: IncidentTask, + options?: IncidentTasksCreateOrUpdateOptionalParams + ): Promise; + /** + * Delete the incident task. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param incidentId Incident ID + * @param incidentTaskId Incident task ID + * @param options The options parameters. + */ + delete( + resourceGroupName: string, + workspaceName: string, + incidentId: string, + incidentTaskId: string, + options?: IncidentTasksDeleteOptionalParams + ): Promise; +} diff --git a/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/incidents.ts b/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/incidents.ts index 18695a4f8cc7..300c8af1bbdc 100644 --- a/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/incidents.ts +++ b/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/incidents.ts @@ -17,7 +17,7 @@ import { IncidentsCreateOrUpdateOptionalParams, IncidentsCreateOrUpdateResponse, IncidentsDeleteOptionalParams, - TeamProperties, + TeamInformation, IncidentsCreateTeamOptionalParams, IncidentsCreateTeamResponse, IncidentsListAlertsOptionalParams, @@ -109,7 +109,7 @@ export interface Incidents { resourceGroupName: string, workspaceName: string, incidentId: string, - teamProperties: TeamProperties, + teamProperties: TeamInformation, options?: IncidentsCreateTeamOptionalParams ): Promise; /** diff --git a/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/index.ts b/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/index.ts index 6f66d834535e..6aa54b7ab3dd 100644 --- a/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/index.ts +++ b/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/index.ts @@ -10,24 +10,39 @@ export * from "./alertRules"; export * from "./actions"; export * from "./alertRuleTemplates"; export * from "./automationRules"; +export * from "./entities"; export * from "./incidents"; export * from "./bookmarks"; export * from "./bookmarkRelations"; export * from "./bookmarkOperations"; +export * from "./contentPackages"; +export * from "./contentPackage"; +export * from "./productPackages"; +export * from "./productPackage"; +export * from "./productTemplates"; +export * from "./productTemplate"; +export * from "./contentTemplates"; +export * from "./contentTemplate"; export * from "./iPGeodata"; export * from "./domainWhois"; -export * from "./entities"; export * from "./entitiesGetTimeline"; export * from "./entitiesRelations"; export * from "./entityRelations"; export * from "./entityQueries"; export * from "./entityQueryTemplates"; export * from "./fileImports"; +export * from "./hunts"; +export * from "./huntRelations"; +export * from "./huntComments"; export * from "./incidentComments"; export * from "./incidentRelations"; +export * from "./incidentTasks"; export * from "./metadata"; export * from "./officeConsents"; export * from "./sentinelOnboardingStates"; +export * from "./getRecommendations"; +export * from "./get"; +export * from "./update"; export * from "./securityMLAnalyticsSettings"; export * from "./productSettings"; export * from "./sourceControlOperations"; @@ -35,8 +50,16 @@ export * from "./sourceControls"; export * from "./threatIntelligenceIndicator"; export * from "./threatIntelligenceIndicators"; export * from "./threatIntelligenceIndicatorMetrics"; +export * from "./triggeredAnalyticsRuleRunOperations"; +export * from "./getTriggeredAnalyticsRuleRuns"; +export * from "./alertRuleOperations"; export * from "./watchlists"; export * from "./watchlistItems"; +export * from "./workspaceManagerGroups"; +export * from "./workspaceManagerAssignments"; +export * from "./workspaceManagerAssignmentJobs"; +export * from "./workspaceManagerConfigurations"; +export * from "./workspaceManagerMembers"; export * from "./dataConnectors"; export * from "./dataConnectorsCheckRequirementsOperations"; export * from "./operations"; diff --git a/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/productPackage.ts b/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/productPackage.ts new file mode 100644 index 000000000000..7d61a26b65f9 --- /dev/null +++ b/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/productPackage.ts @@ -0,0 +1,29 @@ +/* + * Copyright (c) Microsoft Corporation. + * Licensed under the MIT License. + * + * Code generated by Microsoft (R) AutoRest Code Generator. + * Changes may cause incorrect behavior and will be lost if the code is regenerated. + */ + +import { + ProductPackageGetOptionalParams, + ProductPackageGetResponse +} from "../models"; + +/** Interface representing a ProductPackage. */ +export interface ProductPackage { + /** + * Gets a package by its identifier from the catalog. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param packageId package Id + * @param options The options parameters. + */ + get( + resourceGroupName: string, + workspaceName: string, + packageId: string, + options?: ProductPackageGetOptionalParams + ): Promise; +} diff --git a/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/productPackages.ts b/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/productPackages.ts new file mode 100644 index 000000000000..6794b6afdd2b --- /dev/null +++ b/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/productPackages.ts @@ -0,0 +1,29 @@ +/* + * Copyright (c) Microsoft Corporation. + * Licensed under the MIT License. + * + * Code generated by Microsoft (R) AutoRest Code Generator. + * Changes may cause incorrect behavior and will be lost if the code is regenerated. + */ + +import { PagedAsyncIterableIterator } from "@azure/core-paging"; +import { + PackageModelAutoGenerated, + ProductPackagesListOptionalParams +} from "../models"; + +/// +/** Interface representing a ProductPackages. */ +export interface ProductPackages { + /** + * Gets all packages from the catalog. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param options The options parameters. + */ + list( + resourceGroupName: string, + workspaceName: string, + options?: ProductPackagesListOptionalParams + ): PagedAsyncIterableIterator; +} diff --git a/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/productTemplate.ts b/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/productTemplate.ts new file mode 100644 index 000000000000..f7d454fe959f --- /dev/null +++ b/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/productTemplate.ts @@ -0,0 +1,29 @@ +/* + * Copyright (c) Microsoft Corporation. + * Licensed under the MIT License. + * + * Code generated by Microsoft (R) AutoRest Code Generator. + * Changes may cause incorrect behavior and will be lost if the code is regenerated. + */ + +import { + ProductTemplateGetOptionalParams, + ProductTemplateGetResponse +} from "../models"; + +/** Interface representing a ProductTemplate. */ +export interface ProductTemplate { + /** + * Gets a template by its identifier. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param templateId template Id + * @param options The options parameters. + */ + get( + resourceGroupName: string, + workspaceName: string, + templateId: string, + options?: ProductTemplateGetOptionalParams + ): Promise; +} diff --git a/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/productTemplates.ts b/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/productTemplates.ts new file mode 100644 index 000000000000..95a227e5f0d0 --- /dev/null +++ b/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/productTemplates.ts @@ -0,0 +1,26 @@ +/* + * Copyright (c) Microsoft Corporation. + * Licensed under the MIT License. + * + * Code generated by Microsoft (R) AutoRest Code Generator. + * Changes may cause incorrect behavior and will be lost if the code is regenerated. + */ + +import { PagedAsyncIterableIterator } from "@azure/core-paging"; +import { TemplateModel, ProductTemplatesListOptionalParams } from "../models"; + +/// +/** Interface representing a ProductTemplates. */ +export interface ProductTemplates { + /** + * Gets all templates in the catalog. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param options The options parameters. + */ + list( + resourceGroupName: string, + workspaceName: string, + options?: ProductTemplatesListOptionalParams + ): PagedAsyncIterableIterator; +} diff --git a/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/triggeredAnalyticsRuleRunOperations.ts b/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/triggeredAnalyticsRuleRunOperations.ts new file mode 100644 index 000000000000..5447cc5462a3 --- /dev/null +++ b/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/triggeredAnalyticsRuleRunOperations.ts @@ -0,0 +1,29 @@ +/* + * Copyright (c) Microsoft Corporation. + * Licensed under the MIT License. + * + * Code generated by Microsoft (R) AutoRest Code Generator. + * Changes may cause incorrect behavior and will be lost if the code is regenerated. + */ + +import { + TriggeredAnalyticsRuleRunGetOptionalParams, + TriggeredAnalyticsRuleRunGetResponse +} from "../models"; + +/** Interface representing a TriggeredAnalyticsRuleRunOperations. */ +export interface TriggeredAnalyticsRuleRunOperations { + /** + * Gets the triggered analytics rule run. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param ruleRunId the triggered rule id + * @param options The options parameters. + */ + get( + resourceGroupName: string, + workspaceName: string, + ruleRunId: string, + options?: TriggeredAnalyticsRuleRunGetOptionalParams + ): Promise; +} diff --git a/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/update.ts b/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/update.ts new file mode 100644 index 000000000000..87d313c09a10 --- /dev/null +++ b/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/update.ts @@ -0,0 +1,53 @@ +/* + * Copyright (c) Microsoft Corporation. + * Licensed under the MIT License. + * + * Code generated by Microsoft (R) AutoRest Code Generator. + * Changes may cause incorrect behavior and will be lost if the code is regenerated. + */ + +import { SimplePollerLike, OperationState } from "@azure/core-lro"; +import { + RecommendationPatch, + UpdateRecommendationOptionalParams, + UpdateRecommendationResponse +} from "../models"; + +/** Interface representing a Update. */ +export interface Update { + /** + * Patch a recommendation. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param recommendationId Recommendation Id. + * @param recommendationPatch Recommendation Fields to Update. + * @param options The options parameters. + */ + beginRecommendation( + resourceGroupName: string, + workspaceName: string, + recommendationId: string, + recommendationPatch: RecommendationPatch[], + options?: UpdateRecommendationOptionalParams + ): Promise< + SimplePollerLike< + OperationState, + UpdateRecommendationResponse + > + >; + /** + * Patch a recommendation. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param recommendationId Recommendation Id. + * @param recommendationPatch Recommendation Fields to Update. + * @param options The options parameters. + */ + beginRecommendationAndWait( + resourceGroupName: string, + workspaceName: string, + recommendationId: string, + recommendationPatch: RecommendationPatch[], + options?: UpdateRecommendationOptionalParams + ): Promise; +} diff --git a/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/workspaceManagerAssignmentJobs.ts b/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/workspaceManagerAssignmentJobs.ts new file mode 100644 index 000000000000..614caf3b8fa1 --- /dev/null +++ b/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/workspaceManagerAssignmentJobs.ts @@ -0,0 +1,79 @@ +/* + * Copyright (c) Microsoft Corporation. + * Licensed under the MIT License. + * + * Code generated by Microsoft (R) AutoRest Code Generator. + * Changes may cause incorrect behavior and will be lost if the code is regenerated. + */ + +import { PagedAsyncIterableIterator } from "@azure/core-paging"; +import { + Job, + WorkspaceManagerAssignmentJobsListOptionalParams, + WorkspaceManagerAssignmentJobsCreateOptionalParams, + WorkspaceManagerAssignmentJobsCreateResponse, + WorkspaceManagerAssignmentJobsGetOptionalParams, + WorkspaceManagerAssignmentJobsGetResponse, + WorkspaceManagerAssignmentJobsDeleteOptionalParams +} from "../models"; + +/// +/** Interface representing a WorkspaceManagerAssignmentJobs. */ +export interface WorkspaceManagerAssignmentJobs { + /** + * Get all jobs for the specified workspace manager assignment + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param workspaceManagerAssignmentName The name of the workspace manager assignment + * @param options The options parameters. + */ + list( + resourceGroupName: string, + workspaceName: string, + workspaceManagerAssignmentName: string, + options?: WorkspaceManagerAssignmentJobsListOptionalParams + ): PagedAsyncIterableIterator; + /** + * Create a job for the specified workspace manager assignment + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param workspaceManagerAssignmentName The name of the workspace manager assignment + * @param options The options parameters. + */ + create( + resourceGroupName: string, + workspaceName: string, + workspaceManagerAssignmentName: string, + options?: WorkspaceManagerAssignmentJobsCreateOptionalParams + ): Promise; + /** + * Gets a job + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param workspaceManagerAssignmentName The name of the workspace manager assignment + * @param jobName The job name + * @param options The options parameters. + */ + get( + resourceGroupName: string, + workspaceName: string, + workspaceManagerAssignmentName: string, + jobName: string, + options?: WorkspaceManagerAssignmentJobsGetOptionalParams + ): Promise; + /** + * Deletes the specified job from the specified workspace manager assignment + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param workspaceManagerAssignmentName The name of the workspace manager assignment + * @param jobName The job name + * @param options The options parameters. + */ + delete( + resourceGroupName: string, + workspaceName: string, + workspaceManagerAssignmentName: string, + jobName: string, + options?: WorkspaceManagerAssignmentJobsDeleteOptionalParams + ): Promise; +} diff --git a/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/workspaceManagerAssignments.ts b/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/workspaceManagerAssignments.ts new file mode 100644 index 000000000000..37751de45aa1 --- /dev/null +++ b/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/workspaceManagerAssignments.ts @@ -0,0 +1,75 @@ +/* + * Copyright (c) Microsoft Corporation. + * Licensed under the MIT License. + * + * Code generated by Microsoft (R) AutoRest Code Generator. + * Changes may cause incorrect behavior and will be lost if the code is regenerated. + */ + +import { PagedAsyncIterableIterator } from "@azure/core-paging"; +import { + WorkspaceManagerAssignment, + WorkspaceManagerAssignmentsListOptionalParams, + WorkspaceManagerAssignmentsGetOptionalParams, + WorkspaceManagerAssignmentsGetResponse, + WorkspaceManagerAssignmentsCreateOrUpdateOptionalParams, + WorkspaceManagerAssignmentsCreateOrUpdateResponse, + WorkspaceManagerAssignmentsDeleteOptionalParams +} from "../models"; + +/// +/** Interface representing a WorkspaceManagerAssignments. */ +export interface WorkspaceManagerAssignments { + /** + * Get all workspace manager assignments for the Sentinel workspace manager. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param options The options parameters. + */ + list( + resourceGroupName: string, + workspaceName: string, + options?: WorkspaceManagerAssignmentsListOptionalParams + ): PagedAsyncIterableIterator; + /** + * Gets a workspace manager assignment + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param workspaceManagerAssignmentName The name of the workspace manager assignment + * @param options The options parameters. + */ + get( + resourceGroupName: string, + workspaceName: string, + workspaceManagerAssignmentName: string, + options?: WorkspaceManagerAssignmentsGetOptionalParams + ): Promise; + /** + * Creates or updates a workspace manager assignment. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param workspaceManagerAssignmentName The name of the workspace manager assignment + * @param workspaceManagerAssignment The workspace manager assignment + * @param options The options parameters. + */ + createOrUpdate( + resourceGroupName: string, + workspaceName: string, + workspaceManagerAssignmentName: string, + workspaceManagerAssignment: WorkspaceManagerAssignment, + options?: WorkspaceManagerAssignmentsCreateOrUpdateOptionalParams + ): Promise; + /** + * Deletes a workspace manager assignment + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param workspaceManagerAssignmentName The name of the workspace manager assignment + * @param options The options parameters. + */ + delete( + resourceGroupName: string, + workspaceName: string, + workspaceManagerAssignmentName: string, + options?: WorkspaceManagerAssignmentsDeleteOptionalParams + ): Promise; +} diff --git a/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/workspaceManagerConfigurations.ts b/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/workspaceManagerConfigurations.ts new file mode 100644 index 000000000000..ba65395316f1 --- /dev/null +++ b/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/workspaceManagerConfigurations.ts @@ -0,0 +1,75 @@ +/* + * Copyright (c) Microsoft Corporation. + * Licensed under the MIT License. + * + * Code generated by Microsoft (R) AutoRest Code Generator. + * Changes may cause incorrect behavior and will be lost if the code is regenerated. + */ + +import { PagedAsyncIterableIterator } from "@azure/core-paging"; +import { + WorkspaceManagerConfiguration, + WorkspaceManagerConfigurationsListOptionalParams, + WorkspaceManagerConfigurationsGetOptionalParams, + WorkspaceManagerConfigurationsGetResponse, + WorkspaceManagerConfigurationsDeleteOptionalParams, + WorkspaceManagerConfigurationsCreateOrUpdateOptionalParams, + WorkspaceManagerConfigurationsCreateOrUpdateResponse +} from "../models"; + +/// +/** Interface representing a WorkspaceManagerConfigurations. */ +export interface WorkspaceManagerConfigurations { + /** + * Gets all workspace manager configurations for a Sentinel workspace. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param options The options parameters. + */ + list( + resourceGroupName: string, + workspaceName: string, + options?: WorkspaceManagerConfigurationsListOptionalParams + ): PagedAsyncIterableIterator; + /** + * Gets a workspace manager configuration + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param workspaceManagerConfigurationName The name of the workspace manager configuration + * @param options The options parameters. + */ + get( + resourceGroupName: string, + workspaceName: string, + workspaceManagerConfigurationName: string, + options?: WorkspaceManagerConfigurationsGetOptionalParams + ): Promise; + /** + * Deletes a workspace manager configuration + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param workspaceManagerConfigurationName The name of the workspace manager configuration + * @param options The options parameters. + */ + delete( + resourceGroupName: string, + workspaceName: string, + workspaceManagerConfigurationName: string, + options?: WorkspaceManagerConfigurationsDeleteOptionalParams + ): Promise; + /** + * Creates or updates a workspace manager configuration. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param workspaceManagerConfigurationName The name of the workspace manager configuration + * @param workspaceManagerConfiguration The workspace manager configuration + * @param options The options parameters. + */ + createOrUpdate( + resourceGroupName: string, + workspaceName: string, + workspaceManagerConfigurationName: string, + workspaceManagerConfiguration: WorkspaceManagerConfiguration, + options?: WorkspaceManagerConfigurationsCreateOrUpdateOptionalParams + ): Promise; +} diff --git a/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/workspaceManagerGroups.ts b/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/workspaceManagerGroups.ts new file mode 100644 index 000000000000..2e181ac7819a --- /dev/null +++ b/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/workspaceManagerGroups.ts @@ -0,0 +1,75 @@ +/* + * Copyright (c) Microsoft Corporation. + * Licensed under the MIT License. + * + * Code generated by Microsoft (R) AutoRest Code Generator. + * Changes may cause incorrect behavior and will be lost if the code is regenerated. + */ + +import { PagedAsyncIterableIterator } from "@azure/core-paging"; +import { + WorkspaceManagerGroup, + WorkspaceManagerGroupsListOptionalParams, + WorkspaceManagerGroupsGetOptionalParams, + WorkspaceManagerGroupsGetResponse, + WorkspaceManagerGroupsCreateOrUpdateOptionalParams, + WorkspaceManagerGroupsCreateOrUpdateResponse, + WorkspaceManagerGroupsDeleteOptionalParams +} from "../models"; + +/// +/** Interface representing a WorkspaceManagerGroups. */ +export interface WorkspaceManagerGroups { + /** + * Gets all workspace manager groups in the Sentinel workspace manager + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param options The options parameters. + */ + list( + resourceGroupName: string, + workspaceName: string, + options?: WorkspaceManagerGroupsListOptionalParams + ): PagedAsyncIterableIterator; + /** + * Gets a workspace manager group + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param workspaceManagerGroupName The name of the workspace manager group + * @param options The options parameters. + */ + get( + resourceGroupName: string, + workspaceName: string, + workspaceManagerGroupName: string, + options?: WorkspaceManagerGroupsGetOptionalParams + ): Promise; + /** + * Creates or updates a workspace manager group. + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param workspaceManagerGroupName The name of the workspace manager group + * @param workspaceManagerGroup The workspace manager group object + * @param options The options parameters. + */ + createOrUpdate( + resourceGroupName: string, + workspaceName: string, + workspaceManagerGroupName: string, + workspaceManagerGroup: WorkspaceManagerGroup, + options?: WorkspaceManagerGroupsCreateOrUpdateOptionalParams + ): Promise; + /** + * Deletes a workspace manager group + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param workspaceManagerGroupName The name of the workspace manager group + * @param options The options parameters. + */ + delete( + resourceGroupName: string, + workspaceName: string, + workspaceManagerGroupName: string, + options?: WorkspaceManagerGroupsDeleteOptionalParams + ): Promise; +} diff --git a/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/workspaceManagerMembers.ts b/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/workspaceManagerMembers.ts new file mode 100644 index 000000000000..f3b687caa8ca --- /dev/null +++ b/sdk/securityinsight/arm-securityinsight/src/operationsInterfaces/workspaceManagerMembers.ts @@ -0,0 +1,75 @@ +/* + * Copyright (c) Microsoft Corporation. + * Licensed under the MIT License. + * + * Code generated by Microsoft (R) AutoRest Code Generator. + * Changes may cause incorrect behavior and will be lost if the code is regenerated. + */ + +import { PagedAsyncIterableIterator } from "@azure/core-paging"; +import { + WorkspaceManagerMember, + WorkspaceManagerMembersListOptionalParams, + WorkspaceManagerMembersGetOptionalParams, + WorkspaceManagerMembersGetResponse, + WorkspaceManagerMembersCreateOrUpdateOptionalParams, + WorkspaceManagerMembersCreateOrUpdateResponse, + WorkspaceManagerMembersDeleteOptionalParams +} from "../models"; + +/// +/** Interface representing a WorkspaceManagerMembers. */ +export interface WorkspaceManagerMembers { + /** + * Gets all workspace manager members that exist for the given Sentinel workspace manager + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param options The options parameters. + */ + list( + resourceGroupName: string, + workspaceName: string, + options?: WorkspaceManagerMembersListOptionalParams + ): PagedAsyncIterableIterator; + /** + * Gets a workspace manager member + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param workspaceManagerMemberName The name of the workspace manager member + * @param options The options parameters. + */ + get( + resourceGroupName: string, + workspaceName: string, + workspaceManagerMemberName: string, + options?: WorkspaceManagerMembersGetOptionalParams + ): Promise; + /** + * Creates or updates a workspace manager member + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param workspaceManagerMemberName The name of the workspace manager member + * @param workspaceManagerMember The workspace manager member object + * @param options The options parameters. + */ + createOrUpdate( + resourceGroupName: string, + workspaceName: string, + workspaceManagerMemberName: string, + workspaceManagerMember: WorkspaceManagerMember, + options?: WorkspaceManagerMembersCreateOrUpdateOptionalParams + ): Promise; + /** + * Deletes a workspace manager member + * @param resourceGroupName The name of the resource group. The name is case insensitive. + * @param workspaceName The name of the workspace. + * @param workspaceManagerMemberName The name of the workspace manager member + * @param options The options parameters. + */ + delete( + resourceGroupName: string, + workspaceName: string, + workspaceManagerMemberName: string, + options?: WorkspaceManagerMembersDeleteOptionalParams + ): Promise; +} diff --git a/sdk/securityinsight/arm-securityinsight/src/securityInsights.ts b/sdk/securityinsight/arm-securityinsight/src/securityInsights.ts index 20a358af6b03..4d827154383a 100644 --- a/sdk/securityinsight/arm-securityinsight/src/securityInsights.ts +++ b/sdk/securityinsight/arm-securityinsight/src/securityInsights.ts @@ -19,24 +19,39 @@ import { ActionsImpl, AlertRuleTemplatesImpl, AutomationRulesImpl, + EntitiesImpl, IncidentsImpl, BookmarksImpl, BookmarkRelationsImpl, BookmarkOperationsImpl, + ContentPackagesImpl, + ContentPackageImpl, + ProductPackagesImpl, + ProductPackageImpl, + ProductTemplatesImpl, + ProductTemplateImpl, + ContentTemplatesImpl, + ContentTemplateImpl, IPGeodataImpl, DomainWhoisImpl, - EntitiesImpl, EntitiesGetTimelineImpl, EntitiesRelationsImpl, EntityRelationsImpl, EntityQueriesImpl, EntityQueryTemplatesImpl, FileImportsImpl, + HuntsImpl, + HuntRelationsImpl, + HuntCommentsImpl, IncidentCommentsImpl, IncidentRelationsImpl, + IncidentTasksImpl, MetadataImpl, OfficeConsentsImpl, SentinelOnboardingStatesImpl, + GetRecommendationsImpl, + GetImpl, + UpdateImpl, SecurityMLAnalyticsSettingsImpl, ProductSettingsImpl, SourceControlOperationsImpl, @@ -44,8 +59,16 @@ import { ThreatIntelligenceIndicatorImpl, ThreatIntelligenceIndicatorsImpl, ThreatIntelligenceIndicatorMetricsImpl, + TriggeredAnalyticsRuleRunOperationsImpl, + GetTriggeredAnalyticsRuleRunsImpl, + AlertRuleOperationsImpl, WatchlistsImpl, WatchlistItemsImpl, + WorkspaceManagerGroupsImpl, + WorkspaceManagerAssignmentsImpl, + WorkspaceManagerAssignmentJobsImpl, + WorkspaceManagerConfigurationsImpl, + WorkspaceManagerMembersImpl, DataConnectorsImpl, DataConnectorsCheckRequirementsOperationsImpl, OperationsImpl @@ -55,24 +78,39 @@ import { Actions, AlertRuleTemplates, AutomationRules, + Entities, Incidents, Bookmarks, BookmarkRelations, BookmarkOperations, + ContentPackages, + ContentPackage, + ProductPackages, + ProductPackage, + ProductTemplates, + ProductTemplate, + ContentTemplates, + ContentTemplate, IPGeodata, DomainWhois, - Entities, EntitiesGetTimeline, EntitiesRelations, EntityRelations, EntityQueries, EntityQueryTemplates, FileImports, + Hunts, + HuntRelations, + HuntComments, IncidentComments, IncidentRelations, + IncidentTasks, Metadata, OfficeConsents, SentinelOnboardingStates, + GetRecommendations, + Get, + Update, SecurityMLAnalyticsSettings, ProductSettings, SourceControlOperations, @@ -80,8 +118,16 @@ import { ThreatIntelligenceIndicator, ThreatIntelligenceIndicators, ThreatIntelligenceIndicatorMetrics, + TriggeredAnalyticsRuleRunOperations, + GetTriggeredAnalyticsRuleRuns, + AlertRuleOperations, Watchlists, WatchlistItems, + WorkspaceManagerGroups, + WorkspaceManagerAssignments, + WorkspaceManagerAssignmentJobs, + WorkspaceManagerConfigurations, + WorkspaceManagerMembers, DataConnectors, DataConnectorsCheckRequirementsOperations, Operations @@ -173,29 +219,44 @@ export class SecurityInsights extends coreClient.ServiceClient { // Assigning values to Constant parameters this.$host = options.$host || "https://management.azure.com"; - this.apiVersion = options.apiVersion || "2022-09-01-preview"; + this.apiVersion = options.apiVersion || "2023-04-01-preview"; this.alertRules = new AlertRulesImpl(this); this.actions = new ActionsImpl(this); this.alertRuleTemplates = new AlertRuleTemplatesImpl(this); this.automationRules = new AutomationRulesImpl(this); + this.entities = new EntitiesImpl(this); this.incidents = new IncidentsImpl(this); this.bookmarks = new BookmarksImpl(this); this.bookmarkRelations = new BookmarkRelationsImpl(this); this.bookmarkOperations = new BookmarkOperationsImpl(this); + this.contentPackages = new ContentPackagesImpl(this); + this.contentPackage = new ContentPackageImpl(this); + this.productPackages = new ProductPackagesImpl(this); + this.productPackage = new ProductPackageImpl(this); + this.productTemplates = new ProductTemplatesImpl(this); + this.productTemplate = new ProductTemplateImpl(this); + this.contentTemplates = new ContentTemplatesImpl(this); + this.contentTemplate = new ContentTemplateImpl(this); this.iPGeodata = new IPGeodataImpl(this); this.domainWhois = new DomainWhoisImpl(this); - this.entities = new EntitiesImpl(this); this.entitiesGetTimeline = new EntitiesGetTimelineImpl(this); this.entitiesRelations = new EntitiesRelationsImpl(this); this.entityRelations = new EntityRelationsImpl(this); this.entityQueries = new EntityQueriesImpl(this); this.entityQueryTemplates = new EntityQueryTemplatesImpl(this); this.fileImports = new FileImportsImpl(this); + this.hunts = new HuntsImpl(this); + this.huntRelations = new HuntRelationsImpl(this); + this.huntComments = new HuntCommentsImpl(this); this.incidentComments = new IncidentCommentsImpl(this); this.incidentRelations = new IncidentRelationsImpl(this); + this.incidentTasks = new IncidentTasksImpl(this); this.metadata = new MetadataImpl(this); this.officeConsents = new OfficeConsentsImpl(this); this.sentinelOnboardingStates = new SentinelOnboardingStatesImpl(this); + this.getRecommendations = new GetRecommendationsImpl(this); + this.get = new GetImpl(this); + this.update = new UpdateImpl(this); this.securityMLAnalyticsSettings = new SecurityMLAnalyticsSettingsImpl( this ); @@ -211,8 +272,26 @@ export class SecurityInsights extends coreClient.ServiceClient { this.threatIntelligenceIndicatorMetrics = new ThreatIntelligenceIndicatorMetricsImpl( this ); + this.triggeredAnalyticsRuleRunOperations = new TriggeredAnalyticsRuleRunOperationsImpl( + this + ); + this.getTriggeredAnalyticsRuleRuns = new GetTriggeredAnalyticsRuleRunsImpl( + this + ); + this.alertRuleOperations = new AlertRuleOperationsImpl(this); this.watchlists = new WatchlistsImpl(this); this.watchlistItems = new WatchlistItemsImpl(this); + this.workspaceManagerGroups = new WorkspaceManagerGroupsImpl(this); + this.workspaceManagerAssignments = new WorkspaceManagerAssignmentsImpl( + this + ); + this.workspaceManagerAssignmentJobs = new WorkspaceManagerAssignmentJobsImpl( + this + ); + this.workspaceManagerConfigurations = new WorkspaceManagerConfigurationsImpl( + this + ); + this.workspaceManagerMembers = new WorkspaceManagerMembersImpl(this); this.dataConnectors = new DataConnectorsImpl(this); this.dataConnectorsCheckRequirementsOperations = new DataConnectorsCheckRequirementsOperationsImpl( this @@ -253,24 +332,39 @@ export class SecurityInsights extends coreClient.ServiceClient { actions: Actions; alertRuleTemplates: AlertRuleTemplates; automationRules: AutomationRules; + entities: Entities; incidents: Incidents; bookmarks: Bookmarks; bookmarkRelations: BookmarkRelations; bookmarkOperations: BookmarkOperations; + contentPackages: ContentPackages; + contentPackage: ContentPackage; + productPackages: ProductPackages; + productPackage: ProductPackage; + productTemplates: ProductTemplates; + productTemplate: ProductTemplate; + contentTemplates: ContentTemplates; + contentTemplate: ContentTemplate; iPGeodata: IPGeodata; domainWhois: DomainWhois; - entities: Entities; entitiesGetTimeline: EntitiesGetTimeline; entitiesRelations: EntitiesRelations; entityRelations: EntityRelations; entityQueries: EntityQueries; entityQueryTemplates: EntityQueryTemplates; fileImports: FileImports; + hunts: Hunts; + huntRelations: HuntRelations; + huntComments: HuntComments; incidentComments: IncidentComments; incidentRelations: IncidentRelations; + incidentTasks: IncidentTasks; metadata: Metadata; officeConsents: OfficeConsents; sentinelOnboardingStates: SentinelOnboardingStates; + getRecommendations: GetRecommendations; + get: Get; + update: Update; securityMLAnalyticsSettings: SecurityMLAnalyticsSettings; productSettings: ProductSettings; sourceControlOperations: SourceControlOperations; @@ -278,8 +372,16 @@ export class SecurityInsights extends coreClient.ServiceClient { threatIntelligenceIndicator: ThreatIntelligenceIndicator; threatIntelligenceIndicators: ThreatIntelligenceIndicators; threatIntelligenceIndicatorMetrics: ThreatIntelligenceIndicatorMetrics; + triggeredAnalyticsRuleRunOperations: TriggeredAnalyticsRuleRunOperations; + getTriggeredAnalyticsRuleRuns: GetTriggeredAnalyticsRuleRuns; + alertRuleOperations: AlertRuleOperations; watchlists: Watchlists; watchlistItems: WatchlistItems; + workspaceManagerGroups: WorkspaceManagerGroups; + workspaceManagerAssignments: WorkspaceManagerAssignments; + workspaceManagerAssignmentJobs: WorkspaceManagerAssignmentJobs; + workspaceManagerConfigurations: WorkspaceManagerConfigurations; + workspaceManagerMembers: WorkspaceManagerMembers; dataConnectors: DataConnectors; dataConnectorsCheckRequirementsOperations: DataConnectorsCheckRequirementsOperations; operations: Operations; diff --git a/sdk/securityinsight/arm-securityinsight/test/sampleTest.ts b/sdk/securityinsight/arm-securityinsight/test/sampleTest.ts new file mode 100644 index 000000000000..25aeb3ebcc36 --- /dev/null +++ b/sdk/securityinsight/arm-securityinsight/test/sampleTest.ts @@ -0,0 +1,43 @@ +/* + * Copyright (c) Microsoft Corporation. + * Licensed under the MIT License. + * + * Code generated by Microsoft (R) AutoRest Code Generator. + * Changes may cause incorrect behavior and will be lost if the code is regenerated. + */ + +import { + Recorder, + RecorderStartOptions, + env +} from "@azure-tools/test-recorder"; +import { assert } from "chai"; +import { Context } from "mocha"; + +const replaceableVariables: Record = { + AZURE_CLIENT_ID: "azure_client_id", + AZURE_CLIENT_SECRET: "azure_client_secret", + AZURE_TENANT_ID: "88888888-8888-8888-8888-888888888888", + SUBSCRIPTION_ID: "azure_subscription_id" +}; + +const recorderOptions: RecorderStartOptions = { + envSetupForPlayback: replaceableVariables +}; + +describe("My test", () => { + let recorder: Recorder; + + beforeEach(async function(this: Context) { + recorder = new Recorder(this.currentTest); + await recorder.start(recorderOptions); + }); + + afterEach(async function() { + await recorder.stop(); + }); + + it("sample test", async function() { + console.log("Hi, I'm a test!"); + }); +}); diff --git a/sdk/securityinsight/arm-securityinsight/tsconfig.json b/sdk/securityinsight/arm-securityinsight/tsconfig.json index 6c7875caddba..3e6ae96443f3 100644 --- a/sdk/securityinsight/arm-securityinsight/tsconfig.json +++ b/sdk/securityinsight/arm-securityinsight/tsconfig.json @@ -15,17 +15,11 @@ ], "declaration": true, "outDir": "./dist-esm", - "importHelpers": true, - "paths": { - "@azure/arm-securityinsight": [ - "./src/index" - ] - } + "importHelpers": true }, "include": [ "./src/**/*.ts", - "./test/**/*.ts", - "samples-dev/**/*.ts" + "./test/**/*.ts" ], "exclude": [ "node_modules"