@alicloud/cloud-siem20220616 6.0.2 → 6.2.0

package/src/models/DescribeCloudSiemAssetsCounterRequest.ts

@@ -15,10 +15,11 @@ export class DescribeCloudSiemAssetsCounterRequest extends $dara.Model {
   incidentUuid?: string;
   /**
    * @remarks
-   * The region in which the data management center of the threat analysis feature resides. Specify this parameter based on the regions in which your assets reside. Valid values:
+   * The region where the data management center of Threat Analysis is deployed. Select a region based on the location of your assets. Valid values:
    * 
-   * *   cn-hangzhou: Your assets reside in regions in China.
-   * *   ap-southeast-1: Your assets reside in regions outside China.
+   * - cn-hangzhou: Your assets are in the Chinese mainland or the China (Hong Kong) region.
+   * 
+   * - ap-southeast-1: Your assets are in a region outside China.
    * 
    * @example
    * cn-hangzhou
@@ -26,7 +27,7 @@ export class DescribeCloudSiemAssetsCounterRequest extends $dara.Model {
   regionId?: string;
   /**
    * @remarks
-   * The ID of the account that you switch from the management account.
+   * The UID of the member. An administrator can use this parameter to switch to the member\\"s view.
    * 
    * @example
    * 113091674488****
@@ -34,9 +35,11 @@ export class DescribeCloudSiemAssetsCounterRequest extends $dara.Model {
   roleFor?: number;
   /**
    * @remarks
-   * The type of the view. Valid values:
-   * - 0: the current Alibaba Cloud account
-   * - 1: the global account
+   * The type of view.
+   * 
+   * - 0: The view of the current Alibaba Cloud account.
+   * 
+   * - 1: The view of all accounts that belong to the enterprise.
    * 
    * @example
    * 1

package/src/models/DescribeCloudSiemAssetsCounterResponseBody.ts

@@ -15,12 +15,17 @@ export class DescribeCloudSiemAssetsCounterResponseBodyData extends $dara.Model
    * @remarks
    * The type of the asset. Valid values:
    * 
-   * *   ip
-   * *   domain
-   * *   url
-   * *   process
-   * *   file
-   * *   host
+   * - ip: IP address
+   * 
+   * - domain: domain name
+   * 
+   * - url: URL
+   * 
+   * - process: process
+   * 
+   * - file: file
+   * 
+   * - host: host
    * 
    * @example
    * domain
@@ -52,7 +57,7 @@ export class DescribeCloudSiemAssetsCounterResponseBodyData extends $dara.Model
 export class DescribeCloudSiemAssetsCounterResponseBody extends $dara.Model {
   /**
    * @remarks
-   * The HTTP status code.
+   * The status code returned.
    * 
    * @example
    * 200
@@ -60,7 +65,7 @@ export class DescribeCloudSiemAssetsCounterResponseBody extends $dara.Model {
   code?: number;
   /**
    * @remarks
-   * The data returned.
+   * The returned data.
    * 
    * @example
    * 123456
@@ -68,7 +73,7 @@ export class DescribeCloudSiemAssetsCounterResponseBody extends $dara.Model {
   data?: DescribeCloudSiemAssetsCounterResponseBodyData[];
   /**
    * @remarks
-   * The returned message.
+   * The message returned.
    * 
    * @example
    * success
@@ -76,7 +81,7 @@ export class DescribeCloudSiemAssetsCounterResponseBody extends $dara.Model {
   message?: string;
   /**
    * @remarks
-   * The request ID.
+   * The ID of the request.
    * 
    * @example
    * 9AAA9ED9-78F4-5021-86DC-D51C7511****
@@ -86,8 +91,9 @@ export class DescribeCloudSiemAssetsCounterResponseBody extends $dara.Model {
    * @remarks
    * Indicates whether the request was successful. Valid values:
    * 
-   * *   true
-   * *   false
+   * - true: The request was successful.
+   * 
+   * - false: The request failed.
    * 
    * @example
    * true

package/src/models/DescribeCloudSiemAssetsRequest.ts

@@ -4,33 +4,44 @@ import * as $dara from '@darabonba/typescript';
 
 export class DescribeCloudSiemAssetsRequest extends $dara.Model {
   /**
+   * @remarks
+   * The asset name.
+   * 
    * @example
    * test123
    */
   assetName?: string;
   /**
    * @remarks
-   * The type of the asset. Valid values:
+   * The asset type. Valid values:
+   * 
+   * - ip: IP address
+   * 
+   * - domain: domain name
+   * 
+   * - url: URL
+   * 
+   * - process: process
    * 
-   * *   ip
-   * *   domain
-   * *   url
-   * *   process
-   * *   file
-   * *   host
+   * - file: file
+   * 
+   * - host: host
    * 
    * @example
    * ip
    */
   assetType?: string;
   /**
+   * @remarks
+   * The UUID of the asset.
+   * 
    * @example
    * 123456-2222-3333-5555-3435345****
    */
   assetUuid?: string;
   /**
    * @remarks
-   * The page number. Pages start from page 1.
+   * The page number. The value must be greater than or equal to 1.
    * 
    * This parameter is required.
    * 
@@ -48,7 +59,7 @@ export class DescribeCloudSiemAssetsRequest extends $dara.Model {
   incidentUuid?: string;
   /**
    * @remarks
-   * The number of entries per page. Maximum value: 100.
+   * The number of entries to return on each page. The maximum value is 100.
    * 
    * This parameter is required.
    * 
@@ -58,10 +69,11 @@ export class DescribeCloudSiemAssetsRequest extends $dara.Model {
   pageSize?: number;
   /**
    * @remarks
-   * The region in which the data management center of the threat analysis feature resides. Specify this parameter based on the regions in which your assets reside. Valid values:
+   * The region where the Data Management center of Threat Analysis is deployed. Select a region based on the region where your assets are located. Valid values:
    * 
-   * *   cn-hangzhou: Your assets reside in regions in China.
-   * *   ap-southeast-1: Your assets reside in regions outside China.
+   * - cn-hangzhou: assets in the Chinese mainland or China (Hong Kong)
+   * 
+   * - ap-southeast-1: assets outside China
    * 
    * @example
    * cn-hangzhou
@@ -69,7 +81,7 @@ export class DescribeCloudSiemAssetsRequest extends $dara.Model {
   regionId?: string;
   /**
    * @remarks
-   * The ID of the account that you switch from the management account.
+   * The user ID of the member whose data you want to view. This parameter is available only when an administrator wants to switch to the perspective of a member.
    * 
    * @example
    * 113091674488****
@@ -77,9 +89,11 @@ export class DescribeCloudSiemAssetsRequest extends $dara.Model {
   roleFor?: number;
   /**
    * @remarks
-   * The type of the view. Valid values:
-   * - 0: the current Alibaba Cloud account
-   * - 1: the global account
+   * The view type.
+   * 
+   * - 0: The view of the current Alibaba Cloud account.
+   * 
+   * - 1: The view of all accounts that belong to the enterprise.
    * 
    * @example
    * 1

package/src/models/DescribeCloudSiemAssetsResponseBody.ts

@@ -5,7 +5,7 @@ import * as $dara from '@darabonba/typescript';
 export class DescribeCloudSiemAssetsResponseBodyDataPageInfo extends $dara.Model {
   /**
    * @remarks
-   * The current page number.
+   * The page number of the returned page.
    * 
    * @example
    * 1
@@ -13,7 +13,7 @@ export class DescribeCloudSiemAssetsResponseBodyDataPageInfo extends $dara.Model
   currentPage?: number;
   /**
    * @remarks
-   * The number of entries per page.
+   * The number of entries returned per page.
    * 
    * @example
    * 10
@@ -21,7 +21,7 @@ export class DescribeCloudSiemAssetsResponseBodyDataPageInfo extends $dara.Model
   pageSize?: number;
   /**
    * @remarks
-   * The total number of entries returned.
+   * The total number of entries.
    * 
    * @example
    * 100
@@ -55,7 +55,7 @@ export class DescribeCloudSiemAssetsResponseBodyDataPageInfo extends $dara.Model
 export class DescribeCloudSiemAssetsResponseBodyDataResponseDataAssetInfo extends $dara.Model {
   /**
    * @remarks
-   * The attribute key.
+   * The key of the alert property.
    * 
    * @example
    * suspicious.wbd.wb.trojanpath
@@ -63,7 +63,7 @@ export class DescribeCloudSiemAssetsResponseBodyDataResponseDataAssetInfo extend
   key?: string;
   /**
    * @remarks
-   * The name of the key.
+   * The name of the alert property.
    * 
    * @example
    * Trojan Path
@@ -71,7 +71,7 @@ export class DescribeCloudSiemAssetsResponseBodyDataResponseDataAssetInfo extend
   keyName?: string;
   /**
    * @remarks
-   * The value of the key.
+   * The value of the alert property.
    * 
    * @example
    * /root/test33.php
@@ -105,7 +105,7 @@ export class DescribeCloudSiemAssetsResponseBodyDataResponseDataAssetInfo extend
 export class DescribeCloudSiemAssetsResponseBodyDataResponseData extends $dara.Model {
   /**
    * @remarks
-   * The UUID of the alert associated with the event.
+   * The UUID of the alert that is associated with the event.
    * 
    * @example
    * sas_71e24437d2797ce8fc59692905a4****
@@ -113,7 +113,7 @@ export class DescribeCloudSiemAssetsResponseBodyDataResponseData extends $dara.M
   alertUuid?: string;
   /**
    * @remarks
-   * The ID of the Alibaba Cloud account in SIEM.
+   * The ID of the Alibaba Cloud account.
    * 
    * @example
    * 1276085894174392
@@ -129,7 +129,7 @@ export class DescribeCloudSiemAssetsResponseBodyDataResponseData extends $dara.M
   assetId?: string;
   /**
    * @remarks
-   * The display information of the asset is in the JSON format.
+   * The asset information, in a JSON array.
    * 
    * @example
    * [{"KeyName": "${aliyun.siem.asset.asset_name}","Values": "zsw-agentless-ubuntu20","Key": "asset_name"}]
@@ -137,7 +137,7 @@ export class DescribeCloudSiemAssetsResponseBodyDataResponseData extends $dara.M
   assetInfo?: DescribeCloudSiemAssetsResponseBodyDataResponseDataAssetInfo[];
   /**
    * @remarks
-   * The name of the asset.
+   * The asset name.
    * 
    * @example
    * zsw-agentless-centos****
@@ -145,14 +145,19 @@ export class DescribeCloudSiemAssetsResponseBodyDataResponseData extends $dara.M
   assetName?: string;
   /**
    * @remarks
-   * The type of the asset. Valid values:
+   * The asset type. Valid values:
    * 
-   * *   ip
-   * *   domain
-   * *   url
-   * *   process
-   * *   file
-   * *   host
+   * - ip: IP address
+   * 
+   * - domain: domain name
+   * 
+   * - url: URL
+   * 
+   * - process: process
+   * 
+   * - file: file
+   * 
+   * - host: host
    * 
    * @example
    * domain
@@ -160,11 +165,13 @@ export class DescribeCloudSiemAssetsResponseBodyDataResponseData extends $dara.M
   assetType?: string;
   /**
    * @remarks
-   * The cloud code of the entity. Valid values:
+   * The cloud service provider of the entity. Valid values:
+   * 
+   * - aliyun: Alibaba Cloud
    * 
-   * *   aliyun: Alibaba Cloud
-   * *   qcloud: Tencent Cloud
-   * *   hcloud: Huawei Cloud
+   * - qcloud: Tencent Cloud
+   * 
+   * - hcloud: Huawei Cloud
    * 
    * @example
    * aliyun
@@ -188,7 +195,7 @@ export class DescribeCloudSiemAssetsResponseBodyDataResponseData extends $dara.M
   gmtModified?: string;
   /**
    * @remarks
-   * The ID of the asset.
+   * The asset ID.
    * 
    * @example
    * 123
@@ -204,7 +211,7 @@ export class DescribeCloudSiemAssetsResponseBodyDataResponseData extends $dara.M
   incidentUuid?: string;
   /**
    * @remarks
-   * The ID of the associated account to which the asset belongs.
+   * The ID of the linked account.
    * 
    * @example
    * 176555323***
@@ -333,8 +340,9 @@ export class DescribeCloudSiemAssetsResponseBody extends $dara.Model {
    * @remarks
    * Indicates whether the request was successful. Valid values:
    * 
-   * *   true
-   * *   false
+   * - true: The request was successful.
+   * 
+   * - false: The request failed.
    * 
    * @example
    * true

package/src/models/DescribeCloudSiemEventDetailRequest.ts

@@ -15,10 +15,11 @@ export class DescribeCloudSiemEventDetailRequest extends $dara.Model {
   incidentUuid?: string;
   /**
    * @remarks
-   * The region in which the data management center of the threat analysis feature resides. Specify this parameter based on the regions in which your assets reside. Valid values:
+   * The region of the data management center for Threat Analysis. Select the region where your assets are located. Valid values:
    * 
-   * *   cn-hangzhou: Your assets reside in regions in China.
-   * *   ap-southeast-1: Your assets reside in regions outside China.
+   * - cn-hangzhou: assets in the Chinese mainland and China (Hong Kong)
+   * 
+   * - ap-southeast-1: assets in regions outside the Chinese mainland
    * 
    * @example
    * cn-hangzhou
@@ -26,7 +27,7 @@ export class DescribeCloudSiemEventDetailRequest extends $dara.Model {
   regionId?: string;
   /**
    * @remarks
-   * The ID of the account that you switch from the management account.
+   * The ID of the member account. An administrator can use this parameter to query data from the perspective of the member.
    * 
    * @example
    * 113091674488****
@@ -34,9 +35,11 @@ export class DescribeCloudSiemEventDetailRequest extends $dara.Model {
   roleFor?: number;
   /**
    * @remarks
-   * The type of the view. Valid values:
-   * - 0: the current Alibaba Cloud account
-   * - 1: the global account
+   * The view type.
+   * 
+   * - 0: the view of the current Alibaba Cloud account.
+   * 
+   * - 1: the view of all accounts in your enterprise.
    * 
    * @example
    * 1

package/src/models/DescribeCloudSiemEventDetailResponseBody.ts

@@ -3,8 +3,29 @@ import * as $dara from '@darabonba/typescript';
 
 
 export class DescribeCloudSiemEventDetailResponseBodyDataAttckStages extends $dara.Model {
+  /**
+   * @remarks
+   * The number of alerts that are associated with the tactic.
+   * 
+   * @example
+   * 21
+   */
   alertNum?: number;
+  /**
+   * @remarks
+   * The ID of the ATT\\&CK tactic.
+   * 
+   * @example
+   * TA0008
+   */
   tacticId?: string;
+  /**
+   * @remarks
+   * The name of the tactic.
+   * 
+   * @example
+   * Persistence
+   */
   tacticName?: string;
   static names(): { [key: string]: string } {
     return {
@@ -58,16 +79,20 @@ export class DescribeCloudSiemEventDetailResponseBodyData extends $dara.Model {
   assetNum?: number;
   /**
    * @remarks
-   * The tags of the ATT\\&CK attacks.
+   * The ATT\\&CK technique labels.
    * 
    * @example
    * ["T1595.002 Vulnerability Scanning"]
    */
   attCkLabels?: string[];
+  /**
+   * @remarks
+   * The attack stages.
+   */
   attckStages?: DescribeCloudSiemEventDetailResponseBodyDataAttckStages[];
   /**
    * @remarks
-   * The source of the alert.
+   * The cloud services that generated the alerts associated with the event.
    * 
    * @example
    * [sas,waf]
@@ -83,7 +108,7 @@ export class DescribeCloudSiemEventDetailResponseBodyData extends $dara.Model {
   description?: string;
   /**
    * @remarks
-   * The description of the event in English.
+   * The English description of the event.
    * 
    * @example
    * The threat event contains 13 Miner Network,1 Execute suspicious encoded commands on Linux, etc
@@ -91,7 +116,7 @@ export class DescribeCloudSiemEventDetailResponseBodyData extends $dara.Model {
   descriptionEn?: string;
   /**
    * @remarks
-   * The extended information of the event in the JSON format.
+   * The extended information about the event, in JSON format.
    * 
    * @example
    * {"event_transfer_type":"customize_rule"}
@@ -123,16 +148,31 @@ export class DescribeCloudSiemEventDetailResponseBodyData extends $dara.Model {
   incidentName?: string;
   /**
    * @remarks
-   * The name of the event in English.
+   * The English name of the event.
    * 
    * @example
    * Multiple type of alerts, including Miner Network, Command line download and run malicious files, Backdoor Process, etc
    */
   incidentNameEn?: string;
+  /**
+   * @remarks
+   * The type of the event.
+   * 
+   * - net-attack: Expert rule
+   * 
+   * - graph: Graph computing
+   * 
+   * - singleToSingle: Alert pass-through
+   * 
+   * - allToSingle: Alert aggregation
+   * 
+   * @example
+   * graph
+   */
   incidentType?: string;
   /**
    * @remarks
-   * The UUID of the event.
+   * The globally unique ID of the event.
    * 
    * @example
    * 85ea4241-798f-4684-a876-65d4f0c3****
@@ -140,26 +180,36 @@ export class DescribeCloudSiemEventDetailResponseBodyData extends $dara.Model {
   incidentUuid?: string;
   /**
    * @remarks
-   * Users associated with the event.
+   * The linked accounts.
    */
   referAccount?: string;
   /**
    * @remarks
-   * The remarks of the event.
+   * The remarks for the event.
    * 
    * @example
    * dealed
    */
   remark?: string;
+  /**
+   * @remarks
+   * The rule that is used to generate the event.
+   * 
+   * @example
+   * net-attack/101
+   */
   ruleId?: string;
   /**
    * @remarks
    * The status of the event. Valid values:
    * 
-   * *   0: not handled
-   * *   1: handing
-   * *   5: handling failed
-   * *   10: handled
+   * - 0: unhandled
+   * 
+   * - 1: handling
+   * 
+   * - 5: handling failed
+   * 
+   * - 10: handled
    * 
    * @example
    * 0
@@ -167,11 +217,13 @@ export class DescribeCloudSiemEventDetailResponseBodyData extends $dara.Model {
   status?: number;
   /**
    * @remarks
-   * The risk level. Valid values:
+   * The threat level. Valid values:
+   * 
+   * - serious: high
    * 
-   * *   serious: high
-   * *   suspicious: medium
-   * *   remind: low
+   * - suspicious: medium
+   * 
+   * - remind: low
    * 
    * @example
    * remind
@@ -179,7 +231,7 @@ export class DescribeCloudSiemEventDetailResponseBodyData extends $dara.Model {
   threatLevel?: string;
   /**
    * @remarks
-   * The risk score of the event. The score ranges from 0 to 100. A higher score indicates a higher risk level.
+   * The threat score of the event. The score is a value from 0 to 100. A higher score indicates a higher threat level.
    * 
    * @example
    * 90.2
@@ -258,7 +310,7 @@ export class DescribeCloudSiemEventDetailResponseBodyData extends $dara.Model {
 export class DescribeCloudSiemEventDetailResponseBody extends $dara.Model {
   /**
    * @remarks
-   * The HTTP status code.
+   * The response code.
    * 
    * @example
    * 200
@@ -266,7 +318,7 @@ export class DescribeCloudSiemEventDetailResponseBody extends $dara.Model {
   code?: number;
   /**
    * @remarks
-   * The data returned.
+   * The returned data.
    * 
    * @example
    * 123456
@@ -292,8 +344,9 @@ export class DescribeCloudSiemEventDetailResponseBody extends $dara.Model {
    * @remarks
    * Indicates whether the request was successful. Valid values:
    * 
-   * *   true
-   * *   false
+   * - true: The request was successful.
+   * 
+   * - false: The request failed.
    * 
    * @example
    * true