datadog_api_client 2.51.0 → 2.53.0

data/lib/datadog_api_client/v2/api/security_monitoring_api.rb

@@ -33,11 +33,11 @@ module DatadogAPIClient::V2
 
     # Activate content pack.
     #
-    # Activate a security monitoring content pack. This operation configures the necessary
+    # Activate a Cloud SIEM content pack. This operation configures the necessary
     # log filters or security filters depending on the pricing model and updates the content
     # pack activation state.
     #
-    # @param content_pack_id [String] The ID of the content pack to activate.
+    # @param content_pack_id [String] The ID of the content pack to activate (for example, `aws-cloudtrail`).
     # @param opts [Hash] the optional parameters
     # @return [Array<(nil, Integer, Hash)>] nil, response status code and response headers
     def activate_content_pack_with_http_info(content_pack_id, opts = {})
@@ -76,7 +76,7 @@ module DatadogAPIClient::V2
       return_type = opts[:debug_return_type]
 
       # auth_names
-      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth]
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
 
       new_options = opts.merge(
         :operation => :activate_content_pack,
@@ -237,6 +237,210 @@ module DatadogAPIClient::V2
       return data, status_code, headers
     end
 
+    # Bulk update security signals.
+    #
+    # @see #bulk_edit_security_monitoring_signals_with_http_info
+    def bulk_edit_security_monitoring_signals(body, opts = {})
+      data, _status_code, _headers = bulk_edit_security_monitoring_signals_with_http_info(body, opts)
+      data
+    end
+
+    # Bulk update security signals.
+    #
+    # Update the triage state or assignee of multiple security signals at once.
+    # The maximum number of signals that can be updated in a single request is 199.
+    #
+    # @param body [SecurityMonitoringSignalsBulkUpdateRequest] Attributes describing the signal updates.
+    # @param opts [Hash] the optional parameters
+    # @return [Array<(SecurityMonitoringSignalsBulkTriageUpdateResponse, Integer, Hash)>] SecurityMonitoringSignalsBulkTriageUpdateResponse data, response status code and response headers
+    def bulk_edit_security_monitoring_signals_with_http_info(body, opts = {})
+
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.bulk_edit_security_monitoring_signals ...'
+      end
+      # verify the required parameter 'body' is set
+      if @api_client.config.client_side_validation && body.nil?
+        fail ArgumentError, "Missing the required parameter 'body' when calling SecurityMonitoringAPI.bulk_edit_security_monitoring_signals"
+      end
+      # resource path
+      local_var_path = '/api/v2/security_monitoring/signals/bulk/update'
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json'])
+      # HTTP header 'Content-Type'
+      header_params['Content-Type'] = @api_client.select_header_content_type(['application/json'])
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body] || @api_client.object_to_http_body(body)
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'SecurityMonitoringSignalsBulkTriageUpdateResponse'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
+
+      new_options = opts.merge(
+        :operation => :bulk_edit_security_monitoring_signals,
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type,
+        :api_version => "V2"
+      )
+
+      data, status_code, headers = @api_client.call_api(Net::HTTP::Patch, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#bulk_edit_security_monitoring_signals\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
+    # Bulk update triage assignee of security signals.
+    #
+    # @see #bulk_edit_security_monitoring_signals_assignee_with_http_info
+    def bulk_edit_security_monitoring_signals_assignee(body, opts = {})
+      data, _status_code, _headers = bulk_edit_security_monitoring_signals_assignee_with_http_info(body, opts)
+      data
+    end
+
+    # Bulk update triage assignee of security signals.
+    #
+    # Change the triage assignees of multiple security signals at once.
+    # The maximum number of signals that can be updated in a single request is 199.
+    #
+    # @param body [SecurityMonitoringSignalsBulkAssigneeUpdateRequest] Attributes describing the signal assignee updates.
+    # @param opts [Hash] the optional parameters
+    # @return [Array<(SecurityMonitoringSignalsBulkTriageUpdateResponse, Integer, Hash)>] SecurityMonitoringSignalsBulkTriageUpdateResponse data, response status code and response headers
+    def bulk_edit_security_monitoring_signals_assignee_with_http_info(body, opts = {})
+
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.bulk_edit_security_monitoring_signals_assignee ...'
+      end
+      # verify the required parameter 'body' is set
+      if @api_client.config.client_side_validation && body.nil?
+        fail ArgumentError, "Missing the required parameter 'body' when calling SecurityMonitoringAPI.bulk_edit_security_monitoring_signals_assignee"
+      end
+      # resource path
+      local_var_path = '/api/v2/security_monitoring/signals/bulk/assignee'
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json'])
+      # HTTP header 'Content-Type'
+      header_params['Content-Type'] = @api_client.select_header_content_type(['application/json'])
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body] || @api_client.object_to_http_body(body)
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'SecurityMonitoringSignalsBulkTriageUpdateResponse'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth]
+
+      new_options = opts.merge(
+        :operation => :bulk_edit_security_monitoring_signals_assignee,
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type,
+        :api_version => "V2"
+      )
+
+      data, status_code, headers = @api_client.call_api(Net::HTTP::Patch, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#bulk_edit_security_monitoring_signals_assignee\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
+    # Bulk update triage state of security signals.
+    #
+    # @see #bulk_edit_security_monitoring_signals_state_with_http_info
+    def bulk_edit_security_monitoring_signals_state(body, opts = {})
+      data, _status_code, _headers = bulk_edit_security_monitoring_signals_state_with_http_info(body, opts)
+      data
+    end
+
+    # Bulk update triage state of security signals.
+    #
+    # Change the triage states of multiple security signals at once.
+    # The maximum number of signals that can be updated in a single request is 199.
+    #
+    # @param body [SecurityMonitoringSignalsBulkStateUpdateRequest] Attributes describing the signal state updates.
+    # @param opts [Hash] the optional parameters
+    # @return [Array<(SecurityMonitoringSignalsBulkTriageUpdateResponse, Integer, Hash)>] SecurityMonitoringSignalsBulkTriageUpdateResponse data, response status code and response headers
+    def bulk_edit_security_monitoring_signals_state_with_http_info(body, opts = {})
+
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.bulk_edit_security_monitoring_signals_state ...'
+      end
+      # verify the required parameter 'body' is set
+      if @api_client.config.client_side_validation && body.nil?
+        fail ArgumentError, "Missing the required parameter 'body' when calling SecurityMonitoringAPI.bulk_edit_security_monitoring_signals_state"
+      end
+      # resource path
+      local_var_path = '/api/v2/security_monitoring/signals/bulk/state'
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json'])
+      # HTTP header 'Content-Type'
+      header_params['Content-Type'] = @api_client.select_header_content_type(['application/json'])
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body] || @api_client.object_to_http_body(body)
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'SecurityMonitoringSignalsBulkTriageUpdateResponse'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth]
+
+      new_options = opts.merge(
+        :operation => :bulk_edit_security_monitoring_signals_state,
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type,
+        :api_version => "V2"
+      )
+
+      data, status_code, headers = @api_client.call_api(Net::HTTP::Patch, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#bulk_edit_security_monitoring_signals_state\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
     # Bulk export security monitoring rules.
     #
     # @see #bulk_export_security_monitoring_rules_with_http_info
@@ -306,38 +510,124 @@ module DatadogAPIClient::V2
       return data, status_code, headers
     end
 
-    # Cancel a threat hunting job.
+    # Export security monitoring resources to Terraform.
+    #
+    # @see #bulk_export_security_monitoring_terraform_resources_with_http_info
+    def bulk_export_security_monitoring_terraform_resources(resource_type, body, opts = {})
+      data, _status_code, _headers = bulk_export_security_monitoring_terraform_resources_with_http_info(resource_type, body, opts)
+      data
+    end
+
+    # Export security monitoring resources to Terraform.
+    #
+    # Export multiple security monitoring resources to Terraform, packaged as a zip archive.
+    # The `resource_type` path parameter specifies the type of resources to export
+    # and must be one of `suppressions` or `critical_assets`.
+    # A maximum of 1000 resources can be exported in a single request.
+    #
+    # @param resource_type [SecurityMonitoringTerraformResourceType] The type of security monitoring resource to export.
+    # @param body [SecurityMonitoringTerraformBulkExportRequest] The resource IDs to export.
+    # @param opts [Hash] the optional parameters
+    # @return [Array<(File, Integer, Hash)>] File data, response status code and response headers
+    def bulk_export_security_monitoring_terraform_resources_with_http_info(resource_type, body, opts = {})
+      unstable_enabled = @api_client.config.unstable_operations["v2.bulk_export_security_monitoring_terraform_resources".to_sym]
+      if unstable_enabled
+        @api_client.config.logger.warn format("Using unstable operation '%s'", "v2.bulk_export_security_monitoring_terraform_resources")
+      else
+        raise DatadogAPIClient::APIError.new(message: format("Unstable operation '%s' is disabled", "v2.bulk_export_security_monitoring_terraform_resources"))
+      end
+
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.bulk_export_security_monitoring_terraform_resources ...'
+      end
+      # verify the required parameter 'resource_type' is set
+      if @api_client.config.client_side_validation && resource_type.nil?
+        fail ArgumentError, "Missing the required parameter 'resource_type' when calling SecurityMonitoringAPI.bulk_export_security_monitoring_terraform_resources"
+      end
+      # verify enum value
+      allowable_values = ['suppressions', 'critical_assets']
+      if @api_client.config.client_side_validation && !allowable_values.include?(resource_type)
+        fail ArgumentError, "invalid value for \"resource_type\", must be one of #{allowable_values}"
+      end
+      # verify the required parameter 'body' is set
+      if @api_client.config.client_side_validation && body.nil?
+        fail ArgumentError, "Missing the required parameter 'body' when calling SecurityMonitoringAPI.bulk_export_security_monitoring_terraform_resources"
+      end
+      # resource path
+      local_var_path = '/api/v2/security_monitoring/terraform/{resource_type}/bulk'.sub('{resource_type}', CGI.escape(resource_type.to_s).gsub('%2F', '/'))
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/zip', 'application/json'])
+      # HTTP header 'Content-Type'
+      header_params['Content-Type'] = @api_client.select_header_content_type(['application/json'])
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body] || @api_client.object_to_http_body(body)
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'File'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
+
+      new_options = opts.merge(
+        :operation => :bulk_export_security_monitoring_terraform_resources,
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type,
+        :api_version => "V2"
+      )
+
+      data, status_code, headers = @api_client.call_api(Net::HTTP::Post, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#bulk_export_security_monitoring_terraform_resources\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
+    # Cancel a historical job.
     #
-    # @see #cancel_threat_hunting_job_with_http_info
-    def cancel_threat_hunting_job(job_id, opts = {})
-      cancel_threat_hunting_job_with_http_info(job_id, opts)
+    # @see #cancel_historical_job_with_http_info
+    def cancel_historical_job(job_id, opts = {})
+      cancel_historical_job_with_http_info(job_id, opts)
       nil
     end
 
-    # Cancel a threat hunting job.
+    # Cancel a historical job.
     #
-    # Cancel a threat hunting job.
+    # Cancel a historical job.
     #
     # @param job_id [String] The ID of the job.
     # @param opts [Hash] the optional parameters
     # @return [Array<(nil, Integer, Hash)>] nil, response status code and response headers
-    def cancel_threat_hunting_job_with_http_info(job_id, opts = {})
-      unstable_enabled = @api_client.config.unstable_operations["v2.cancel_threat_hunting_job".to_sym]
+    def cancel_historical_job_with_http_info(job_id, opts = {})
+      unstable_enabled = @api_client.config.unstable_operations["v2.cancel_historical_job".to_sym]
       if unstable_enabled
-        @api_client.config.logger.warn format("Using unstable operation '%s'", "v2.cancel_threat_hunting_job")
+        @api_client.config.logger.warn format("Using unstable operation '%s'", "v2.cancel_historical_job")
       else
-        raise DatadogAPIClient::APIError.new(message: format("Unstable operation '%s' is disabled", "v2.cancel_threat_hunting_job"))
+        raise DatadogAPIClient::APIError.new(message: format("Unstable operation '%s' is disabled", "v2.cancel_historical_job"))
       end
 
       if @api_client.config.debugging
-        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.cancel_threat_hunting_job ...'
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.cancel_historical_job ...'
       end
       # verify the required parameter 'job_id' is set
       if @api_client.config.client_side_validation && job_id.nil?
-        fail ArgumentError, "Missing the required parameter 'job_id' when calling SecurityMonitoringAPI.cancel_threat_hunting_job"
+        fail ArgumentError, "Missing the required parameter 'job_id' when calling SecurityMonitoringAPI.cancel_historical_job"
       end
       # resource path
-      local_var_path = '/api/v2/siem-threat-hunting/jobs/{job_id}/cancel'.sub('{job_id}', CGI.escape(job_id.to_s).gsub('%2F', '/'))
+      local_var_path = '/api/v2/siem-historical-detections/jobs/{job_id}/cancel'.sub('{job_id}', CGI.escape(job_id.to_s).gsub('%2F', '/'))
 
       # query parameters
       query_params = opts[:query_params] || {}
@@ -360,7 +650,7 @@ module DatadogAPIClient::V2
       auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
 
       new_options = opts.merge(
-        :operation => :cancel_threat_hunting_job,
+        :operation => :cancel_historical_job,
         :header_params => header_params,
         :query_params => query_params,
         :form_params => form_params,
@@ -372,7 +662,7 @@ module DatadogAPIClient::V2
 
       data, status_code, headers = @api_client.call_api(Net::HTTP::Patch, local_var_path, new_options)
       if @api_client.config.debugging
-        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#cancel_threat_hunting_job\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#cancel_historical_job\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
       end
       return data, status_code, headers
     end
@@ -479,7 +769,7 @@ module DatadogAPIClient::V2
         fail ArgumentError, "Missing the required parameter 'body' when calling SecurityMonitoringAPI.convert_job_result_to_signal"
       end
       # resource path
-      local_var_path = '/api/v2/siem-threat-hunting/jobs/signal_convert'
+      local_var_path = '/api/v2/siem-historical-detections/jobs/signal_convert'
 
       # query parameters
       query_params = opts[:query_params] || {}
@@ -594,6 +884,91 @@ module DatadogAPIClient::V2
       return data, status_code, headers
     end
 
+    # Convert security monitoring resource to Terraform.
+    #
+    # @see #convert_security_monitoring_terraform_resource_with_http_info
+    def convert_security_monitoring_terraform_resource(resource_type, body, opts = {})
+      data, _status_code, _headers = convert_security_monitoring_terraform_resource_with_http_info(resource_type, body, opts)
+      data
+    end
+
+    # Convert security monitoring resource to Terraform.
+    #
+    # Convert a security monitoring resource that doesn't (yet) exist from JSON to Terraform.
+    # The `resource_type` path parameter specifies the type of resource to convert
+    # and must be one of `suppressions` or `critical_assets`.
+    #
+    # @param resource_type [SecurityMonitoringTerraformResourceType] The type of security monitoring resource to export.
+    # @param body [SecurityMonitoringTerraformConvertRequest] The resource JSON to convert.
+    # @param opts [Hash] the optional parameters
+    # @return [Array<(SecurityMonitoringTerraformExportResponse, Integer, Hash)>] SecurityMonitoringTerraformExportResponse data, response status code and response headers
+    def convert_security_monitoring_terraform_resource_with_http_info(resource_type, body, opts = {})
+      unstable_enabled = @api_client.config.unstable_operations["v2.convert_security_monitoring_terraform_resource".to_sym]
+      if unstable_enabled
+        @api_client.config.logger.warn format("Using unstable operation '%s'", "v2.convert_security_monitoring_terraform_resource")
+      else
+        raise DatadogAPIClient::APIError.new(message: format("Unstable operation '%s' is disabled", "v2.convert_security_monitoring_terraform_resource"))
+      end
+
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.convert_security_monitoring_terraform_resource ...'
+      end
+      # verify the required parameter 'resource_type' is set
+      if @api_client.config.client_side_validation && resource_type.nil?
+        fail ArgumentError, "Missing the required parameter 'resource_type' when calling SecurityMonitoringAPI.convert_security_monitoring_terraform_resource"
+      end
+      # verify enum value
+      allowable_values = ['suppressions', 'critical_assets']
+      if @api_client.config.client_side_validation && !allowable_values.include?(resource_type)
+        fail ArgumentError, "invalid value for \"resource_type\", must be one of #{allowable_values}"
+      end
+      # verify the required parameter 'body' is set
+      if @api_client.config.client_side_validation && body.nil?
+        fail ArgumentError, "Missing the required parameter 'body' when calling SecurityMonitoringAPI.convert_security_monitoring_terraform_resource"
+      end
+      # resource path
+      local_var_path = '/api/v2/security_monitoring/terraform/{resource_type}/convert'.sub('{resource_type}', CGI.escape(resource_type.to_s).gsub('%2F', '/'))
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json'])
+      # HTTP header 'Content-Type'
+      header_params['Content-Type'] = @api_client.select_header_content_type(['application/json'])
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body] || @api_client.object_to_http_body(body)
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'SecurityMonitoringTerraformExportResponse'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
+
+      new_options = opts.merge(
+        :operation => :convert_security_monitoring_terraform_resource,
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type,
+        :api_version => "V2"
+      )
+
+      data, status_code, headers = @api_client.call_api(Net::HTTP::Post, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#convert_security_monitoring_terraform_resource\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
     # Create cases for security findings.
     #
     # @see #create_cases_with_http_info
@@ -1212,10 +1587,10 @@ module DatadogAPIClient::V2
 
     # Deactivate content pack.
     #
-    # Deactivate a security monitoring content pack. This operation removes the content pack's
+    # Deactivate a Cloud SIEM content pack. This operation removes the content pack's
     # configuration from log filters or security filters and updates the content pack activation state.
     #
-    # @param content_pack_id [String] The ID of the content pack to deactivate.
+    # @param content_pack_id [String] The ID of the content pack to deactivate (for example, `aws-cloudtrail`).
     # @param opts [Hash] the optional parameters
     # @return [Array<(nil, Integer, Hash)>] nil, response status code and response headers
     def deactivate_content_pack_with_http_info(content_pack_id, opts = {})
@@ -1254,7 +1629,7 @@ module DatadogAPIClient::V2
       return_type = opts[:debug_return_type]
 
       # auth_names
-      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth]
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
 
       new_options = opts.merge(
         :operation => :deactivate_content_pack,
@@ -1344,6 +1719,77 @@ module DatadogAPIClient::V2
       return data, status_code, headers
     end
 
+    # Delete an existing job.
+    #
+    # @see #delete_historical_job_with_http_info
+    def delete_historical_job(job_id, opts = {})
+      delete_historical_job_with_http_info(job_id, opts)
+      nil
+    end
+
+    # Delete an existing job.
+    #
+    # Delete an existing job.
+    #
+    # @param job_id [String] The ID of the job.
+    # @param opts [Hash] the optional parameters
+    # @return [Array<(nil, Integer, Hash)>] nil, response status code and response headers
+    def delete_historical_job_with_http_info(job_id, opts = {})
+      unstable_enabled = @api_client.config.unstable_operations["v2.delete_historical_job".to_sym]
+      if unstable_enabled
+        @api_client.config.logger.warn format("Using unstable operation '%s'", "v2.delete_historical_job")
+      else
+        raise DatadogAPIClient::APIError.new(message: format("Unstable operation '%s' is disabled", "v2.delete_historical_job"))
+      end
+
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.delete_historical_job ...'
+      end
+      # verify the required parameter 'job_id' is set
+      if @api_client.config.client_side_validation && job_id.nil?
+        fail ArgumentError, "Missing the required parameter 'job_id' when calling SecurityMonitoringAPI.delete_historical_job"
+      end
+      # resource path
+      local_var_path = '/api/v2/siem-historical-detections/jobs/{job_id}'.sub('{job_id}', CGI.escape(job_id.to_s).gsub('%2F', '/'))
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['*/*'])
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body]
+
+      # return_type
+      return_type = opts[:debug_return_type]
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
+
+      new_options = opts.merge(
+        :operation => :delete_historical_job,
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type,
+        :api_version => "V2"
+      )
+
+      data, status_code, headers = @api_client.call_api(Net::HTTP::Delete, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#delete_historical_job\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
     # Delete a security filter.
     #
     # @see #delete_security_filter_with_http_info
@@ -1669,38 +2115,32 @@ module DatadogAPIClient::V2
       return data, status_code, headers
     end
 
-    # Delete an existing job.
+    # Delete a vulnerability-based notification rule.
     #
-    # @see #delete_threat_hunting_job_with_http_info
-    def delete_threat_hunting_job(job_id, opts = {})
-      delete_threat_hunting_job_with_http_info(job_id, opts)
+    # @see #delete_vulnerability_notification_rule_with_http_info
+    def delete_vulnerability_notification_rule(id, opts = {})
+      delete_vulnerability_notification_rule_with_http_info(id, opts)
       nil
     end
 
-    # Delete an existing job.
+    # Delete a vulnerability-based notification rule.
     #
-    # Delete an existing job.
+    # Delete a notification rule for security vulnerabilities.
     #
-    # @param job_id [String] The ID of the job.
+    # @param id [String] ID of the notification rule.
     # @param opts [Hash] the optional parameters
     # @return [Array<(nil, Integer, Hash)>] nil, response status code and response headers
-    def delete_threat_hunting_job_with_http_info(job_id, opts = {})
-      unstable_enabled = @api_client.config.unstable_operations["v2.delete_threat_hunting_job".to_sym]
-      if unstable_enabled
-        @api_client.config.logger.warn format("Using unstable operation '%s'", "v2.delete_threat_hunting_job")
-      else
-        raise DatadogAPIClient::APIError.new(message: format("Unstable operation '%s' is disabled", "v2.delete_threat_hunting_job"))
-      end
+    def delete_vulnerability_notification_rule_with_http_info(id, opts = {})
 
       if @api_client.config.debugging
-        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.delete_threat_hunting_job ...'
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.delete_vulnerability_notification_rule ...'
       end
-      # verify the required parameter 'job_id' is set
-      if @api_client.config.client_side_validation && job_id.nil?
-        fail ArgumentError, "Missing the required parameter 'job_id' when calling SecurityMonitoringAPI.delete_threat_hunting_job"
+      # verify the required parameter 'id' is set
+      if @api_client.config.client_side_validation && id.nil?
+        fail ArgumentError, "Missing the required parameter 'id' when calling SecurityMonitoringAPI.delete_vulnerability_notification_rule"
       end
       # resource path
-      local_var_path = '/api/v2/siem-threat-hunting/jobs/{job_id}'.sub('{job_id}', CGI.escape(job_id.to_s).gsub('%2F', '/'))
+      local_var_path = '/api/v2/security/vulnerabilities/notification_rules/{id}'.sub('{id}', CGI.escape(id.to_s).gsub('%2F', '/'))
 
       # query parameters
       query_params = opts[:query_params] || {}
@@ -1720,10 +2160,10 @@ module DatadogAPIClient::V2
       return_type = opts[:debug_return_type]
 
       # auth_names
-      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth]
 
       new_options = opts.merge(
-        :operation => :delete_threat_hunting_job,
+        :operation => :delete_vulnerability_notification_rule,
         :header_params => header_params,
         :query_params => query_params,
         :form_params => form_params,
@@ -1735,37 +2175,38 @@ module DatadogAPIClient::V2
 
       data, status_code, headers = @api_client.call_api(Net::HTTP::Delete, local_var_path, new_options)
       if @api_client.config.debugging
-        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#delete_threat_hunting_job\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#delete_vulnerability_notification_rule\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
       end
       return data, status_code, headers
     end
 
-    # Delete a vulnerability-based notification rule.
+    # Detach security findings from their case.
     #
-    # @see #delete_vulnerability_notification_rule_with_http_info
-    def delete_vulnerability_notification_rule(id, opts = {})
-      delete_vulnerability_notification_rule_with_http_info(id, opts)
+    # @see #detach_case_with_http_info
+    def detach_case(body, opts = {})
+      detach_case_with_http_info(body, opts)
       nil
     end
 
-    # Delete a vulnerability-based notification rule.
+    # Detach security findings from their case.
     #
-    # Delete a notification rule for security vulnerabilities.
+    # Detach security findings from their case.
+    # This operation dissociates security findings from their associated cases without deleting the cases themselves. You can detach security findings from multiple different cases in a single request, with a limit of 50 security findings per request. Security findings that are not currently attached to any case will be ignored.
     #
-    # @param id [String] ID of the notification rule.
+    # @param body [DetachCaseRequest] 
     # @param opts [Hash] the optional parameters
     # @return [Array<(nil, Integer, Hash)>] nil, response status code and response headers
-    def delete_vulnerability_notification_rule_with_http_info(id, opts = {})
+    def detach_case_with_http_info(body, opts = {})
 
       if @api_client.config.debugging
-        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.delete_vulnerability_notification_rule ...'
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.detach_case ...'
       end
-      # verify the required parameter 'id' is set
-      if @api_client.config.client_side_validation && id.nil?
-        fail ArgumentError, "Missing the required parameter 'id' when calling SecurityMonitoringAPI.delete_vulnerability_notification_rule"
+      # verify the required parameter 'body' is set
+      if @api_client.config.client_side_validation && body.nil?
+        fail ArgumentError, "Missing the required parameter 'body' when calling SecurityMonitoringAPI.detach_case"
       end
       # resource path
-      local_var_path = '/api/v2/security/vulnerabilities/notification_rules/{id}'.sub('{id}', CGI.escape(id.to_s).gsub('%2F', '/'))
+      local_var_path = '/api/v2/security/findings/cases'
 
       # query parameters
       query_params = opts[:query_params] || {}
@@ -1774,21 +2215,23 @@ module DatadogAPIClient::V2
       header_params = opts[:header_params] || {}
       # HTTP header 'Accept' (if needed)
       header_params['Accept'] = @api_client.select_header_accept(['*/*'])
+      # HTTP header 'Content-Type'
+      header_params['Content-Type'] = @api_client.select_header_content_type(['application/json'])
 
       # form parameters
       form_params = opts[:form_params] || {}
 
       # http body (model)
-      post_body = opts[:debug_body]
+      post_body = opts[:debug_body] || @api_client.object_to_http_body(body)
 
       # return_type
       return_type = opts[:debug_return_type]
 
       # auth_names
-      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth]
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
 
       new_options = opts.merge(
-        :operation => :delete_vulnerability_notification_rule,
+        :operation => :detach_case,
         :header_params => header_params,
         :query_params => query_params,
         :form_params => form_params,
@@ -1800,38 +2243,42 @@ module DatadogAPIClient::V2
 
       data, status_code, headers = @api_client.call_api(Net::HTTP::Delete, local_var_path, new_options)
       if @api_client.config.debugging
-        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#delete_vulnerability_notification_rule\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#detach_case\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
       end
       return data, status_code, headers
     end
 
-    # Detach security findings from their case.
+    # Update security signal triage state or assignee.
     #
-    # @see #detach_case_with_http_info
-    def detach_case(body, opts = {})
-      detach_case_with_http_info(body, opts)
-      nil
+    # @see #edit_security_monitoring_signal_with_http_info
+    def edit_security_monitoring_signal(signal_id, body, opts = {})
+      data, _status_code, _headers = edit_security_monitoring_signal_with_http_info(signal_id, body, opts)
+      data
     end
 
-    # Detach security findings from their case.
+    # Update security signal triage state or assignee.
     #
-    # Detach security findings from their case.
-    # This operation dissociates security findings from their associated cases without deleting the cases themselves. You can detach security findings from multiple different cases in a single request, with a limit of 50 security findings per request. Security findings that are not currently attached to any case will be ignored.
+    # Update the triage state or assignee of a security signal.
     #
-    # @param body [DetachCaseRequest] 
+    # @param signal_id [String] The ID of the signal.
+    # @param body [SecurityMonitoringSignalUpdateRequest] Attributes describing the signal triage state or assignee update.
     # @param opts [Hash] the optional parameters
-    # @return [Array<(nil, Integer, Hash)>] nil, response status code and response headers
-    def detach_case_with_http_info(body, opts = {})
+    # @return [Array<(SecurityMonitoringSignalTriageUpdateResponse, Integer, Hash)>] SecurityMonitoringSignalTriageUpdateResponse data, response status code and response headers
+    def edit_security_monitoring_signal_with_http_info(signal_id, body, opts = {})
 
       if @api_client.config.debugging
-        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.detach_case ...'
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.edit_security_monitoring_signal ...'
+      end
+      # verify the required parameter 'signal_id' is set
+      if @api_client.config.client_side_validation && signal_id.nil?
+        fail ArgumentError, "Missing the required parameter 'signal_id' when calling SecurityMonitoringAPI.edit_security_monitoring_signal"
       end
       # verify the required parameter 'body' is set
       if @api_client.config.client_side_validation && body.nil?
-        fail ArgumentError, "Missing the required parameter 'body' when calling SecurityMonitoringAPI.detach_case"
+        fail ArgumentError, "Missing the required parameter 'body' when calling SecurityMonitoringAPI.edit_security_monitoring_signal"
       end
       # resource path
-      local_var_path = '/api/v2/security/findings/cases'
+      local_var_path = '/api/v2/security_monitoring/signals/{signal_id}/update'.sub('{signal_id}', CGI.escape(signal_id.to_s).gsub('%2F', '/'))
 
       # query parameters
       query_params = opts[:query_params] || {}
@@ -1839,7 +2286,7 @@ module DatadogAPIClient::V2
       # header parameters
       header_params = opts[:header_params] || {}
       # HTTP header 'Accept' (if needed)
-      header_params['Accept'] = @api_client.select_header_accept(['*/*'])
+      header_params['Accept'] = @api_client.select_header_accept(['application/json'])
       # HTTP header 'Content-Type'
       header_params['Content-Type'] = @api_client.select_header_content_type(['application/json'])
 
@@ -1850,13 +2297,13 @@ module DatadogAPIClient::V2
       post_body = opts[:debug_body] || @api_client.object_to_http_body(body)
 
       # return_type
-      return_type = opts[:debug_return_type]
+      return_type = opts[:debug_return_type] || 'SecurityMonitoringSignalTriageUpdateResponse'
 
       # auth_names
       auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
 
       new_options = opts.merge(
-        :operation => :detach_case,
+        :operation => :edit_security_monitoring_signal,
         :header_params => header_params,
         :query_params => query_params,
         :form_params => form_params,
@@ -1866,9 +2313,9 @@ module DatadogAPIClient::V2
         :api_version => "V2"
       )
 
-      data, status_code, headers = @api_client.call_api(Net::HTTP::Delete, local_var_path, new_options)
+      data, status_code, headers = @api_client.call_api(Net::HTTP::Patch, local_var_path, new_options)
       if @api_client.config.debugging
-        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#detach_case\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#edit_security_monitoring_signal\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
       end
       return data, status_code, headers
     end
@@ -1925,7 +2372,7 @@ module DatadogAPIClient::V2
       return_type = opts[:debug_return_type] || 'SecurityMonitoringSignalTriageUpdateResponse'
 
       # auth_names
-      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth]
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
 
       new_options = opts.merge(
         :operation => :edit_security_monitoring_signal_assignee,
@@ -1997,7 +2444,7 @@ module DatadogAPIClient::V2
       return_type = opts[:debug_return_type] || 'SecurityMonitoringSignalTriageUpdateResponse'
 
       # auth_names
-      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth]
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
 
       new_options = opts.merge(
         :operation => :edit_security_monitoring_signal_incidents,
@@ -2017,37 +2464,122 @@ module DatadogAPIClient::V2
       return data, status_code, headers
     end
 
-    # Change the triage state of a security signal.
+    # Change the triage state of a security signal.
+    #
+    # @see #edit_security_monitoring_signal_state_with_http_info
+    def edit_security_monitoring_signal_state(signal_id, body, opts = {})
+      data, _status_code, _headers = edit_security_monitoring_signal_state_with_http_info(signal_id, body, opts)
+      data
+    end
+
+    # Change the triage state of a security signal.
+    #
+    # Change the triage state of a security signal.
+    #
+    # @param signal_id [String] The ID of the signal.
+    # @param body [SecurityMonitoringSignalStateUpdateRequest] Attributes describing the signal update.
+    # @param opts [Hash] the optional parameters
+    # @return [Array<(SecurityMonitoringSignalTriageUpdateResponse, Integer, Hash)>] SecurityMonitoringSignalTriageUpdateResponse data, response status code and response headers
+    def edit_security_monitoring_signal_state_with_http_info(signal_id, body, opts = {})
+
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.edit_security_monitoring_signal_state ...'
+      end
+      # verify the required parameter 'signal_id' is set
+      if @api_client.config.client_side_validation && signal_id.nil?
+        fail ArgumentError, "Missing the required parameter 'signal_id' when calling SecurityMonitoringAPI.edit_security_monitoring_signal_state"
+      end
+      # verify the required parameter 'body' is set
+      if @api_client.config.client_side_validation && body.nil?
+        fail ArgumentError, "Missing the required parameter 'body' when calling SecurityMonitoringAPI.edit_security_monitoring_signal_state"
+      end
+      # resource path
+      local_var_path = '/api/v2/security_monitoring/signals/{signal_id}/state'.sub('{signal_id}', CGI.escape(signal_id.to_s).gsub('%2F', '/'))
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json'])
+      # HTTP header 'Content-Type'
+      header_params['Content-Type'] = @api_client.select_header_content_type(['application/json'])
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body] || @api_client.object_to_http_body(body)
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'SecurityMonitoringSignalTriageUpdateResponse'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
+
+      new_options = opts.merge(
+        :operation => :edit_security_monitoring_signal_state,
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type,
+        :api_version => "V2"
+      )
+
+      data, status_code, headers = @api_client.call_api(Net::HTTP::Patch, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#edit_security_monitoring_signal_state\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
+    # Export security monitoring resource to Terraform.
     #
-    # @see #edit_security_monitoring_signal_state_with_http_info
-    def edit_security_monitoring_signal_state(signal_id, body, opts = {})
-      data, _status_code, _headers = edit_security_monitoring_signal_state_with_http_info(signal_id, body, opts)
+    # @see #export_security_monitoring_terraform_resource_with_http_info
+    def export_security_monitoring_terraform_resource(resource_type, resource_id, opts = {})
+      data, _status_code, _headers = export_security_monitoring_terraform_resource_with_http_info(resource_type, resource_id, opts)
       data
     end
 
-    # Change the triage state of a security signal.
+    # Export security monitoring resource to Terraform.
     #
-    # Change the triage state of a security signal.
+    # Export a security monitoring resource to a Terraform configuration.
+    # The `resource_type` path parameter specifies the type of resource to export
+    # and must be one of `suppressions` or `critical_assets`.
     #
-    # @param signal_id [String] The ID of the signal.
-    # @param body [SecurityMonitoringSignalStateUpdateRequest] Attributes describing the signal update.
+    # @param resource_type [SecurityMonitoringTerraformResourceType] The type of security monitoring resource to export.
+    # @param resource_id [String] The ID of the security monitoring resource to export.
     # @param opts [Hash] the optional parameters
-    # @return [Array<(SecurityMonitoringSignalTriageUpdateResponse, Integer, Hash)>] SecurityMonitoringSignalTriageUpdateResponse data, response status code and response headers
-    def edit_security_monitoring_signal_state_with_http_info(signal_id, body, opts = {})
+    # @return [Array<(SecurityMonitoringTerraformExportResponse, Integer, Hash)>] SecurityMonitoringTerraformExportResponse data, response status code and response headers
+    def export_security_monitoring_terraform_resource_with_http_info(resource_type, resource_id, opts = {})
+      unstable_enabled = @api_client.config.unstable_operations["v2.export_security_monitoring_terraform_resource".to_sym]
+      if unstable_enabled
+        @api_client.config.logger.warn format("Using unstable operation '%s'", "v2.export_security_monitoring_terraform_resource")
+      else
+        raise DatadogAPIClient::APIError.new(message: format("Unstable operation '%s' is disabled", "v2.export_security_monitoring_terraform_resource"))
+      end
 
       if @api_client.config.debugging
-        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.edit_security_monitoring_signal_state ...'
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.export_security_monitoring_terraform_resource ...'
       end
-      # verify the required parameter 'signal_id' is set
-      if @api_client.config.client_side_validation && signal_id.nil?
-        fail ArgumentError, "Missing the required parameter 'signal_id' when calling SecurityMonitoringAPI.edit_security_monitoring_signal_state"
+      # verify the required parameter 'resource_type' is set
+      if @api_client.config.client_side_validation && resource_type.nil?
+        fail ArgumentError, "Missing the required parameter 'resource_type' when calling SecurityMonitoringAPI.export_security_monitoring_terraform_resource"
       end
-      # verify the required parameter 'body' is set
-      if @api_client.config.client_side_validation && body.nil?
-        fail ArgumentError, "Missing the required parameter 'body' when calling SecurityMonitoringAPI.edit_security_monitoring_signal_state"
+      # verify enum value
+      allowable_values = ['suppressions', 'critical_assets']
+      if @api_client.config.client_side_validation && !allowable_values.include?(resource_type)
+        fail ArgumentError, "invalid value for \"resource_type\", must be one of #{allowable_values}"
+      end
+      # verify the required parameter 'resource_id' is set
+      if @api_client.config.client_side_validation && resource_id.nil?
+        fail ArgumentError, "Missing the required parameter 'resource_id' when calling SecurityMonitoringAPI.export_security_monitoring_terraform_resource"
       end
       # resource path
-      local_var_path = '/api/v2/security_monitoring/signals/{signal_id}/state'.sub('{signal_id}', CGI.escape(signal_id.to_s).gsub('%2F', '/'))
+      local_var_path = '/api/v2/security_monitoring/terraform/{resource_type}/{resource_id}'.sub('{resource_type}', CGI.escape(resource_type.to_s).gsub('%2F', '/')).sub('{resource_id}', CGI.escape(resource_id.to_s).gsub('%2F', '/'))
 
       # query parameters
       query_params = opts[:query_params] || {}
@@ -2056,23 +2588,21 @@ module DatadogAPIClient::V2
       header_params = opts[:header_params] || {}
       # HTTP header 'Accept' (if needed)
       header_params['Accept'] = @api_client.select_header_accept(['application/json'])
-      # HTTP header 'Content-Type'
-      header_params['Content-Type'] = @api_client.select_header_content_type(['application/json'])
 
       # form parameters
       form_params = opts[:form_params] || {}
 
       # http body (model)
-      post_body = opts[:debug_body] || @api_client.object_to_http_body(body)
+      post_body = opts[:debug_body]
 
       # return_type
-      return_type = opts[:debug_return_type] || 'SecurityMonitoringSignalTriageUpdateResponse'
+      return_type = opts[:debug_return_type] || 'SecurityMonitoringTerraformExportResponse'
 
       # auth_names
-      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth]
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
 
       new_options = opts.merge(
-        :operation => :edit_security_monitoring_signal_state,
+        :operation => :export_security_monitoring_terraform_resource,
         :header_params => header_params,
         :query_params => query_params,
         :form_params => form_params,
@@ -2082,9 +2612,9 @@ module DatadogAPIClient::V2
         :api_version => "V2"
       )
 
-      data, status_code, headers = @api_client.call_api(Net::HTTP::Patch, local_var_path, new_options)
+      data, status_code, headers = @api_client.call_api(Net::HTTP::Get, local_var_path, new_options)
       if @api_client.config.debugging
-        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#edit_security_monitoring_signal_state\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#export_security_monitoring_terraform_resource\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
       end
       return data, status_code, headers
     end
@@ -2099,9 +2629,8 @@ module DatadogAPIClient::V2
 
     # Get content pack states.
     #
-    # Get the activation and configuration states for all security monitoring content packs.
-    # This endpoint returns status information about each content pack including activation state,
-    # integration status, and log collection status.
+    # Get the activation state, integration status, and log collection status
+    # for all Cloud SIEM content packs.
     #
     # @param opts [Hash] the optional parameters
     # @return [Array<(SecurityMonitoringContentPackStatesResponse, Integer, Hash)>] SecurityMonitoringContentPackStatesResponse data, response status code and response headers
@@ -2137,7 +2666,7 @@ module DatadogAPIClient::V2
       return_type = opts[:debug_return_type] || 'SecurityMonitoringContentPackStatesResponse'
 
       # auth_names
-      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth]
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
 
       new_options = opts.merge(
         :operation => :get_content_packs_states,
@@ -2368,6 +2897,214 @@ module DatadogAPIClient::V2
       return data, status_code, headers
     end
 
+    # Get a job's details.
+    #
+    # @see #get_historical_job_with_http_info
+    def get_historical_job(job_id, opts = {})
+      data, _status_code, _headers = get_historical_job_with_http_info(job_id, opts)
+      data
+    end
+
+    # Get a job's details.
+    #
+    # Get a job's details.
+    #
+    # @param job_id [String] The ID of the job.
+    # @param opts [Hash] the optional parameters
+    # @return [Array<(HistoricalJobResponse, Integer, Hash)>] HistoricalJobResponse data, response status code and response headers
+    def get_historical_job_with_http_info(job_id, opts = {})
+      unstable_enabled = @api_client.config.unstable_operations["v2.get_historical_job".to_sym]
+      if unstable_enabled
+        @api_client.config.logger.warn format("Using unstable operation '%s'", "v2.get_historical_job")
+      else
+        raise DatadogAPIClient::APIError.new(message: format("Unstable operation '%s' is disabled", "v2.get_historical_job"))
+      end
+
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.get_historical_job ...'
+      end
+      # verify the required parameter 'job_id' is set
+      if @api_client.config.client_side_validation && job_id.nil?
+        fail ArgumentError, "Missing the required parameter 'job_id' when calling SecurityMonitoringAPI.get_historical_job"
+      end
+      # resource path
+      local_var_path = '/api/v2/siem-historical-detections/jobs/{job_id}'.sub('{job_id}', CGI.escape(job_id.to_s).gsub('%2F', '/'))
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json'])
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body]
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'HistoricalJobResponse'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
+
+      new_options = opts.merge(
+        :operation => :get_historical_job,
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type,
+        :api_version => "V2"
+      )
+
+      data, status_code, headers = @api_client.call_api(Net::HTTP::Get, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#get_historical_job\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
+    # Get an indicator of compromise.
+    #
+    # @see #get_indicator_of_compromise_with_http_info
+    def get_indicator_of_compromise(indicator, opts = {})
+      data, _status_code, _headers = get_indicator_of_compromise_with_http_info(indicator, opts)
+      data
+    end
+
+    # Get an indicator of compromise.
+    #
+    # Get detailed information about a specific indicator of compromise (IoC).
+    #
+    # @param indicator [String] The indicator value to look up (for example, an IP address or domain).
+    # @param opts [Hash] the optional parameters
+    # @return [Array<(GetIoCIndicatorResponse, Integer, Hash)>] GetIoCIndicatorResponse data, response status code and response headers
+    def get_indicator_of_compromise_with_http_info(indicator, opts = {})
+      unstable_enabled = @api_client.config.unstable_operations["v2.get_indicator_of_compromise".to_sym]
+      if unstable_enabled
+        @api_client.config.logger.warn format("Using unstable operation '%s'", "v2.get_indicator_of_compromise")
+      else
+        raise DatadogAPIClient::APIError.new(message: format("Unstable operation '%s' is disabled", "v2.get_indicator_of_compromise"))
+      end
+
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.get_indicator_of_compromise ...'
+      end
+      # verify the required parameter 'indicator' is set
+      if @api_client.config.client_side_validation && indicator.nil?
+        fail ArgumentError, "Missing the required parameter 'indicator' when calling SecurityMonitoringAPI.get_indicator_of_compromise"
+      end
+      # resource path
+      local_var_path = '/api/v2/security/siem/ioc-explorer/indicator'
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+      query_params[:'indicator'] = indicator
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json'])
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body]
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'GetIoCIndicatorResponse'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
+
+      new_options = opts.merge(
+        :operation => :get_indicator_of_compromise,
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type,
+        :api_version => "V2"
+      )
+
+      data, status_code, headers = @api_client.call_api(Net::HTTP::Get, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#get_indicator_of_compromise\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
+    # Get investigation queries for a signal.
+    #
+    # @see #get_investigation_log_queries_matching_signal_with_http_info
+    def get_investigation_log_queries_matching_signal(signal_id, opts = {})
+      data, _status_code, _headers = get_investigation_log_queries_matching_signal_with_http_info(signal_id, opts)
+      data
+    end
+
+    # Get investigation queries for a signal.
+    #
+    # Get the list of investigation log queries available for a given security signal.
+    #
+    # @param signal_id [String] The ID of the signal.
+    # @param opts [Hash] the optional parameters
+    # @return [Array<(SecurityMonitoringSignalSuggestedActionsResponse, Integer, Hash)>] SecurityMonitoringSignalSuggestedActionsResponse data, response status code and response headers
+    def get_investigation_log_queries_matching_signal_with_http_info(signal_id, opts = {})
+
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.get_investigation_log_queries_matching_signal ...'
+      end
+      # verify the required parameter 'signal_id' is set
+      if @api_client.config.client_side_validation && signal_id.nil?
+        fail ArgumentError, "Missing the required parameter 'signal_id' when calling SecurityMonitoringAPI.get_investigation_log_queries_matching_signal"
+      end
+      # resource path
+      local_var_path = '/api/v2/security_monitoring/signals/{signal_id}/investigation_queries'.sub('{signal_id}', CGI.escape(signal_id.to_s).gsub('%2F', '/'))
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json'])
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body]
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'SecurityMonitoringSignalSuggestedActionsResponse'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
+
+      new_options = opts.merge(
+        :operation => :get_investigation_log_queries_matching_signal,
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type,
+        :api_version => "V2"
+      )
+
+      data, status_code, headers = @api_client.call_api(Net::HTTP::Get, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#get_investigation_log_queries_matching_signal\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
     # List resource filters.
     #
     # @see #get_resource_evaluation_filters_with_http_info
@@ -2804,7 +3541,7 @@ module DatadogAPIClient::V2
     #
     # Get a hist signal's details.
     #
-    # @param histsignal_id [String] The ID of the threat hunting signal.
+    # @param histsignal_id [String] The ID of the historical signal.
     # @param opts [Hash] the optional parameters
     # @return [Array<(SecurityMonitoringSignalResponse, Integer, Hash)>] SecurityMonitoringSignalResponse data, response status code and response headers
     def get_security_monitoring_histsignal_with_http_info(histsignal_id, opts = {})
@@ -2823,7 +3560,7 @@ module DatadogAPIClient::V2
         fail ArgumentError, "Missing the required parameter 'histsignal_id' when calling SecurityMonitoringAPI.get_security_monitoring_histsignal"
       end
       # resource path
-      local_var_path = '/api/v2/siem-threat-hunting/histsignals/{histsignal_id}'.sub('{histsignal_id}', CGI.escape(histsignal_id.to_s).gsub('%2F', '/'))
+      local_var_path = '/api/v2/siem-historical-detections/histsignals/{histsignal_id}'.sub('{histsignal_id}', CGI.escape(histsignal_id.to_s).gsub('%2F', '/'))
 
       # query parameters
       query_params = opts[:query_params] || {}
@@ -2907,7 +3644,7 @@ module DatadogAPIClient::V2
         fail ArgumentError, 'invalid value for "opts[:"page_limit"]" when calling SecurityMonitoringAPI.get_security_monitoring_histsignals_by_job_id, must be smaller than or equal to 1000.'
       end
       # resource path
-      local_var_path = '/api/v2/siem-threat-hunting/jobs/{job_id}/histsignals'.sub('{job_id}', CGI.escape(job_id.to_s).gsub('%2F', '/'))
+      local_var_path = '/api/v2/siem-historical-detections/jobs/{job_id}/histsignals'.sub('{job_id}', CGI.escape(job_id.to_s).gsub('%2F', '/'))
 
       # query parameters
       query_params = opts[:query_params] || {}
@@ -3173,7 +3910,67 @@ module DatadogAPIClient::V2
         fail ArgumentError, "Missing the required parameter 'id' when calling SecurityMonitoringAPI.get_signal_notification_rule"
       end
       # resource path
-      local_var_path = '/api/v2/security/signals/notification_rules/{id}'.sub('{id}', CGI.escape(id.to_s).gsub('%2F', '/'))
+      local_var_path = '/api/v2/security/signals/notification_rules/{id}'.sub('{id}', CGI.escape(id.to_s).gsub('%2F', '/'))
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json'])
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body]
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'NotificationRuleResponse'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth]
+
+      new_options = opts.merge(
+        :operation => :get_signal_notification_rule,
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type,
+        :api_version => "V2"
+      )
+
+      data, status_code, headers = @api_client.call_api(Net::HTTP::Get, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#get_signal_notification_rule\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
+    # Get the list of signal-based notification rules.
+    #
+    # @see #get_signal_notification_rules_with_http_info
+    def get_signal_notification_rules(opts = {})
+      data, _status_code, _headers = get_signal_notification_rules_with_http_info(opts)
+      data
+    end
+
+    # Get the list of signal-based notification rules.
+    #
+    # Returns the list of notification rules for security signals.
+    #
+    # @param opts [Hash] the optional parameters
+    # @return [Array<(Object, Integer, Hash)>] Object data, response status code and response headers
+    def get_signal_notification_rules_with_http_info(opts = {})
+
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.get_signal_notification_rules ...'
+      end
+      # resource path
+      local_var_path = '/api/v2/security/signals/notification_rules'
 
       # query parameters
       query_params = opts[:query_params] || {}
@@ -3190,13 +3987,13 @@ module DatadogAPIClient::V2
       post_body = opts[:debug_body]
 
       # return_type
-      return_type = opts[:debug_return_type] || 'NotificationRuleResponse'
+      return_type = opts[:debug_return_type] || 'Object'
 
       # auth_names
       auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth]
 
       new_options = opts.merge(
-        :operation => :get_signal_notification_rule,
+        :operation => :get_signal_notification_rules,
         :header_params => header_params,
         :query_params => query_params,
         :form_params => form_params,
@@ -3208,32 +4005,37 @@ module DatadogAPIClient::V2
 
       data, status_code, headers = @api_client.call_api(Net::HTTP::Get, local_var_path, new_options)
       if @api_client.config.debugging
-        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#get_signal_notification_rule\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#get_signal_notification_rules\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
       end
       return data, status_code, headers
     end
 
-    # Get the list of signal-based notification rules.
+    # Get suggested actions for a signal.
     #
-    # @see #get_signal_notification_rules_with_http_info
-    def get_signal_notification_rules(opts = {})
-      data, _status_code, _headers = get_signal_notification_rules_with_http_info(opts)
+    # @see #get_suggested_actions_matching_signal_with_http_info
+    def get_suggested_actions_matching_signal(signal_id, opts = {})
+      data, _status_code, _headers = get_suggested_actions_matching_signal_with_http_info(signal_id, opts)
       data
     end
 
-    # Get the list of signal-based notification rules.
+    # Get suggested actions for a signal.
     #
-    # Returns the list of notification rules for security signals.
+    # Get the list of suggested actions for a given security signal.
     #
+    # @param signal_id [String] The ID of the signal.
     # @param opts [Hash] the optional parameters
-    # @return [Array<(Object, Integer, Hash)>] Object data, response status code and response headers
-    def get_signal_notification_rules_with_http_info(opts = {})
+    # @return [Array<(SecurityMonitoringSignalSuggestedActionsResponse, Integer, Hash)>] SecurityMonitoringSignalSuggestedActionsResponse data, response status code and response headers
+    def get_suggested_actions_matching_signal_with_http_info(signal_id, opts = {})
 
       if @api_client.config.debugging
-        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.get_signal_notification_rules ...'
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.get_suggested_actions_matching_signal ...'
+      end
+      # verify the required parameter 'signal_id' is set
+      if @api_client.config.client_side_validation && signal_id.nil?
+        fail ArgumentError, "Missing the required parameter 'signal_id' when calling SecurityMonitoringAPI.get_suggested_actions_matching_signal"
       end
       # resource path
-      local_var_path = '/api/v2/security/signals/notification_rules'
+      local_var_path = '/api/v2/security_monitoring/signals/{signal_id}/suggested_actions'.sub('{signal_id}', CGI.escape(signal_id.to_s).gsub('%2F', '/'))
 
       # query parameters
       query_params = opts[:query_params] || {}
@@ -3250,13 +4052,13 @@ module DatadogAPIClient::V2
       post_body = opts[:debug_body]
 
       # return_type
-      return_type = opts[:debug_return_type] || 'Object'
+      return_type = opts[:debug_return_type] || 'SecurityMonitoringSignalSuggestedActionsResponse'
 
       # auth_names
-      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth]
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
 
       new_options = opts.merge(
-        :operation => :get_signal_notification_rules,
+        :operation => :get_suggested_actions_matching_signal,
         :header_params => header_params,
         :query_params => query_params,
         :form_params => form_params,
@@ -3268,7 +4070,7 @@ module DatadogAPIClient::V2
 
       data, status_code, headers = @api_client.call_api(Net::HTTP::Get, local_var_path, new_options)
       if @api_client.config.debugging
-        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#get_signal_notification_rules\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#get_suggested_actions_matching_signal\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
       end
       return data, status_code, headers
     end
@@ -3474,77 +4276,6 @@ module DatadogAPIClient::V2
       return data, status_code, headers
     end
 
-    # Get a job's details.
-    #
-    # @see #get_threat_hunting_job_with_http_info
-    def get_threat_hunting_job(job_id, opts = {})
-      data, _status_code, _headers = get_threat_hunting_job_with_http_info(job_id, opts)
-      data
-    end
-
-    # Get a job's details.
-    #
-    # Get a job's details.
-    #
-    # @param job_id [String] The ID of the job.
-    # @param opts [Hash] the optional parameters
-    # @return [Array<(ThreatHuntingJobResponse, Integer, Hash)>] ThreatHuntingJobResponse data, response status code and response headers
-    def get_threat_hunting_job_with_http_info(job_id, opts = {})
-      unstable_enabled = @api_client.config.unstable_operations["v2.get_threat_hunting_job".to_sym]
-      if unstable_enabled
-        @api_client.config.logger.warn format("Using unstable operation '%s'", "v2.get_threat_hunting_job")
-      else
-        raise DatadogAPIClient::APIError.new(message: format("Unstable operation '%s' is disabled", "v2.get_threat_hunting_job"))
-      end
-
-      if @api_client.config.debugging
-        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.get_threat_hunting_job ...'
-      end
-      # verify the required parameter 'job_id' is set
-      if @api_client.config.client_side_validation && job_id.nil?
-        fail ArgumentError, "Missing the required parameter 'job_id' when calling SecurityMonitoringAPI.get_threat_hunting_job"
-      end
-      # resource path
-      local_var_path = '/api/v2/siem-threat-hunting/jobs/{job_id}'.sub('{job_id}', CGI.escape(job_id.to_s).gsub('%2F', '/'))
-
-      # query parameters
-      query_params = opts[:query_params] || {}
-
-      # header parameters
-      header_params = opts[:header_params] || {}
-      # HTTP header 'Accept' (if needed)
-      header_params['Accept'] = @api_client.select_header_accept(['application/json'])
-
-      # form parameters
-      form_params = opts[:form_params] || {}
-
-      # http body (model)
-      post_body = opts[:debug_body]
-
-      # return_type
-      return_type = opts[:debug_return_type] || 'ThreatHuntingJobResponse'
-
-      # auth_names
-      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
-
-      new_options = opts.merge(
-        :operation => :get_threat_hunting_job,
-        :header_params => header_params,
-        :query_params => query_params,
-        :form_params => form_params,
-        :body => post_body,
-        :auth_names => auth_names,
-        :return_type => return_type,
-        :api_version => "V2"
-      )
-
-      data, status_code, headers = @api_client.call_api(Net::HTTP::Get, local_var_path, new_options)
-      if @api_client.config.debugging
-        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#get_threat_hunting_job\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
-      end
-      return data, status_code, headers
-    end
-
     # Get details of a vulnerability notification rule.
     #
     # @see #get_vulnerability_notification_rule_with_http_info
@@ -3940,13 +4671,169 @@ module DatadogAPIClient::V2
         while true do
             response = list_findings(opts)
             @api_client.get_attribute_from_path(response, "data").each { |item| yield(item) }
-            if @api_client.get_attribute_from_path(response, "data").length < page_size
+            if @api_client.get_attribute_from_path(response, "data").length == 0
               break
             end
             @api_client.set_attribute_from_path(api_version, opts, "page_cursor", String, @api_client.get_attribute_from_path(response, "meta.page.cursor"))
         end
     end
 
+    # List historical jobs.
+    #
+    # @see #list_historical_jobs_with_http_info
+    def list_historical_jobs(opts = {})
+      data, _status_code, _headers = list_historical_jobs_with_http_info(opts)
+      data
+    end
+
+    # List historical jobs.
+    #
+    # List historical jobs.
+    #
+    # @param opts [Hash] the optional parameters
+    # @option opts [Integer] :page_size Size for a given page. The maximum allowed value is 100.
+    # @option opts [Integer] :page_number Specific page number to return.
+    # @option opts [String] :sort The order of the jobs in results.
+    # @option opts [String] :filter_query Query used to filter items from the fetched list.
+    # @return [Array<(ListHistoricalJobsResponse, Integer, Hash)>] ListHistoricalJobsResponse data, response status code and response headers
+    def list_historical_jobs_with_http_info(opts = {})
+      unstable_enabled = @api_client.config.unstable_operations["v2.list_historical_jobs".to_sym]
+      if unstable_enabled
+        @api_client.config.logger.warn format("Using unstable operation '%s'", "v2.list_historical_jobs")
+      else
+        raise DatadogAPIClient::APIError.new(message: format("Unstable operation '%s' is disabled", "v2.list_historical_jobs"))
+      end
+
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.list_historical_jobs ...'
+      end
+      # resource path
+      local_var_path = '/api/v2/siem-historical-detections/jobs'
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+      query_params[:'page[size]'] = opts[:'page_size'] if !opts[:'page_size'].nil?
+      query_params[:'page[number]'] = opts[:'page_number'] if !opts[:'page_number'].nil?
+      query_params[:'sort'] = opts[:'sort'] if !opts[:'sort'].nil?
+      query_params[:'filter[query]'] = opts[:'filter_query'] if !opts[:'filter_query'].nil?
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json'])
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body]
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'ListHistoricalJobsResponse'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
+
+      new_options = opts.merge(
+        :operation => :list_historical_jobs,
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type,
+        :api_version => "V2"
+      )
+
+      data, status_code, headers = @api_client.call_api(Net::HTTP::Get, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#list_historical_jobs\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
+    # List indicators of compromise.
+    #
+    # @see #list_indicators_of_compromise_with_http_info
+    def list_indicators_of_compromise(opts = {})
+      data, _status_code, _headers = list_indicators_of_compromise_with_http_info(opts)
+      data
+    end
+
+    # List indicators of compromise.
+    #
+    # Get a list of indicators of compromise (IoCs) matching the specified filters.
+    #
+    # @param opts [Hash] the optional parameters
+    # @option opts [Integer] :limit Number of results per page.
+    # @option opts [Integer] :offset Pagination offset.
+    # @option opts [String] :query Search/filter query (supports field:value syntax).
+    # @option opts [String] :sort_column Sort column: score, first_seen_ts_epoch, last_seen_ts_epoch, indicator, indicator_type, signal_count, log_count, category, as_type.
+    # @option opts [String] :sort_order Sort order: asc or desc.
+    # @return [Array<(IoCExplorerListResponse, Integer, Hash)>] IoCExplorerListResponse data, response status code and response headers
+    def list_indicators_of_compromise_with_http_info(opts = {})
+      unstable_enabled = @api_client.config.unstable_operations["v2.list_indicators_of_compromise".to_sym]
+      if unstable_enabled
+        @api_client.config.logger.warn format("Using unstable operation '%s'", "v2.list_indicators_of_compromise")
+      else
+        raise DatadogAPIClient::APIError.new(message: format("Unstable operation '%s' is disabled", "v2.list_indicators_of_compromise"))
+      end
+
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.list_indicators_of_compromise ...'
+      end
+      if @api_client.config.client_side_validation && !opts[:'limit'].nil? && opts[:'limit'] > 2147483647
+        fail ArgumentError, 'invalid value for "opts[:"limit"]" when calling SecurityMonitoringAPI.list_indicators_of_compromise, must be smaller than or equal to 2147483647.'
+      end
+      if @api_client.config.client_side_validation && !opts[:'offset'].nil? && opts[:'offset'] > 2147483647
+        fail ArgumentError, 'invalid value for "opts[:"offset"]" when calling SecurityMonitoringAPI.list_indicators_of_compromise, must be smaller than or equal to 2147483647.'
+      end
+      # resource path
+      local_var_path = '/api/v2/security/siem/ioc-explorer'
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+      query_params[:'limit'] = opts[:'limit'] if !opts[:'limit'].nil?
+      query_params[:'offset'] = opts[:'offset'] if !opts[:'offset'].nil?
+      query_params[:'query'] = opts[:'query'] if !opts[:'query'].nil?
+      query_params[:'sort[column]'] = opts[:'sort_column'] if !opts[:'sort_column'].nil?
+      query_params[:'sort[order]'] = opts[:'sort_order'] if !opts[:'sort_order'].nil?
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json'])
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body]
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'IoCExplorerListResponse'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
+
+      new_options = opts.merge(
+        :operation => :list_indicators_of_compromise,
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type,
+        :api_version => "V2"
+      )
+
+      data, status_code, headers = @api_client.call_api(Net::HTTP::Get, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#list_indicators_of_compromise\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
     # Ruleset get multiple.
     #
     # @see #list_multiple_rulesets_with_http_info
@@ -4306,7 +5193,7 @@ module DatadogAPIClient::V2
         while true do
             response = list_security_findings(opts)
             @api_client.get_attribute_from_path(response, "data").each { |item| yield(item) }
-            if @api_client.get_attribute_from_path(response, "data").length < page_size
+            if @api_client.get_attribute_from_path(response, "data").length == 0
               break
             end
             @api_client.set_attribute_from_path(api_version, opts, "page_cursor", String, @api_client.get_attribute_from_path(response, "meta.page.after"))
@@ -4326,7 +5213,6 @@ module DatadogAPIClient::V2
     # Get the list of all critical assets.
     #
     # @param opts [Hash] the optional parameters
-    # @option opts [String] :query Query string.
     # @return [Array<(SecurityMonitoringCriticalAssetsResponse, Integer, Hash)>] SecurityMonitoringCriticalAssetsResponse data, response status code and response headers
     def list_security_monitoring_critical_assets_with_http_info(opts = {})
 
@@ -4338,7 +5224,6 @@ module DatadogAPIClient::V2
 
       # query parameters
       query_params = opts[:query_params] || {}
-      query_params[:'query'] = opts[:'query'] if !opts[:'query'].nil?
 
       # header parameters
       header_params = opts[:header_params] || {}
@@ -4414,7 +5299,7 @@ module DatadogAPIClient::V2
         fail ArgumentError, 'invalid value for "opts[:"page_limit"]" when calling SecurityMonitoringAPI.list_security_monitoring_histsignals, must be smaller than or equal to 1000.'
       end
       # resource path
-      local_var_path = '/api/v2/siem-threat-hunting/histsignals'
+      local_var_path = '/api/v2/siem-historical-detections/histsignals'
 
       # query parameters
       query_params = opts[:query_params] || {}
@@ -4627,7 +5512,7 @@ module DatadogAPIClient::V2
         while true do
             response = list_security_monitoring_signals(opts)
             @api_client.get_attribute_from_path(response, "data").each { |item| yield(item) }
-            if @api_client.get_attribute_from_path(response, "data").length < page_size
+            if @api_client.get_attribute_from_path(response, "data").length == 0
               break
             end
             @api_client.set_attribute_from_path(api_version, opts, "page_cursor", String, @api_client.get_attribute_from_path(response, "meta.page.after"))
@@ -4706,80 +5591,6 @@ module DatadogAPIClient::V2
       return data, status_code, headers
     end
 
-    # List threat hunting jobs.
-    #
-    # @see #list_threat_hunting_jobs_with_http_info
-    def list_threat_hunting_jobs(opts = {})
-      data, _status_code, _headers = list_threat_hunting_jobs_with_http_info(opts)
-      data
-    end
-
-    # List threat hunting jobs.
-    #
-    # List threat hunting jobs.
-    #
-    # @param opts [Hash] the optional parameters
-    # @option opts [Integer] :page_size Size for a given page. The maximum allowed value is 100.
-    # @option opts [Integer] :page_number Specific page number to return.
-    # @option opts [String] :sort The order of the jobs in results.
-    # @option opts [String] :filter_query Query used to filter items from the fetched list.
-    # @return [Array<(ListThreatHuntingJobsResponse, Integer, Hash)>] ListThreatHuntingJobsResponse data, response status code and response headers
-    def list_threat_hunting_jobs_with_http_info(opts = {})
-      unstable_enabled = @api_client.config.unstable_operations["v2.list_threat_hunting_jobs".to_sym]
-      if unstable_enabled
-        @api_client.config.logger.warn format("Using unstable operation '%s'", "v2.list_threat_hunting_jobs")
-      else
-        raise DatadogAPIClient::APIError.new(message: format("Unstable operation '%s' is disabled", "v2.list_threat_hunting_jobs"))
-      end
-
-      if @api_client.config.debugging
-        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.list_threat_hunting_jobs ...'
-      end
-      # resource path
-      local_var_path = '/api/v2/siem-threat-hunting/jobs'
-
-      # query parameters
-      query_params = opts[:query_params] || {}
-      query_params[:'page[size]'] = opts[:'page_size'] if !opts[:'page_size'].nil?
-      query_params[:'page[number]'] = opts[:'page_number'] if !opts[:'page_number'].nil?
-      query_params[:'sort'] = opts[:'sort'] if !opts[:'sort'].nil?
-      query_params[:'filter[query]'] = opts[:'filter_query'] if !opts[:'filter_query'].nil?
-
-      # header parameters
-      header_params = opts[:header_params] || {}
-      # HTTP header 'Accept' (if needed)
-      header_params['Accept'] = @api_client.select_header_accept(['application/json'])
-
-      # form parameters
-      form_params = opts[:form_params] || {}
-
-      # http body (model)
-      post_body = opts[:debug_body]
-
-      # return_type
-      return_type = opts[:debug_return_type] || 'ListThreatHuntingJobsResponse'
-
-      # auth_names
-      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
-
-      new_options = opts.merge(
-        :operation => :list_threat_hunting_jobs,
-        :header_params => header_params,
-        :query_params => query_params,
-        :form_params => form_params,
-        :body => post_body,
-        :auth_names => auth_names,
-        :return_type => return_type,
-        :api_version => "V2"
-      )
-
-      data, status_code, headers = @api_client.call_api(Net::HTTP::Get, local_var_path, new_options)
-      if @api_client.config.debugging
-        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#list_threat_hunting_jobs\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
-      end
-      return data, status_code, headers
-    end
-
     # List vulnerabilities.
     #
     # @see #list_vulnerabilities_with_http_info
@@ -4880,6 +5691,8 @@ module DatadogAPIClient::V2
     #
     # Extensions can only include one value: `ext:modifier=value`.
     #
+    # @deprecated This API is deprecated.
+    #
     # @param opts [Hash] the optional parameters
     # @option opts [String] :page_token Its value must come from the `links` section of the response of the first request. Do not manually edit it.
     # @option opts [Integer] :page_number The page number to be retrieved. It should be equal or greater than `1`
@@ -4926,6 +5739,7 @@ module DatadogAPIClient::V2
     # @option opts [String] :filter_asset_operating_system_version Filter by asset operating system version.
     # @return [Array<(ListVulnerabilitiesResponse, Integer, Hash)>] ListVulnerabilitiesResponse data, response status code and response headers
     def list_vulnerabilities_with_http_info(opts = {})
+      warn "[DEPRECATION] `ListVulnerabilities` is deprecated."
       unstable_enabled = @api_client.config.unstable_operations["v2.list_vulnerabilities".to_sym]
       if unstable_enabled
         @api_client.config.logger.warn format("Using unstable operation '%s'", "v2.list_vulnerabilities")
@@ -5409,38 +6223,38 @@ module DatadogAPIClient::V2
       return data, status_code, headers
     end
 
-    # Run a threat hunting job.
+    # Run a historical job.
     #
-    # @see #run_threat_hunting_job_with_http_info
-    def run_threat_hunting_job(body, opts = {})
-      data, _status_code, _headers = run_threat_hunting_job_with_http_info(body, opts)
+    # @see #run_historical_job_with_http_info
+    def run_historical_job(body, opts = {})
+      data, _status_code, _headers = run_historical_job_with_http_info(body, opts)
       data
     end
 
-    # Run a threat hunting job.
+    # Run a historical job.
     #
-    # Run a threat hunting job.
+    # Run a historical job.
     #
-    # @param body [RunThreatHuntingJobRequest] 
+    # @param body [RunHistoricalJobRequest] 
     # @param opts [Hash] the optional parameters
     # @return [Array<(JobCreateResponse, Integer, Hash)>] JobCreateResponse data, response status code and response headers
-    def run_threat_hunting_job_with_http_info(body, opts = {})
-      unstable_enabled = @api_client.config.unstable_operations["v2.run_threat_hunting_job".to_sym]
+    def run_historical_job_with_http_info(body, opts = {})
+      unstable_enabled = @api_client.config.unstable_operations["v2.run_historical_job".to_sym]
       if unstable_enabled
-        @api_client.config.logger.warn format("Using unstable operation '%s'", "v2.run_threat_hunting_job")
+        @api_client.config.logger.warn format("Using unstable operation '%s'", "v2.run_historical_job")
       else
-        raise DatadogAPIClient::APIError.new(message: format("Unstable operation '%s' is disabled", "v2.run_threat_hunting_job"))
+        raise DatadogAPIClient::APIError.new(message: format("Unstable operation '%s' is disabled", "v2.run_historical_job"))
       end
 
       if @api_client.config.debugging
-        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.run_threat_hunting_job ...'
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.run_historical_job ...'
       end
       # verify the required parameter 'body' is set
       if @api_client.config.client_side_validation && body.nil?
-        fail ArgumentError, "Missing the required parameter 'body' when calling SecurityMonitoringAPI.run_threat_hunting_job"
+        fail ArgumentError, "Missing the required parameter 'body' when calling SecurityMonitoringAPI.run_historical_job"
       end
       # resource path
-      local_var_path = '/api/v2/siem-threat-hunting/jobs'
+      local_var_path = '/api/v2/siem-historical-detections/jobs'
 
       # query parameters
       query_params = opts[:query_params] || {}
@@ -5465,7 +6279,7 @@ module DatadogAPIClient::V2
       auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
 
       new_options = opts.merge(
-        :operation => :run_threat_hunting_job,
+        :operation => :run_historical_job,
         :header_params => header_params,
         :query_params => query_params,
         :form_params => form_params,
@@ -5477,7 +6291,7 @@ module DatadogAPIClient::V2
 
       data, status_code, headers = @api_client.call_api(Net::HTTP::Post, local_var_path, new_options)
       if @api_client.config.debugging
-        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#run_threat_hunting_job\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#run_historical_job\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
       end
       return data, status_code, headers
     end
@@ -5569,7 +6383,7 @@ module DatadogAPIClient::V2
         while true do
             response = search_security_findings(body, opts)
             @api_client.get_attribute_from_path(response, "data").each { |item| yield(item) }
-            if @api_client.get_attribute_from_path(response, "data").length < page_size
+            if @api_client.get_attribute_from_path(response, "data").length == 0
               break
             end
             @api_client.set_attribute_from_path(api_version, body, "data.attributes.page.cursor", SecurityFindingsSearchRequestData, @api_client.get_attribute_from_path(response, "meta.page.after"))
@@ -5603,7 +6417,7 @@ module DatadogAPIClient::V2
         @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.search_security_monitoring_histsignals ...'
       end
       # resource path
-      local_var_path = '/api/v2/siem-threat-hunting/histsignals/search'
+      local_var_path = '/api/v2/siem-historical-detections/histsignals/search'
 
       # query parameters
       query_params = opts[:query_params] || {}
@@ -5724,7 +6538,7 @@ module DatadogAPIClient::V2
         while true do
             response = search_security_monitoring_signals(opts)
             @api_client.get_attribute_from_path(response, "data").each { |item| yield(item) }
-            if @api_client.get_attribute_from_path(response, "data").length < page_size
+            if @api_client.get_attribute_from_path(response, "data").length == 0
               break
             end
             @api_client.set_attribute_from_path(api_version, opts, "body.page.cursor", SecurityMonitoringSignalListRequest, @api_client.get_attribute_from_path(response, "meta.page.after"))