datadog_api_client 2.55.0 → 2.57.0

data/lib/datadog_api_client/v2/api/security_monitoring_api.rb

@@ -96,6 +96,82 @@ module DatadogAPIClient::V2
       return data, status_code, headers
     end
 
+    # Activate an entity context sync integration.
+    #
+    # @see #activate_integration_with_http_info
+    def activate_integration(integration_type, opts = {})
+      data, _status_code, _headers = activate_integration_with_http_info(integration_type, opts)
+      data
+    end
+
+    # Activate an entity context sync integration.
+    #
+    # Activate an entity context sync integration for a source type that does not require manually
+    # supplied credentials (for example, Entra ID). If an integration of this type already exists,
+    # it is returned (re-enabling it first if it was disabled) instead of creating a duplicate.
+    #
+    # @param integration_type [String] The integration type to activate (for example, `entra_id`).
+    # @param opts [Hash] the optional parameters
+    # @option opts [SecurityMonitoringIntegrationActivateRequest] :body Optional configuration overrides for the integration to activate.
+    # @return [Array<(SecurityMonitoringIntegrationConfigResponse, Integer, Hash)>] SecurityMonitoringIntegrationConfigResponse data, response status code and response headers
+    def activate_integration_with_http_info(integration_type, opts = {})
+      unstable_enabled = @api_client.config.unstable_operations["v2.activate_integration".to_sym]
+      if unstable_enabled
+        @api_client.config.logger.warn format("Using unstable operation '%s'", "v2.activate_integration")
+      else
+        raise DatadogAPIClient::APIError.new(message: format("Unstable operation '%s' is disabled", "v2.activate_integration"))
+      end
+
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.activate_integration ...'
+      end
+      # verify the required parameter 'integration_type' is set
+      if @api_client.config.client_side_validation && integration_type.nil?
+        fail ArgumentError, "Missing the required parameter 'integration_type' when calling SecurityMonitoringAPI.activate_integration"
+      end
+      # resource path
+      local_var_path = '/api/v2/security_monitoring/configuration/integration_config/{integration_type}/activate'.sub('{integration_type}', CGI.escape(integration_type.to_s).gsub('%2F', '/'))
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json'])
+      # HTTP header 'Content-Type'
+      header_params['Content-Type'] = @api_client.select_header_content_type(['application/json'])
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body] || @api_client.object_to_http_body(opts[:'body'])
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'SecurityMonitoringIntegrationConfigResponse'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
+
+      new_options = opts.merge(
+        :operation => :activate_integration,
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type,
+        :api_version => "V2"
+      )
+
+      data, status_code, headers = @api_client.call_api(Net::HTTP::Post, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#activate_integration\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
     # Attach security findings to a case.
     #
     # @see #attach_case_with_http_info
@@ -237,6 +313,74 @@ module DatadogAPIClient::V2
       return data, status_code, headers
     end
 
+    # Attach security findings to a Linear issue.
+    #
+    # @see #attach_linear_issue_with_http_info
+    def attach_linear_issue(body, opts = {})
+      data, _status_code, _headers = attach_linear_issue_with_http_info(body, opts)
+      data
+    end
+
+    # Attach security findings to a Linear issue.
+    #
+    # Attach security findings to a Linear issue by providing the Linear issue URL.
+    # You can attach up to 50 security findings per Linear issue. If the Linear issue is not linked to any case, this operation will create a case for the security findings and link the Linear issue to the newly created case. Security findings that are already attached to another Linear issue will be detached from their previous Linear issue and attached to the specified Linear issue.
+    #
+    # @param body [AttachLinearIssueRequest] 
+    # @param opts [Hash] the optional parameters
+    # @return [Array<(FindingCaseResponse, Integer, Hash)>] FindingCaseResponse data, response status code and response headers
+    def attach_linear_issue_with_http_info(body, opts = {})
+
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.attach_linear_issue ...'
+      end
+      # verify the required parameter 'body' is set
+      if @api_client.config.client_side_validation && body.nil?
+        fail ArgumentError, "Missing the required parameter 'body' when calling SecurityMonitoringAPI.attach_linear_issue"
+      end
+      # resource path
+      local_var_path = '/api/v2/security/findings/linear_issues'
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json'])
+      # HTTP header 'Content-Type'
+      header_params['Content-Type'] = @api_client.select_header_content_type(['application/json'])
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body] || @api_client.object_to_http_body(body)
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'FindingCaseResponse'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
+
+      new_options = opts.merge(
+        :operation => :attach_linear_issue,
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type,
+        :api_version => "V2"
+      )
+
+      data, status_code, headers = @api_client.call_api(Net::HTTP::Patch, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#attach_linear_issue\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
     # Attach security findings to a ServiceNow ticket.
     #
     # @see #attach_service_now_ticket_with_http_info
@@ -254,12 +398,6 @@ module DatadogAPIClient::V2
     # @param opts [Hash] the optional parameters
     # @return [Array<(FindingCaseResponse, Integer, Hash)>] FindingCaseResponse data, response status code and response headers
     def attach_service_now_ticket_with_http_info(body, opts = {})
-      unstable_enabled = @api_client.config.unstable_operations["v2.attach_service_now_ticket".to_sym]
-      if unstable_enabled
-        @api_client.config.logger.warn format("Using unstable operation '%s'", "v2.attach_service_now_ticket")
-      else
-        raise DatadogAPIClient::APIError.new(message: format("Unstable operation '%s' is disabled", "v2.attach_service_now_ticket"))
-      end
 
       if @api_client.config.debugging
         @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.attach_service_now_ticket ...'
@@ -888,8 +1026,9 @@ module DatadogAPIClient::V2
     #
     # Export multiple security monitoring resources to Terraform, packaged as a zip archive.
     # The `resource_type` path parameter specifies the type of resources to export
-    # and must be one of `suppressions` or `critical_assets`.
+    # and must be one of `suppressions`, `critical_assets`, `security_filters`, or `rules`.
     # A maximum of 1000 resources can be exported in a single request.
+    # For `rules`, partner rules cannot be exported and return a 400 error.
     #
     # @param resource_type [SecurityMonitoringTerraformResourceType] The type of security monitoring resource to export.
     # @param body [SecurityMonitoringTerraformBulkExportRequest] The resource IDs to export.
@@ -911,7 +1050,7 @@ module DatadogAPIClient::V2
         fail ArgumentError, "Missing the required parameter 'resource_type' when calling SecurityMonitoringAPI.bulk_export_security_monitoring_terraform_resources"
       end
       # verify enum value
-      allowable_values = ['suppressions', 'critical_assets']
+      allowable_values = ['suppressions', 'critical_assets', 'security_filters', 'rules']
       if @api_client.config.client_side_validation && !allowable_values.include?(resource_type)
         fail ArgumentError, "invalid value for \"resource_type\", must be one of #{allowable_values}"
       end
@@ -1262,7 +1401,7 @@ module DatadogAPIClient::V2
     #
     # Convert a security monitoring resource that doesn't (yet) exist from JSON to Terraform.
     # The `resource_type` path parameter specifies the type of resource to convert
-    # and must be one of `suppressions` or `critical_assets`.
+    # and must be one of `suppressions`, `critical_assets`, `security_filters`, or `rules`.
     #
     # @param resource_type [SecurityMonitoringTerraformResourceType] The type of security monitoring resource to export.
     # @param body [SecurityMonitoringTerraformConvertRequest] The resource JSON to convert.
@@ -1284,7 +1423,7 @@ module DatadogAPIClient::V2
         fail ArgumentError, "Missing the required parameter 'resource_type' when calling SecurityMonitoringAPI.convert_security_monitoring_terraform_resource"
       end
       # verify enum value
-      allowable_values = ['suppressions', 'critical_assets']
+      allowable_values = ['suppressions', 'critical_assets', 'security_filters', 'rules']
       if @api_client.config.client_side_validation && !allowable_values.include?(resource_type)
         fail ArgumentError, "invalid value for \"resource_type\", must be one of #{allowable_values}"
       end
@@ -1612,6 +1751,74 @@ module DatadogAPIClient::V2
       return data, status_code, headers
     end
 
+    # Create Linear issues for security findings.
+    #
+    # @see #create_linear_issues_with_http_info
+    def create_linear_issues(body, opts = {})
+      data, _status_code, _headers = create_linear_issues_with_http_info(body, opts)
+      data
+    end
+
+    # Create Linear issues for security findings.
+    #
+    # Create Linear issues for security findings.
+    # This operation creates a case in Datadog and a Linear issue linked to that case for bidirectional sync between Datadog and Linear. You can create up to 50 Linear issues per request and associate up to 50 security findings per Linear issue. Security findings that are already attached to another Linear issue will be detached from their previous Linear issue and attached to the newly created Linear issue.
+    #
+    # @param body [CreateLinearIssueRequestArray] 
+    # @param opts [Hash] the optional parameters
+    # @return [Array<(FindingCaseResponseArray, Integer, Hash)>] FindingCaseResponseArray data, response status code and response headers
+    def create_linear_issues_with_http_info(body, opts = {})
+
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.create_linear_issues ...'
+      end
+      # verify the required parameter 'body' is set
+      if @api_client.config.client_side_validation && body.nil?
+        fail ArgumentError, "Missing the required parameter 'body' when calling SecurityMonitoringAPI.create_linear_issues"
+      end
+      # resource path
+      local_var_path = '/api/v2/security/findings/linear_issues'
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json'])
+      # HTTP header 'Content-Type'
+      header_params['Content-Type'] = @api_client.select_header_content_type(['application/json'])
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body] || @api_client.object_to_http_body(body)
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'FindingCaseResponseArray'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
+
+      new_options = opts.merge(
+        :operation => :create_linear_issues,
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type,
+        :api_version => "V2"
+      )
+
+      data, status_code, headers = @api_client.call_api(Net::HTTP::Post, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#create_linear_issues\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
     # Subscribe to sample log generation.
     #
     # @see #create_sample_log_generation_subscription_with_http_info
@@ -1761,32 +1968,38 @@ module DatadogAPIClient::V2
       return data, status_code, headers
     end
 
-    # Create a critical asset.
+    # Create a due date rule.
     #
-    # @see #create_security_monitoring_critical_asset_with_http_info
-    def create_security_monitoring_critical_asset(body, opts = {})
-      data, _status_code, _headers = create_security_monitoring_critical_asset_with_http_info(body, opts)
+    # @see #create_security_findings_automation_due_date_rule_with_http_info
+    def create_security_findings_automation_due_date_rule(body, opts = {})
+      data, _status_code, _headers = create_security_findings_automation_due_date_rule_with_http_info(body, opts)
       data
     end
 
-    # Create a critical asset.
+    # Create a due date rule.
     #
-    # Create a new critical asset.
+    # Create a new due date rule for the current organization.
     #
-    # @param body [SecurityMonitoringCriticalAssetCreateRequest] The definition of the new critical asset.
+    # @param body [DueDateRuleCreateRequest] 
     # @param opts [Hash] the optional parameters
-    # @return [Array<(SecurityMonitoringCriticalAssetResponse, Integer, Hash)>] SecurityMonitoringCriticalAssetResponse data, response status code and response headers
-    def create_security_monitoring_critical_asset_with_http_info(body, opts = {})
+    # @return [Array<(DueDateRuleResponse, Integer, Hash)>] DueDateRuleResponse data, response status code and response headers
+    def create_security_findings_automation_due_date_rule_with_http_info(body, opts = {})
+      unstable_enabled = @api_client.config.unstable_operations["v2.create_security_findings_automation_due_date_rule".to_sym]
+      if unstable_enabled
+        @api_client.config.logger.warn format("Using unstable operation '%s'", "v2.create_security_findings_automation_due_date_rule")
+      else
+        raise DatadogAPIClient::APIError.new(message: format("Unstable operation '%s' is disabled", "v2.create_security_findings_automation_due_date_rule"))
+      end
 
       if @api_client.config.debugging
-        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.create_security_monitoring_critical_asset ...'
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.create_security_findings_automation_due_date_rule ...'
       end
       # verify the required parameter 'body' is set
       if @api_client.config.client_side_validation && body.nil?
-        fail ArgumentError, "Missing the required parameter 'body' when calling SecurityMonitoringAPI.create_security_monitoring_critical_asset"
+        fail ArgumentError, "Missing the required parameter 'body' when calling SecurityMonitoringAPI.create_security_findings_automation_due_date_rule"
       end
       # resource path
-      local_var_path = '/api/v2/security_monitoring/configuration/critical_assets'
+      local_var_path = '/api/v2/security/findings/automation/due_date_rules'
 
       # query parameters
       query_params = opts[:query_params] || {}
@@ -1805,13 +2018,13 @@ module DatadogAPIClient::V2
       post_body = opts[:debug_body] || @api_client.object_to_http_body(body)
 
       # return_type
-      return_type = opts[:debug_return_type] || 'SecurityMonitoringCriticalAssetResponse'
+      return_type = opts[:debug_return_type] || 'DueDateRuleResponse'
 
       # auth_names
-      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth]
 
       new_options = opts.merge(
-        :operation => :create_security_monitoring_critical_asset,
+        :operation => :create_security_findings_automation_due_date_rule,
         :header_params => header_params,
         :query_params => query_params,
         :form_params => form_params,
@@ -1823,44 +2036,43 @@ module DatadogAPIClient::V2
 
       data, status_code, headers = @api_client.call_api(Net::HTTP::Post, local_var_path, new_options)
       if @api_client.config.debugging
-        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#create_security_monitoring_critical_asset\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#create_security_findings_automation_due_date_rule\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
       end
       return data, status_code, headers
     end
 
-    # Create a dataset.
+    # Create a mute rule.
     #
-    # @see #create_security_monitoring_dataset_with_http_info
-    def create_security_monitoring_dataset(body, opts = {})
-      data, _status_code, _headers = create_security_monitoring_dataset_with_http_info(body, opts)
+    # @see #create_security_findings_automation_mute_rule_with_http_info
+    def create_security_findings_automation_mute_rule(body, opts = {})
+      data, _status_code, _headers = create_security_findings_automation_mute_rule_with_http_info(body, opts)
       data
     end
 
-    # Create a dataset.
+    # Create a mute rule.
     #
-    # Create a new Cloud SIEM dataset. A dataset bundles a data source, a set of
-    # indexes, and a search query that can be referenced from detection rules.
+    # Create a new mute rule for the current organization.
     #
-    # @param body [SecurityMonitoringDatasetCreateRequest] 
+    # @param body [MuteRuleCreateRequest] 
     # @param opts [Hash] the optional parameters
-    # @return [Array<(SecurityMonitoringDatasetCreateResponse, Integer, Hash)>] SecurityMonitoringDatasetCreateResponse data, response status code and response headers
-    def create_security_monitoring_dataset_with_http_info(body, opts = {})
-      unstable_enabled = @api_client.config.unstable_operations["v2.create_security_monitoring_dataset".to_sym]
+    # @return [Array<(MuteRuleResponse, Integer, Hash)>] MuteRuleResponse data, response status code and response headers
+    def create_security_findings_automation_mute_rule_with_http_info(body, opts = {})
+      unstable_enabled = @api_client.config.unstable_operations["v2.create_security_findings_automation_mute_rule".to_sym]
       if unstable_enabled
-        @api_client.config.logger.warn format("Using unstable operation '%s'", "v2.create_security_monitoring_dataset")
+        @api_client.config.logger.warn format("Using unstable operation '%s'", "v2.create_security_findings_automation_mute_rule")
       else
-        raise DatadogAPIClient::APIError.new(message: format("Unstable operation '%s' is disabled", "v2.create_security_monitoring_dataset"))
+        raise DatadogAPIClient::APIError.new(message: format("Unstable operation '%s' is disabled", "v2.create_security_findings_automation_mute_rule"))
       end
 
       if @api_client.config.debugging
-        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.create_security_monitoring_dataset ...'
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.create_security_findings_automation_mute_rule ...'
       end
       # verify the required parameter 'body' is set
       if @api_client.config.client_side_validation && body.nil?
-        fail ArgumentError, "Missing the required parameter 'body' when calling SecurityMonitoringAPI.create_security_monitoring_dataset"
+        fail ArgumentError, "Missing the required parameter 'body' when calling SecurityMonitoringAPI.create_security_findings_automation_mute_rule"
       end
       # resource path
-      local_var_path = '/api/v2/security_monitoring/datasets'
+      local_var_path = '/api/v2/security/findings/automation/mute_rules'
 
       # query parameters
       query_params = opts[:query_params] || {}
@@ -1879,13 +2091,13 @@ module DatadogAPIClient::V2
       post_body = opts[:debug_body] || @api_client.object_to_http_body(body)
 
       # return_type
-      return_type = opts[:debug_return_type] || 'SecurityMonitoringDatasetCreateResponse'
+      return_type = opts[:debug_return_type] || 'MuteRuleResponse'
 
       # auth_names
-      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth]
 
       new_options = opts.merge(
-        :operation => :create_security_monitoring_dataset,
+        :operation => :create_security_findings_automation_mute_rule,
         :header_params => header_params,
         :query_params => query_params,
         :form_params => form_params,
@@ -1897,45 +2109,43 @@ module DatadogAPIClient::V2
 
       data, status_code, headers = @api_client.call_api(Net::HTTP::Post, local_var_path, new_options)
       if @api_client.config.debugging
-        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#create_security_monitoring_dataset\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#create_security_findings_automation_mute_rule\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
       end
       return data, status_code, headers
     end
 
-    # Create an entity context sync configuration.
+    # Create a ticket creation rule.
     #
-    # @see #create_security_monitoring_integration_config_with_http_info
-    def create_security_monitoring_integration_config(body, opts = {})
-      data, _status_code, _headers = create_security_monitoring_integration_config_with_http_info(body, opts)
+    # @see #create_security_findings_automation_ticket_creation_rule_with_http_info
+    def create_security_findings_automation_ticket_creation_rule(body, opts = {})
+      data, _status_code, _headers = create_security_findings_automation_ticket_creation_rule_with_http_info(body, opts)
       data
     end
 
-    # Create an entity context sync configuration.
+    # Create a ticket creation rule.
     #
-    # Create a new entity context sync configuration so Cloud SIEM can ingest entities from an external
-    # source. The credentials provided in `secrets` are validated against the source before the configuration
-    # is stored and never returned in subsequent responses.
+    # Create a new ticket creation rule for the current organization.
     #
-    # @param body [SecurityMonitoringIntegrationConfigCreateRequest] The definition of the new integration configuration.
+    # @param body [TicketCreationRuleCreateRequest] 
     # @param opts [Hash] the optional parameters
-    # @return [Array<(SecurityMonitoringIntegrationConfigResponse, Integer, Hash)>] SecurityMonitoringIntegrationConfigResponse data, response status code and response headers
-    def create_security_monitoring_integration_config_with_http_info(body, opts = {})
-      unstable_enabled = @api_client.config.unstable_operations["v2.create_security_monitoring_integration_config".to_sym]
+    # @return [Array<(TicketCreationRuleResponse, Integer, Hash)>] TicketCreationRuleResponse data, response status code and response headers
+    def create_security_findings_automation_ticket_creation_rule_with_http_info(body, opts = {})
+      unstable_enabled = @api_client.config.unstable_operations["v2.create_security_findings_automation_ticket_creation_rule".to_sym]
       if unstable_enabled
-        @api_client.config.logger.warn format("Using unstable operation '%s'", "v2.create_security_monitoring_integration_config")
+        @api_client.config.logger.warn format("Using unstable operation '%s'", "v2.create_security_findings_automation_ticket_creation_rule")
       else
-        raise DatadogAPIClient::APIError.new(message: format("Unstable operation '%s' is disabled", "v2.create_security_monitoring_integration_config"))
+        raise DatadogAPIClient::APIError.new(message: format("Unstable operation '%s' is disabled", "v2.create_security_findings_automation_ticket_creation_rule"))
       end
 
       if @api_client.config.debugging
-        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.create_security_monitoring_integration_config ...'
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.create_security_findings_automation_ticket_creation_rule ...'
       end
       # verify the required parameter 'body' is set
       if @api_client.config.client_side_validation && body.nil?
-        fail ArgumentError, "Missing the required parameter 'body' when calling SecurityMonitoringAPI.create_security_monitoring_integration_config"
+        fail ArgumentError, "Missing the required parameter 'body' when calling SecurityMonitoringAPI.create_security_findings_automation_ticket_creation_rule"
       end
       # resource path
-      local_var_path = '/api/v2/security_monitoring/configuration/integration_config'
+      local_var_path = '/api/v2/security/findings/automation/ticket_creation_rules'
 
       # query parameters
       query_params = opts[:query_params] || {}
@@ -1954,13 +2164,13 @@ module DatadogAPIClient::V2
       post_body = opts[:debug_body] || @api_client.object_to_http_body(body)
 
       # return_type
-      return_type = opts[:debug_return_type] || 'SecurityMonitoringIntegrationConfigResponse'
+      return_type = opts[:debug_return_type] || 'TicketCreationRuleResponse'
 
       # auth_names
-      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth]
 
       new_options = opts.merge(
-        :operation => :create_security_monitoring_integration_config,
+        :operation => :create_security_findings_automation_ticket_creation_rule,
         :header_params => header_params,
         :query_params => query_params,
         :form_params => form_params,
@@ -1972,37 +2182,37 @@ module DatadogAPIClient::V2
 
       data, status_code, headers = @api_client.call_api(Net::HTTP::Post, local_var_path, new_options)
       if @api_client.config.debugging
-        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#create_security_monitoring_integration_config\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#create_security_findings_automation_ticket_creation_rule\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
       end
       return data, status_code, headers
     end
 
-    # Create a detection rule.
+    # Create a critical asset.
     #
-    # @see #create_security_monitoring_rule_with_http_info
-    def create_security_monitoring_rule(body, opts = {})
-      data, _status_code, _headers = create_security_monitoring_rule_with_http_info(body, opts)
+    # @see #create_security_monitoring_critical_asset_with_http_info
+    def create_security_monitoring_critical_asset(body, opts = {})
+      data, _status_code, _headers = create_security_monitoring_critical_asset_with_http_info(body, opts)
       data
     end
 
-    # Create a detection rule.
+    # Create a critical asset.
     #
-    # Create a detection rule.
+    # Create a new critical asset.
     #
-    # @param body [SecurityMonitoringRuleCreatePayload] 
+    # @param body [SecurityMonitoringCriticalAssetCreateRequest] The definition of the new critical asset.
     # @param opts [Hash] the optional parameters
-    # @return [Array<(SecurityMonitoringRuleResponse, Integer, Hash)>] SecurityMonitoringRuleResponse data, response status code and response headers
-    def create_security_monitoring_rule_with_http_info(body, opts = {})
+    # @return [Array<(SecurityMonitoringCriticalAssetResponse, Integer, Hash)>] SecurityMonitoringCriticalAssetResponse data, response status code and response headers
+    def create_security_monitoring_critical_asset_with_http_info(body, opts = {})
 
       if @api_client.config.debugging
-        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.create_security_monitoring_rule ...'
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.create_security_monitoring_critical_asset ...'
       end
       # verify the required parameter 'body' is set
       if @api_client.config.client_side_validation && body.nil?
-        fail ArgumentError, "Missing the required parameter 'body' when calling SecurityMonitoringAPI.create_security_monitoring_rule"
+        fail ArgumentError, "Missing the required parameter 'body' when calling SecurityMonitoringAPI.create_security_monitoring_critical_asset"
       end
       # resource path
-      local_var_path = '/api/v2/security_monitoring/rules'
+      local_var_path = '/api/v2/security_monitoring/configuration/critical_assets'
 
       # query parameters
       query_params = opts[:query_params] || {}
@@ -2021,13 +2231,229 @@ module DatadogAPIClient::V2
       post_body = opts[:debug_body] || @api_client.object_to_http_body(body)
 
       # return_type
-      return_type = opts[:debug_return_type] || 'SecurityMonitoringRuleResponse'
+      return_type = opts[:debug_return_type] || 'SecurityMonitoringCriticalAssetResponse'
 
       # auth_names
       auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
 
       new_options = opts.merge(
-        :operation => :create_security_monitoring_rule,
+        :operation => :create_security_monitoring_critical_asset,
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type,
+        :api_version => "V2"
+      )
+
+      data, status_code, headers = @api_client.call_api(Net::HTTP::Post, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#create_security_monitoring_critical_asset\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
+    # Create a dataset.
+    #
+    # @see #create_security_monitoring_dataset_with_http_info
+    def create_security_monitoring_dataset(body, opts = {})
+      data, _status_code, _headers = create_security_monitoring_dataset_with_http_info(body, opts)
+      data
+    end
+
+    # Create a dataset.
+    #
+    # Create a new Cloud SIEM dataset. A dataset bundles a data source, a set of
+    # indexes, and a search query that can be referenced from detection rules.
+    #
+    # @param body [SecurityMonitoringDatasetCreateRequest] 
+    # @param opts [Hash] the optional parameters
+    # @return [Array<(SecurityMonitoringDatasetCreateResponse, Integer, Hash)>] SecurityMonitoringDatasetCreateResponse data, response status code and response headers
+    def create_security_monitoring_dataset_with_http_info(body, opts = {})
+      unstable_enabled = @api_client.config.unstable_operations["v2.create_security_monitoring_dataset".to_sym]
+      if unstable_enabled
+        @api_client.config.logger.warn format("Using unstable operation '%s'", "v2.create_security_monitoring_dataset")
+      else
+        raise DatadogAPIClient::APIError.new(message: format("Unstable operation '%s' is disabled", "v2.create_security_monitoring_dataset"))
+      end
+
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.create_security_monitoring_dataset ...'
+      end
+      # verify the required parameter 'body' is set
+      if @api_client.config.client_side_validation && body.nil?
+        fail ArgumentError, "Missing the required parameter 'body' when calling SecurityMonitoringAPI.create_security_monitoring_dataset"
+      end
+      # resource path
+      local_var_path = '/api/v2/security_monitoring/datasets'
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json'])
+      # HTTP header 'Content-Type'
+      header_params['Content-Type'] = @api_client.select_header_content_type(['application/json'])
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body] || @api_client.object_to_http_body(body)
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'SecurityMonitoringDatasetCreateResponse'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
+
+      new_options = opts.merge(
+        :operation => :create_security_monitoring_dataset,
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type,
+        :api_version => "V2"
+      )
+
+      data, status_code, headers = @api_client.call_api(Net::HTTP::Post, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#create_security_monitoring_dataset\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
+    # Create an entity context sync configuration.
+    #
+    # @see #create_security_monitoring_integration_config_with_http_info
+    def create_security_monitoring_integration_config(body, opts = {})
+      data, _status_code, _headers = create_security_monitoring_integration_config_with_http_info(body, opts)
+      data
+    end
+
+    # Create an entity context sync configuration.
+    #
+    # Create a new entity context sync configuration so Cloud SIEM can ingest entities from an external
+    # source. The credentials provided in `secrets` are validated against the source before the configuration
+    # is stored and never returned in subsequent responses.
+    #
+    # @param body [SecurityMonitoringIntegrationConfigCreateRequest] The definition of the new integration configuration.
+    # @param opts [Hash] the optional parameters
+    # @return [Array<(SecurityMonitoringIntegrationConfigResponse, Integer, Hash)>] SecurityMonitoringIntegrationConfigResponse data, response status code and response headers
+    def create_security_monitoring_integration_config_with_http_info(body, opts = {})
+      unstable_enabled = @api_client.config.unstable_operations["v2.create_security_monitoring_integration_config".to_sym]
+      if unstable_enabled
+        @api_client.config.logger.warn format("Using unstable operation '%s'", "v2.create_security_monitoring_integration_config")
+      else
+        raise DatadogAPIClient::APIError.new(message: format("Unstable operation '%s' is disabled", "v2.create_security_monitoring_integration_config"))
+      end
+
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.create_security_monitoring_integration_config ...'
+      end
+      # verify the required parameter 'body' is set
+      if @api_client.config.client_side_validation && body.nil?
+        fail ArgumentError, "Missing the required parameter 'body' when calling SecurityMonitoringAPI.create_security_monitoring_integration_config"
+      end
+      # resource path
+      local_var_path = '/api/v2/security_monitoring/configuration/integration_config'
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json'])
+      # HTTP header 'Content-Type'
+      header_params['Content-Type'] = @api_client.select_header_content_type(['application/json'])
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body] || @api_client.object_to_http_body(body)
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'SecurityMonitoringIntegrationConfigResponse'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
+
+      new_options = opts.merge(
+        :operation => :create_security_monitoring_integration_config,
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type,
+        :api_version => "V2"
+      )
+
+      data, status_code, headers = @api_client.call_api(Net::HTTP::Post, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#create_security_monitoring_integration_config\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
+    # Create a detection rule.
+    #
+    # @see #create_security_monitoring_rule_with_http_info
+    def create_security_monitoring_rule(body, opts = {})
+      data, _status_code, _headers = create_security_monitoring_rule_with_http_info(body, opts)
+      data
+    end
+
+    # Create a detection rule.
+    #
+    # Create a detection rule.
+    #
+    # @param body [SecurityMonitoringRuleCreatePayload] 
+    # @param opts [Hash] the optional parameters
+    # @return [Array<(SecurityMonitoringRuleResponse, Integer, Hash)>] SecurityMonitoringRuleResponse data, response status code and response headers
+    def create_security_monitoring_rule_with_http_info(body, opts = {})
+
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.create_security_monitoring_rule ...'
+      end
+      # verify the required parameter 'body' is set
+      if @api_client.config.client_side_validation && body.nil?
+        fail ArgumentError, "Missing the required parameter 'body' when calling SecurityMonitoringAPI.create_security_monitoring_rule"
+      end
+      # resource path
+      local_var_path = '/api/v2/security_monitoring/rules'
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json'])
+      # HTTP header 'Content-Type'
+      header_params['Content-Type'] = @api_client.select_header_content_type(['application/json'])
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body] || @api_client.object_to_http_body(body)
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'SecurityMonitoringRuleResponse'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
+
+      new_options = opts.merge(
+        :operation => :create_security_monitoring_rule,
         :header_params => header_params,
         :query_params => query_params,
         :form_params => form_params,
@@ -2128,12 +2554,6 @@ module DatadogAPIClient::V2
     # @param opts [Hash] the optional parameters
     # @return [Array<(FindingCaseResponseArray, Integer, Hash)>] FindingCaseResponseArray data, response status code and response headers
     def create_service_now_tickets_with_http_info(body, opts = {})
-      unstable_enabled = @api_client.config.unstable_operations["v2.create_service_now_tickets".to_sym]
-      if unstable_enabled
-        @api_client.config.logger.warn format("Using unstable operation '%s'", "v2.create_service_now_tickets")
-      else
-        raise DatadogAPIClient::APIError.new(message: format("Unstable operation '%s' is disabled", "v2.create_service_now_tickets"))
-      end
 
       if @api_client.config.debugging
         @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.create_service_now_tickets ...'
@@ -2497,7 +2917,78 @@ module DatadogAPIClient::V2
         fail ArgumentError, "Missing the required parameter 'content_pack_id' when calling SecurityMonitoringAPI.deactivate_content_pack"
       end
       # resource path
-      local_var_path = '/api/v2/security_monitoring/content_packs/{content_pack_id}/deactivate'.sub('{content_pack_id}', CGI.escape(content_pack_id.to_s).gsub('%2F', '/'))
+      local_var_path = '/api/v2/security_monitoring/content_packs/{content_pack_id}/deactivate'.sub('{content_pack_id}', CGI.escape(content_pack_id.to_s).gsub('%2F', '/'))
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['*/*'])
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body]
+
+      # return_type
+      return_type = opts[:debug_return_type]
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
+
+      new_options = opts.merge(
+        :operation => :deactivate_content_pack,
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type,
+        :api_version => "V2"
+      )
+
+      data, status_code, headers = @api_client.call_api(Net::HTTP::Put, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#deactivate_content_pack\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
+    # Deactivate an entity context sync integration.
+    #
+    # @see #deactivate_integration_with_http_info
+    def deactivate_integration(integration_type, opts = {})
+      data, _status_code, _headers = deactivate_integration_with_http_info(integration_type, opts)
+      data
+    end
+
+    # Deactivate an entity context sync integration.
+    #
+    # Deactivate all active entity context sync integrations of the given source type (for example, Entra ID).
+    #
+    # @param integration_type [String] The integration type to deactivate (for example, `entra_id`).
+    # @param opts [Hash] the optional parameters
+    # @return [Array<(SecurityMonitoringIntegrationConfigResponse, Integer, Hash)>] SecurityMonitoringIntegrationConfigResponse data, response status code and response headers
+    def deactivate_integration_with_http_info(integration_type, opts = {})
+      unstable_enabled = @api_client.config.unstable_operations["v2.deactivate_integration".to_sym]
+      if unstable_enabled
+        @api_client.config.logger.warn format("Using unstable operation '%s'", "v2.deactivate_integration")
+      else
+        raise DatadogAPIClient::APIError.new(message: format("Unstable operation '%s' is disabled", "v2.deactivate_integration"))
+      end
+
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.deactivate_integration ...'
+      end
+      # verify the required parameter 'integration_type' is set
+      if @api_client.config.client_side_validation && integration_type.nil?
+        fail ArgumentError, "Missing the required parameter 'integration_type' when calling SecurityMonitoringAPI.deactivate_integration"
+      end
+      # resource path
+      local_var_path = '/api/v2/security_monitoring/configuration/integration_config/{integration_type}/deactivate'.sub('{integration_type}', CGI.escape(integration_type.to_s).gsub('%2F', '/'))
 
       # query parameters
       query_params = opts[:query_params] || {}
@@ -2505,7 +2996,7 @@ module DatadogAPIClient::V2
       # header parameters
       header_params = opts[:header_params] || {}
       # HTTP header 'Accept' (if needed)
-      header_params['Accept'] = @api_client.select_header_accept(['*/*'])
+      header_params['Accept'] = @api_client.select_header_accept(['application/json'])
 
       # form parameters
       form_params = opts[:form_params] || {}
@@ -2514,13 +3005,13 @@ module DatadogAPIClient::V2
       post_body = opts[:debug_body]
 
       # return_type
-      return_type = opts[:debug_return_type]
+      return_type = opts[:debug_return_type] || 'SecurityMonitoringIntegrationConfigResponse'
 
       # auth_names
       auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
 
       new_options = opts.merge(
-        :operation => :deactivate_content_pack,
+        :operation => :deactivate_integration,
         :header_params => header_params,
         :query_params => query_params,
         :form_params => form_params,
@@ -2530,9 +3021,9 @@ module DatadogAPIClient::V2
         :api_version => "V2"
       )
 
-      data, status_code, headers = @api_client.call_api(Net::HTTP::Put, local_var_path, new_options)
+      data, status_code, headers = @api_client.call_api(Net::HTTP::Post, local_var_path, new_options)
       if @api_client.config.debugging
-        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#deactivate_content_pack\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#deactivate_integration\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
       end
       return data, status_code, headers
     end
@@ -2819,6 +3310,219 @@ module DatadogAPIClient::V2
       return data, status_code, headers
     end
 
+    # Delete a due date rule.
+    #
+    # @see #delete_security_findings_automation_due_date_rule_with_http_info
+    def delete_security_findings_automation_due_date_rule(rule_id, opts = {})
+      delete_security_findings_automation_due_date_rule_with_http_info(rule_id, opts)
+      nil
+    end
+
+    # Delete a due date rule.
+    #
+    # Delete an existing due date rule by ID.
+    #
+    # @param rule_id [UUID] The ID of the due date rule.
+    # @param opts [Hash] the optional parameters
+    # @return [Array<(nil, Integer, Hash)>] nil, response status code and response headers
+    def delete_security_findings_automation_due_date_rule_with_http_info(rule_id, opts = {})
+      unstable_enabled = @api_client.config.unstable_operations["v2.delete_security_findings_automation_due_date_rule".to_sym]
+      if unstable_enabled
+        @api_client.config.logger.warn format("Using unstable operation '%s'", "v2.delete_security_findings_automation_due_date_rule")
+      else
+        raise DatadogAPIClient::APIError.new(message: format("Unstable operation '%s' is disabled", "v2.delete_security_findings_automation_due_date_rule"))
+      end
+
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.delete_security_findings_automation_due_date_rule ...'
+      end
+      # verify the required parameter 'rule_id' is set
+      if @api_client.config.client_side_validation && rule_id.nil?
+        fail ArgumentError, "Missing the required parameter 'rule_id' when calling SecurityMonitoringAPI.delete_security_findings_automation_due_date_rule"
+      end
+      # resource path
+      local_var_path = '/api/v2/security/findings/automation/due_date_rules/{rule_id}'.sub('{rule_id}', CGI.escape(rule_id.to_s).gsub('%2F', '/'))
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['*/*'])
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body]
+
+      # return_type
+      return_type = opts[:debug_return_type]
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth]
+
+      new_options = opts.merge(
+        :operation => :delete_security_findings_automation_due_date_rule,
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type,
+        :api_version => "V2"
+      )
+
+      data, status_code, headers = @api_client.call_api(Net::HTTP::Delete, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#delete_security_findings_automation_due_date_rule\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
+    # Delete a mute rule.
+    #
+    # @see #delete_security_findings_automation_mute_rule_with_http_info
+    def delete_security_findings_automation_mute_rule(rule_id, opts = {})
+      delete_security_findings_automation_mute_rule_with_http_info(rule_id, opts)
+      nil
+    end
+
+    # Delete a mute rule.
+    #
+    # Delete an existing mute rule by ID.
+    #
+    # @param rule_id [UUID] The ID of the mute rule.
+    # @param opts [Hash] the optional parameters
+    # @return [Array<(nil, Integer, Hash)>] nil, response status code and response headers
+    def delete_security_findings_automation_mute_rule_with_http_info(rule_id, opts = {})
+      unstable_enabled = @api_client.config.unstable_operations["v2.delete_security_findings_automation_mute_rule".to_sym]
+      if unstable_enabled
+        @api_client.config.logger.warn format("Using unstable operation '%s'", "v2.delete_security_findings_automation_mute_rule")
+      else
+        raise DatadogAPIClient::APIError.new(message: format("Unstable operation '%s' is disabled", "v2.delete_security_findings_automation_mute_rule"))
+      end
+
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.delete_security_findings_automation_mute_rule ...'
+      end
+      # verify the required parameter 'rule_id' is set
+      if @api_client.config.client_side_validation && rule_id.nil?
+        fail ArgumentError, "Missing the required parameter 'rule_id' when calling SecurityMonitoringAPI.delete_security_findings_automation_mute_rule"
+      end
+      # resource path
+      local_var_path = '/api/v2/security/findings/automation/mute_rules/{rule_id}'.sub('{rule_id}', CGI.escape(rule_id.to_s).gsub('%2F', '/'))
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['*/*'])
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body]
+
+      # return_type
+      return_type = opts[:debug_return_type]
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth]
+
+      new_options = opts.merge(
+        :operation => :delete_security_findings_automation_mute_rule,
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type,
+        :api_version => "V2"
+      )
+
+      data, status_code, headers = @api_client.call_api(Net::HTTP::Delete, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#delete_security_findings_automation_mute_rule\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
+    # Delete a ticket creation rule.
+    #
+    # @see #delete_security_findings_automation_ticket_creation_rule_with_http_info
+    def delete_security_findings_automation_ticket_creation_rule(rule_id, opts = {})
+      delete_security_findings_automation_ticket_creation_rule_with_http_info(rule_id, opts)
+      nil
+    end
+
+    # Delete a ticket creation rule.
+    #
+    # Delete an existing ticket creation rule by ID.
+    #
+    # @param rule_id [UUID] The ID of the ticket creation rule.
+    # @param opts [Hash] the optional parameters
+    # @return [Array<(nil, Integer, Hash)>] nil, response status code and response headers
+    def delete_security_findings_automation_ticket_creation_rule_with_http_info(rule_id, opts = {})
+      unstable_enabled = @api_client.config.unstable_operations["v2.delete_security_findings_automation_ticket_creation_rule".to_sym]
+      if unstable_enabled
+        @api_client.config.logger.warn format("Using unstable operation '%s'", "v2.delete_security_findings_automation_ticket_creation_rule")
+      else
+        raise DatadogAPIClient::APIError.new(message: format("Unstable operation '%s' is disabled", "v2.delete_security_findings_automation_ticket_creation_rule"))
+      end
+
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.delete_security_findings_automation_ticket_creation_rule ...'
+      end
+      # verify the required parameter 'rule_id' is set
+      if @api_client.config.client_side_validation && rule_id.nil?
+        fail ArgumentError, "Missing the required parameter 'rule_id' when calling SecurityMonitoringAPI.delete_security_findings_automation_ticket_creation_rule"
+      end
+      # resource path
+      local_var_path = '/api/v2/security/findings/automation/ticket_creation_rules/{rule_id}'.sub('{rule_id}', CGI.escape(rule_id.to_s).gsub('%2F', '/'))
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['*/*'])
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body]
+
+      # return_type
+      return_type = opts[:debug_return_type]
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth]
+
+      new_options = opts.merge(
+        :operation => :delete_security_findings_automation_ticket_creation_rule,
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type,
+        :api_version => "V2"
+      )
+
+      data, status_code, headers = @api_client.call_api(Net::HTTP::Delete, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#delete_security_findings_automation_ticket_creation_rule\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
     # Delete a critical asset.
     #
     # @see #delete_security_monitoring_critical_asset_with_http_info
@@ -3656,7 +4360,8 @@ module DatadogAPIClient::V2
     #
     # Export a security monitoring resource to a Terraform configuration.
     # The `resource_type` path parameter specifies the type of resource to export
-    # and must be one of `suppressions` or `critical_assets`.
+    # and must be one of `suppressions`, `critical_assets`, `security_filters`, or `rules`.
+    # For `rules`, partner rules cannot be exported and return a 400 error.
     #
     # @param resource_type [SecurityMonitoringTerraformResourceType] The type of security monitoring resource to export.
     # @param resource_id [String] The ID of the security monitoring resource to export.
@@ -3678,7 +4383,7 @@ module DatadogAPIClient::V2
         fail ArgumentError, "Missing the required parameter 'resource_type' when calling SecurityMonitoringAPI.export_security_monitoring_terraform_resource"
       end
       # verify enum value
-      allowable_values = ['suppressions', 'critical_assets']
+      allowable_values = ['suppressions', 'critical_assets', 'security_filters', 'rules']
       if @api_client.config.client_side_validation && !allowable_values.include?(resource_type)
         fail ArgumentError, "invalid value for \"resource_type\", must be one of #{allowable_values}"
       end
@@ -3929,51 +4634,118 @@ module DatadogAPIClient::V2
       return data, status_code, headers
     end
 
-    # Get entity context.
+    # Get entity context.
+    #
+    # @see #get_entity_context_with_http_info
+    def get_entity_context(opts = {})
+      data, _status_code, _headers = get_entity_context_with_http_info(opts)
+      data
+    end
+
+    # Get entity context.
+    #
+    # Search the Cloud SIEM entity context store for entities that match a query, and return the historical
+    # revisions of each entity in the requested time range. The endpoint can either return revisions across an
+    # interval (`from` / `to`) or the snapshot of each entity at a single point in time (`as_of`); the two modes
+    # are mutually exclusive.
+    #
+    # @param opts [Hash] the optional parameters
+    # @option opts [String] :query A free-text query (for example, an email address or principal ID) used to filter the entities returned.
+    # @option opts [String] :from The start of the time range to query, as an RFC3339 timestamp or a relative time (for example, `now-7d`). Defaults to `now-7d`. Ignored when `as_of` is set.
+    # @option opts [String] :to The end of the time range to query, as an RFC3339 timestamp or a relative time (for example, `now`). Defaults to `now`. Ignored when `as_of` is set.
+    # @option opts [String] :as_of A point in time at which to query the entity revisions, as an RFC3339 timestamp, a Unix timestamp (in seconds), or a relative time (for example, `now-1d`). When set, `from` and `to` are ignored. Cannot be combined with custom `from` / `to` values.
+    # @option opts [Integer] :limit The maximum number of entities to return.
+    # @option opts [String] :page_token An opaque token used to fetch the next page of results, as returned in `meta.page.next_token` of a previous response.
+    # @return [Array<(EntityContextResponse, Integer, Hash)>] EntityContextResponse data, response status code and response headers
+    def get_entity_context_with_http_info(opts = {})
+      unstable_enabled = @api_client.config.unstable_operations["v2.get_entity_context".to_sym]
+      if unstable_enabled
+        @api_client.config.logger.warn format("Using unstable operation '%s'", "v2.get_entity_context")
+      else
+        raise DatadogAPIClient::APIError.new(message: format("Unstable operation '%s' is disabled", "v2.get_entity_context"))
+      end
+
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.get_entity_context ...'
+      end
+      # resource path
+      local_var_path = '/api/v2/security_monitoring/entity_context'
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+      query_params[:'query'] = opts[:'query'] if !opts[:'query'].nil?
+      query_params[:'from'] = opts[:'from'] if !opts[:'from'].nil?
+      query_params[:'to'] = opts[:'to'] if !opts[:'to'].nil?
+      query_params[:'as_of'] = opts[:'as_of'] if !opts[:'as_of'].nil?
+      query_params[:'limit'] = opts[:'limit'] if !opts[:'limit'].nil?
+      query_params[:'page_token'] = opts[:'page_token'] if !opts[:'page_token'].nil?
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json'])
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body]
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'EntityContextResponse'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
+
+      new_options = opts.merge(
+        :operation => :get_entity_context,
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type,
+        :api_version => "V2"
+      )
+
+      data, status_code, headers = @api_client.call_api(Net::HTTP::Get, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#get_entity_context\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
+    # Get Entra ID Azure App Registration prerequisites.
     #
-    # @see #get_entity_context_with_http_info
-    def get_entity_context(opts = {})
-      data, _status_code, _headers = get_entity_context_with_http_info(opts)
+    # @see #get_entra_id_azure_app_registrations_with_http_info
+    def get_entra_id_azure_app_registrations(opts = {})
+      data, _status_code, _headers = get_entra_id_azure_app_registrations_with_http_info(opts)
       data
     end
 
-    # Get entity context.
+    # Get Entra ID Azure App Registration prerequisites.
     #
-    # Search the Cloud SIEM entity context store for entities that match a query, and return the historical
-    # revisions of each entity in the requested time range. The endpoint can either return revisions across an
-    # interval (`from` / `to`) or the snapshot of each entity at a single point in time (`as_of`); the two modes
-    # are mutually exclusive.
+    # Get the Azure App Registrations discovered for the organization and whether at least one of them has
+    # resource collection enabled, which is a prerequisite for activating the Entra ID entity context sync integration.
     #
     # @param opts [Hash] the optional parameters
-    # @option opts [String] :query A free-text query (for example, an email address or principal ID) used to filter the entities returned.
-    # @option opts [String] :from The start of the time range to query, as an RFC3339 timestamp or a relative time (for example, `now-7d`). Defaults to `now-7d`. Ignored when `as_of` is set.
-    # @option opts [String] :to The end of the time range to query, as an RFC3339 timestamp or a relative time (for example, `now`). Defaults to `now`. Ignored when `as_of` is set.
-    # @option opts [String] :as_of A point in time at which to query the entity revisions, as an RFC3339 timestamp, a Unix timestamp (in seconds), or a relative time (for example, `now-1d`). When set, `from` and `to` are ignored. Cannot be combined with custom `from` / `to` values.
-    # @option opts [Integer] :limit The maximum number of entities to return.
-    # @option opts [String] :page_token An opaque token used to fetch the next page of results, as returned in `meta.page.next_token` of a previous response.
-    # @return [Array<(EntityContextResponse, Integer, Hash)>] EntityContextResponse data, response status code and response headers
-    def get_entity_context_with_http_info(opts = {})
-      unstable_enabled = @api_client.config.unstable_operations["v2.get_entity_context".to_sym]
+    # @return [Array<(SecurityMonitoringEntraIdAzureAppRegistrationsResponse, Integer, Hash)>] SecurityMonitoringEntraIdAzureAppRegistrationsResponse data, response status code and response headers
+    def get_entra_id_azure_app_registrations_with_http_info(opts = {})
+      unstable_enabled = @api_client.config.unstable_operations["v2.get_entra_id_azure_app_registrations".to_sym]
       if unstable_enabled
-        @api_client.config.logger.warn format("Using unstable operation '%s'", "v2.get_entity_context")
+        @api_client.config.logger.warn format("Using unstable operation '%s'", "v2.get_entra_id_azure_app_registrations")
       else
-        raise DatadogAPIClient::APIError.new(message: format("Unstable operation '%s' is disabled", "v2.get_entity_context"))
+        raise DatadogAPIClient::APIError.new(message: format("Unstable operation '%s' is disabled", "v2.get_entra_id_azure_app_registrations"))
       end
 
       if @api_client.config.debugging
-        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.get_entity_context ...'
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.get_entra_id_azure_app_registrations ...'
       end
       # resource path
-      local_var_path = '/api/v2/security_monitoring/entity_context'
+      local_var_path = '/api/v2/security_monitoring/configuration/integration_config/entra_id/azure_app_registrations'
 
       # query parameters
       query_params = opts[:query_params] || {}
-      query_params[:'query'] = opts[:'query'] if !opts[:'query'].nil?
-      query_params[:'from'] = opts[:'from'] if !opts[:'from'].nil?
-      query_params[:'to'] = opts[:'to'] if !opts[:'to'].nil?
-      query_params[:'as_of'] = opts[:'as_of'] if !opts[:'as_of'].nil?
-      query_params[:'limit'] = opts[:'limit'] if !opts[:'limit'].nil?
-      query_params[:'page_token'] = opts[:'page_token'] if !opts[:'page_token'].nil?
 
       # header parameters
       header_params = opts[:header_params] || {}
@@ -3987,13 +4759,13 @@ module DatadogAPIClient::V2
       post_body = opts[:debug_body]
 
       # return_type
-      return_type = opts[:debug_return_type] || 'EntityContextResponse'
+      return_type = opts[:debug_return_type] || 'SecurityMonitoringEntraIdAzureAppRegistrationsResponse'
 
       # auth_names
       auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
 
       new_options = opts.merge(
-        :operation => :get_entity_context,
+        :operation => :get_entra_id_azure_app_registrations,
         :header_params => header_params,
         :query_params => query_params,
         :form_params => form_params,
@@ -4005,7 +4777,7 @@ module DatadogAPIClient::V2
 
       data, status_code, headers = @api_client.call_api(Net::HTTP::Get, local_var_path, new_options)
       if @api_client.config.debugging
-        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#get_entity_context\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#get_entra_id_azure_app_registrations\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
       end
       return data, status_code, headers
     end
@@ -4480,7 +5252,7 @@ module DatadogAPIClient::V2
         fail ArgumentError, "Missing the required parameter 'asset_type' when calling SecurityMonitoringAPI.get_sbom"
       end
       # verify enum value
-      allowable_values = ['Repository', 'Service', 'Host', 'HostImage', 'Image']
+      allowable_values = ['Repository', 'Service', 'Host', 'HostImage', 'Image', 'ServerlessFunction']
       if @api_client.config.client_side_validation && !allowable_values.include?(asset_type)
         fail ArgumentError, "invalid value for \"asset_type\", must be one of #{allowable_values}"
       end
@@ -4670,6 +5442,219 @@ module DatadogAPIClient::V2
       return data, status_code, headers
     end
 
+    # Get a due date rule.
+    #
+    # @see #get_security_findings_automation_due_date_rule_with_http_info
+    def get_security_findings_automation_due_date_rule(rule_id, opts = {})
+      data, _status_code, _headers = get_security_findings_automation_due_date_rule_with_http_info(rule_id, opts)
+      data
+    end
+
+    # Get a due date rule.
+    #
+    # Get the details of a due date rule by ID.
+    #
+    # @param rule_id [UUID] The ID of the due date rule.
+    # @param opts [Hash] the optional parameters
+    # @return [Array<(DueDateRuleResponse, Integer, Hash)>] DueDateRuleResponse data, response status code and response headers
+    def get_security_findings_automation_due_date_rule_with_http_info(rule_id, opts = {})
+      unstable_enabled = @api_client.config.unstable_operations["v2.get_security_findings_automation_due_date_rule".to_sym]
+      if unstable_enabled
+        @api_client.config.logger.warn format("Using unstable operation '%s'", "v2.get_security_findings_automation_due_date_rule")
+      else
+        raise DatadogAPIClient::APIError.new(message: format("Unstable operation '%s' is disabled", "v2.get_security_findings_automation_due_date_rule"))
+      end
+
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.get_security_findings_automation_due_date_rule ...'
+      end
+      # verify the required parameter 'rule_id' is set
+      if @api_client.config.client_side_validation && rule_id.nil?
+        fail ArgumentError, "Missing the required parameter 'rule_id' when calling SecurityMonitoringAPI.get_security_findings_automation_due_date_rule"
+      end
+      # resource path
+      local_var_path = '/api/v2/security/findings/automation/due_date_rules/{rule_id}'.sub('{rule_id}', CGI.escape(rule_id.to_s).gsub('%2F', '/'))
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json'])
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body]
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'DueDateRuleResponse'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth]
+
+      new_options = opts.merge(
+        :operation => :get_security_findings_automation_due_date_rule,
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type,
+        :api_version => "V2"
+      )
+
+      data, status_code, headers = @api_client.call_api(Net::HTTP::Get, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#get_security_findings_automation_due_date_rule\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
+    # Get a mute rule.
+    #
+    # @see #get_security_findings_automation_mute_rule_with_http_info
+    def get_security_findings_automation_mute_rule(rule_id, opts = {})
+      data, _status_code, _headers = get_security_findings_automation_mute_rule_with_http_info(rule_id, opts)
+      data
+    end
+
+    # Get a mute rule.
+    #
+    # Get the details of a mute rule by ID.
+    #
+    # @param rule_id [UUID] The ID of the mute rule.
+    # @param opts [Hash] the optional parameters
+    # @return [Array<(MuteRuleResponse, Integer, Hash)>] MuteRuleResponse data, response status code and response headers
+    def get_security_findings_automation_mute_rule_with_http_info(rule_id, opts = {})
+      unstable_enabled = @api_client.config.unstable_operations["v2.get_security_findings_automation_mute_rule".to_sym]
+      if unstable_enabled
+        @api_client.config.logger.warn format("Using unstable operation '%s'", "v2.get_security_findings_automation_mute_rule")
+      else
+        raise DatadogAPIClient::APIError.new(message: format("Unstable operation '%s' is disabled", "v2.get_security_findings_automation_mute_rule"))
+      end
+
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.get_security_findings_automation_mute_rule ...'
+      end
+      # verify the required parameter 'rule_id' is set
+      if @api_client.config.client_side_validation && rule_id.nil?
+        fail ArgumentError, "Missing the required parameter 'rule_id' when calling SecurityMonitoringAPI.get_security_findings_automation_mute_rule"
+      end
+      # resource path
+      local_var_path = '/api/v2/security/findings/automation/mute_rules/{rule_id}'.sub('{rule_id}', CGI.escape(rule_id.to_s).gsub('%2F', '/'))
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json'])
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body]
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'MuteRuleResponse'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth]
+
+      new_options = opts.merge(
+        :operation => :get_security_findings_automation_mute_rule,
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type,
+        :api_version => "V2"
+      )
+
+      data, status_code, headers = @api_client.call_api(Net::HTTP::Get, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#get_security_findings_automation_mute_rule\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
+    # Get a ticket creation rule.
+    #
+    # @see #get_security_findings_automation_ticket_creation_rule_with_http_info
+    def get_security_findings_automation_ticket_creation_rule(rule_id, opts = {})
+      data, _status_code, _headers = get_security_findings_automation_ticket_creation_rule_with_http_info(rule_id, opts)
+      data
+    end
+
+    # Get a ticket creation rule.
+    #
+    # Get the details of a ticket creation rule by ID.
+    #
+    # @param rule_id [UUID] The ID of the ticket creation rule.
+    # @param opts [Hash] the optional parameters
+    # @return [Array<(TicketCreationRuleResponse, Integer, Hash)>] TicketCreationRuleResponse data, response status code and response headers
+    def get_security_findings_automation_ticket_creation_rule_with_http_info(rule_id, opts = {})
+      unstable_enabled = @api_client.config.unstable_operations["v2.get_security_findings_automation_ticket_creation_rule".to_sym]
+      if unstable_enabled
+        @api_client.config.logger.warn format("Using unstable operation '%s'", "v2.get_security_findings_automation_ticket_creation_rule")
+      else
+        raise DatadogAPIClient::APIError.new(message: format("Unstable operation '%s' is disabled", "v2.get_security_findings_automation_ticket_creation_rule"))
+      end
+
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.get_security_findings_automation_ticket_creation_rule ...'
+      end
+      # verify the required parameter 'rule_id' is set
+      if @api_client.config.client_side_validation && rule_id.nil?
+        fail ArgumentError, "Missing the required parameter 'rule_id' when calling SecurityMonitoringAPI.get_security_findings_automation_ticket_creation_rule"
+      end
+      # resource path
+      local_var_path = '/api/v2/security/findings/automation/ticket_creation_rules/{rule_id}'.sub('{rule_id}', CGI.escape(rule_id.to_s).gsub('%2F', '/'))
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json'])
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body]
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'TicketCreationRuleResponse'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth]
+
+      new_options = opts.merge(
+        :operation => :get_security_findings_automation_ticket_creation_rule,
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type,
+        :api_version => "V2"
+      )
+
+      data, status_code, headers = @api_client.call_api(Net::HTTP::Get, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#get_security_findings_automation_ticket_creation_rule\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
     # Get a critical asset.
     #
     # @see #get_security_monitoring_critical_asset_with_http_info
@@ -6229,22 +7214,82 @@ module DatadogAPIClient::V2
 
     # Get details of a vulnerability notification rule.
     #
-    # Get the details of a notification rule for security vulnerabilities.
+    # Get the details of a notification rule for security vulnerabilities.
+    #
+    # @param id [String] ID of the notification rule.
+    # @param opts [Hash] the optional parameters
+    # @return [Array<(NotificationRuleResponse, Integer, Hash)>] NotificationRuleResponse data, response status code and response headers
+    def get_vulnerability_notification_rule_with_http_info(id, opts = {})
+
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.get_vulnerability_notification_rule ...'
+      end
+      # verify the required parameter 'id' is set
+      if @api_client.config.client_side_validation && id.nil?
+        fail ArgumentError, "Missing the required parameter 'id' when calling SecurityMonitoringAPI.get_vulnerability_notification_rule"
+      end
+      # resource path
+      local_var_path = '/api/v2/security/vulnerabilities/notification_rules/{id}'.sub('{id}', CGI.escape(id.to_s).gsub('%2F', '/'))
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json'])
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body]
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'NotificationRuleResponse'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth]
+
+      new_options = opts.merge(
+        :operation => :get_vulnerability_notification_rule,
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type,
+        :api_version => "V2"
+      )
+
+      data, status_code, headers = @api_client.call_api(Net::HTTP::Get, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#get_vulnerability_notification_rule\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
+    # Get the list of vulnerability notification rules.
+    #
+    # @see #get_vulnerability_notification_rules_with_http_info
+    def get_vulnerability_notification_rules(opts = {})
+      data, _status_code, _headers = get_vulnerability_notification_rules_with_http_info(opts)
+      data
+    end
+
+    # Get the list of vulnerability notification rules.
+    #
+    # Returns the list of notification rules for security vulnerabilities.
     #
-    # @param id [String] ID of the notification rule.
     # @param opts [Hash] the optional parameters
-    # @return [Array<(NotificationRuleResponse, Integer, Hash)>] NotificationRuleResponse data, response status code and response headers
-    def get_vulnerability_notification_rule_with_http_info(id, opts = {})
+    # @return [Array<(NotificationRulesListResponse, Integer, Hash)>] NotificationRulesListResponse data, response status code and response headers
+    def get_vulnerability_notification_rules_with_http_info(opts = {})
 
       if @api_client.config.debugging
-        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.get_vulnerability_notification_rule ...'
-      end
-      # verify the required parameter 'id' is set
-      if @api_client.config.client_side_validation && id.nil?
-        fail ArgumentError, "Missing the required parameter 'id' when calling SecurityMonitoringAPI.get_vulnerability_notification_rule"
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.get_vulnerability_notification_rules ...'
       end
       # resource path
-      local_var_path = '/api/v2/security/vulnerabilities/notification_rules/{id}'.sub('{id}', CGI.escape(id.to_s).gsub('%2F', '/'))
+      local_var_path = '/api/v2/security/vulnerabilities/notification_rules'
 
       # query parameters
       query_params = opts[:query_params] || {}
@@ -6261,13 +7306,13 @@ module DatadogAPIClient::V2
       post_body = opts[:debug_body]
 
       # return_type
-      return_type = opts[:debug_return_type] || 'NotificationRuleResponse'
+      return_type = opts[:debug_return_type] || 'NotificationRulesListResponse'
 
       # auth_names
       auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth]
 
       new_options = opts.merge(
-        :operation => :get_vulnerability_notification_rule,
+        :operation => :get_vulnerability_notification_rules,
         :header_params => header_params,
         :query_params => query_params,
         :form_params => form_params,
@@ -6279,32 +7324,58 @@ module DatadogAPIClient::V2
 
       data, status_code, headers = @api_client.call_api(Net::HTTP::Get, local_var_path, new_options)
       if @api_client.config.debugging
-        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#get_vulnerability_notification_rule\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#get_vulnerability_notification_rules\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
       end
       return data, status_code, headers
     end
 
-    # Get the list of vulnerability notification rules.
+    # Import security vulnerabilities.
     #
-    # @see #get_vulnerability_notification_rules_with_http_info
-    def get_vulnerability_notification_rules(opts = {})
-      data, _status_code, _headers = get_vulnerability_notification_rules_with_http_info(opts)
-      data
+    # @see #import_security_vulnerabilities_with_http_info
+    def import_security_vulnerabilities(body, opts = {})
+      import_security_vulnerabilities_with_http_info(body, opts)
+      nil
     end
 
-    # Get the list of vulnerability notification rules.
+    # Import security vulnerabilities.
     #
-    # Returns the list of notification rules for security vulnerabilities.
+    # Import security vulnerabilities from an external scanner in CycloneDX 1.5 format.
+    #
+    # The payload is validated against the CycloneDX 1.5 JSON schema and the following
+    # additional constraints:
     #
+    # - `metadata`, `metadata.component`, and `metadata.component.name` are required.
+    # - `metadata.tools.components` must contain exactly one element with a `name` field.
+    # - `components` cannot be empty. Each component requires `bom-ref`, `type`, `name`, and `version`.
+    # - When `type` is `library`, `purl` is required and must be a valid PURL.
+    # - When `type` is `operating-system`, `name` must be one of the supported OS values:
+    #   `alma`, `alpine`, `amazon`, `azurelinux`, `bottlerocket`, `cbl-mariner`, `chainguard`,
+    #   `centos`, `debian`, `fedora`, `opensuse`, `opensuse-leap`, `opensuse-tumbleweed`,
+    #   `oracle`, `photon`, `redhat`, `rocky`, `slem`, `sles`, `ubuntu`, `wolfi`, `windows`, `macos`.
+    # - `vulnerabilities` cannot be empty. Each vulnerability requires `id`, exactly one `ratings` entry,
+    #   and at least one `affects` entry.
+    # - Each `affects[].ref` must match a `bom-ref` value in `components`.
+    #
+    # @param body [CycloneDXBom] 
     # @param opts [Hash] the optional parameters
-    # @return [Array<(NotificationRulesListResponse, Integer, Hash)>] NotificationRulesListResponse data, response status code and response headers
-    def get_vulnerability_notification_rules_with_http_info(opts = {})
+    # @return [Array<(nil, Integer, Hash)>] nil, response status code and response headers
+    def import_security_vulnerabilities_with_http_info(body, opts = {})
+      unstable_enabled = @api_client.config.unstable_operations["v2.import_security_vulnerabilities".to_sym]
+      if unstable_enabled
+        @api_client.config.logger.warn format("Using unstable operation '%s'", "v2.import_security_vulnerabilities")
+      else
+        raise DatadogAPIClient::APIError.new(message: format("Unstable operation '%s' is disabled", "v2.import_security_vulnerabilities"))
+      end
 
       if @api_client.config.debugging
-        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.get_vulnerability_notification_rules ...'
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.import_security_vulnerabilities ...'
+      end
+      # verify the required parameter 'body' is set
+      if @api_client.config.client_side_validation && body.nil?
+        fail ArgumentError, "Missing the required parameter 'body' when calling SecurityMonitoringAPI.import_security_vulnerabilities"
       end
       # resource path
-      local_var_path = '/api/v2/security/vulnerabilities/notification_rules'
+      local_var_path = '/api/v2/security/vulnerabilities'
 
       # query parameters
       query_params = opts[:query_params] || {}
@@ -6312,22 +7383,24 @@ module DatadogAPIClient::V2
       # header parameters
       header_params = opts[:header_params] || {}
       # HTTP header 'Accept' (if needed)
-      header_params['Accept'] = @api_client.select_header_accept(['application/json'])
+      header_params['Accept'] = @api_client.select_header_accept(['*/*'])
+      # HTTP header 'Content-Type'
+      header_params['Content-Type'] = @api_client.select_header_content_type(['application/json'])
 
       # form parameters
       form_params = opts[:form_params] || {}
 
       # http body (model)
-      post_body = opts[:debug_body]
+      post_body = opts[:debug_body] || @api_client.object_to_http_body(body)
 
       # return_type
-      return_type = opts[:debug_return_type] || 'NotificationRulesListResponse'
+      return_type = opts[:debug_return_type]
 
       # auth_names
-      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth]
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
 
       new_options = opts.merge(
-        :operation => :get_vulnerability_notification_rules,
+        :operation => :import_security_vulnerabilities,
         :header_params => header_params,
         :query_params => query_params,
         :form_params => form_params,
@@ -6337,9 +7410,9 @@ module DatadogAPIClient::V2
         :api_version => "V2"
       )
 
-      data, status_code, headers = @api_client.call_api(Net::HTTP::Get, local_var_path, new_options)
+      data, status_code, headers = @api_client.call_api(Net::HTTP::Post, local_var_path, new_options)
       if @api_client.config.debugging
-        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#get_vulnerability_notification_rules\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#import_security_vulnerabilities\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
       end
       return data, status_code, headers
     end
@@ -6356,6 +7429,11 @@ module DatadogAPIClient::V2
     #
     # Get a list of assets SBOMs for an organization.
     #
+    # The `filter[asset_type]` parameter is required for initial requests (when no `page[token]` is provided).
+    # Subsequent pages encode the asset type in the pagination token, so `filter[asset_type]` is not required
+    # for paginated requests. Mixing infrastructure asset types (`Host`, `HostImage`, `Image`, `ServerlessFunction`)
+    # with code asset types (`Repository`, `Service`) in the same request is not supported and returns a 400 error.
+    #
     # ### Pagination
     #
     # Please review the [Pagination section](#pagination) for the "List Vulnerabilities" endpoint.
@@ -6371,7 +7449,7 @@ module DatadogAPIClient::V2
     # @param opts [Hash] the optional parameters
     # @option opts [String] :page_token Its value must come from the `links` section of the response of the first request. Do not manually edit it.
     # @option opts [Integer] :page_number The page number to be retrieved. It should be equal to or greater than 1.
-    # @option opts [AssetType] :filter_asset_type The type of the assets for the SBOM request.
+    # @option opts [AssetType] :filter_asset_type The type of the assets for the SBOM request. Required for initial requests (when no `page[token]` is provided). Infrastructure types (`Host`, `HostImage`, `Image`, `ServerlessFunction`) and code types (`Repository`, `Service`) cannot be mixed in the same request.
     # @option opts [String] :filter_asset_name The name of the asset for the SBOM request.
     # @option opts [String] :filter_package_name The name of the component that is a dependency of an asset.
     # @option opts [String] :filter_package_version The version of the component that is a dependency of an asset.
@@ -6386,7 +7464,7 @@ module DatadogAPIClient::V2
       if @api_client.config.client_side_validation && !opts[:'page_number'].nil? && opts[:'page_number'] < 1
         fail ArgumentError, 'invalid value for "opts[:"page_number"]" when calling SecurityMonitoringAPI.list_assets_sbo_ms, must be greater than or equal to 1.'
       end
-      allowable_values = ['Repository', 'Service', 'Host', 'HostImage', 'Image']
+      allowable_values = ['Repository', 'Service', 'Host', 'HostImage', 'Image', 'ServerlessFunction']
       if @api_client.config.client_side_validation && opts[:'filter_asset_type'] && !allowable_values.include?(opts[:'filter_asset_type'])
         fail ArgumentError, "invalid value for \"filter_asset_type\", must be one of #{allowable_values}"
       end
@@ -6714,7 +7792,7 @@ module DatadogAPIClient::V2
     # @option opts [String] :sort_column Sort column: score, first_seen_ts_epoch, last_seen_ts_epoch, indicator, indicator_type, signal_count, log_count, category, as_type.
     # @option opts [String] :sort_order Sort order: asc or desc.
     # @option opts [Boolean] :ocsf When true, return only OCSF field-based matches. When false, return regex/message-based matches.
-    # @option opts [String] :worked_by Filter indicators whose triage state was updated by a specific user UUID.
+    # @option opts [String] :worked_by Filter indicators whose triage state was updated by a specific user identified by their handle.
     # @option opts [IoCTriageState] :triage_state Filter by triage state.
     # @return [Array<(IoCExplorerListResponse, Integer, Hash)>] IoCExplorerListResponse data, response status code and response headers
     def list_indicators_of_compromise_with_http_info(opts = {})
@@ -7219,27 +8297,285 @@ module DatadogAPIClient::V2
     def list_security_findings_with_http_info(opts = {})
 
       if @api_client.config.debugging
-        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.list_security_findings ...'
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.list_security_findings ...'
+      end
+      if @api_client.config.client_side_validation && !opts[:'page_limit'].nil? && opts[:'page_limit'] > 150
+        fail ArgumentError, 'invalid value for "opts[:"page_limit"]" when calling SecurityMonitoringAPI.list_security_findings, must be smaller than or equal to 150.'
+      end
+      if @api_client.config.client_side_validation && !opts[:'page_limit'].nil? && opts[:'page_limit'] < 1
+        fail ArgumentError, 'invalid value for "opts[:"page_limit"]" when calling SecurityMonitoringAPI.list_security_findings, must be greater than or equal to 1.'
+      end
+      allowable_values = ['@detection_changed_at', '-@detection_changed_at']
+      if @api_client.config.client_side_validation && opts[:'sort'] && !allowable_values.include?(opts[:'sort'])
+        fail ArgumentError, "invalid value for \"sort\", must be one of #{allowable_values}"
+      end
+      # resource path
+      local_var_path = '/api/v2/security/findings'
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+      query_params[:'filter[query]'] = opts[:'filter_query'] if !opts[:'filter_query'].nil?
+      query_params[:'page[cursor]'] = opts[:'page_cursor'] if !opts[:'page_cursor'].nil?
+      query_params[:'page[limit]'] = opts[:'page_limit'] if !opts[:'page_limit'].nil?
+      query_params[:'sort'] = opts[:'sort'] if !opts[:'sort'].nil?
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json'])
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body]
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'ListSecurityFindingsResponse'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
+
+      new_options = opts.merge(
+        :operation => :list_security_findings,
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type,
+        :api_version => "V2"
+      )
+
+      data, status_code, headers = @api_client.call_api(Net::HTTP::Get, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#list_security_findings\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
+    # List security findings.
+    #
+    # Provide a paginated version of {#list_security_findings}, returning all items.
+    #
+    # To use it you need to use a block: list_security_findings_with_pagination { |item| p item }
+    #
+    # @yield [SecurityFindingsData] Paginated items
+    def list_security_findings_with_pagination(opts = {})
+        api_version = "V2"
+        page_size = @api_client.get_attribute_from_path(opts, "page_limit", 10)
+        @api_client.set_attribute_from_path(api_version, opts, "page_limit", Integer, page_size)
+        while true do
+            response = list_security_findings(opts)
+            @api_client.get_attribute_from_path(response, "data").each { |item| yield(item) }
+            if @api_client.get_attribute_from_path(response, "data").length == 0
+              break
+            end
+            @api_client.set_attribute_from_path(api_version, opts, "page_cursor", String, @api_client.get_attribute_from_path(response, "meta.page.after"))
+        end
+    end
+
+    # Get all due date rules.
+    #
+    # @see #list_security_findings_automation_due_date_rules_with_http_info
+    def list_security_findings_automation_due_date_rules(opts = {})
+      data, _status_code, _headers = list_security_findings_automation_due_date_rules_with_http_info(opts)
+      data
+    end
+
+    # Get all due date rules.
+    #
+    # Get all due date rules for the current organization.
+    #
+    # @param opts [Hash] the optional parameters
+    # @option opts [Integer] :page_size The number of rules per page. Maximum is 1000.
+    # @option opts [Integer] :page_number The page number to return.
+    # @return [Array<(DueDateRulesResponse, Integer, Hash)>] DueDateRulesResponse data, response status code and response headers
+    def list_security_findings_automation_due_date_rules_with_http_info(opts = {})
+      unstable_enabled = @api_client.config.unstable_operations["v2.list_security_findings_automation_due_date_rules".to_sym]
+      if unstable_enabled
+        @api_client.config.logger.warn format("Using unstable operation '%s'", "v2.list_security_findings_automation_due_date_rules")
+      else
+        raise DatadogAPIClient::APIError.new(message: format("Unstable operation '%s' is disabled", "v2.list_security_findings_automation_due_date_rules"))
+      end
+
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.list_security_findings_automation_due_date_rules ...'
+      end
+      if @api_client.config.client_side_validation && !opts[:'page_size'].nil? && opts[:'page_size'] > 1000
+        fail ArgumentError, 'invalid value for "opts[:"page_size"]" when calling SecurityMonitoringAPI.list_security_findings_automation_due_date_rules, must be smaller than or equal to 1000.'
+      end
+      if @api_client.config.client_side_validation && !opts[:'page_size'].nil? && opts[:'page_size'] < 1
+        fail ArgumentError, 'invalid value for "opts[:"page_size"]" when calling SecurityMonitoringAPI.list_security_findings_automation_due_date_rules, must be greater than or equal to 1.'
+      end
+      if @api_client.config.client_side_validation && !opts[:'page_number'].nil? && opts[:'page_number'] < 0
+        fail ArgumentError, 'invalid value for "opts[:"page_number"]" when calling SecurityMonitoringAPI.list_security_findings_automation_due_date_rules, must be greater than or equal to 0.'
+      end
+      # resource path
+      local_var_path = '/api/v2/security/findings/automation/due_date_rules'
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+      query_params[:'page[size]'] = opts[:'page_size'] if !opts[:'page_size'].nil?
+      query_params[:'page[number]'] = opts[:'page_number'] if !opts[:'page_number'].nil?
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json'])
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body]
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'DueDateRulesResponse'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth]
+
+      new_options = opts.merge(
+        :operation => :list_security_findings_automation_due_date_rules,
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type,
+        :api_version => "V2"
+      )
+
+      data, status_code, headers = @api_client.call_api(Net::HTTP::Get, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#list_security_findings_automation_due_date_rules\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
+    # Get all mute rules.
+    #
+    # @see #list_security_findings_automation_mute_rules_with_http_info
+    def list_security_findings_automation_mute_rules(opts = {})
+      data, _status_code, _headers = list_security_findings_automation_mute_rules_with_http_info(opts)
+      data
+    end
+
+    # Get all mute rules.
+    #
+    # Get all mute rules for the current organization.
+    #
+    # @param opts [Hash] the optional parameters
+    # @option opts [Integer] :page_size The number of rules per page. Maximum is 1000.
+    # @option opts [Integer] :page_number The page number to return.
+    # @return [Array<(MuteRulesResponse, Integer, Hash)>] MuteRulesResponse data, response status code and response headers
+    def list_security_findings_automation_mute_rules_with_http_info(opts = {})
+      unstable_enabled = @api_client.config.unstable_operations["v2.list_security_findings_automation_mute_rules".to_sym]
+      if unstable_enabled
+        @api_client.config.logger.warn format("Using unstable operation '%s'", "v2.list_security_findings_automation_mute_rules")
+      else
+        raise DatadogAPIClient::APIError.new(message: format("Unstable operation '%s' is disabled", "v2.list_security_findings_automation_mute_rules"))
+      end
+
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.list_security_findings_automation_mute_rules ...'
+      end
+      if @api_client.config.client_side_validation && !opts[:'page_size'].nil? && opts[:'page_size'] > 1000
+        fail ArgumentError, 'invalid value for "opts[:"page_size"]" when calling SecurityMonitoringAPI.list_security_findings_automation_mute_rules, must be smaller than or equal to 1000.'
+      end
+      if @api_client.config.client_side_validation && !opts[:'page_size'].nil? && opts[:'page_size'] < 1
+        fail ArgumentError, 'invalid value for "opts[:"page_size"]" when calling SecurityMonitoringAPI.list_security_findings_automation_mute_rules, must be greater than or equal to 1.'
+      end
+      if @api_client.config.client_side_validation && !opts[:'page_number'].nil? && opts[:'page_number'] < 0
+        fail ArgumentError, 'invalid value for "opts[:"page_number"]" when calling SecurityMonitoringAPI.list_security_findings_automation_mute_rules, must be greater than or equal to 0.'
+      end
+      # resource path
+      local_var_path = '/api/v2/security/findings/automation/mute_rules'
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+      query_params[:'page[size]'] = opts[:'page_size'] if !opts[:'page_size'].nil?
+      query_params[:'page[number]'] = opts[:'page_number'] if !opts[:'page_number'].nil?
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json'])
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body]
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'MuteRulesResponse'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth]
+
+      new_options = opts.merge(
+        :operation => :list_security_findings_automation_mute_rules,
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type,
+        :api_version => "V2"
+      )
+
+      data, status_code, headers = @api_client.call_api(Net::HTTP::Get, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#list_security_findings_automation_mute_rules\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
+    # Get all ticket creation rules.
+    #
+    # @see #list_security_findings_automation_ticket_creation_rules_with_http_info
+    def list_security_findings_automation_ticket_creation_rules(opts = {})
+      data, _status_code, _headers = list_security_findings_automation_ticket_creation_rules_with_http_info(opts)
+      data
+    end
+
+    # Get all ticket creation rules.
+    #
+    # Get all ticket creation rules for the current organization.
+    #
+    # @param opts [Hash] the optional parameters
+    # @option opts [Integer] :page_size The number of rules per page. Maximum is 1000.
+    # @option opts [Integer] :page_number The page number to return.
+    # @return [Array<(TicketCreationRulesResponse, Integer, Hash)>] TicketCreationRulesResponse data, response status code and response headers
+    def list_security_findings_automation_ticket_creation_rules_with_http_info(opts = {})
+      unstable_enabled = @api_client.config.unstable_operations["v2.list_security_findings_automation_ticket_creation_rules".to_sym]
+      if unstable_enabled
+        @api_client.config.logger.warn format("Using unstable operation '%s'", "v2.list_security_findings_automation_ticket_creation_rules")
+      else
+        raise DatadogAPIClient::APIError.new(message: format("Unstable operation '%s' is disabled", "v2.list_security_findings_automation_ticket_creation_rules"))
+      end
+
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.list_security_findings_automation_ticket_creation_rules ...'
       end
-      if @api_client.config.client_side_validation && !opts[:'page_limit'].nil? && opts[:'page_limit'] > 150
-        fail ArgumentError, 'invalid value for "opts[:"page_limit"]" when calling SecurityMonitoringAPI.list_security_findings, must be smaller than or equal to 150.'
+      if @api_client.config.client_side_validation && !opts[:'page_size'].nil? && opts[:'page_size'] > 1000
+        fail ArgumentError, 'invalid value for "opts[:"page_size"]" when calling SecurityMonitoringAPI.list_security_findings_automation_ticket_creation_rules, must be smaller than or equal to 1000.'
       end
-      if @api_client.config.client_side_validation && !opts[:'page_limit'].nil? && opts[:'page_limit'] < 1
-        fail ArgumentError, 'invalid value for "opts[:"page_limit"]" when calling SecurityMonitoringAPI.list_security_findings, must be greater than or equal to 1.'
+      if @api_client.config.client_side_validation && !opts[:'page_size'].nil? && opts[:'page_size'] < 1
+        fail ArgumentError, 'invalid value for "opts[:"page_size"]" when calling SecurityMonitoringAPI.list_security_findings_automation_ticket_creation_rules, must be greater than or equal to 1.'
       end
-      allowable_values = ['@detection_changed_at', '-@detection_changed_at']
-      if @api_client.config.client_side_validation && opts[:'sort'] && !allowable_values.include?(opts[:'sort'])
-        fail ArgumentError, "invalid value for \"sort\", must be one of #{allowable_values}"
+      if @api_client.config.client_side_validation && !opts[:'page_number'].nil? && opts[:'page_number'] < 0
+        fail ArgumentError, 'invalid value for "opts[:"page_number"]" when calling SecurityMonitoringAPI.list_security_findings_automation_ticket_creation_rules, must be greater than or equal to 0.'
       end
       # resource path
-      local_var_path = '/api/v2/security/findings'
+      local_var_path = '/api/v2/security/findings/automation/ticket_creation_rules'
 
       # query parameters
       query_params = opts[:query_params] || {}
-      query_params[:'filter[query]'] = opts[:'filter_query'] if !opts[:'filter_query'].nil?
-      query_params[:'page[cursor]'] = opts[:'page_cursor'] if !opts[:'page_cursor'].nil?
-      query_params[:'page[limit]'] = opts[:'page_limit'] if !opts[:'page_limit'].nil?
-      query_params[:'sort'] = opts[:'sort'] if !opts[:'sort'].nil?
+      query_params[:'page[size]'] = opts[:'page_size'] if !opts[:'page_size'].nil?
+      query_params[:'page[number]'] = opts[:'page_number'] if !opts[:'page_number'].nil?
 
       # header parameters
       header_params = opts[:header_params] || {}
@@ -7253,13 +8589,13 @@ module DatadogAPIClient::V2
       post_body = opts[:debug_body]
 
       # return_type
-      return_type = opts[:debug_return_type] || 'ListSecurityFindingsResponse'
+      return_type = opts[:debug_return_type] || 'TicketCreationRulesResponse'
 
       # auth_names
-      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth]
 
       new_options = opts.merge(
-        :operation => :list_security_findings,
+        :operation => :list_security_findings_automation_ticket_creation_rules,
         :header_params => header_params,
         :query_params => query_params,
         :form_params => form_params,
@@ -7271,32 +8607,11 @@ module DatadogAPIClient::V2
 
       data, status_code, headers = @api_client.call_api(Net::HTTP::Get, local_var_path, new_options)
       if @api_client.config.debugging
-        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#list_security_findings\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#list_security_findings_automation_ticket_creation_rules\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
       end
       return data, status_code, headers
     end
 
-    # List security findings.
-    #
-    # Provide a paginated version of {#list_security_findings}, returning all items.
-    #
-    # To use it you need to use a block: list_security_findings_with_pagination { |item| p item }
-    #
-    # @yield [SecurityFindingsData] Paginated items
-    def list_security_findings_with_pagination(opts = {})
-        api_version = "V2"
-        page_size = @api_client.get_attribute_from_path(opts, "page_limit", 10)
-        @api_client.set_attribute_from_path(api_version, opts, "page_limit", Integer, page_size)
-        while true do
-            response = list_security_findings(opts)
-            @api_client.get_attribute_from_path(response, "data").each { |item| yield(item) }
-            if @api_client.get_attribute_from_path(response, "data").length == 0
-              break
-            end
-            @api_client.set_attribute_from_path(api_version, opts, "page_cursor", String, @api_client.get_attribute_from_path(response, "meta.page.after"))
-        end
-    end
-
     # Get all critical assets.
     #
     # @see #list_security_monitoring_critical_assets_with_http_info
@@ -7545,7 +8860,7 @@ module DatadogAPIClient::V2
       if @api_client.config.debugging
         @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.list_security_monitoring_integration_configs ...'
       end
-      allowable_values = ['GOOGLE_WORKSPACE', 'OKTA', 'ENTRA_ID']
+      allowable_values = ['GOOGLE_WORKSPACE', 'OKTA', 'ENTRA_ID', 'CROWDSTRIKE', 'SENTINELONE']
       if @api_client.config.client_side_validation && opts[:'filter_integration_type'] && !allowable_values.include?(opts[:'filter_integration_type'])
         fail ArgumentError, "invalid value for \"filter_integration_type\", must be one of #{allowable_values}"
       end
@@ -8111,7 +9426,7 @@ module DatadogAPIClient::V2
       if @api_client.config.client_side_validation && opts[:'filter_ecosystem'] && !allowable_values.include?(opts[:'filter_ecosystem'])
         fail ArgumentError, "invalid value for \"filter_ecosystem\", must be one of #{allowable_values}"
       end
-      allowable_values = ['Repository', 'Service', 'Host', 'HostImage', 'Image']
+      allowable_values = ['Repository', 'Service', 'Host', 'HostImage', 'Image', 'ServerlessFunction']
       if @api_client.config.client_side_validation && opts[:'filter_asset_type'] && !allowable_values.include?(opts[:'filter_asset_type'])
         fail ArgumentError, "invalid value for \"filter_asset_type\", must be one of #{allowable_values}"
       end
@@ -8256,7 +9571,7 @@ module DatadogAPIClient::V2
       if @api_client.config.client_side_validation && !opts[:'page_number'].nil? && opts[:'page_number'] < 1
         fail ArgumentError, 'invalid value for "opts[:"page_number"]" when calling SecurityMonitoringAPI.list_vulnerable_assets, must be greater than or equal to 1.'
       end
-      allowable_values = ['Repository', 'Service', 'Host', 'HostImage', 'Image']
+      allowable_values = ['Repository', 'Service', 'Host', 'HostImage', 'Image', 'ServerlessFunction']
       if @api_client.config.client_side_validation && opts[:'filter_type'] && !allowable_values.include?(opts[:'filter_type'])
         fail ArgumentError, "invalid value for \"filter_type\", must be one of #{allowable_values}"
       end
@@ -8301,7 +9616,221 @@ module DatadogAPIClient::V2
       auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth]
 
       new_options = opts.merge(
-        :operation => :list_vulnerable_assets,
+        :operation => :list_vulnerable_assets,
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type,
+        :api_version => "V2"
+      )
+
+      data, status_code, headers = @api_client.call_api(Net::HTTP::Get, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#list_vulnerable_assets\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
+    # Mute or unmute security findings.
+    #
+    # @see #mute_security_findings_with_http_info
+    def mute_security_findings(body, opts = {})
+      data, _status_code, _headers = mute_security_findings_with_http_info(body, opts)
+      data
+    end
+
+    # Mute or unmute security findings.
+    #
+    # Mute or unmute security findings.
+    # You can mute or unmute up to 100 security findings per request. The request body must include `is_muted` and `reason` attributes. The allowed reasons depend on whether the finding is being muted or unmuted:
+    #   - To mute a finding: `PENDING_FIX`, `FALSE_POSITIVE`, `OTHER`, `NO_FIX`, `DUPLICATE`, `RISK_ACCEPTED`.
+    #   - To unmute a finding: `NO_PENDING_FIX`, `HUMAN_ERROR`, `NO_LONGER_ACCEPTED_RISK`, `OTHER`.
+    #
+    # @param body [MuteFindingsRequest] 
+    # @param opts [Hash] the optional parameters
+    # @return [Array<(MuteFindingsResponse, Integer, Hash)>] MuteFindingsResponse data, response status code and response headers
+    def mute_security_findings_with_http_info(body, opts = {})
+
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.mute_security_findings ...'
+      end
+      # verify the required parameter 'body' is set
+      if @api_client.config.client_side_validation && body.nil?
+        fail ArgumentError, "Missing the required parameter 'body' when calling SecurityMonitoringAPI.mute_security_findings"
+      end
+      # resource path
+      local_var_path = '/api/v2/security/findings/mute'
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json'])
+      # HTTP header 'Content-Type'
+      header_params['Content-Type'] = @api_client.select_header_content_type(['application/json'])
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body] || @api_client.object_to_http_body(body)
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'MuteFindingsResponse'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
+
+      new_options = opts.merge(
+        :operation => :mute_security_findings,
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type,
+        :api_version => "V2"
+      )
+
+      data, status_code, headers = @api_client.call_api(Net::HTTP::Patch, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#mute_security_findings\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
+    # Patch a signal-based notification rule.
+    #
+    # @see #patch_signal_notification_rule_with_http_info
+    def patch_signal_notification_rule(id, body, opts = {})
+      data, _status_code, _headers = patch_signal_notification_rule_with_http_info(id, body, opts)
+      data
+    end
+
+    # Patch a signal-based notification rule.
+    #
+    # Partially update the notification rule. All fields are optional; if a field is not provided, it is not updated.
+    #
+    # @param id [String] ID of the notification rule.
+    # @param body [PatchNotificationRuleParameters] 
+    # @param opts [Hash] the optional parameters
+    # @return [Array<(NotificationRuleResponse, Integer, Hash)>] NotificationRuleResponse data, response status code and response headers
+    def patch_signal_notification_rule_with_http_info(id, body, opts = {})
+
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.patch_signal_notification_rule ...'
+      end
+      # verify the required parameter 'id' is set
+      if @api_client.config.client_side_validation && id.nil?
+        fail ArgumentError, "Missing the required parameter 'id' when calling SecurityMonitoringAPI.patch_signal_notification_rule"
+      end
+      # verify the required parameter 'body' is set
+      if @api_client.config.client_side_validation && body.nil?
+        fail ArgumentError, "Missing the required parameter 'body' when calling SecurityMonitoringAPI.patch_signal_notification_rule"
+      end
+      # resource path
+      local_var_path = '/api/v2/security/signals/notification_rules/{id}'.sub('{id}', CGI.escape(id.to_s).gsub('%2F', '/'))
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json'])
+      # HTTP header 'Content-Type'
+      header_params['Content-Type'] = @api_client.select_header_content_type(['application/json'])
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body] || @api_client.object_to_http_body(body)
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'NotificationRuleResponse'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth]
+
+      new_options = opts.merge(
+        :operation => :patch_signal_notification_rule,
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type,
+        :api_version => "V2"
+      )
+
+      data, status_code, headers = @api_client.call_api(Net::HTTP::Patch, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#patch_signal_notification_rule\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
+    # Patch a vulnerability-based notification rule.
+    #
+    # @see #patch_vulnerability_notification_rule_with_http_info
+    def patch_vulnerability_notification_rule(id, body, opts = {})
+      data, _status_code, _headers = patch_vulnerability_notification_rule_with_http_info(id, body, opts)
+      data
+    end
+
+    # Patch a vulnerability-based notification rule.
+    #
+    # Partially update the notification rule. All fields are optional; if a field is not provided, it is not updated.
+    #
+    # @param id [String] ID of the notification rule.
+    # @param body [PatchNotificationRuleParameters] 
+    # @param opts [Hash] the optional parameters
+    # @return [Array<(NotificationRuleResponse, Integer, Hash)>] NotificationRuleResponse data, response status code and response headers
+    def patch_vulnerability_notification_rule_with_http_info(id, body, opts = {})
+
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.patch_vulnerability_notification_rule ...'
+      end
+      # verify the required parameter 'id' is set
+      if @api_client.config.client_side_validation && id.nil?
+        fail ArgumentError, "Missing the required parameter 'id' when calling SecurityMonitoringAPI.patch_vulnerability_notification_rule"
+      end
+      # verify the required parameter 'body' is set
+      if @api_client.config.client_side_validation && body.nil?
+        fail ArgumentError, "Missing the required parameter 'body' when calling SecurityMonitoringAPI.patch_vulnerability_notification_rule"
+      end
+      # resource path
+      local_var_path = '/api/v2/security/vulnerabilities/notification_rules/{id}'.sub('{id}', CGI.escape(id.to_s).gsub('%2F', '/'))
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json'])
+      # HTTP header 'Content-Type'
+      header_params['Content-Type'] = @api_client.select_header_content_type(['application/json'])
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body] || @api_client.object_to_http_body(body)
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'NotificationRuleResponse'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth]
+
+      new_options = opts.merge(
+        :operation => :patch_vulnerability_notification_rule,
         :header_params => header_params,
         :query_params => query_params,
         :form_params => form_params,
@@ -8311,42 +9840,45 @@ module DatadogAPIClient::V2
         :api_version => "V2"
       )
 
-      data, status_code, headers = @api_client.call_api(Net::HTTP::Get, local_var_path, new_options)
+      data, status_code, headers = @api_client.call_api(Net::HTTP::Patch, local_var_path, new_options)
       if @api_client.config.debugging
-        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#list_vulnerable_assets\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#patch_vulnerability_notification_rule\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
       end
       return data, status_code, headers
     end
 
-    # Mute or unmute security findings.
+    # Reorder due date rules.
     #
-    # @see #mute_security_findings_with_http_info
-    def mute_security_findings(body, opts = {})
-      data, _status_code, _headers = mute_security_findings_with_http_info(body, opts)
+    # @see #reorder_security_findings_automation_due_date_rules_with_http_info
+    def reorder_security_findings_automation_due_date_rules(body, opts = {})
+      data, _status_code, _headers = reorder_security_findings_automation_due_date_rules_with_http_info(body, opts)
       data
     end
 
-    # Mute or unmute security findings.
+    # Reorder due date rules.
     #
-    # Mute or unmute security findings.
-    # You can mute or unmute up to 100 security findings per request. The request body must include `is_muted` and `reason` attributes. The allowed reasons depend on whether the finding is being muted or unmuted:
-    #   - To mute a finding: `PENDING_FIX`, `FALSE_POSITIVE`, `OTHER`, `NO_FIX`, `DUPLICATE`, `RISK_ACCEPTED`.
-    #   - To unmute a finding: `NO_PENDING_FIX`, `HUMAN_ERROR`, `NO_LONGER_ACCEPTED_RISK`, `OTHER`.
+    # Reorder the list of due date rules for the current organization.
     #
-    # @param body [MuteFindingsRequest] 
+    # @param body [DueDateRuleReorderRequest] 
     # @param opts [Hash] the optional parameters
-    # @return [Array<(MuteFindingsResponse, Integer, Hash)>] MuteFindingsResponse data, response status code and response headers
-    def mute_security_findings_with_http_info(body, opts = {})
+    # @return [Array<(DueDateRuleReorderRequest, Integer, Hash)>] DueDateRuleReorderRequest data, response status code and response headers
+    def reorder_security_findings_automation_due_date_rules_with_http_info(body, opts = {})
+      unstable_enabled = @api_client.config.unstable_operations["v2.reorder_security_findings_automation_due_date_rules".to_sym]
+      if unstable_enabled
+        @api_client.config.logger.warn format("Using unstable operation '%s'", "v2.reorder_security_findings_automation_due_date_rules")
+      else
+        raise DatadogAPIClient::APIError.new(message: format("Unstable operation '%s' is disabled", "v2.reorder_security_findings_automation_due_date_rules"))
+      end
 
       if @api_client.config.debugging
-        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.mute_security_findings ...'
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.reorder_security_findings_automation_due_date_rules ...'
       end
       # verify the required parameter 'body' is set
       if @api_client.config.client_side_validation && body.nil?
-        fail ArgumentError, "Missing the required parameter 'body' when calling SecurityMonitoringAPI.mute_security_findings"
+        fail ArgumentError, "Missing the required parameter 'body' when calling SecurityMonitoringAPI.reorder_security_findings_automation_due_date_rules"
       end
       # resource path
-      local_var_path = '/api/v2/security/findings/mute'
+      local_var_path = '/api/v2/security/findings/automation/due_date_rules/reorder'
 
       # query parameters
       query_params = opts[:query_params] || {}
@@ -8365,13 +9897,13 @@ module DatadogAPIClient::V2
       post_body = opts[:debug_body] || @api_client.object_to_http_body(body)
 
       # return_type
-      return_type = opts[:debug_return_type] || 'MuteFindingsResponse'
+      return_type = opts[:debug_return_type] || 'DueDateRuleReorderRequest'
 
       # auth_names
-      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth]
 
       new_options = opts.merge(
-        :operation => :mute_security_findings,
+        :operation => :reorder_security_findings_automation_due_date_rules,
         :header_params => header_params,
         :query_params => query_params,
         :form_params => form_params,
@@ -8381,44 +9913,45 @@ module DatadogAPIClient::V2
         :api_version => "V2"
       )
 
-      data, status_code, headers = @api_client.call_api(Net::HTTP::Patch, local_var_path, new_options)
+      data, status_code, headers = @api_client.call_api(Net::HTTP::Post, local_var_path, new_options)
       if @api_client.config.debugging
-        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#mute_security_findings\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#reorder_security_findings_automation_due_date_rules\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
       end
       return data, status_code, headers
     end
 
-    # Patch a signal-based notification rule.
+    # Reorder mute rules.
     #
-    # @see #patch_signal_notification_rule_with_http_info
-    def patch_signal_notification_rule(id, body, opts = {})
-      data, _status_code, _headers = patch_signal_notification_rule_with_http_info(id, body, opts)
+    # @see #reorder_security_findings_automation_mute_rules_with_http_info
+    def reorder_security_findings_automation_mute_rules(body, opts = {})
+      data, _status_code, _headers = reorder_security_findings_automation_mute_rules_with_http_info(body, opts)
       data
     end
 
-    # Patch a signal-based notification rule.
+    # Reorder mute rules.
     #
-    # Partially update the notification rule. All fields are optional; if a field is not provided, it is not updated.
+    # Reorder the list of mute rules for the current organization.
     #
-    # @param id [String] ID of the notification rule.
-    # @param body [PatchNotificationRuleParameters] 
+    # @param body [MuteRuleReorderRequest] 
     # @param opts [Hash] the optional parameters
-    # @return [Array<(NotificationRuleResponse, Integer, Hash)>] NotificationRuleResponse data, response status code and response headers
-    def patch_signal_notification_rule_with_http_info(id, body, opts = {})
+    # @return [Array<(MuteRuleReorderRequest, Integer, Hash)>] MuteRuleReorderRequest data, response status code and response headers
+    def reorder_security_findings_automation_mute_rules_with_http_info(body, opts = {})
+      unstable_enabled = @api_client.config.unstable_operations["v2.reorder_security_findings_automation_mute_rules".to_sym]
+      if unstable_enabled
+        @api_client.config.logger.warn format("Using unstable operation '%s'", "v2.reorder_security_findings_automation_mute_rules")
+      else
+        raise DatadogAPIClient::APIError.new(message: format("Unstable operation '%s' is disabled", "v2.reorder_security_findings_automation_mute_rules"))
+      end
 
       if @api_client.config.debugging
-        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.patch_signal_notification_rule ...'
-      end
-      # verify the required parameter 'id' is set
-      if @api_client.config.client_side_validation && id.nil?
-        fail ArgumentError, "Missing the required parameter 'id' when calling SecurityMonitoringAPI.patch_signal_notification_rule"
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.reorder_security_findings_automation_mute_rules ...'
       end
       # verify the required parameter 'body' is set
       if @api_client.config.client_side_validation && body.nil?
-        fail ArgumentError, "Missing the required parameter 'body' when calling SecurityMonitoringAPI.patch_signal_notification_rule"
+        fail ArgumentError, "Missing the required parameter 'body' when calling SecurityMonitoringAPI.reorder_security_findings_automation_mute_rules"
       end
       # resource path
-      local_var_path = '/api/v2/security/signals/notification_rules/{id}'.sub('{id}', CGI.escape(id.to_s).gsub('%2F', '/'))
+      local_var_path = '/api/v2/security/findings/automation/mute_rules/reorder'
 
       # query parameters
       query_params = opts[:query_params] || {}
@@ -8437,13 +9970,13 @@ module DatadogAPIClient::V2
       post_body = opts[:debug_body] || @api_client.object_to_http_body(body)
 
       # return_type
-      return_type = opts[:debug_return_type] || 'NotificationRuleResponse'
+      return_type = opts[:debug_return_type] || 'MuteRuleReorderRequest'
 
       # auth_names
       auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth]
 
       new_options = opts.merge(
-        :operation => :patch_signal_notification_rule,
+        :operation => :reorder_security_findings_automation_mute_rules,
         :header_params => header_params,
         :query_params => query_params,
         :form_params => form_params,
@@ -8453,44 +9986,45 @@ module DatadogAPIClient::V2
         :api_version => "V2"
       )
 
-      data, status_code, headers = @api_client.call_api(Net::HTTP::Patch, local_var_path, new_options)
+      data, status_code, headers = @api_client.call_api(Net::HTTP::Post, local_var_path, new_options)
       if @api_client.config.debugging
-        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#patch_signal_notification_rule\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#reorder_security_findings_automation_mute_rules\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
       end
       return data, status_code, headers
     end
 
-    # Patch a vulnerability-based notification rule.
+    # Reorder ticket creation rules.
     #
-    # @see #patch_vulnerability_notification_rule_with_http_info
-    def patch_vulnerability_notification_rule(id, body, opts = {})
-      data, _status_code, _headers = patch_vulnerability_notification_rule_with_http_info(id, body, opts)
+    # @see #reorder_security_findings_automation_ticket_creation_rules_with_http_info
+    def reorder_security_findings_automation_ticket_creation_rules(body, opts = {})
+      data, _status_code, _headers = reorder_security_findings_automation_ticket_creation_rules_with_http_info(body, opts)
       data
     end
 
-    # Patch a vulnerability-based notification rule.
+    # Reorder ticket creation rules.
     #
-    # Partially update the notification rule. All fields are optional; if a field is not provided, it is not updated.
+    # Reorder the list of ticket creation rules for the current organization.
     #
-    # @param id [String] ID of the notification rule.
-    # @param body [PatchNotificationRuleParameters] 
+    # @param body [TicketCreationRuleReorderRequest] 
     # @param opts [Hash] the optional parameters
-    # @return [Array<(NotificationRuleResponse, Integer, Hash)>] NotificationRuleResponse data, response status code and response headers
-    def patch_vulnerability_notification_rule_with_http_info(id, body, opts = {})
+    # @return [Array<(TicketCreationRuleReorderRequest, Integer, Hash)>] TicketCreationRuleReorderRequest data, response status code and response headers
+    def reorder_security_findings_automation_ticket_creation_rules_with_http_info(body, opts = {})
+      unstable_enabled = @api_client.config.unstable_operations["v2.reorder_security_findings_automation_ticket_creation_rules".to_sym]
+      if unstable_enabled
+        @api_client.config.logger.warn format("Using unstable operation '%s'", "v2.reorder_security_findings_automation_ticket_creation_rules")
+      else
+        raise DatadogAPIClient::APIError.new(message: format("Unstable operation '%s' is disabled", "v2.reorder_security_findings_automation_ticket_creation_rules"))
+      end
 
       if @api_client.config.debugging
-        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.patch_vulnerability_notification_rule ...'
-      end
-      # verify the required parameter 'id' is set
-      if @api_client.config.client_side_validation && id.nil?
-        fail ArgumentError, "Missing the required parameter 'id' when calling SecurityMonitoringAPI.patch_vulnerability_notification_rule"
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.reorder_security_findings_automation_ticket_creation_rules ...'
       end
       # verify the required parameter 'body' is set
       if @api_client.config.client_side_validation && body.nil?
-        fail ArgumentError, "Missing the required parameter 'body' when calling SecurityMonitoringAPI.patch_vulnerability_notification_rule"
+        fail ArgumentError, "Missing the required parameter 'body' when calling SecurityMonitoringAPI.reorder_security_findings_automation_ticket_creation_rules"
       end
       # resource path
-      local_var_path = '/api/v2/security/vulnerabilities/notification_rules/{id}'.sub('{id}', CGI.escape(id.to_s).gsub('%2F', '/'))
+      local_var_path = '/api/v2/security/findings/automation/ticket_creation_rules/reorder'
 
       # query parameters
       query_params = opts[:query_params] || {}
@@ -8509,13 +10043,13 @@ module DatadogAPIClient::V2
       post_body = opts[:debug_body] || @api_client.object_to_http_body(body)
 
       # return_type
-      return_type = opts[:debug_return_type] || 'NotificationRuleResponse'
+      return_type = opts[:debug_return_type] || 'TicketCreationRuleReorderRequest'
 
       # auth_names
       auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth]
 
       new_options = opts.merge(
-        :operation => :patch_vulnerability_notification_rule,
+        :operation => :reorder_security_findings_automation_ticket_creation_rules,
         :header_params => header_params,
         :query_params => query_params,
         :form_params => form_params,
@@ -8525,9 +10059,9 @@ module DatadogAPIClient::V2
         :api_version => "V2"
       )
 
-      data, status_code, headers = @api_client.call_api(Net::HTTP::Patch, local_var_path, new_options)
+      data, status_code, headers = @api_client.call_api(Net::HTTP::Post, local_var_path, new_options)
       if @api_client.config.debugging
-        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#patch_vulnerability_notification_rule\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#reorder_security_findings_automation_ticket_creation_rules\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
       end
       return data, status_code, headers
     end
@@ -9429,6 +10963,240 @@ module DatadogAPIClient::V2
       return data, status_code, headers
     end
 
+    # Update a due date rule.
+    #
+    # @see #update_security_findings_automation_due_date_rule_with_http_info
+    def update_security_findings_automation_due_date_rule(rule_id, body, opts = {})
+      data, _status_code, _headers = update_security_findings_automation_due_date_rule_with_http_info(rule_id, body, opts)
+      data
+    end
+
+    # Update a due date rule.
+    #
+    # Update an existing due date rule by ID.
+    #
+    # @param rule_id [UUID] The ID of the due date rule.
+    # @param body [DueDateRuleUpdateRequest] 
+    # @param opts [Hash] the optional parameters
+    # @return [Array<(DueDateRuleResponse, Integer, Hash)>] DueDateRuleResponse data, response status code and response headers
+    def update_security_findings_automation_due_date_rule_with_http_info(rule_id, body, opts = {})
+      unstable_enabled = @api_client.config.unstable_operations["v2.update_security_findings_automation_due_date_rule".to_sym]
+      if unstable_enabled
+        @api_client.config.logger.warn format("Using unstable operation '%s'", "v2.update_security_findings_automation_due_date_rule")
+      else
+        raise DatadogAPIClient::APIError.new(message: format("Unstable operation '%s' is disabled", "v2.update_security_findings_automation_due_date_rule"))
+      end
+
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.update_security_findings_automation_due_date_rule ...'
+      end
+      # verify the required parameter 'rule_id' is set
+      if @api_client.config.client_side_validation && rule_id.nil?
+        fail ArgumentError, "Missing the required parameter 'rule_id' when calling SecurityMonitoringAPI.update_security_findings_automation_due_date_rule"
+      end
+      # verify the required parameter 'body' is set
+      if @api_client.config.client_side_validation && body.nil?
+        fail ArgumentError, "Missing the required parameter 'body' when calling SecurityMonitoringAPI.update_security_findings_automation_due_date_rule"
+      end
+      # resource path
+      local_var_path = '/api/v2/security/findings/automation/due_date_rules/{rule_id}'.sub('{rule_id}', CGI.escape(rule_id.to_s).gsub('%2F', '/'))
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json'])
+      # HTTP header 'Content-Type'
+      header_params['Content-Type'] = @api_client.select_header_content_type(['application/json'])
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body] || @api_client.object_to_http_body(body)
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'DueDateRuleResponse'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth]
+
+      new_options = opts.merge(
+        :operation => :update_security_findings_automation_due_date_rule,
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type,
+        :api_version => "V2"
+      )
+
+      data, status_code, headers = @api_client.call_api(Net::HTTP::Put, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#update_security_findings_automation_due_date_rule\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
+    # Update a mute rule.
+    #
+    # @see #update_security_findings_automation_mute_rule_with_http_info
+    def update_security_findings_automation_mute_rule(rule_id, body, opts = {})
+      data, _status_code, _headers = update_security_findings_automation_mute_rule_with_http_info(rule_id, body, opts)
+      data
+    end
+
+    # Update a mute rule.
+    #
+    # Update an existing mute rule by ID.
+    #
+    # @param rule_id [UUID] The ID of the mute rule.
+    # @param body [MuteRuleUpdateRequest] 
+    # @param opts [Hash] the optional parameters
+    # @return [Array<(MuteRuleResponse, Integer, Hash)>] MuteRuleResponse data, response status code and response headers
+    def update_security_findings_automation_mute_rule_with_http_info(rule_id, body, opts = {})
+      unstable_enabled = @api_client.config.unstable_operations["v2.update_security_findings_automation_mute_rule".to_sym]
+      if unstable_enabled
+        @api_client.config.logger.warn format("Using unstable operation '%s'", "v2.update_security_findings_automation_mute_rule")
+      else
+        raise DatadogAPIClient::APIError.new(message: format("Unstable operation '%s' is disabled", "v2.update_security_findings_automation_mute_rule"))
+      end
+
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.update_security_findings_automation_mute_rule ...'
+      end
+      # verify the required parameter 'rule_id' is set
+      if @api_client.config.client_side_validation && rule_id.nil?
+        fail ArgumentError, "Missing the required parameter 'rule_id' when calling SecurityMonitoringAPI.update_security_findings_automation_mute_rule"
+      end
+      # verify the required parameter 'body' is set
+      if @api_client.config.client_side_validation && body.nil?
+        fail ArgumentError, "Missing the required parameter 'body' when calling SecurityMonitoringAPI.update_security_findings_automation_mute_rule"
+      end
+      # resource path
+      local_var_path = '/api/v2/security/findings/automation/mute_rules/{rule_id}'.sub('{rule_id}', CGI.escape(rule_id.to_s).gsub('%2F', '/'))
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json'])
+      # HTTP header 'Content-Type'
+      header_params['Content-Type'] = @api_client.select_header_content_type(['application/json'])
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body] || @api_client.object_to_http_body(body)
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'MuteRuleResponse'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth]
+
+      new_options = opts.merge(
+        :operation => :update_security_findings_automation_mute_rule,
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type,
+        :api_version => "V2"
+      )
+
+      data, status_code, headers = @api_client.call_api(Net::HTTP::Put, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#update_security_findings_automation_mute_rule\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
+    # Update a ticket creation rule.
+    #
+    # @see #update_security_findings_automation_ticket_creation_rule_with_http_info
+    def update_security_findings_automation_ticket_creation_rule(rule_id, body, opts = {})
+      data, _status_code, _headers = update_security_findings_automation_ticket_creation_rule_with_http_info(rule_id, body, opts)
+      data
+    end
+
+    # Update a ticket creation rule.
+    #
+    # Update an existing ticket creation rule by ID.
+    #
+    # @param rule_id [UUID] The ID of the ticket creation rule.
+    # @param body [TicketCreationRuleUpdateRequest] 
+    # @param opts [Hash] the optional parameters
+    # @return [Array<(TicketCreationRuleResponse, Integer, Hash)>] TicketCreationRuleResponse data, response status code and response headers
+    def update_security_findings_automation_ticket_creation_rule_with_http_info(rule_id, body, opts = {})
+      unstable_enabled = @api_client.config.unstable_operations["v2.update_security_findings_automation_ticket_creation_rule".to_sym]
+      if unstable_enabled
+        @api_client.config.logger.warn format("Using unstable operation '%s'", "v2.update_security_findings_automation_ticket_creation_rule")
+      else
+        raise DatadogAPIClient::APIError.new(message: format("Unstable operation '%s' is disabled", "v2.update_security_findings_automation_ticket_creation_rule"))
+      end
+
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: SecurityMonitoringAPI.update_security_findings_automation_ticket_creation_rule ...'
+      end
+      # verify the required parameter 'rule_id' is set
+      if @api_client.config.client_side_validation && rule_id.nil?
+        fail ArgumentError, "Missing the required parameter 'rule_id' when calling SecurityMonitoringAPI.update_security_findings_automation_ticket_creation_rule"
+      end
+      # verify the required parameter 'body' is set
+      if @api_client.config.client_side_validation && body.nil?
+        fail ArgumentError, "Missing the required parameter 'body' when calling SecurityMonitoringAPI.update_security_findings_automation_ticket_creation_rule"
+      end
+      # resource path
+      local_var_path = '/api/v2/security/findings/automation/ticket_creation_rules/{rule_id}'.sub('{rule_id}', CGI.escape(rule_id.to_s).gsub('%2F', '/'))
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json'])
+      # HTTP header 'Content-Type'
+      header_params['Content-Type'] = @api_client.select_header_content_type(['application/json'])
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body] || @api_client.object_to_http_body(body)
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'TicketCreationRuleResponse'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth]
+
+      new_options = opts.merge(
+        :operation => :update_security_findings_automation_ticket_creation_rule,
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type,
+        :api_version => "V2"
+      )
+
+      data, status_code, headers = @api_client.call_api(Net::HTTP::Put, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: SecurityMonitoringAPI#update_security_findings_automation_ticket_creation_rule\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
     # Update a critical asset.
     #
     # @see #update_security_monitoring_critical_asset_with_http_info