datadog_api_client 2.52.0 → 2.54.0

data/lib/datadog_api_client/v2/api/security_monitoring_api.rb

@@ -33,11 +33,11 @@ module DatadogAPIClient::V2
 
     # Activate content pack.
     #
-    # Activate a security monitoring content pack. This operation configures the necessary
+    # Activate a Cloud SIEM content pack. This operation configures the necessary
     # log filters or security filters depending on the pricing model and updates the content
     # pack activation state.
     #
-    # @param content_pack_id [String] The ID of the content pack to activate.
+    # @param content_pack_id [String] The ID of the content pack to activate (for example, `aws-cloudtrail`).
     # @param opts [Hash] the optional parameters
     # @return [Array<(nil, Integer, Hash)>] nil, response status code and response headers
     def activate_content_pack_with_http_info(content_pack_id, opts = {})
@@ -76,7 +76,7 @@ module DatadogAPIClient::V2
       return_type = opts[:debug_return_type]
 
       # auth_names
-      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth]
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
 
       new_options = opts.merge(
         :operation => :activate_content_pack,
@@ -237,6 +237,141 @@ module DatadogAPIClient::V2
       return data, status_code, headers
     end
 
+    # Bulk delete security monitoring rules.
+    #
+    # @see #bulk_delete_security_monitoring_rules_with_http_info
+    def bulk_delete_security_monitoring_rules(body, opts = {})
+      data, _status_code, _headers = bulk_delete_security_monitoring_rules_with_http_info(body, opts)
+      data
+    end
+
+    # Bulk delete security monitoring rules.
+    #
+    # Delete multiple security monitoring rules in a single request. Default rules cannot be deleted.
+    #
+    # @param body [SecurityMonitoringRuleBulkDeletePayload] 
+    # @param opts [Hash] the optional parameters
+    # @return [Array<(SecurityMonitoringRuleBulkDeleteResponse, Integer, Hash)>] SecurityMonitoringRuleBulkDeleteResponse data, response status code and response headers
+    def bulk_delete_security_monitoring_rules_with_http_info(body, opts = {})
+
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.bulk_delete_security_monitoring_rules ...'
+      end
+      # verify the required parameter 'body' is set
+      if @api_client.config.client_side_validation && body.nil?
+        fail ArgumentError, "Missing the required parameter 'body' when calling SecurityMonitoringAPI.bulk_delete_security_monitoring_rules"
+      end
+      # resource path
+      local_var_path = '/api/v2/security_monitoring/rules/bulk_delete'
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json'])
+      # HTTP header 'Content-Type'
+      header_params['Content-Type'] = @api_client.select_header_content_type(['application/json'])
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body] || @api_client.object_to_http_body(body)
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'SecurityMonitoringRuleBulkDeleteResponse'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
+
+      new_options = opts.merge(
+        :operation => :bulk_delete_security_monitoring_rules,
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type,
+        :api_version => "V2"
+      )
+
+      data, status_code, headers = @api_client.call_api(Net::HTTP::Delete, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#bulk_delete_security_monitoring_rules\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
+    # Bulk update security signals.
+    #
+    # @see #bulk_edit_security_monitoring_signals_with_http_info
+    def bulk_edit_security_monitoring_signals(body, opts = {})
+      data, _status_code, _headers = bulk_edit_security_monitoring_signals_with_http_info(body, opts)
+      data
+    end
+
+    # Bulk update security signals.
+    #
+    # Update the triage state or assignee of multiple security signals at once.
+    # The maximum number of signals that can be updated in a single request is 199.
+    #
+    # @param body [SecurityMonitoringSignalsBulkUpdateRequest] Attributes describing the signal updates.
+    # @param opts [Hash] the optional parameters
+    # @return [Array<(SecurityMonitoringSignalsBulkTriageUpdateResponse, Integer, Hash)>] SecurityMonitoringSignalsBulkTriageUpdateResponse data, response status code and response headers
+    def bulk_edit_security_monitoring_signals_with_http_info(body, opts = {})
+
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.bulk_edit_security_monitoring_signals ...'
+      end
+      # verify the required parameter 'body' is set
+      if @api_client.config.client_side_validation && body.nil?
+        fail ArgumentError, "Missing the required parameter 'body' when calling SecurityMonitoringAPI.bulk_edit_security_monitoring_signals"
+      end
+      # resource path
+      local_var_path = '/api/v2/security_monitoring/signals/bulk/update'
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json'])
+      # HTTP header 'Content-Type'
+      header_params['Content-Type'] = @api_client.select_header_content_type(['application/json'])
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body] || @api_client.object_to_http_body(body)
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'SecurityMonitoringSignalsBulkTriageUpdateResponse'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
+
+      new_options = opts.merge(
+        :operation => :bulk_edit_security_monitoring_signals,
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type,
+        :api_version => "V2"
+      )
+
+      data, status_code, headers = @api_client.call_api(Net::HTTP::Patch, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#bulk_edit_security_monitoring_signals\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
     # Bulk update triage assignee of security signals.
     #
     # @see #bulk_edit_security_monitoring_signals_assignee_with_http_info
@@ -442,38 +577,124 @@ module DatadogAPIClient::V2
       return data, status_code, headers
     end
 
-    # Cancel a threat hunting job.
+    # Export security monitoring resources to Terraform.
+    #
+    # @see #bulk_export_security_monitoring_terraform_resources_with_http_info
+    def bulk_export_security_monitoring_terraform_resources(resource_type, body, opts = {})
+      data, _status_code, _headers = bulk_export_security_monitoring_terraform_resources_with_http_info(resource_type, body, opts)
+      data
+    end
+
+    # Export security monitoring resources to Terraform.
+    #
+    # Export multiple security monitoring resources to Terraform, packaged as a zip archive.
+    # The `resource_type` path parameter specifies the type of resources to export
+    # and must be one of `suppressions` or `critical_assets`.
+    # A maximum of 1000 resources can be exported in a single request.
+    #
+    # @param resource_type [SecurityMonitoringTerraformResourceType] The type of security monitoring resource to export.
+    # @param body [SecurityMonitoringTerraformBulkExportRequest] The resource IDs to export.
+    # @param opts [Hash] the optional parameters
+    # @return [Array<(File, Integer, Hash)>] File data, response status code and response headers
+    def bulk_export_security_monitoring_terraform_resources_with_http_info(resource_type, body, opts = {})
+      unstable_enabled = @api_client.config.unstable_operations["v2.bulk_export_security_monitoring_terraform_resources".to_sym]
+      if unstable_enabled
+        @api_client.config.logger.warn format("Using unstable operation '%s'", "v2.bulk_export_security_monitoring_terraform_resources")
+      else
+        raise DatadogAPIClient::APIError.new(message: format("Unstable operation '%s' is disabled", "v2.bulk_export_security_monitoring_terraform_resources"))
+      end
+
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.bulk_export_security_monitoring_terraform_resources ...'
+      end
+      # verify the required parameter 'resource_type' is set
+      if @api_client.config.client_side_validation && resource_type.nil?
+        fail ArgumentError, "Missing the required parameter 'resource_type' when calling SecurityMonitoringAPI.bulk_export_security_monitoring_terraform_resources"
+      end
+      # verify enum value
+      allowable_values = ['suppressions', 'critical_assets']
+      if @api_client.config.client_side_validation && !allowable_values.include?(resource_type)
+        fail ArgumentError, "invalid value for \"resource_type\", must be one of #{allowable_values}"
+      end
+      # verify the required parameter 'body' is set
+      if @api_client.config.client_side_validation && body.nil?
+        fail ArgumentError, "Missing the required parameter 'body' when calling SecurityMonitoringAPI.bulk_export_security_monitoring_terraform_resources"
+      end
+      # resource path
+      local_var_path = '/api/v2/security_monitoring/terraform/{resource_type}/bulk'.sub('{resource_type}', CGI.escape(resource_type.to_s).gsub('%2F', '/'))
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/zip', 'application/json'])
+      # HTTP header 'Content-Type'
+      header_params['Content-Type'] = @api_client.select_header_content_type(['application/json'])
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body] || @api_client.object_to_http_body(body)
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'File'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
+
+      new_options = opts.merge(
+        :operation => :bulk_export_security_monitoring_terraform_resources,
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type,
+        :api_version => "V2"
+      )
+
+      data, status_code, headers = @api_client.call_api(Net::HTTP::Post, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#bulk_export_security_monitoring_terraform_resources\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
+    # Cancel a historical job.
     #
-    # @see #cancel_threat_hunting_job_with_http_info
-    def cancel_threat_hunting_job(job_id, opts = {})
-      cancel_threat_hunting_job_with_http_info(job_id, opts)
+    # @see #cancel_historical_job_with_http_info
+    def cancel_historical_job(job_id, opts = {})
+      cancel_historical_job_with_http_info(job_id, opts)
       nil
     end
 
-    # Cancel a threat hunting job.
+    # Cancel a historical job.
     #
-    # Cancel a threat hunting job.
+    # Cancel a historical job.
     #
     # @param job_id [String] The ID of the job.
     # @param opts [Hash] the optional parameters
     # @return [Array<(nil, Integer, Hash)>] nil, response status code and response headers
-    def cancel_threat_hunting_job_with_http_info(job_id, opts = {})
-      unstable_enabled = @api_client.config.unstable_operations["v2.cancel_threat_hunting_job".to_sym]
+    def cancel_historical_job_with_http_info(job_id, opts = {})
+      unstable_enabled = @api_client.config.unstable_operations["v2.cancel_historical_job".to_sym]
       if unstable_enabled
-        @api_client.config.logger.warn format("Using unstable operation '%s'", "v2.cancel_threat_hunting_job")
+        @api_client.config.logger.warn format("Using unstable operation '%s'", "v2.cancel_historical_job")
       else
-        raise DatadogAPIClient::APIError.new(message: format("Unstable operation '%s' is disabled", "v2.cancel_threat_hunting_job"))
+        raise DatadogAPIClient::APIError.new(message: format("Unstable operation '%s' is disabled", "v2.cancel_historical_job"))
       end
 
       if @api_client.config.debugging
-        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.cancel_threat_hunting_job ...'
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.cancel_historical_job ...'
       end
       # verify the required parameter 'job_id' is set
       if @api_client.config.client_side_validation && job_id.nil?
-        fail ArgumentError, "Missing the required parameter 'job_id' when calling SecurityMonitoringAPI.cancel_threat_hunting_job"
+        fail ArgumentError, "Missing the required parameter 'job_id' when calling SecurityMonitoringAPI.cancel_historical_job"
       end
       # resource path
-      local_var_path = '/api/v2/siem-threat-hunting/jobs/{job_id}/cancel'.sub('{job_id}', CGI.escape(job_id.to_s).gsub('%2F', '/'))
+      local_var_path = '/api/v2/siem-historical-detections/jobs/{job_id}/cancel'.sub('{job_id}', CGI.escape(job_id.to_s).gsub('%2F', '/'))
 
       # query parameters
       query_params = opts[:query_params] || {}
@@ -496,7 +717,7 @@ module DatadogAPIClient::V2
       auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
 
       new_options = opts.merge(
-        :operation => :cancel_threat_hunting_job,
+        :operation => :cancel_historical_job,
         :header_params => header_params,
         :query_params => query_params,
         :form_params => form_params,
@@ -508,7 +729,7 @@ module DatadogAPIClient::V2
 
       data, status_code, headers = @api_client.call_api(Net::HTTP::Patch, local_var_path, new_options)
       if @api_client.config.debugging
-        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#cancel_threat_hunting_job\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#cancel_historical_job\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
       end
       return data, status_code, headers
     end
@@ -615,7 +836,7 @@ module DatadogAPIClient::V2
         fail ArgumentError, "Missing the required parameter 'body' when calling SecurityMonitoringAPI.convert_job_result_to_signal"
       end
       # resource path
-      local_var_path = '/api/v2/siem-threat-hunting/jobs/signal_convert'
+      local_var_path = '/api/v2/siem-historical-detections/jobs/signal_convert'
 
       # query parameters
       query_params = opts[:query_params] || {}
@@ -730,6 +951,91 @@ module DatadogAPIClient::V2
       return data, status_code, headers
     end
 
+    # Convert security monitoring resource to Terraform.
+    #
+    # @see #convert_security_monitoring_terraform_resource_with_http_info
+    def convert_security_monitoring_terraform_resource(resource_type, body, opts = {})
+      data, _status_code, _headers = convert_security_monitoring_terraform_resource_with_http_info(resource_type, body, opts)
+      data
+    end
+
+    # Convert security monitoring resource to Terraform.
+    #
+    # Convert a security monitoring resource that doesn't (yet) exist from JSON to Terraform.
+    # The `resource_type` path parameter specifies the type of resource to convert
+    # and must be one of `suppressions` or `critical_assets`.
+    #
+    # @param resource_type [SecurityMonitoringTerraformResourceType] The type of security monitoring resource to export.
+    # @param body [SecurityMonitoringTerraformConvertRequest] The resource JSON to convert.
+    # @param opts [Hash] the optional parameters
+    # @return [Array<(SecurityMonitoringTerraformExportResponse, Integer, Hash)>] SecurityMonitoringTerraformExportResponse data, response status code and response headers
+    def convert_security_monitoring_terraform_resource_with_http_info(resource_type, body, opts = {})
+      unstable_enabled = @api_client.config.unstable_operations["v2.convert_security_monitoring_terraform_resource".to_sym]
+      if unstable_enabled
+        @api_client.config.logger.warn format("Using unstable operation '%s'", "v2.convert_security_monitoring_terraform_resource")
+      else
+        raise DatadogAPIClient::APIError.new(message: format("Unstable operation '%s' is disabled", "v2.convert_security_monitoring_terraform_resource"))
+      end
+
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.convert_security_monitoring_terraform_resource ...'
+      end
+      # verify the required parameter 'resource_type' is set
+      if @api_client.config.client_side_validation && resource_type.nil?
+        fail ArgumentError, "Missing the required parameter 'resource_type' when calling SecurityMonitoringAPI.convert_security_monitoring_terraform_resource"
+      end
+      # verify enum value
+      allowable_values = ['suppressions', 'critical_assets']
+      if @api_client.config.client_side_validation && !allowable_values.include?(resource_type)
+        fail ArgumentError, "invalid value for \"resource_type\", must be one of #{allowable_values}"
+      end
+      # verify the required parameter 'body' is set
+      if @api_client.config.client_side_validation && body.nil?
+        fail ArgumentError, "Missing the required parameter 'body' when calling SecurityMonitoringAPI.convert_security_monitoring_terraform_resource"
+      end
+      # resource path
+      local_var_path = '/api/v2/security_monitoring/terraform/{resource_type}/convert'.sub('{resource_type}', CGI.escape(resource_type.to_s).gsub('%2F', '/'))
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json'])
+      # HTTP header 'Content-Type'
+      header_params['Content-Type'] = @api_client.select_header_content_type(['application/json'])
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body] || @api_client.object_to_http_body(body)
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'SecurityMonitoringTerraformExportResponse'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
+
+      new_options = opts.merge(
+        :operation => :convert_security_monitoring_terraform_resource,
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type,
+        :api_version => "V2"
+      )
+
+      data, status_code, headers = @api_client.call_api(Net::HTTP::Post, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#convert_security_monitoring_terraform_resource\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
     # Create cases for security findings.
     #
     # @see #create_cases_with_http_info
@@ -1348,10 +1654,10 @@ module DatadogAPIClient::V2
 
     # Deactivate content pack.
     #
-    # Deactivate a security monitoring content pack. This operation removes the content pack's
+    # Deactivate a Cloud SIEM content pack. This operation removes the content pack's
     # configuration from log filters or security filters and updates the content pack activation state.
     #
-    # @param content_pack_id [String] The ID of the content pack to deactivate.
+    # @param content_pack_id [String] The ID of the content pack to deactivate (for example, `aws-cloudtrail`).
     # @param opts [Hash] the optional parameters
     # @return [Array<(nil, Integer, Hash)>] nil, response status code and response headers
     def deactivate_content_pack_with_http_info(content_pack_id, opts = {})
@@ -1390,7 +1696,7 @@ module DatadogAPIClient::V2
       return_type = opts[:debug_return_type]
 
       # auth_names
-      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth]
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
 
       new_options = opts.merge(
         :operation => :deactivate_content_pack,
@@ -1480,32 +1786,38 @@ module DatadogAPIClient::V2
       return data, status_code, headers
     end
 
-    # Delete a security filter.
+    # Delete an existing job.
     #
-    # @see #delete_security_filter_with_http_info
-    def delete_security_filter(security_filter_id, opts = {})
-      delete_security_filter_with_http_info(security_filter_id, opts)
+    # @see #delete_historical_job_with_http_info
+    def delete_historical_job(job_id, opts = {})
+      delete_historical_job_with_http_info(job_id, opts)
       nil
     end
 
-    # Delete a security filter.
+    # Delete an existing job.
     #
-    # Delete a specific security filter.
+    # Delete an existing job.
     #
-    # @param security_filter_id [String] The ID of the security filter.
+    # @param job_id [String] The ID of the job.
     # @param opts [Hash] the optional parameters
     # @return [Array<(nil, Integer, Hash)>] nil, response status code and response headers
-    def delete_security_filter_with_http_info(security_filter_id, opts = {})
+    def delete_historical_job_with_http_info(job_id, opts = {})
+      unstable_enabled = @api_client.config.unstable_operations["v2.delete_historical_job".to_sym]
+      if unstable_enabled
+        @api_client.config.logger.warn format("Using unstable operation '%s'", "v2.delete_historical_job")
+      else
+        raise DatadogAPIClient::APIError.new(message: format("Unstable operation '%s' is disabled", "v2.delete_historical_job"))
+      end
 
       if @api_client.config.debugging
-        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.delete_security_filter ...'
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.delete_historical_job ...'
       end
-      # verify the required parameter 'security_filter_id' is set
-      if @api_client.config.client_side_validation && security_filter_id.nil?
-        fail ArgumentError, "Missing the required parameter 'security_filter_id' when calling SecurityMonitoringAPI.delete_security_filter"
+      # verify the required parameter 'job_id' is set
+      if @api_client.config.client_side_validation && job_id.nil?
+        fail ArgumentError, "Missing the required parameter 'job_id' when calling SecurityMonitoringAPI.delete_historical_job"
       end
       # resource path
-      local_var_path = '/api/v2/security_monitoring/configuration/security_filters/{security_filter_id}'.sub('{security_filter_id}', CGI.escape(security_filter_id.to_s).gsub('%2F', '/'))
+      local_var_path = '/api/v2/siem-historical-detections/jobs/{job_id}'.sub('{job_id}', CGI.escape(job_id.to_s).gsub('%2F', '/'))
 
       # query parameters
       query_params = opts[:query_params] || {}
@@ -1528,7 +1840,7 @@ module DatadogAPIClient::V2
       auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
 
       new_options = opts.merge(
-        :operation => :delete_security_filter,
+        :operation => :delete_historical_job,
         :header_params => header_params,
         :query_params => query_params,
         :form_params => form_params,
@@ -1540,14 +1852,79 @@ module DatadogAPIClient::V2
 
       data, status_code, headers = @api_client.call_api(Net::HTTP::Delete, local_var_path, new_options)
       if @api_client.config.debugging
-        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#delete_security_filter\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#delete_historical_job\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
       end
       return data, status_code, headers
     end
 
-    # Delete a critical asset.
+    # Delete a security filter.
     #
-    # @see #delete_security_monitoring_critical_asset_with_http_info
+    # @see #delete_security_filter_with_http_info
+    def delete_security_filter(security_filter_id, opts = {})
+      delete_security_filter_with_http_info(security_filter_id, opts)
+      nil
+    end
+
+    # Delete a security filter.
+    #
+    # Delete a specific security filter.
+    #
+    # @param security_filter_id [String] The ID of the security filter.
+    # @param opts [Hash] the optional parameters
+    # @return [Array<(nil, Integer, Hash)>] nil, response status code and response headers
+    def delete_security_filter_with_http_info(security_filter_id, opts = {})
+
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.delete_security_filter ...'
+      end
+      # verify the required parameter 'security_filter_id' is set
+      if @api_client.config.client_side_validation && security_filter_id.nil?
+        fail ArgumentError, "Missing the required parameter 'security_filter_id' when calling SecurityMonitoringAPI.delete_security_filter"
+      end
+      # resource path
+      local_var_path = '/api/v2/security_monitoring/configuration/security_filters/{security_filter_id}'.sub('{security_filter_id}', CGI.escape(security_filter_id.to_s).gsub('%2F', '/'))
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['*/*'])
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body]
+
+      # return_type
+      return_type = opts[:debug_return_type]
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
+
+      new_options = opts.merge(
+        :operation => :delete_security_filter,
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type,
+        :api_version => "V2"
+      )
+
+      data, status_code, headers = @api_client.call_api(Net::HTTP::Delete, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#delete_security_filter\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
+    # Delete a critical asset.
+    #
+    # @see #delete_security_monitoring_critical_asset_with_http_info
     def delete_security_monitoring_critical_asset(critical_asset_id, opts = {})
       delete_security_monitoring_critical_asset_with_http_info(critical_asset_id, opts)
       nil
@@ -1805,38 +2182,32 @@ module DatadogAPIClient::V2
       return data, status_code, headers
     end
 
-    # Delete an existing job.
+    # Delete a vulnerability-based notification rule.
     #
-    # @see #delete_threat_hunting_job_with_http_info
-    def delete_threat_hunting_job(job_id, opts = {})
-      delete_threat_hunting_job_with_http_info(job_id, opts)
+    # @see #delete_vulnerability_notification_rule_with_http_info
+    def delete_vulnerability_notification_rule(id, opts = {})
+      delete_vulnerability_notification_rule_with_http_info(id, opts)
       nil
     end
 
-    # Delete an existing job.
+    # Delete a vulnerability-based notification rule.
     #
-    # Delete an existing job.
+    # Delete a notification rule for security vulnerabilities.
     #
-    # @param job_id [String] The ID of the job.
+    # @param id [String] ID of the notification rule.
     # @param opts [Hash] the optional parameters
     # @return [Array<(nil, Integer, Hash)>] nil, response status code and response headers
-    def delete_threat_hunting_job_with_http_info(job_id, opts = {})
-      unstable_enabled = @api_client.config.unstable_operations["v2.delete_threat_hunting_job".to_sym]
-      if unstable_enabled
-        @api_client.config.logger.warn format("Using unstable operation '%s'", "v2.delete_threat_hunting_job")
-      else
-        raise DatadogAPIClient::APIError.new(message: format("Unstable operation '%s' is disabled", "v2.delete_threat_hunting_job"))
-      end
+    def delete_vulnerability_notification_rule_with_http_info(id, opts = {})
 
       if @api_client.config.debugging
-        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.delete_threat_hunting_job ...'
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.delete_vulnerability_notification_rule ...'
       end
-      # verify the required parameter 'job_id' is set
-      if @api_client.config.client_side_validation && job_id.nil?
-        fail ArgumentError, "Missing the required parameter 'job_id' when calling SecurityMonitoringAPI.delete_threat_hunting_job"
+      # verify the required parameter 'id' is set
+      if @api_client.config.client_side_validation && id.nil?
+        fail ArgumentError, "Missing the required parameter 'id' when calling SecurityMonitoringAPI.delete_vulnerability_notification_rule"
       end
       # resource path
-      local_var_path = '/api/v2/siem-threat-hunting/jobs/{job_id}'.sub('{job_id}', CGI.escape(job_id.to_s).gsub('%2F', '/'))
+      local_var_path = '/api/v2/security/vulnerabilities/notification_rules/{id}'.sub('{id}', CGI.escape(id.to_s).gsub('%2F', '/'))
 
       # query parameters
       query_params = opts[:query_params] || {}
@@ -1856,10 +2227,10 @@ module DatadogAPIClient::V2
       return_type = opts[:debug_return_type]
 
       # auth_names
-      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth]
 
       new_options = opts.merge(
-        :operation => :delete_threat_hunting_job,
+        :operation => :delete_vulnerability_notification_rule,
         :header_params => header_params,
         :query_params => query_params,
         :form_params => form_params,
@@ -1871,37 +2242,38 @@ module DatadogAPIClient::V2
 
       data, status_code, headers = @api_client.call_api(Net::HTTP::Delete, local_var_path, new_options)
       if @api_client.config.debugging
-        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#delete_threat_hunting_job\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#delete_vulnerability_notification_rule\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
       end
       return data, status_code, headers
     end
 
-    # Delete a vulnerability-based notification rule.
+    # Detach security findings from their case.
     #
-    # @see #delete_vulnerability_notification_rule_with_http_info
-    def delete_vulnerability_notification_rule(id, opts = {})
-      delete_vulnerability_notification_rule_with_http_info(id, opts)
+    # @see #detach_case_with_http_info
+    def detach_case(body, opts = {})
+      detach_case_with_http_info(body, opts)
       nil
     end
 
-    # Delete a vulnerability-based notification rule.
+    # Detach security findings from their case.
     #
-    # Delete a notification rule for security vulnerabilities.
+    # Detach security findings from their case.
+    # This operation dissociates security findings from their associated cases without deleting the cases themselves. You can detach security findings from multiple different cases in a single request, with a limit of 50 security findings per request. Security findings that are not currently attached to any case will be ignored.
     #
-    # @param id [String] ID of the notification rule.
+    # @param body [DetachCaseRequest] 
     # @param opts [Hash] the optional parameters
     # @return [Array<(nil, Integer, Hash)>] nil, response status code and response headers
-    def delete_vulnerability_notification_rule_with_http_info(id, opts = {})
+    def detach_case_with_http_info(body, opts = {})
 
       if @api_client.config.debugging
-        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.delete_vulnerability_notification_rule ...'
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.detach_case ...'
       end
-      # verify the required parameter 'id' is set
-      if @api_client.config.client_side_validation && id.nil?
-        fail ArgumentError, "Missing the required parameter 'id' when calling SecurityMonitoringAPI.delete_vulnerability_notification_rule"
+      # verify the required parameter 'body' is set
+      if @api_client.config.client_side_validation && body.nil?
+        fail ArgumentError, "Missing the required parameter 'body' when calling SecurityMonitoringAPI.detach_case"
       end
       # resource path
-      local_var_path = '/api/v2/security/vulnerabilities/notification_rules/{id}'.sub('{id}', CGI.escape(id.to_s).gsub('%2F', '/'))
+      local_var_path = '/api/v2/security/findings/cases'
 
       # query parameters
       query_params = opts[:query_params] || {}
@@ -1910,21 +2282,23 @@ module DatadogAPIClient::V2
       header_params = opts[:header_params] || {}
       # HTTP header 'Accept' (if needed)
       header_params['Accept'] = @api_client.select_header_accept(['*/*'])
+      # HTTP header 'Content-Type'
+      header_params['Content-Type'] = @api_client.select_header_content_type(['application/json'])
 
       # form parameters
       form_params = opts[:form_params] || {}
 
       # http body (model)
-      post_body = opts[:debug_body]
+      post_body = opts[:debug_body] || @api_client.object_to_http_body(body)
 
       # return_type
       return_type = opts[:debug_return_type]
 
       # auth_names
-      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth]
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
 
       new_options = opts.merge(
-        :operation => :delete_vulnerability_notification_rule,
+        :operation => :detach_case,
         :header_params => header_params,
         :query_params => query_params,
         :form_params => form_params,
@@ -1936,38 +2310,42 @@ module DatadogAPIClient::V2
 
       data, status_code, headers = @api_client.call_api(Net::HTTP::Delete, local_var_path, new_options)
       if @api_client.config.debugging
-        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#delete_vulnerability_notification_rule\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#detach_case\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
       end
       return data, status_code, headers
     end
 
-    # Detach security findings from their case.
+    # Update security signal triage state or assignee.
     #
-    # @see #detach_case_with_http_info
-    def detach_case(body, opts = {})
-      detach_case_with_http_info(body, opts)
-      nil
+    # @see #edit_security_monitoring_signal_with_http_info
+    def edit_security_monitoring_signal(signal_id, body, opts = {})
+      data, _status_code, _headers = edit_security_monitoring_signal_with_http_info(signal_id, body, opts)
+      data
     end
 
-    # Detach security findings from their case.
+    # Update security signal triage state or assignee.
     #
-    # Detach security findings from their case.
-    # This operation dissociates security findings from their associated cases without deleting the cases themselves. You can detach security findings from multiple different cases in a single request, with a limit of 50 security findings per request. Security findings that are not currently attached to any case will be ignored.
+    # Update the triage state or assignee of a security signal.
     #
-    # @param body [DetachCaseRequest] 
+    # @param signal_id [String] The ID of the signal.
+    # @param body [SecurityMonitoringSignalUpdateRequest] Attributes describing the signal triage state or assignee update.
     # @param opts [Hash] the optional parameters
-    # @return [Array<(nil, Integer, Hash)>] nil, response status code and response headers
-    def detach_case_with_http_info(body, opts = {})
+    # @return [Array<(SecurityMonitoringSignalTriageUpdateResponse, Integer, Hash)>] SecurityMonitoringSignalTriageUpdateResponse data, response status code and response headers
+    def edit_security_monitoring_signal_with_http_info(signal_id, body, opts = {})
 
       if @api_client.config.debugging
-        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.detach_case ...'
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.edit_security_monitoring_signal ...'
+      end
+      # verify the required parameter 'signal_id' is set
+      if @api_client.config.client_side_validation && signal_id.nil?
+        fail ArgumentError, "Missing the required parameter 'signal_id' when calling SecurityMonitoringAPI.edit_security_monitoring_signal"
       end
       # verify the required parameter 'body' is set
       if @api_client.config.client_side_validation && body.nil?
-        fail ArgumentError, "Missing the required parameter 'body' when calling SecurityMonitoringAPI.detach_case"
+        fail ArgumentError, "Missing the required parameter 'body' when calling SecurityMonitoringAPI.edit_security_monitoring_signal"
       end
       # resource path
-      local_var_path = '/api/v2/security/findings/cases'
+      local_var_path = '/api/v2/security_monitoring/signals/{signal_id}/update'.sub('{signal_id}', CGI.escape(signal_id.to_s).gsub('%2F', '/'))
 
       # query parameters
       query_params = opts[:query_params] || {}
@@ -1975,7 +2353,7 @@ module DatadogAPIClient::V2
       # header parameters
       header_params = opts[:header_params] || {}
       # HTTP header 'Accept' (if needed)
-      header_params['Accept'] = @api_client.select_header_accept(['*/*'])
+      header_params['Accept'] = @api_client.select_header_accept(['application/json'])
       # HTTP header 'Content-Type'
       header_params['Content-Type'] = @api_client.select_header_content_type(['application/json'])
 
@@ -1986,13 +2364,13 @@ module DatadogAPIClient::V2
       post_body = opts[:debug_body] || @api_client.object_to_http_body(body)
 
       # return_type
-      return_type = opts[:debug_return_type]
+      return_type = opts[:debug_return_type] || 'SecurityMonitoringSignalTriageUpdateResponse'
 
       # auth_names
       auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
 
       new_options = opts.merge(
-        :operation => :detach_case,
+        :operation => :edit_security_monitoring_signal,
         :header_params => header_params,
         :query_params => query_params,
         :form_params => form_params,
@@ -2002,9 +2380,9 @@ module DatadogAPIClient::V2
         :api_version => "V2"
       )
 
-      data, status_code, headers = @api_client.call_api(Net::HTTP::Delete, local_var_path, new_options)
+      data, status_code, headers = @api_client.call_api(Net::HTTP::Patch, local_var_path, new_options)
       if @api_client.config.debugging
-        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#detach_case\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#edit_security_monitoring_signal\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
       end
       return data, status_code, headers
     end
@@ -2225,6 +2603,89 @@ module DatadogAPIClient::V2
       return data, status_code, headers
     end
 
+    # Export security monitoring resource to Terraform.
+    #
+    # @see #export_security_monitoring_terraform_resource_with_http_info
+    def export_security_monitoring_terraform_resource(resource_type, resource_id, opts = {})
+      data, _status_code, _headers = export_security_monitoring_terraform_resource_with_http_info(resource_type, resource_id, opts)
+      data
+    end
+
+    # Export security monitoring resource to Terraform.
+    #
+    # Export a security monitoring resource to a Terraform configuration.
+    # The `resource_type` path parameter specifies the type of resource to export
+    # and must be one of `suppressions` or `critical_assets`.
+    #
+    # @param resource_type [SecurityMonitoringTerraformResourceType] The type of security monitoring resource to export.
+    # @param resource_id [String] The ID of the security monitoring resource to export.
+    # @param opts [Hash] the optional parameters
+    # @return [Array<(SecurityMonitoringTerraformExportResponse, Integer, Hash)>] SecurityMonitoringTerraformExportResponse data, response status code and response headers
+    def export_security_monitoring_terraform_resource_with_http_info(resource_type, resource_id, opts = {})
+      unstable_enabled = @api_client.config.unstable_operations["v2.export_security_monitoring_terraform_resource".to_sym]
+      if unstable_enabled
+        @api_client.config.logger.warn format("Using unstable operation '%s'", "v2.export_security_monitoring_terraform_resource")
+      else
+        raise DatadogAPIClient::APIError.new(message: format("Unstable operation '%s' is disabled", "v2.export_security_monitoring_terraform_resource"))
+      end
+
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.export_security_monitoring_terraform_resource ...'
+      end
+      # verify the required parameter 'resource_type' is set
+      if @api_client.config.client_side_validation && resource_type.nil?
+        fail ArgumentError, "Missing the required parameter 'resource_type' when calling SecurityMonitoringAPI.export_security_monitoring_terraform_resource"
+      end
+      # verify enum value
+      allowable_values = ['suppressions', 'critical_assets']
+      if @api_client.config.client_side_validation && !allowable_values.include?(resource_type)
+        fail ArgumentError, "invalid value for \"resource_type\", must be one of #{allowable_values}"
+      end
+      # verify the required parameter 'resource_id' is set
+      if @api_client.config.client_side_validation && resource_id.nil?
+        fail ArgumentError, "Missing the required parameter 'resource_id' when calling SecurityMonitoringAPI.export_security_monitoring_terraform_resource"
+      end
+      # resource path
+      local_var_path = '/api/v2/security_monitoring/terraform/{resource_type}/{resource_id}'.sub('{resource_type}', CGI.escape(resource_type.to_s).gsub('%2F', '/')).sub('{resource_id}', CGI.escape(resource_id.to_s).gsub('%2F', '/'))
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json'])
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body]
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'SecurityMonitoringTerraformExportResponse'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
+
+      new_options = opts.merge(
+        :operation => :export_security_monitoring_terraform_resource,
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type,
+        :api_version => "V2"
+      )
+
+      data, status_code, headers = @api_client.call_api(Net::HTTP::Get, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#export_security_monitoring_terraform_resource\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
     # Get content pack states.
     #
     # @see #get_content_packs_states_with_http_info
@@ -2235,9 +2696,8 @@ module DatadogAPIClient::V2
 
     # Get content pack states.
     #
-    # Get the activation and configuration states for all security monitoring content packs.
-    # This endpoint returns status information about each content pack including activation state,
-    # integration status, and log collection status.
+    # Get the activation state, integration status, and log collection status
+    # for all Cloud SIEM content packs.
     #
     # @param opts [Hash] the optional parameters
     # @return [Array<(SecurityMonitoringContentPackStatesResponse, Integer, Hash)>] SecurityMonitoringContentPackStatesResponse data, response status code and response headers
@@ -2273,7 +2733,7 @@ module DatadogAPIClient::V2
       return_type = opts[:debug_return_type] || 'SecurityMonitoringContentPackStatesResponse'
 
       # auth_names
-      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth]
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
 
       new_options = opts.merge(
         :operation => :get_content_packs_states,
@@ -2504,6 +2964,214 @@ module DatadogAPIClient::V2
       return data, status_code, headers
     end
 
+    # Get a job's details.
+    #
+    # @see #get_historical_job_with_http_info
+    def get_historical_job(job_id, opts = {})
+      data, _status_code, _headers = get_historical_job_with_http_info(job_id, opts)
+      data
+    end
+
+    # Get a job's details.
+    #
+    # Get a job's details.
+    #
+    # @param job_id [String] The ID of the job.
+    # @param opts [Hash] the optional parameters
+    # @return [Array<(HistoricalJobResponse, Integer, Hash)>] HistoricalJobResponse data, response status code and response headers
+    def get_historical_job_with_http_info(job_id, opts = {})
+      unstable_enabled = @api_client.config.unstable_operations["v2.get_historical_job".to_sym]
+      if unstable_enabled
+        @api_client.config.logger.warn format("Using unstable operation '%s'", "v2.get_historical_job")
+      else
+        raise DatadogAPIClient::APIError.new(message: format("Unstable operation '%s' is disabled", "v2.get_historical_job"))
+      end
+
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.get_historical_job ...'
+      end
+      # verify the required parameter 'job_id' is set
+      if @api_client.config.client_side_validation && job_id.nil?
+        fail ArgumentError, "Missing the required parameter 'job_id' when calling SecurityMonitoringAPI.get_historical_job"
+      end
+      # resource path
+      local_var_path = '/api/v2/siem-historical-detections/jobs/{job_id}'.sub('{job_id}', CGI.escape(job_id.to_s).gsub('%2F', '/'))
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json'])
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body]
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'HistoricalJobResponse'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
+
+      new_options = opts.merge(
+        :operation => :get_historical_job,
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type,
+        :api_version => "V2"
+      )
+
+      data, status_code, headers = @api_client.call_api(Net::HTTP::Get, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#get_historical_job\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
+    # Get an indicator of compromise.
+    #
+    # @see #get_indicator_of_compromise_with_http_info
+    def get_indicator_of_compromise(indicator, opts = {})
+      data, _status_code, _headers = get_indicator_of_compromise_with_http_info(indicator, opts)
+      data
+    end
+
+    # Get an indicator of compromise.
+    #
+    # Get detailed information about a specific indicator of compromise (IoC).
+    #
+    # @param indicator [String] The indicator value to look up (for example, an IP address or domain).
+    # @param opts [Hash] the optional parameters
+    # @return [Array<(GetIoCIndicatorResponse, Integer, Hash)>] GetIoCIndicatorResponse data, response status code and response headers
+    def get_indicator_of_compromise_with_http_info(indicator, opts = {})
+      unstable_enabled = @api_client.config.unstable_operations["v2.get_indicator_of_compromise".to_sym]
+      if unstable_enabled
+        @api_client.config.logger.warn format("Using unstable operation '%s'", "v2.get_indicator_of_compromise")
+      else
+        raise DatadogAPIClient::APIError.new(message: format("Unstable operation '%s' is disabled", "v2.get_indicator_of_compromise"))
+      end
+
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.get_indicator_of_compromise ...'
+      end
+      # verify the required parameter 'indicator' is set
+      if @api_client.config.client_side_validation && indicator.nil?
+        fail ArgumentError, "Missing the required parameter 'indicator' when calling SecurityMonitoringAPI.get_indicator_of_compromise"
+      end
+      # resource path
+      local_var_path = '/api/v2/security/siem/ioc-explorer/indicator'
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+      query_params[:'indicator'] = indicator
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json'])
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body]
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'GetIoCIndicatorResponse'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
+
+      new_options = opts.merge(
+        :operation => :get_indicator_of_compromise,
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type,
+        :api_version => "V2"
+      )
+
+      data, status_code, headers = @api_client.call_api(Net::HTTP::Get, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#get_indicator_of_compromise\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
+    # Get investigation queries for a signal.
+    #
+    # @see #get_investigation_log_queries_matching_signal_with_http_info
+    def get_investigation_log_queries_matching_signal(signal_id, opts = {})
+      data, _status_code, _headers = get_investigation_log_queries_matching_signal_with_http_info(signal_id, opts)
+      data
+    end
+
+    # Get investigation queries for a signal.
+    #
+    # Get the list of investigation log queries available for a given security signal.
+    #
+    # @param signal_id [String] The ID of the signal.
+    # @param opts [Hash] the optional parameters
+    # @return [Array<(SecurityMonitoringSignalSuggestedActionsResponse, Integer, Hash)>] SecurityMonitoringSignalSuggestedActionsResponse data, response status code and response headers
+    def get_investigation_log_queries_matching_signal_with_http_info(signal_id, opts = {})
+
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.get_investigation_log_queries_matching_signal ...'
+      end
+      # verify the required parameter 'signal_id' is set
+      if @api_client.config.client_side_validation && signal_id.nil?
+        fail ArgumentError, "Missing the required parameter 'signal_id' when calling SecurityMonitoringAPI.get_investigation_log_queries_matching_signal"
+      end
+      # resource path
+      local_var_path = '/api/v2/security_monitoring/signals/{signal_id}/investigation_queries'.sub('{signal_id}', CGI.escape(signal_id.to_s).gsub('%2F', '/'))
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json'])
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body]
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'SecurityMonitoringSignalSuggestedActionsResponse'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
+
+      new_options = opts.merge(
+        :operation => :get_investigation_log_queries_matching_signal,
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type,
+        :api_version => "V2"
+      )
+
+      data, status_code, headers = @api_client.call_api(Net::HTTP::Get, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#get_investigation_log_queries_matching_signal\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
     # List resource filters.
     #
     # @see #get_resource_evaluation_filters_with_http_info
@@ -2940,7 +3608,7 @@ module DatadogAPIClient::V2
     #
     # Get a hist signal's details.
     #
-    # @param histsignal_id [String] The ID of the threat hunting signal.
+    # @param histsignal_id [String] The ID of the historical signal.
     # @param opts [Hash] the optional parameters
     # @return [Array<(SecurityMonitoringSignalResponse, Integer, Hash)>] SecurityMonitoringSignalResponse data, response status code and response headers
     def get_security_monitoring_histsignal_with_http_info(histsignal_id, opts = {})
@@ -2959,7 +3627,7 @@ module DatadogAPIClient::V2
         fail ArgumentError, "Missing the required parameter 'histsignal_id' when calling SecurityMonitoringAPI.get_security_monitoring_histsignal"
       end
       # resource path
-      local_var_path = '/api/v2/siem-threat-hunting/histsignals/{histsignal_id}'.sub('{histsignal_id}', CGI.escape(histsignal_id.to_s).gsub('%2F', '/'))
+      local_var_path = '/api/v2/siem-historical-detections/histsignals/{histsignal_id}'.sub('{histsignal_id}', CGI.escape(histsignal_id.to_s).gsub('%2F', '/'))
 
       # query parameters
       query_params = opts[:query_params] || {}
@@ -3043,7 +3711,7 @@ module DatadogAPIClient::V2
         fail ArgumentError, 'invalid value for "opts[:"page_limit"]" when calling SecurityMonitoringAPI.get_security_monitoring_histsignals_by_job_id, must be smaller than or equal to 1000.'
       end
       # resource path
-      local_var_path = '/api/v2/siem-threat-hunting/jobs/{job_id}/histsignals'.sub('{job_id}', CGI.escape(job_id.to_s).gsub('%2F', '/'))
+      local_var_path = '/api/v2/siem-historical-detections/jobs/{job_id}/histsignals'.sub('{job_id}', CGI.escape(job_id.to_s).gsub('%2F', '/'))
 
       # query parameters
       query_params = opts[:query_params] || {}
@@ -3409,32 +4077,32 @@ module DatadogAPIClient::V2
       return data, status_code, headers
     end
 
-    # Get suppressions affecting future rule.
+    # Get suggested actions for a signal.
     #
-    # @see #get_suppressions_affecting_future_rule_with_http_info
-    def get_suppressions_affecting_future_rule(body, opts = {})
-      data, _status_code, _headers = get_suppressions_affecting_future_rule_with_http_info(body, opts)
+    # @see #get_suggested_actions_matching_signal_with_http_info
+    def get_suggested_actions_matching_signal(signal_id, opts = {})
+      data, _status_code, _headers = get_suggested_actions_matching_signal_with_http_info(signal_id, opts)
       data
     end
 
-    # Get suppressions affecting future rule.
+    # Get suggested actions for a signal.
     #
-    # Get the list of suppressions that would affect a rule.
+    # Get the list of suggested actions for a given security signal.
     #
-    # @param body [SecurityMonitoringRuleCreatePayload] 
+    # @param signal_id [String] The ID of the signal.
     # @param opts [Hash] the optional parameters
-    # @return [Array<(SecurityMonitoringSuppressionsResponse, Integer, Hash)>] SecurityMonitoringSuppressionsResponse data, response status code and response headers
-    def get_suppressions_affecting_future_rule_with_http_info(body, opts = {})
+    # @return [Array<(SecurityMonitoringSignalSuggestedActionsResponse, Integer, Hash)>] SecurityMonitoringSignalSuggestedActionsResponse data, response status code and response headers
+    def get_suggested_actions_matching_signal_with_http_info(signal_id, opts = {})
 
       if @api_client.config.debugging
-        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.get_suppressions_affecting_future_rule ...'
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.get_suggested_actions_matching_signal ...'
       end
-      # verify the required parameter 'body' is set
-      if @api_client.config.client_side_validation && body.nil?
-        fail ArgumentError, "Missing the required parameter 'body' when calling SecurityMonitoringAPI.get_suppressions_affecting_future_rule"
+      # verify the required parameter 'signal_id' is set
+      if @api_client.config.client_side_validation && signal_id.nil?
+        fail ArgumentError, "Missing the required parameter 'signal_id' when calling SecurityMonitoringAPI.get_suggested_actions_matching_signal"
       end
       # resource path
-      local_var_path = '/api/v2/security_monitoring/configuration/suppressions/rules'
+      local_var_path = '/api/v2/security_monitoring/signals/{signal_id}/suggested_actions'.sub('{signal_id}', CGI.escape(signal_id.to_s).gsub('%2F', '/'))
 
       # query parameters
       query_params = opts[:query_params] || {}
@@ -3443,23 +4111,21 @@ module DatadogAPIClient::V2
       header_params = opts[:header_params] || {}
       # HTTP header 'Accept' (if needed)
       header_params['Accept'] = @api_client.select_header_accept(['application/json'])
-      # HTTP header 'Content-Type'
-      header_params['Content-Type'] = @api_client.select_header_content_type(['application/json'])
 
       # form parameters
       form_params = opts[:form_params] || {}
 
       # http body (model)
-      post_body = opts[:debug_body] || @api_client.object_to_http_body(body)
+      post_body = opts[:debug_body]
 
       # return_type
-      return_type = opts[:debug_return_type] || 'SecurityMonitoringSuppressionsResponse'
+      return_type = opts[:debug_return_type] || 'SecurityMonitoringSignalSuggestedActionsResponse'
 
       # auth_names
       auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
 
       new_options = opts.merge(
-        :operation => :get_suppressions_affecting_future_rule,
+        :operation => :get_suggested_actions_matching_signal,
         :header_params => header_params,
         :query_params => query_params,
         :form_params => form_params,
@@ -3469,39 +4135,39 @@ module DatadogAPIClient::V2
         :api_version => "V2"
       )
 
-      data, status_code, headers = @api_client.call_api(Net::HTTP::Post, local_var_path, new_options)
+      data, status_code, headers = @api_client.call_api(Net::HTTP::Get, local_var_path, new_options)
       if @api_client.config.debugging
-        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#get_suppressions_affecting_future_rule\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#get_suggested_actions_matching_signal\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
       end
       return data, status_code, headers
     end
 
-    # Get suppressions affecting a specific rule.
+    # Get suppressions affecting future rule.
     #
-    # @see #get_suppressions_affecting_rule_with_http_info
-    def get_suppressions_affecting_rule(rule_id, opts = {})
-      data, _status_code, _headers = get_suppressions_affecting_rule_with_http_info(rule_id, opts)
+    # @see #get_suppressions_affecting_future_rule_with_http_info
+    def get_suppressions_affecting_future_rule(body, opts = {})
+      data, _status_code, _headers = get_suppressions_affecting_future_rule_with_http_info(body, opts)
       data
     end
 
-    # Get suppressions affecting a specific rule.
+    # Get suppressions affecting future rule.
     #
-    # Get the list of suppressions that affect a specific existing rule by its ID.
+    # Get the list of suppressions that would affect a rule.
     #
-    # @param rule_id [String] The ID of the rule.
+    # @param body [SecurityMonitoringRuleCreatePayload] 
     # @param opts [Hash] the optional parameters
     # @return [Array<(SecurityMonitoringSuppressionsResponse, Integer, Hash)>] SecurityMonitoringSuppressionsResponse data, response status code and response headers
-    def get_suppressions_affecting_rule_with_http_info(rule_id, opts = {})
+    def get_suppressions_affecting_future_rule_with_http_info(body, opts = {})
 
       if @api_client.config.debugging
-        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.get_suppressions_affecting_rule ...'
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.get_suppressions_affecting_future_rule ...'
       end
-      # verify the required parameter 'rule_id' is set
-      if @api_client.config.client_side_validation && rule_id.nil?
-        fail ArgumentError, "Missing the required parameter 'rule_id' when calling SecurityMonitoringAPI.get_suppressions_affecting_rule"
+      # verify the required parameter 'body' is set
+      if @api_client.config.client_side_validation && body.nil?
+        fail ArgumentError, "Missing the required parameter 'body' when calling SecurityMonitoringAPI.get_suppressions_affecting_future_rule"
       end
       # resource path
-      local_var_path = '/api/v2/security_monitoring/configuration/suppressions/rules/{rule_id}'.sub('{rule_id}', CGI.escape(rule_id.to_s).gsub('%2F', '/'))
+      local_var_path = '/api/v2/security_monitoring/configuration/suppressions/rules'
 
       # query parameters
       query_params = opts[:query_params] || {}
@@ -3510,12 +4176,14 @@ module DatadogAPIClient::V2
       header_params = opts[:header_params] || {}
       # HTTP header 'Accept' (if needed)
       header_params['Accept'] = @api_client.select_header_accept(['application/json'])
+      # HTTP header 'Content-Type'
+      header_params['Content-Type'] = @api_client.select_header_content_type(['application/json'])
 
       # form parameters
       form_params = opts[:form_params] || {}
 
       # http body (model)
-      post_body = opts[:debug_body]
+      post_body = opts[:debug_body] || @api_client.object_to_http_body(body)
 
       # return_type
       return_type = opts[:debug_return_type] || 'SecurityMonitoringSuppressionsResponse'
@@ -3524,7 +4192,7 @@ module DatadogAPIClient::V2
       auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
 
       new_options = opts.merge(
-        :operation => :get_suppressions_affecting_rule,
+        :operation => :get_suppressions_affecting_future_rule,
         :header_params => header_params,
         :query_params => query_params,
         :form_params => form_params,
@@ -3534,46 +4202,42 @@ module DatadogAPIClient::V2
         :api_version => "V2"
       )
 
-      data, status_code, headers = @api_client.call_api(Net::HTTP::Get, local_var_path, new_options)
+      data, status_code, headers = @api_client.call_api(Net::HTTP::Post, local_var_path, new_options)
       if @api_client.config.debugging
-        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#get_suppressions_affecting_rule\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#get_suppressions_affecting_future_rule\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
       end
       return data, status_code, headers
     end
 
-    # Get a suppression's version history.
+    # Get suppressions affecting a specific rule.
     #
-    # @see #get_suppression_version_history_with_http_info
-    def get_suppression_version_history(suppression_id, opts = {})
-      data, _status_code, _headers = get_suppression_version_history_with_http_info(suppression_id, opts)
+    # @see #get_suppressions_affecting_rule_with_http_info
+    def get_suppressions_affecting_rule(rule_id, opts = {})
+      data, _status_code, _headers = get_suppressions_affecting_rule_with_http_info(rule_id, opts)
       data
     end
 
-    # Get a suppression's version history.
+    # Get suppressions affecting a specific rule.
     #
-    # Get a suppression's version history.
+    # Get the list of suppressions that affect a specific existing rule by its ID.
     #
-    # @param suppression_id [String] The ID of the suppression rule
+    # @param rule_id [String] The ID of the rule.
     # @param opts [Hash] the optional parameters
-    # @option opts [Integer] :page_size Size for a given page. The maximum allowed value is 100.
-    # @option opts [Integer] :page_number Specific page number to return.
-    # @return [Array<(GetSuppressionVersionHistoryResponse, Integer, Hash)>] GetSuppressionVersionHistoryResponse data, response status code and response headers
-    def get_suppression_version_history_with_http_info(suppression_id, opts = {})
+    # @return [Array<(SecurityMonitoringSuppressionsResponse, Integer, Hash)>] SecurityMonitoringSuppressionsResponse data, response status code and response headers
+    def get_suppressions_affecting_rule_with_http_info(rule_id, opts = {})
 
       if @api_client.config.debugging
-        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.get_suppression_version_history ...'
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.get_suppressions_affecting_rule ...'
       end
-      # verify the required parameter 'suppression_id' is set
-      if @api_client.config.client_side_validation && suppression_id.nil?
-        fail ArgumentError, "Missing the required parameter 'suppression_id' when calling SecurityMonitoringAPI.get_suppression_version_history"
+      # verify the required parameter 'rule_id' is set
+      if @api_client.config.client_side_validation && rule_id.nil?
+        fail ArgumentError, "Missing the required parameter 'rule_id' when calling SecurityMonitoringAPI.get_suppressions_affecting_rule"
       end
       # resource path
-      local_var_path = '/api/v2/security_monitoring/configuration/suppressions/{suppression_id}/version_history'.sub('{suppression_id}', CGI.escape(suppression_id.to_s).gsub('%2F', '/'))
+      local_var_path = '/api/v2/security_monitoring/configuration/suppressions/rules/{rule_id}'.sub('{rule_id}', CGI.escape(rule_id.to_s).gsub('%2F', '/'))
 
       # query parameters
       query_params = opts[:query_params] || {}
-      query_params[:'page[size]'] = opts[:'page_size'] if !opts[:'page_size'].nil?
-      query_params[:'page[number]'] = opts[:'page_number'] if !opts[:'page_number'].nil?
 
       # header parameters
       header_params = opts[:header_params] || {}
@@ -3587,13 +4251,13 @@ module DatadogAPIClient::V2
       post_body = opts[:debug_body]
 
       # return_type
-      return_type = opts[:debug_return_type] || 'GetSuppressionVersionHistoryResponse'
+      return_type = opts[:debug_return_type] || 'SecurityMonitoringSuppressionsResponse'
 
       # auth_names
       auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
 
       new_options = opts.merge(
-        :operation => :get_suppression_version_history,
+        :operation => :get_suppressions_affecting_rule,
         :header_params => header_params,
         :query_params => query_params,
         :form_params => form_params,
@@ -3605,46 +4269,44 @@ module DatadogAPIClient::V2
 
       data, status_code, headers = @api_client.call_api(Net::HTTP::Get, local_var_path, new_options)
       if @api_client.config.debugging
-        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#get_suppression_version_history\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#get_suppressions_affecting_rule\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
       end
       return data, status_code, headers
     end
 
-    # Get a job's details.
+    # Get a suppression's version history.
     #
-    # @see #get_threat_hunting_job_with_http_info
-    def get_threat_hunting_job(job_id, opts = {})
-      data, _status_code, _headers = get_threat_hunting_job_with_http_info(job_id, opts)
+    # @see #get_suppression_version_history_with_http_info
+    def get_suppression_version_history(suppression_id, opts = {})
+      data, _status_code, _headers = get_suppression_version_history_with_http_info(suppression_id, opts)
       data
     end
 
-    # Get a job's details.
+    # Get a suppression's version history.
     #
-    # Get a job's details.
+    # Get a suppression's version history.
     #
-    # @param job_id [String] The ID of the job.
+    # @param suppression_id [String] The ID of the suppression rule
     # @param opts [Hash] the optional parameters
-    # @return [Array<(ThreatHuntingJobResponse, Integer, Hash)>] ThreatHuntingJobResponse data, response status code and response headers
-    def get_threat_hunting_job_with_http_info(job_id, opts = {})
-      unstable_enabled = @api_client.config.unstable_operations["v2.get_threat_hunting_job".to_sym]
-      if unstable_enabled
-        @api_client.config.logger.warn format("Using unstable operation '%s'", "v2.get_threat_hunting_job")
-      else
-        raise DatadogAPIClient::APIError.new(message: format("Unstable operation '%s' is disabled", "v2.get_threat_hunting_job"))
-      end
+    # @option opts [Integer] :page_size Size for a given page. The maximum allowed value is 100.
+    # @option opts [Integer] :page_number Specific page number to return.
+    # @return [Array<(GetSuppressionVersionHistoryResponse, Integer, Hash)>] GetSuppressionVersionHistoryResponse data, response status code and response headers
+    def get_suppression_version_history_with_http_info(suppression_id, opts = {})
 
       if @api_client.config.debugging
-        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.get_threat_hunting_job ...'
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.get_suppression_version_history ...'
       end
-      # verify the required parameter 'job_id' is set
-      if @api_client.config.client_side_validation && job_id.nil?
-        fail ArgumentError, "Missing the required parameter 'job_id' when calling SecurityMonitoringAPI.get_threat_hunting_job"
+      # verify the required parameter 'suppression_id' is set
+      if @api_client.config.client_side_validation && suppression_id.nil?
+        fail ArgumentError, "Missing the required parameter 'suppression_id' when calling SecurityMonitoringAPI.get_suppression_version_history"
       end
       # resource path
-      local_var_path = '/api/v2/siem-threat-hunting/jobs/{job_id}'.sub('{job_id}', CGI.escape(job_id.to_s).gsub('%2F', '/'))
+      local_var_path = '/api/v2/security_monitoring/configuration/suppressions/{suppression_id}/version_history'.sub('{suppression_id}', CGI.escape(suppression_id.to_s).gsub('%2F', '/'))
 
       # query parameters
       query_params = opts[:query_params] || {}
+      query_params[:'page[size]'] = opts[:'page_size'] if !opts[:'page_size'].nil?
+      query_params[:'page[number]'] = opts[:'page_number'] if !opts[:'page_number'].nil?
 
       # header parameters
       header_params = opts[:header_params] || {}
@@ -3658,13 +4320,13 @@ module DatadogAPIClient::V2
       post_body = opts[:debug_body]
 
       # return_type
-      return_type = opts[:debug_return_type] || 'ThreatHuntingJobResponse'
+      return_type = opts[:debug_return_type] || 'GetSuppressionVersionHistoryResponse'
 
       # auth_names
       auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
 
       new_options = opts.merge(
-        :operation => :get_threat_hunting_job,
+        :operation => :get_suppression_version_history,
         :header_params => header_params,
         :query_params => query_params,
         :form_params => form_params,
@@ -3676,7 +4338,7 @@ module DatadogAPIClient::V2
 
       data, status_code, headers = @api_client.call_api(Net::HTTP::Get, local_var_path, new_options)
       if @api_client.config.debugging
-        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#get_threat_hunting_job\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#get_suppression_version_history\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
       end
       return data, status_code, headers
     end
@@ -4083,6 +4745,162 @@ module DatadogAPIClient::V2
         end
     end
 
+    # List historical jobs.
+    #
+    # @see #list_historical_jobs_with_http_info
+    def list_historical_jobs(opts = {})
+      data, _status_code, _headers = list_historical_jobs_with_http_info(opts)
+      data
+    end
+
+    # List historical jobs.
+    #
+    # List historical jobs.
+    #
+    # @param opts [Hash] the optional parameters
+    # @option opts [Integer] :page_size Size for a given page. The maximum allowed value is 100.
+    # @option opts [Integer] :page_number Specific page number to return.
+    # @option opts [String] :sort The order of the jobs in results.
+    # @option opts [String] :filter_query Query used to filter items from the fetched list.
+    # @return [Array<(ListHistoricalJobsResponse, Integer, Hash)>] ListHistoricalJobsResponse data, response status code and response headers
+    def list_historical_jobs_with_http_info(opts = {})
+      unstable_enabled = @api_client.config.unstable_operations["v2.list_historical_jobs".to_sym]
+      if unstable_enabled
+        @api_client.config.logger.warn format("Using unstable operation '%s'", "v2.list_historical_jobs")
+      else
+        raise DatadogAPIClient::APIError.new(message: format("Unstable operation '%s' is disabled", "v2.list_historical_jobs"))
+      end
+
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.list_historical_jobs ...'
+      end
+      # resource path
+      local_var_path = '/api/v2/siem-historical-detections/jobs'
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+      query_params[:'page[size]'] = opts[:'page_size'] if !opts[:'page_size'].nil?
+      query_params[:'page[number]'] = opts[:'page_number'] if !opts[:'page_number'].nil?
+      query_params[:'sort'] = opts[:'sort'] if !opts[:'sort'].nil?
+      query_params[:'filter[query]'] = opts[:'filter_query'] if !opts[:'filter_query'].nil?
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json'])
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body]
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'ListHistoricalJobsResponse'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
+
+      new_options = opts.merge(
+        :operation => :list_historical_jobs,
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type,
+        :api_version => "V2"
+      )
+
+      data, status_code, headers = @api_client.call_api(Net::HTTP::Get, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#list_historical_jobs\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
+    # List indicators of compromise.
+    #
+    # @see #list_indicators_of_compromise_with_http_info
+    def list_indicators_of_compromise(opts = {})
+      data, _status_code, _headers = list_indicators_of_compromise_with_http_info(opts)
+      data
+    end
+
+    # List indicators of compromise.
+    #
+    # Get a list of indicators of compromise (IoCs) matching the specified filters.
+    #
+    # @param opts [Hash] the optional parameters
+    # @option opts [Integer] :limit Number of results per page.
+    # @option opts [Integer] :offset Pagination offset.
+    # @option opts [String] :query Search/filter query (supports field:value syntax).
+    # @option opts [String] :sort_column Sort column: score, first_seen_ts_epoch, last_seen_ts_epoch, indicator, indicator_type, signal_count, log_count, category, as_type.
+    # @option opts [String] :sort_order Sort order: asc or desc.
+    # @return [Array<(IoCExplorerListResponse, Integer, Hash)>] IoCExplorerListResponse data, response status code and response headers
+    def list_indicators_of_compromise_with_http_info(opts = {})
+      unstable_enabled = @api_client.config.unstable_operations["v2.list_indicators_of_compromise".to_sym]
+      if unstable_enabled
+        @api_client.config.logger.warn format("Using unstable operation '%s'", "v2.list_indicators_of_compromise")
+      else
+        raise DatadogAPIClient::APIError.new(message: format("Unstable operation '%s' is disabled", "v2.list_indicators_of_compromise"))
+      end
+
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.list_indicators_of_compromise ...'
+      end
+      if @api_client.config.client_side_validation && !opts[:'limit'].nil? && opts[:'limit'] > 2147483647
+        fail ArgumentError, 'invalid value for "opts[:"limit"]" when calling SecurityMonitoringAPI.list_indicators_of_compromise, must be smaller than or equal to 2147483647.'
+      end
+      if @api_client.config.client_side_validation && !opts[:'offset'].nil? && opts[:'offset'] > 2147483647
+        fail ArgumentError, 'invalid value for "opts[:"offset"]" when calling SecurityMonitoringAPI.list_indicators_of_compromise, must be smaller than or equal to 2147483647.'
+      end
+      # resource path
+      local_var_path = '/api/v2/security/siem/ioc-explorer'
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+      query_params[:'limit'] = opts[:'limit'] if !opts[:'limit'].nil?
+      query_params[:'offset'] = opts[:'offset'] if !opts[:'offset'].nil?
+      query_params[:'query'] = opts[:'query'] if !opts[:'query'].nil?
+      query_params[:'sort[column]'] = opts[:'sort_column'] if !opts[:'sort_column'].nil?
+      query_params[:'sort[order]'] = opts[:'sort_order'] if !opts[:'sort_order'].nil?
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json'])
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body]
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'IoCExplorerListResponse'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
+
+      new_options = opts.merge(
+        :operation => :list_indicators_of_compromise,
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type,
+        :api_version => "V2"
+      )
+
+      data, status_code, headers = @api_client.call_api(Net::HTTP::Get, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#list_indicators_of_compromise\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
     # Ruleset get multiple.
     #
     # @see #list_multiple_rulesets_with_http_info
@@ -4548,7 +5366,7 @@ module DatadogAPIClient::V2
         fail ArgumentError, 'invalid value for "opts[:"page_limit"]" when calling SecurityMonitoringAPI.list_security_monitoring_histsignals, must be smaller than or equal to 1000.'
       end
       # resource path
-      local_var_path = '/api/v2/siem-threat-hunting/histsignals'
+      local_var_path = '/api/v2/siem-historical-detections/histsignals'
 
       # query parameters
       query_params = opts[:query_params] || {}
@@ -4840,80 +5658,6 @@ module DatadogAPIClient::V2
       return data, status_code, headers
     end
 
-    # List threat hunting jobs.
-    #
-    # @see #list_threat_hunting_jobs_with_http_info
-    def list_threat_hunting_jobs(opts = {})
-      data, _status_code, _headers = list_threat_hunting_jobs_with_http_info(opts)
-      data
-    end
-
-    # List threat hunting jobs.
-    #
-    # List threat hunting jobs.
-    #
-    # @param opts [Hash] the optional parameters
-    # @option opts [Integer] :page_size Size for a given page. The maximum allowed value is 100.
-    # @option opts [Integer] :page_number Specific page number to return.
-    # @option opts [String] :sort The order of the jobs in results.
-    # @option opts [String] :filter_query Query used to filter items from the fetched list.
-    # @return [Array<(ListThreatHuntingJobsResponse, Integer, Hash)>] ListThreatHuntingJobsResponse data, response status code and response headers
-    def list_threat_hunting_jobs_with_http_info(opts = {})
-      unstable_enabled = @api_client.config.unstable_operations["v2.list_threat_hunting_jobs".to_sym]
-      if unstable_enabled
-        @api_client.config.logger.warn format("Using unstable operation '%s'", "v2.list_threat_hunting_jobs")
-      else
-        raise DatadogAPIClient::APIError.new(message: format("Unstable operation '%s' is disabled", "v2.list_threat_hunting_jobs"))
-      end
-
-      if @api_client.config.debugging
-        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.list_threat_hunting_jobs ...'
-      end
-      # resource path
-      local_var_path = '/api/v2/siem-threat-hunting/jobs'
-
-      # query parameters
-      query_params = opts[:query_params] || {}
-      query_params[:'page[size]'] = opts[:'page_size'] if !opts[:'page_size'].nil?
-      query_params[:'page[number]'] = opts[:'page_number'] if !opts[:'page_number'].nil?
-      query_params[:'sort'] = opts[:'sort'] if !opts[:'sort'].nil?
-      query_params[:'filter[query]'] = opts[:'filter_query'] if !opts[:'filter_query'].nil?
-
-      # header parameters
-      header_params = opts[:header_params] || {}
-      # HTTP header 'Accept' (if needed)
-      header_params['Accept'] = @api_client.select_header_accept(['application/json'])
-
-      # form parameters
-      form_params = opts[:form_params] || {}
-
-      # http body (model)
-      post_body = opts[:debug_body]
-
-      # return_type
-      return_type = opts[:debug_return_type] || 'ListThreatHuntingJobsResponse'
-
-      # auth_names
-      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
-
-      new_options = opts.merge(
-        :operation => :list_threat_hunting_jobs,
-        :header_params => header_params,
-        :query_params => query_params,
-        :form_params => form_params,
-        :body => post_body,
-        :auth_names => auth_names,
-        :return_type => return_type,
-        :api_version => "V2"
-      )
-
-      data, status_code, headers = @api_client.call_api(Net::HTTP::Get, local_var_path, new_options)
-      if @api_client.config.debugging
-        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#list_threat_hunting_jobs\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
-      end
-      return data, status_code, headers
-    end
-
     # List vulnerabilities.
     #
     # @see #list_vulnerabilities_with_http_info
@@ -5402,6 +6146,82 @@ module DatadogAPIClient::V2
       return data, status_code, headers
     end
 
+    # Mute or unmute security findings.
+    #
+    # @see #mute_security_findings_with_http_info
+    def mute_security_findings(body, opts = {})
+      data, _status_code, _headers = mute_security_findings_with_http_info(body, opts)
+      data
+    end
+
+    # Mute or unmute security findings.
+    #
+    # Mute or unmute security findings.
+    # You can mute or unmute up to 100 security findings per request. The request body must include `is_muted` and `reason` attributes. The allowed reasons depend on whether the finding is being muted or unmuted:
+    #   - To mute a finding: `PENDING_FIX`, `FALSE_POSITIVE`, `OTHER`, `NO_FIX`, `DUPLICATE`, `RISK_ACCEPTED`.
+    #   - To unmute a finding: `NO_PENDING_FIX`, `HUMAN_ERROR`, `NO_LONGER_ACCEPTED_RISK`, `OTHER`.
+    #
+    # @param body [MuteFindingsRequest] 
+    # @param opts [Hash] the optional parameters
+    # @return [Array<(MuteFindingsResponse, Integer, Hash)>] MuteFindingsResponse data, response status code and response headers
+    def mute_security_findings_with_http_info(body, opts = {})
+      unstable_enabled = @api_client.config.unstable_operations["v2.mute_security_findings".to_sym]
+      if unstable_enabled
+        @api_client.config.logger.warn format("Using unstable operation '%s'", "v2.mute_security_findings")
+      else
+        raise DatadogAPIClient::APIError.new(message: format("Unstable operation '%s' is disabled", "v2.mute_security_findings"))
+      end
+
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.mute_security_findings ...'
+      end
+      # verify the required parameter 'body' is set
+      if @api_client.config.client_side_validation && body.nil?
+        fail ArgumentError, "Missing the required parameter 'body' when calling SecurityMonitoringAPI.mute_security_findings"
+      end
+      # resource path
+      local_var_path = '/api/v2/security/findings/mute'
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json'])
+      # HTTP header 'Content-Type'
+      header_params['Content-Type'] = @api_client.select_header_content_type(['application/json'])
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body] || @api_client.object_to_http_body(body)
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'MuteFindingsResponse'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
+
+      new_options = opts.merge(
+        :operation => :mute_security_findings,
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type,
+        :api_version => "V2"
+      )
+
+      data, status_code, headers = @api_client.call_api(Net::HTTP::Patch, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#mute_security_findings\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
     # Patch a signal-based notification rule.
     #
     # @see #patch_signal_notification_rule_with_http_info
@@ -5546,38 +6366,38 @@ module DatadogAPIClient::V2
       return data, status_code, headers
     end
 
-    # Run a threat hunting job.
+    # Run a historical job.
     #
-    # @see #run_threat_hunting_job_with_http_info
-    def run_threat_hunting_job(body, opts = {})
-      data, _status_code, _headers = run_threat_hunting_job_with_http_info(body, opts)
+    # @see #run_historical_job_with_http_info
+    def run_historical_job(body, opts = {})
+      data, _status_code, _headers = run_historical_job_with_http_info(body, opts)
       data
     end
 
-    # Run a threat hunting job.
+    # Run a historical job.
     #
-    # Run a threat hunting job.
+    # Run a historical job.
     #
-    # @param body [RunThreatHuntingJobRequest] 
+    # @param body [RunHistoricalJobRequest] 
     # @param opts [Hash] the optional parameters
     # @return [Array<(JobCreateResponse, Integer, Hash)>] JobCreateResponse data, response status code and response headers
-    def run_threat_hunting_job_with_http_info(body, opts = {})
-      unstable_enabled = @api_client.config.unstable_operations["v2.run_threat_hunting_job".to_sym]
+    def run_historical_job_with_http_info(body, opts = {})
+      unstable_enabled = @api_client.config.unstable_operations["v2.run_historical_job".to_sym]
       if unstable_enabled
-        @api_client.config.logger.warn format("Using unstable operation '%s'", "v2.run_threat_hunting_job")
+        @api_client.config.logger.warn format("Using unstable operation '%s'", "v2.run_historical_job")
       else
-        raise DatadogAPIClient::APIError.new(message: format("Unstable operation '%s' is disabled", "v2.run_threat_hunting_job"))
+        raise DatadogAPIClient::APIError.new(message: format("Unstable operation '%s' is disabled", "v2.run_historical_job"))
       end
 
       if @api_client.config.debugging
-        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.run_threat_hunting_job ...'
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.run_historical_job ...'
       end
       # verify the required parameter 'body' is set
       if @api_client.config.client_side_validation && body.nil?
-        fail ArgumentError, "Missing the required parameter 'body' when calling SecurityMonitoringAPI.run_threat_hunting_job"
+        fail ArgumentError, "Missing the required parameter 'body' when calling SecurityMonitoringAPI.run_historical_job"
       end
       # resource path
-      local_var_path = '/api/v2/siem-threat-hunting/jobs'
+      local_var_path = '/api/v2/siem-historical-detections/jobs'
 
       # query parameters
       query_params = opts[:query_params] || {}
@@ -5602,7 +6422,7 @@ module DatadogAPIClient::V2
       auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
 
       new_options = opts.merge(
-        :operation => :run_threat_hunting_job,
+        :operation => :run_historical_job,
         :header_params => header_params,
         :query_params => query_params,
         :form_params => form_params,
@@ -5614,7 +6434,7 @@ module DatadogAPIClient::V2
 
       data, status_code, headers = @api_client.call_api(Net::HTTP::Post, local_var_path, new_options)
       if @api_client.config.debugging
-        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#run_threat_hunting_job\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#run_historical_job\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
       end
       return data, status_code, headers
     end
@@ -5740,7 +6560,7 @@ module DatadogAPIClient::V2
         @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.search_security_monitoring_histsignals ...'
       end
       # resource path
-      local_var_path = '/api/v2/siem-threat-hunting/histsignals/search'
+      local_var_path = '/api/v2/siem-historical-detections/histsignals/search'
 
       # query parameters
       query_params = opts[:query_params] || {}