@azure/arm-security 6.0.0-beta.5 → 6.0.0-beta.7

package/dist/esm/models/ioTSecurityAPI/models.d.ts

@@ -0,0 +1,862 @@
+import { ProxyResource, ExtensionResource } from "../models.js";
+/**
+ * This file contains only generated model types and their (de)serializers.
+ * Disable the following rules for internal models with '_' prefix and deserializers which require 'any' for raw JSON input.
+ */
+/** The device security group resource */
+export interface DeviceSecurityGroup extends ExtensionResource {
+    /** The list of custom alert threshold rules. */
+    thresholdRules?: ThresholdCustomAlertRuleUnion[];
+    /** The list of custom alert time-window rules. */
+    timeWindowRules?: TimeWindowCustomAlertRuleUnion[];
+    /** The allow-list custom alert rules. */
+    allowlistRules?: AllowlistCustomAlertRuleUnion[];
+    /** The deny-list custom alert rules. */
+    denylistRules?: DenylistCustomAlertRule[];
+}
+export declare function deviceSecurityGroupSerializer(item: DeviceSecurityGroup): any;
+export declare function deviceSecurityGroupDeserializer(item: any): DeviceSecurityGroup;
+/** describes properties of a security group. */
+export interface DeviceSecurityGroupProperties {
+    /** The list of custom alert threshold rules. */
+    thresholdRules?: ThresholdCustomAlertRuleUnion[];
+    /** The list of custom alert time-window rules. */
+    timeWindowRules?: TimeWindowCustomAlertRuleUnion[];
+    /** The allow-list custom alert rules. */
+    allowlistRules?: AllowlistCustomAlertRuleUnion[];
+    /** The deny-list custom alert rules. */
+    denylistRules?: DenylistCustomAlertRule[];
+}
+export declare function deviceSecurityGroupPropertiesSerializer(item: DeviceSecurityGroupProperties): any;
+export declare function deviceSecurityGroupPropertiesDeserializer(item: any): DeviceSecurityGroupProperties;
+export declare function thresholdCustomAlertRuleUnionArraySerializer(result: Array<ThresholdCustomAlertRuleUnion>): any[];
+export declare function thresholdCustomAlertRuleUnionArrayDeserializer(result: Array<ThresholdCustomAlertRuleUnion>): any[];
+/** A custom alert rule that checks if a value (depends on the custom alert type) is within the given range. */
+export interface ThresholdCustomAlertRule extends CustomAlertRule {
+    /** The minimum threshold. */
+    minThreshold: number;
+    /** The maximum threshold. */
+    maxThreshold: number;
+    ruleType: "ThresholdCustomAlertRule" | "TimeWindowCustomAlertRule" | "ActiveConnectionsNotInAllowedRange" | "AmqpC2DMessagesNotInAllowedRange" | "MqttC2DMessagesNotInAllowedRange" | "HttpC2DMessagesNotInAllowedRange" | "AmqpC2DRejectedMessagesNotInAllowedRange" | "MqttC2DRejectedMessagesNotInAllowedRange" | "HttpC2DRejectedMessagesNotInAllowedRange" | "AmqpD2CMessagesNotInAllowedRange" | "MqttD2CMessagesNotInAllowedRange" | "HttpD2CMessagesNotInAllowedRange" | "DirectMethodInvokesNotInAllowedRange" | "FailedLocalLoginsNotInAllowedRange" | "FileUploadsNotInAllowedRange" | "QueuePurgesNotInAllowedRange" | "TwinUpdatesNotInAllowedRange" | "UnauthorizedOperationsNotInAllowedRange";
+}
+export declare function thresholdCustomAlertRuleSerializer(item: ThresholdCustomAlertRule): any;
+export declare function thresholdCustomAlertRuleDeserializer(item: any): ThresholdCustomAlertRule;
+/** Alias for ThresholdCustomAlertRuleUnion */
+export type ThresholdCustomAlertRuleUnion = TimeWindowCustomAlertRuleUnion | ThresholdCustomAlertRule;
+export declare function thresholdCustomAlertRuleUnionSerializer(item: ThresholdCustomAlertRuleUnion): any;
+export declare function thresholdCustomAlertRuleUnionDeserializer(item: any): ThresholdCustomAlertRuleUnion;
+/** A custom alert rule that checks if the number of activities (depends on the custom alert type) in a time window is within the given range. */
+export interface TimeWindowCustomAlertRule extends ThresholdCustomAlertRule {
+    /** The time window size in iso8601 format. */
+    timeWindowSize: string;
+    ruleType: "TimeWindowCustomAlertRule" | "ActiveConnectionsNotInAllowedRange" | "AmqpC2DMessagesNotInAllowedRange" | "MqttC2DMessagesNotInAllowedRange" | "HttpC2DMessagesNotInAllowedRange" | "AmqpC2DRejectedMessagesNotInAllowedRange" | "MqttC2DRejectedMessagesNotInAllowedRange" | "HttpC2DRejectedMessagesNotInAllowedRange" | "AmqpD2CMessagesNotInAllowedRange" | "MqttD2CMessagesNotInAllowedRange" | "HttpD2CMessagesNotInAllowedRange" | "DirectMethodInvokesNotInAllowedRange" | "FailedLocalLoginsNotInAllowedRange" | "FileUploadsNotInAllowedRange" | "QueuePurgesNotInAllowedRange" | "TwinUpdatesNotInAllowedRange" | "UnauthorizedOperationsNotInAllowedRange";
+}
+export declare function timeWindowCustomAlertRuleSerializer(item: TimeWindowCustomAlertRule): any;
+export declare function timeWindowCustomAlertRuleDeserializer(item: any): TimeWindowCustomAlertRule;
+/** Alias for TimeWindowCustomAlertRuleUnion */
+export type TimeWindowCustomAlertRuleUnion = ActiveConnectionsNotInAllowedRange | AmqpC2DMessagesNotInAllowedRange | MqttC2DMessagesNotInAllowedRange | HttpC2DMessagesNotInAllowedRange | AmqpC2DRejectedMessagesNotInAllowedRange | MqttC2DRejectedMessagesNotInAllowedRange | HttpC2DRejectedMessagesNotInAllowedRange | AmqpD2CMessagesNotInAllowedRange | MqttD2CMessagesNotInAllowedRange | HttpD2CMessagesNotInAllowedRange | DirectMethodInvokesNotInAllowedRange | FailedLocalLoginsNotInAllowedRange | FileUploadsNotInAllowedRange | QueuePurgesNotInAllowedRange | TwinUpdatesNotInAllowedRange | UnauthorizedOperationsNotInAllowedRange | TimeWindowCustomAlertRule;
+export declare function timeWindowCustomAlertRuleUnionSerializer(item: TimeWindowCustomAlertRuleUnion): any;
+export declare function timeWindowCustomAlertRuleUnionDeserializer(item: any): TimeWindowCustomAlertRuleUnion;
+/** Number of active connections is not in allowed range. */
+export interface ActiveConnectionsNotInAllowedRange extends TimeWindowCustomAlertRule {
+    /** The type of the custom alert rule. */
+    ruleType: "ActiveConnectionsNotInAllowedRange";
+}
+export declare function activeConnectionsNotInAllowedRangeSerializer(item: ActiveConnectionsNotInAllowedRange): any;
+export declare function activeConnectionsNotInAllowedRangeDeserializer(item: any): ActiveConnectionsNotInAllowedRange;
+/** Number of cloud to device messages (AMQP protocol) is not in allowed range. */
+export interface AmqpC2DMessagesNotInAllowedRange extends TimeWindowCustomAlertRule {
+    /** The type of the custom alert rule. */
+    ruleType: "AmqpC2DMessagesNotInAllowedRange";
+}
+export declare function amqpC2DMessagesNotInAllowedRangeSerializer(item: AmqpC2DMessagesNotInAllowedRange): any;
+export declare function amqpC2DMessagesNotInAllowedRangeDeserializer(item: any): AmqpC2DMessagesNotInAllowedRange;
+/** Number of cloud to device messages (MQTT protocol) is not in allowed range. */
+export interface MqttC2DMessagesNotInAllowedRange extends TimeWindowCustomAlertRule {
+    /** The type of the custom alert rule. */
+    ruleType: "MqttC2DMessagesNotInAllowedRange";
+}
+export declare function mqttC2DMessagesNotInAllowedRangeSerializer(item: MqttC2DMessagesNotInAllowedRange): any;
+export declare function mqttC2DMessagesNotInAllowedRangeDeserializer(item: any): MqttC2DMessagesNotInAllowedRange;
+/** Number of cloud to device messages (HTTP protocol) is not in allowed range. */
+export interface HttpC2DMessagesNotInAllowedRange extends TimeWindowCustomAlertRule {
+    /** The type of the custom alert rule. */
+    ruleType: "HttpC2DMessagesNotInAllowedRange";
+}
+export declare function httpC2DMessagesNotInAllowedRangeSerializer(item: HttpC2DMessagesNotInAllowedRange): any;
+export declare function httpC2DMessagesNotInAllowedRangeDeserializer(item: any): HttpC2DMessagesNotInAllowedRange;
+/** Number of rejected cloud to device messages (AMQP protocol) is not in allowed range. */
+export interface AmqpC2DRejectedMessagesNotInAllowedRange extends TimeWindowCustomAlertRule {
+    /** The type of the custom alert rule. */
+    ruleType: "AmqpC2DRejectedMessagesNotInAllowedRange";
+}
+export declare function amqpC2DRejectedMessagesNotInAllowedRangeSerializer(item: AmqpC2DRejectedMessagesNotInAllowedRange): any;
+export declare function amqpC2DRejectedMessagesNotInAllowedRangeDeserializer(item: any): AmqpC2DRejectedMessagesNotInAllowedRange;
+/** Number of rejected cloud to device messages (MQTT protocol) is not in allowed range. */
+export interface MqttC2DRejectedMessagesNotInAllowedRange extends TimeWindowCustomAlertRule {
+    /** The type of the custom alert rule. */
+    ruleType: "MqttC2DRejectedMessagesNotInAllowedRange";
+}
+export declare function mqttC2DRejectedMessagesNotInAllowedRangeSerializer(item: MqttC2DRejectedMessagesNotInAllowedRange): any;
+export declare function mqttC2DRejectedMessagesNotInAllowedRangeDeserializer(item: any): MqttC2DRejectedMessagesNotInAllowedRange;
+/** Number of rejected cloud to device messages (HTTP protocol) is not in allowed range. */
+export interface HttpC2DRejectedMessagesNotInAllowedRange extends TimeWindowCustomAlertRule {
+    /** The type of the custom alert rule. */
+    ruleType: "HttpC2DRejectedMessagesNotInAllowedRange";
+}
+export declare function httpC2DRejectedMessagesNotInAllowedRangeSerializer(item: HttpC2DRejectedMessagesNotInAllowedRange): any;
+export declare function httpC2DRejectedMessagesNotInAllowedRangeDeserializer(item: any): HttpC2DRejectedMessagesNotInAllowedRange;
+/** Number of device to cloud messages (AMQP protocol) is not in allowed range. */
+export interface AmqpD2CMessagesNotInAllowedRange extends TimeWindowCustomAlertRule {
+    /** The type of the custom alert rule. */
+    ruleType: "AmqpD2CMessagesNotInAllowedRange";
+}
+export declare function amqpD2CMessagesNotInAllowedRangeSerializer(item: AmqpD2CMessagesNotInAllowedRange): any;
+export declare function amqpD2CMessagesNotInAllowedRangeDeserializer(item: any): AmqpD2CMessagesNotInAllowedRange;
+/** Number of device to cloud messages (MQTT protocol) is not in allowed range. */
+export interface MqttD2CMessagesNotInAllowedRange extends TimeWindowCustomAlertRule {
+    /** The type of the custom alert rule. */
+    ruleType: "MqttD2CMessagesNotInAllowedRange";
+}
+export declare function mqttD2CMessagesNotInAllowedRangeSerializer(item: MqttD2CMessagesNotInAllowedRange): any;
+export declare function mqttD2CMessagesNotInAllowedRangeDeserializer(item: any): MqttD2CMessagesNotInAllowedRange;
+/** Number of device to cloud messages (HTTP protocol) is not in allowed range. */
+export interface HttpD2CMessagesNotInAllowedRange extends TimeWindowCustomAlertRule {
+    /** The type of the custom alert rule. */
+    ruleType: "HttpD2CMessagesNotInAllowedRange";
+}
+export declare function httpD2CMessagesNotInAllowedRangeSerializer(item: HttpD2CMessagesNotInAllowedRange): any;
+export declare function httpD2CMessagesNotInAllowedRangeDeserializer(item: any): HttpD2CMessagesNotInAllowedRange;
+/** Number of direct method invokes is not in allowed range. */
+export interface DirectMethodInvokesNotInAllowedRange extends TimeWindowCustomAlertRule {
+    /** The type of the custom alert rule. */
+    ruleType: "DirectMethodInvokesNotInAllowedRange";
+}
+export declare function directMethodInvokesNotInAllowedRangeSerializer(item: DirectMethodInvokesNotInAllowedRange): any;
+export declare function directMethodInvokesNotInAllowedRangeDeserializer(item: any): DirectMethodInvokesNotInAllowedRange;
+/** Number of failed local logins is not in allowed range. */
+export interface FailedLocalLoginsNotInAllowedRange extends TimeWindowCustomAlertRule {
+    /** The type of the custom alert rule. */
+    ruleType: "FailedLocalLoginsNotInAllowedRange";
+}
+export declare function failedLocalLoginsNotInAllowedRangeSerializer(item: FailedLocalLoginsNotInAllowedRange): any;
+export declare function failedLocalLoginsNotInAllowedRangeDeserializer(item: any): FailedLocalLoginsNotInAllowedRange;
+/** Number of file uploads is not in allowed range. */
+export interface FileUploadsNotInAllowedRange extends TimeWindowCustomAlertRule {
+    /** The type of the custom alert rule. */
+    ruleType: "FileUploadsNotInAllowedRange";
+}
+export declare function fileUploadsNotInAllowedRangeSerializer(item: FileUploadsNotInAllowedRange): any;
+export declare function fileUploadsNotInAllowedRangeDeserializer(item: any): FileUploadsNotInAllowedRange;
+/** Number of device queue purges is not in allowed range. */
+export interface QueuePurgesNotInAllowedRange extends TimeWindowCustomAlertRule {
+    /** The type of the custom alert rule. */
+    ruleType: "QueuePurgesNotInAllowedRange";
+}
+export declare function queuePurgesNotInAllowedRangeSerializer(item: QueuePurgesNotInAllowedRange): any;
+export declare function queuePurgesNotInAllowedRangeDeserializer(item: any): QueuePurgesNotInAllowedRange;
+/** Number of twin updates is not in allowed range. */
+export interface TwinUpdatesNotInAllowedRange extends TimeWindowCustomAlertRule {
+    /** The type of the custom alert rule. */
+    ruleType: "TwinUpdatesNotInAllowedRange";
+}
+export declare function twinUpdatesNotInAllowedRangeSerializer(item: TwinUpdatesNotInAllowedRange): any;
+export declare function twinUpdatesNotInAllowedRangeDeserializer(item: any): TwinUpdatesNotInAllowedRange;
+/** Number of unauthorized operations is not in allowed range. */
+export interface UnauthorizedOperationsNotInAllowedRange extends TimeWindowCustomAlertRule {
+    /** The type of the custom alert rule. */
+    ruleType: "UnauthorizedOperationsNotInAllowedRange";
+}
+export declare function unauthorizedOperationsNotInAllowedRangeSerializer(item: UnauthorizedOperationsNotInAllowedRange): any;
+export declare function unauthorizedOperationsNotInAllowedRangeDeserializer(item: any): UnauthorizedOperationsNotInAllowedRange;
+export declare function timeWindowCustomAlertRuleUnionArraySerializer(result: Array<TimeWindowCustomAlertRuleUnion>): any[];
+export declare function timeWindowCustomAlertRuleUnionArrayDeserializer(result: Array<TimeWindowCustomAlertRuleUnion>): any[];
+export declare function allowlistCustomAlertRuleUnionArraySerializer(result: Array<AllowlistCustomAlertRuleUnion>): any[];
+export declare function allowlistCustomAlertRuleUnionArrayDeserializer(result: Array<AllowlistCustomAlertRuleUnion>): any[];
+/** A custom alert rule that checks if a value (depends on the custom alert type) is allowed. */
+export interface AllowlistCustomAlertRule extends ListCustomAlertRule {
+    /** The values to allow. The format of the values depends on the rule type. */
+    allowlistValues: string[];
+    ruleType: "AllowlistCustomAlertRule" | "ConnectionToIpNotAllowed" | "ConnectionFromIpNotAllowed" | "LocalUserNotAllowed" | "ProcessNotAllowed";
+}
+export declare function allowlistCustomAlertRuleSerializer(item: AllowlistCustomAlertRule): any;
+export declare function allowlistCustomAlertRuleDeserializer(item: any): AllowlistCustomAlertRule;
+/** Alias for AllowlistCustomAlertRuleUnion */
+export type AllowlistCustomAlertRuleUnion = ConnectionToIpNotAllowed | ConnectionFromIpNotAllowed | LocalUserNotAllowed | ProcessNotAllowed | AllowlistCustomAlertRule;
+export declare function allowlistCustomAlertRuleUnionSerializer(item: AllowlistCustomAlertRuleUnion): any;
+export declare function allowlistCustomAlertRuleUnionDeserializer(item: any): AllowlistCustomAlertRuleUnion;
+/** Outbound connection to an ip that isn't allowed. Allow list consists of ipv4 or ipv6 range in CIDR notation. */
+export interface ConnectionToIpNotAllowed extends AllowlistCustomAlertRule {
+    ruleType: "ConnectionToIpNotAllowed";
+}
+export declare function connectionToIpNotAllowedSerializer(item: ConnectionToIpNotAllowed): any;
+export declare function connectionToIpNotAllowedDeserializer(item: any): ConnectionToIpNotAllowed;
+/** Inbound connection from an ip that isn't allowed. Allow list consists of ipv4 or ipv6 range in CIDR notation. */
+export interface ConnectionFromIpNotAllowed extends AllowlistCustomAlertRule {
+    ruleType: "ConnectionFromIpNotAllowed";
+}
+export declare function connectionFromIpNotAllowedSerializer(item: ConnectionFromIpNotAllowed): any;
+export declare function connectionFromIpNotAllowedDeserializer(item: any): ConnectionFromIpNotAllowed;
+/** Login by a local user that isn't allowed. Allow list consists of login names to allow. */
+export interface LocalUserNotAllowed extends AllowlistCustomAlertRule {
+    ruleType: "LocalUserNotAllowed";
+}
+export declare function localUserNotAllowedSerializer(item: LocalUserNotAllowed): any;
+export declare function localUserNotAllowedDeserializer(item: any): LocalUserNotAllowed;
+/** Execution of a process that isn't allowed. Allow list consists of process names to allow. */
+export interface ProcessNotAllowed extends AllowlistCustomAlertRule {
+    ruleType: "ProcessNotAllowed";
+}
+export declare function processNotAllowedSerializer(item: ProcessNotAllowed): any;
+export declare function processNotAllowedDeserializer(item: any): ProcessNotAllowed;
+export declare function denylistCustomAlertRuleArraySerializer(result: Array<DenylistCustomAlertRule>): any[];
+export declare function denylistCustomAlertRuleArrayDeserializer(result: Array<DenylistCustomAlertRule>): any[];
+/** A custom alert rule that checks if a value (depends on the custom alert type) is denied. */
+export interface DenylistCustomAlertRule extends ListCustomAlertRule {
+    /** The values to deny. The format of the values depends on the rule type. */
+    denylistValues: string[];
+    ruleType: "DenylistCustomAlertRule";
+}
+export declare function denylistCustomAlertRuleSerializer(item: DenylistCustomAlertRule): any;
+export declare function denylistCustomAlertRuleDeserializer(item: any): DenylistCustomAlertRule;
+/** A custom alert rule. */
+export interface CustomAlertRule {
+    /** The display name of the custom alert. */
+    readonly displayName?: string;
+    /** The description of the custom alert. */
+    readonly description?: string;
+    /** Status of the custom alert. */
+    isEnabled: boolean;
+    /** The type of the custom alert rule. */
+    /** The discriminator possible values: ThresholdCustomAlertRule, TimeWindowCustomAlertRule, AllowlistCustomAlertRule, ListCustomAlertRule, DenylistCustomAlertRule, ConnectionToIpNotAllowed, ConnectionFromIpNotAllowed, LocalUserNotAllowed, ProcessNotAllowed, ActiveConnectionsNotInAllowedRange, AmqpC2DMessagesNotInAllowedRange, MqttC2DMessagesNotInAllowedRange, HttpC2DMessagesNotInAllowedRange, AmqpC2DRejectedMessagesNotInAllowedRange, MqttC2DRejectedMessagesNotInAllowedRange, HttpC2DRejectedMessagesNotInAllowedRange, AmqpD2CMessagesNotInAllowedRange, MqttD2CMessagesNotInAllowedRange, HttpD2CMessagesNotInAllowedRange, DirectMethodInvokesNotInAllowedRange, FailedLocalLoginsNotInAllowedRange, FileUploadsNotInAllowedRange, QueuePurgesNotInAllowedRange, TwinUpdatesNotInAllowedRange, UnauthorizedOperationsNotInAllowedRange */
+    ruleType: string;
+}
+export declare function customAlertRuleSerializer(item: CustomAlertRule): any;
+export declare function customAlertRuleDeserializer(item: any): CustomAlertRule;
+/** Alias for CustomAlertRuleUnion */
+export type CustomAlertRuleUnion = ThresholdCustomAlertRuleUnion | ListCustomAlertRuleUnion | CustomAlertRule;
+export declare function customAlertRuleUnionSerializer(item: CustomAlertRuleUnion): any;
+export declare function customAlertRuleUnionDeserializer(item: any): CustomAlertRuleUnion;
+/** A List custom alert rule. */
+export interface ListCustomAlertRule extends CustomAlertRule {
+    /** The value type of the items in the list. */
+    readonly valueType?: ValueType;
+    ruleType: "ListCustomAlertRule" | "AllowlistCustomAlertRule" | "DenylistCustomAlertRule" | "ConnectionToIpNotAllowed" | "ConnectionFromIpNotAllowed" | "LocalUserNotAllowed" | "ProcessNotAllowed";
+}
+export declare function listCustomAlertRuleSerializer(item: ListCustomAlertRule): any;
+export declare function listCustomAlertRuleDeserializer(item: any): ListCustomAlertRule;
+/** Alias for ListCustomAlertRuleUnion */
+export type ListCustomAlertRuleUnion = AllowlistCustomAlertRuleUnion | DenylistCustomAlertRule | ListCustomAlertRule;
+export declare function listCustomAlertRuleUnionSerializer(item: ListCustomAlertRuleUnion): any;
+export declare function listCustomAlertRuleUnionDeserializer(item: any): ListCustomAlertRuleUnion;
+/** The value type of the items in the list. */
+export declare enum KnownValueType {
+    /** An IP range in CIDR format (e.g. '192.168.0.1/8'). */
+    IpCidr = "IpCidr",
+    /** Any string value. */
+    String = "String"
+}
+/**
+ * The value type of the items in the list. \
+ * {@link KnownValueType} can be used interchangeably with ValueType,
+ *  this enum contains the known values that the service supports.
+ * ### Known values supported by the service
+ * **IpCidr**: An IP range in CIDR format (e.g. '192.168.0.1\/8'). \
+ * **String**: Any string value.
+ */
+export type ValueType = string;
+/** List of device security groups */
+export interface _DeviceSecurityGroupList {
+    /** List of device security group objects */
+    value?: DeviceSecurityGroup[];
+    /** The URI to fetch the next page. */
+    readonly nextLink?: string;
+}
+export declare function _deviceSecurityGroupListDeserializer(item: any): _DeviceSecurityGroupList;
+export declare function deviceSecurityGroupArraySerializer(result: Array<DeviceSecurityGroup>): any[];
+export declare function deviceSecurityGroupArrayDeserializer(result: Array<DeviceSecurityGroup>): any[];
+/** Security analytics of your IoT Security solution */
+export interface IoTSecuritySolutionAnalyticsModel extends ProxyResource {
+    /** Security analytics of your IoT Security solution. */
+    readonly metrics?: IoTSeverityMetrics;
+    /** Number of unhealthy devices within your IoT Security solution. */
+    readonly unhealthyDeviceCount?: number;
+    /** List of device metrics by the aggregation date. */
+    readonly devicesMetrics?: IoTSecuritySolutionAnalyticsModelPropertiesDevicesMetricsItem[];
+    /** List of the 3 devices with the most alerts. */
+    topAlertedDevices?: IoTSecurityAlertedDevice[];
+    /** List of the 3 most prevalent device alerts. */
+    mostPrevalentDeviceAlerts?: IoTSecurityDeviceAlert[];
+    /** List of the 3 most prevalent device recommendations. */
+    mostPrevalentDeviceRecommendations?: IoTSecurityDeviceRecommendation[];
+}
+export declare function ioTSecuritySolutionAnalyticsModelDeserializer(item: any): IoTSecuritySolutionAnalyticsModel;
+/** Security analytics properties of your IoT Security solution */
+export interface IoTSecuritySolutionAnalyticsModelProperties {
+    /** Security analytics of your IoT Security solution. */
+    readonly metrics?: IoTSeverityMetrics;
+    /** Number of unhealthy devices within your IoT Security solution. */
+    readonly unhealthyDeviceCount?: number;
+    /** List of device metrics by the aggregation date. */
+    readonly devicesMetrics?: IoTSecuritySolutionAnalyticsModelPropertiesDevicesMetricsItem[];
+    /** List of the 3 devices with the most alerts. */
+    topAlertedDevices?: IoTSecurityAlertedDevice[];
+    /** List of the 3 most prevalent device alerts. */
+    mostPrevalentDeviceAlerts?: IoTSecurityDeviceAlert[];
+    /** List of the 3 most prevalent device recommendations. */
+    mostPrevalentDeviceRecommendations?: IoTSecurityDeviceRecommendation[];
+}
+export declare function ioTSecuritySolutionAnalyticsModelPropertiesDeserializer(item: any): IoTSecuritySolutionAnalyticsModelProperties;
+/** IoT Security solution analytics severity metrics. */
+export interface IoTSeverityMetrics {
+    /** Count of high severity alerts/recommendations. */
+    high?: number;
+    /** Count of medium severity alerts/recommendations. */
+    medium?: number;
+    /** Count of low severity alerts/recommendations. */
+    low?: number;
+}
+export declare function ioTSeverityMetricsDeserializer(item: any): IoTSeverityMetrics;
+export declare function ioTSecuritySolutionAnalyticsModelPropertiesDevicesMetricsItemArrayDeserializer(result: Array<IoTSecuritySolutionAnalyticsModelPropertiesDevicesMetricsItem>): any[];
+/** model interface IoTSecuritySolutionAnalyticsModelPropertiesDevicesMetricsItem */
+export interface IoTSecuritySolutionAnalyticsModelPropertiesDevicesMetricsItem {
+    /** Aggregation of IoT Security solution device alert metrics by date. */
+    date?: Date;
+    /** Device alert count by severity. */
+    devicesMetrics?: IoTSeverityMetrics;
+}
+export declare function ioTSecuritySolutionAnalyticsModelPropertiesDevicesMetricsItemDeserializer(item: any): IoTSecuritySolutionAnalyticsModelPropertiesDevicesMetricsItem;
+export declare function ioTSecurityAlertedDeviceArrayDeserializer(result: Array<IoTSecurityAlertedDevice>): any[];
+/** Statistical information about the number of alerts per device during last set number of days. */
+export interface IoTSecurityAlertedDevice {
+    /** Device identifier. */
+    readonly deviceId?: string;
+    /** Number of alerts raised for this device. */
+    readonly alertsCount?: number;
+}
+export declare function ioTSecurityAlertedDeviceDeserializer(item: any): IoTSecurityAlertedDevice;
+export declare function ioTSecurityDeviceAlertArrayDeserializer(result: Array<IoTSecurityDeviceAlert>): any[];
+/** Statistical information about the number of alerts per alert type during last set number of days */
+export interface IoTSecurityDeviceAlert {
+    /** Display name of the alert */
+    readonly alertDisplayName?: string;
+    /** Assessed Alert severity. */
+    readonly reportedSeverity?: ReportedSeverity;
+    /** Number of alerts raised for this alert type. */
+    readonly alertsCount?: number;
+}
+export declare function ioTSecurityDeviceAlertDeserializer(item: any): IoTSecurityDeviceAlert;
+/** Assessed alert severity. */
+export declare enum KnownReportedSeverity {
+    /** Informational */
+    Informational = "Informational",
+    /** Low */
+    Low = "Low",
+    /** Medium */
+    Medium = "Medium",
+    /** High */
+    High = "High"
+}
+/**
+ * Assessed alert severity. \
+ * {@link KnownReportedSeverity} can be used interchangeably with ReportedSeverity,
+ *  this enum contains the known values that the service supports.
+ * ### Known values supported by the service
+ * **Informational**: Informational \
+ * **Low**: Low \
+ * **Medium**: Medium \
+ * **High**: High
+ */
+export type ReportedSeverity = string;
+export declare function ioTSecurityDeviceRecommendationArrayDeserializer(result: Array<IoTSecurityDeviceRecommendation>): any[];
+/** Statistical information about the number of recommendations per device, per recommendation type. */
+export interface IoTSecurityDeviceRecommendation {
+    /** Display name of the recommendation. */
+    readonly recommendationDisplayName?: string;
+    /** Assessed recommendation severity. */
+    readonly reportedSeverity?: ReportedSeverity;
+    /** Number of devices with this recommendation. */
+    readonly devicesCount?: number;
+}
+export declare function ioTSecurityDeviceRecommendationDeserializer(item: any): IoTSecurityDeviceRecommendation;
+/** List of Security analytics of your IoT Security solution */
+export interface IoTSecuritySolutionAnalyticsModelList {
+    /** The IoTSecuritySolutionAnalyticsModel items on this page */
+    value: IoTSecuritySolutionAnalyticsModel[];
+    /** The link to the next page of items */
+    nextLink?: string;
+}
+export declare function ioTSecuritySolutionAnalyticsModelListDeserializer(item: any): IoTSecuritySolutionAnalyticsModelList;
+export declare function ioTSecuritySolutionAnalyticsModelArrayDeserializer(result: Array<IoTSecuritySolutionAnalyticsModel>): any[];
+/** IoT Security solution configuration and resource information. */
+export interface IoTSecuritySolutionModel extends ProxyResource {
+    /** Resource tags. */
+    tags?: Record<string, string>;
+    /** The geo-location where the resource lives */
+    location?: string;
+    /** Workspace resource ID */
+    workspace?: string;
+    /** Resource display name. */
+    displayName?: string;
+    /** Status of the IoT Security solution. */
+    status?: SecuritySolutionStatus;
+    /** List of additional options for exporting to workspace data. */
+    export?: ExportData[];
+    /** Disabled data sources. Disabling these data sources compromises the system. */
+    disabledDataSources?: DataSource[];
+    /** IoT Hub resource IDs */
+    iotHubs?: string[];
+    /** Properties of the IoT Security solution's user defined resources. */
+    userDefinedResources?: UserDefinedResourcesProperties;
+    /** List of resources that were automatically discovered as relevant to the security solution. */
+    readonly autoDiscoveredResources?: string[];
+    /** List of the configuration status for each recommendation type. */
+    recommendationsConfiguration?: RecommendationConfigurationProperties[];
+    /** Unmasked IP address logging status */
+    unmaskedIpLoggingStatus?: UnmaskedIpLoggingStatus;
+    /** List of additional workspaces */
+    additionalWorkspaces?: AdditionalWorkspacesProperties[];
+}
+export declare function ioTSecuritySolutionModelSerializer(item: IoTSecuritySolutionModel): any;
+export declare function ioTSecuritySolutionModelDeserializer(item: any): IoTSecuritySolutionModel;
+/** Security Solution setting data */
+export interface IoTSecuritySolutionProperties {
+    /** Workspace resource ID */
+    workspace?: string;
+    /** Resource display name. */
+    displayName: string;
+    /** Status of the IoT Security solution. */
+    status?: SecuritySolutionStatus;
+    /** List of additional options for exporting to workspace data. */
+    export?: ExportData[];
+    /** Disabled data sources. Disabling these data sources compromises the system. */
+    disabledDataSources?: DataSource[];
+    /** IoT Hub resource IDs */
+    iotHubs: string[];
+    /** Properties of the IoT Security solution's user defined resources. */
+    userDefinedResources?: UserDefinedResourcesProperties;
+    /** List of resources that were automatically discovered as relevant to the security solution. */
+    readonly autoDiscoveredResources?: string[];
+    /** List of the configuration status for each recommendation type. */
+    recommendationsConfiguration?: RecommendationConfigurationProperties[];
+    /** Unmasked IP address logging status */
+    unmaskedIpLoggingStatus?: UnmaskedIpLoggingStatus;
+    /** List of additional workspaces */
+    additionalWorkspaces?: AdditionalWorkspacesProperties[];
+}
+export declare function ioTSecuritySolutionPropertiesSerializer(item: IoTSecuritySolutionProperties): any;
+export declare function ioTSecuritySolutionPropertiesDeserializer(item: any): IoTSecuritySolutionProperties;
+/** Status of the IoT Security solution. */
+export declare enum KnownSecuritySolutionStatus {
+    /** Enabled */
+    Enabled = "Enabled",
+    /** Disabled */
+    Disabled = "Disabled"
+}
+/**
+ * Status of the IoT Security solution. \
+ * {@link KnownSecuritySolutionStatus} can be used interchangeably with SecuritySolutionStatus,
+ *  this enum contains the known values that the service supports.
+ * ### Known values supported by the service
+ * **Enabled**: Enabled \
+ * **Disabled**: Disabled
+ */
+export type SecuritySolutionStatus = string;
+/** Known values of {@link ExportData} that the service accepts. */
+export declare enum KnownExportData {
+    /** Agent raw events */
+    RawEvents = "RawEvents"
+}
+/** Type of ExportData */
+export type ExportData = string;
+/** Known values of {@link DataSource} that the service accepts. */
+export declare enum KnownDataSource {
+    /** Devices twin data */
+    TwinData = "TwinData"
+}
+/** Type of DataSource */
+export type DataSource = string;
+/** Properties of the IoT Security solution's user defined resources. */
+export interface UserDefinedResourcesProperties {
+    /** Azure Resource Graph query which represents the security solution's user defined resources. Required to start with "where type != "Microsoft.Devices/IotHubs"" */
+    query: string | null;
+    /** List of Azure subscription ids on which the user defined resources query should be executed. */
+    querySubscriptions: string[] | null;
+}
+export declare function userDefinedResourcesPropertiesSerializer(item: UserDefinedResourcesProperties): any;
+export declare function userDefinedResourcesPropertiesDeserializer(item: any): UserDefinedResourcesProperties;
+export declare function recommendationConfigurationPropertiesArraySerializer(result: Array<RecommendationConfigurationProperties>): any[];
+export declare function recommendationConfigurationPropertiesArrayDeserializer(result: Array<RecommendationConfigurationProperties>): any[];
+/** The type of IoT Security recommendation. */
+export interface RecommendationConfigurationProperties {
+    /** The type of IoT Security recommendation. */
+    recommendationType: RecommendationType;
+    readonly name?: string;
+    /** Recommendation status. When the recommendation status is disabled recommendations are not generated. */
+    status: RecommendationConfigStatus;
+}
+export declare function recommendationConfigurationPropertiesSerializer(item: RecommendationConfigurationProperties): any;
+export declare function recommendationConfigurationPropertiesDeserializer(item: any): RecommendationConfigurationProperties;
+/** The type of IoT Security recommendation. */
+export declare enum KnownRecommendationType {
+    /** Authentication schema used for pull an edge module from an ACR repository does not use Service Principal Authentication. */
+    IoTAcrauthentication = "IoT_ACRAuthentication",
+    /** IoT agent message size capacity is currently underutilized, causing an increase in the number of sent messages. Adjust message intervals for better utilization. */
+    IoTAgentSendsUnutilizedMessages = "IoT_AgentSendsUnutilizedMessages",
+    /** Identified security related system configuration issues. */
+    IoTBaseline = "IoT_Baseline",
+    /** You can optimize Edge Hub memory usage by turning off protocol heads for any protocols not used by Edge modules in your solution. */
+    IoTEdgeHubMemOptimize = "IoT_EdgeHubMemOptimize",
+    /** Logging is disabled for this edge module. */
+    IoTEdgeLoggingOptions = "IoT_EdgeLoggingOptions",
+    /** A minority within a device security group has inconsistent Edge Module settings with the rest of their group. */
+    IoTInconsistentModuleSettings = "IoT_InconsistentModuleSettings",
+    /** Install the Azure Security of Things Agent. */
+    IoTInstallAgent = "IoT_InstallAgent",
+    /** IP Filter Configuration should have rules defined for allowed traffic and should deny all other traffic by default. */
+    IoTIpfilterDenyAll = "IoT_IPFilter_DenyAll",
+    /** An Allow IP Filter rules source IP range is too large. Overly permissive rules might expose your IoT hub to malicious intenders. */
+    IoTIpfilterPermissiveRule = "IoT_IPFilter_PermissiveRule",
+    /** A listening endpoint was found on the device. */
+    IoTOpenPorts = "IoT_OpenPorts",
+    /** An Allowed firewall policy was found (INPUT/OUTPUT). The policy should Deny all traffic by default and define rules to allow necessary communication to/from the device. */
+    IoTPermissiveFirewallPolicy = "IoT_PermissiveFirewallPolicy",
+    /** A rule in the firewall has been found that contains a permissive pattern for a wide range of IP addresses or Ports. */
+    IoTPermissiveInputFirewallRules = "IoT_PermissiveInputFirewallRules",
+    /** A rule in the firewall has been found that contains a permissive pattern for a wide range of IP addresses or Ports. */
+    IoTPermissiveOutputFirewallRules = "IoT_PermissiveOutputFirewallRules",
+    /** Edge module is configured to run in privileged mode, with extensive Linux capabilities or with host-level network access (send/receive data to host machine). */
+    IoTPrivilegedDockerOptions = "IoT_PrivilegedDockerOptions",
+    /** Same authentication credentials to the IoT Hub used by multiple devices. This could indicate an illegitimate device impersonating a legitimate device. It also exposes the risk of device impersonation by an attacker. */
+    IoTSharedCredentials = "IoT_SharedCredentials",
+    /** Insecure TLS configurations detected. Immediate upgrade recommended. */
+    IoTVulnerableTLSCipherSuite = "IoT_VulnerableTLSCipherSuite"
+}
+/**
+ * The type of IoT Security recommendation. \
+ * {@link KnownRecommendationType} can be used interchangeably with RecommendationType,
+ *  this enum contains the known values that the service supports.
+ * ### Known values supported by the service
+ * **IoT_ACRAuthentication**: Authentication schema used for pull an edge module from an ACR repository does not use Service Principal Authentication. \
+ * **IoT_AgentSendsUnutilizedMessages**: IoT agent message size capacity is currently underutilized, causing an increase in the number of sent messages. Adjust message intervals for better utilization. \
+ * **IoT_Baseline**: Identified security related system configuration issues. \
+ * **IoT_EdgeHubMemOptimize**: You can optimize Edge Hub memory usage by turning off protocol heads for any protocols not used by Edge modules in your solution. \
+ * **IoT_EdgeLoggingOptions**: Logging is disabled for this edge module. \
+ * **IoT_InconsistentModuleSettings**: A minority within a device security group has inconsistent Edge Module settings with the rest of their group. \
+ * **IoT_InstallAgent**: Install the Azure Security of Things Agent. \
+ * **IoT_IPFilter_DenyAll**: IP Filter Configuration should have rules defined for allowed traffic and should deny all other traffic by default. \
+ * **IoT_IPFilter_PermissiveRule**: An Allow IP Filter rules source IP range is too large. Overly permissive rules might expose your IoT hub to malicious intenders. \
+ * **IoT_OpenPorts**: A listening endpoint was found on the device. \
+ * **IoT_PermissiveFirewallPolicy**: An Allowed firewall policy was found (INPUT\/OUTPUT). The policy should Deny all traffic by default and define rules to allow necessary communication to\/from the device. \
+ * **IoT_PermissiveInputFirewallRules**: A rule in the firewall has been found that contains a permissive pattern for a wide range of IP addresses or Ports. \
+ * **IoT_PermissiveOutputFirewallRules**: A rule in the firewall has been found that contains a permissive pattern for a wide range of IP addresses or Ports. \
+ * **IoT_PrivilegedDockerOptions**: Edge module is configured to run in privileged mode, with extensive Linux capabilities or with host-level network access (send\/receive data to host machine). \
+ * **IoT_SharedCredentials**: Same authentication credentials to the IoT Hub used by multiple devices. This could indicate an illegitimate device impersonating a legitimate device. It also exposes the risk of device impersonation by an attacker. \
+ * **IoT_VulnerableTLSCipherSuite**: Insecure TLS configurations detected. Immediate upgrade recommended.
+ */
+export type RecommendationType = string;
+/** Recommendation status. When the recommendation status is disabled recommendations are not generated. */
+export declare enum KnownRecommendationConfigStatus {
+    /** Disabled */
+    Disabled = "Disabled",
+    /** Enabled */
+    Enabled = "Enabled"
+}
+/**
+ * Recommendation status. When the recommendation status is disabled recommendations are not generated. \
+ * {@link KnownRecommendationConfigStatus} can be used interchangeably with RecommendationConfigStatus,
+ *  this enum contains the known values that the service supports.
+ * ### Known values supported by the service
+ * **Disabled**: Disabled \
+ * **Enabled**: Enabled
+ */
+export type RecommendationConfigStatus = string;
+/** Unmasked IP address logging status */
+export declare enum KnownUnmaskedIpLoggingStatus {
+    /** Unmasked IP logging is disabled */
+    Disabled = "Disabled",
+    /** Unmasked IP logging is enabled */
+    Enabled = "Enabled"
+}
+/**
+ * Unmasked IP address logging status \
+ * {@link KnownUnmaskedIpLoggingStatus} can be used interchangeably with UnmaskedIpLoggingStatus,
+ *  this enum contains the known values that the service supports.
+ * ### Known values supported by the service
+ * **Disabled**: Unmasked IP logging is disabled \
+ * **Enabled**: Unmasked IP logging is enabled
+ */
+export type UnmaskedIpLoggingStatus = string;
+export declare function additionalWorkspacesPropertiesArraySerializer(result: Array<AdditionalWorkspacesProperties>): any[];
+export declare function additionalWorkspacesPropertiesArrayDeserializer(result: Array<AdditionalWorkspacesProperties>): any[];
+/** Properties of the additional workspaces. */
+export interface AdditionalWorkspacesProperties {
+    /** Workspace resource id */
+    workspace?: string;
+    /** Workspace type. */
+    type?: AdditionalWorkspaceType;
+    /** List of data types sent to workspace */
+    dataTypes?: AdditionalWorkspaceDataType[];
+}
+export declare function additionalWorkspacesPropertiesSerializer(item: AdditionalWorkspacesProperties): any;
+export declare function additionalWorkspacesPropertiesDeserializer(item: any): AdditionalWorkspacesProperties;
+/** Workspace type. */
+export declare enum KnownAdditionalWorkspaceType {
+    /** Sentinel */
+    Sentinel = "Sentinel"
+}
+/**
+ * Workspace type. \
+ * {@link KnownAdditionalWorkspaceType} can be used interchangeably with AdditionalWorkspaceType,
+ *  this enum contains the known values that the service supports.
+ * ### Known values supported by the service
+ * **Sentinel**: Sentinel
+ */
+export type AdditionalWorkspaceType = string;
+/** Data types sent to workspace. */
+export declare enum KnownAdditionalWorkspaceDataType {
+    /** Alerts */
+    Alerts = "Alerts",
+    /** RawEvents */
+    RawEvents = "RawEvents"
+}
+/**
+ * Data types sent to workspace. \
+ * {@link KnownAdditionalWorkspaceDataType} can be used interchangeably with AdditionalWorkspaceDataType,
+ *  this enum contains the known values that the service supports.
+ * ### Known values supported by the service
+ * **Alerts**: Alerts \
+ * **RawEvents**: RawEvents
+ */
+export type AdditionalWorkspaceDataType = string;
+/** model interface UpdateIotSecuritySolutionData */
+export interface UpdateIotSecuritySolutionData extends TagsResource {
+    /** Properties of the IoT Security solution's user defined resources. */
+    userDefinedResources?: UserDefinedResourcesProperties;
+    /** List of the configuration status for each recommendation type. */
+    recommendationsConfiguration?: RecommendationConfigurationProperties[];
+}
+export declare function updateIotSecuritySolutionDataSerializer(item: UpdateIotSecuritySolutionData): any;
+/** Update Security Solution setting data */
+export interface UpdateIoTSecuritySolutionProperties {
+    /** Properties of the IoT Security solution's user defined resources. */
+    userDefinedResources?: UserDefinedResourcesProperties;
+    /** List of the configuration status for each recommendation type. */
+    recommendationsConfiguration?: RecommendationConfigurationProperties[];
+}
+export declare function updateIoTSecuritySolutionPropertiesSerializer(item: UpdateIoTSecuritySolutionProperties): any;
+/** A container holding only the Tags for a resource, allowing the user to update the tags. */
+export interface TagsResource {
+    /** Resource tags */
+    tags?: Record<string, string>;
+}
+export declare function tagsResourceSerializer(item: TagsResource): any;
+/** List of IoT Security solutions. */
+export interface _IoTSecuritySolutionsList {
+    /** The IoTSecuritySolutionModel items on this page */
+    value: IoTSecuritySolutionModel[];
+    /** The link to the next page of items */
+    nextLink?: string;
+}
+export declare function _ioTSecuritySolutionsListDeserializer(item: any): _IoTSecuritySolutionsList;
+export declare function ioTSecuritySolutionModelArraySerializer(result: Array<IoTSecuritySolutionModel>): any[];
+export declare function ioTSecuritySolutionModelArrayDeserializer(result: Array<IoTSecuritySolutionModel>): any[];
+/** Security Solution Aggregated Alert information */
+export interface IoTSecurityAggregatedAlert extends ProxyResource {
+    /** Resource tags */
+    tags?: Record<string, string>;
+    /** Name of the alert type. */
+    readonly alertType?: string;
+    /** Display name of the alert type. */
+    readonly alertDisplayName?: string;
+    /** Date of detection. */
+    readonly aggregatedDateUtc?: Date;
+    /** Name of the organization that raised the alert. */
+    readonly vendorName?: string;
+    /** Assessed alert severity. */
+    readonly reportedSeverity?: ReportedSeverity;
+    /** Recommended steps for remediation. */
+    readonly remediationSteps?: string;
+    /** Description of the suspected vulnerability and meaning. */
+    readonly description?: string;
+    /** Number of alerts occurrences within the aggregated time window. */
+    readonly count?: number;
+    /** Azure resource ID of the resource that received the alerts. */
+    readonly effectedResourceType?: string;
+    /** The type of the alerted resource (Azure, Non-Azure). */
+    readonly systemSource?: string;
+    /** IoT Security solution alert response. */
+    readonly actionTaken?: string;
+    /** Log analytics query for getting the list of affected devices/alerts. */
+    readonly logAnalyticsQuery?: string;
+    /** 10 devices with the highest number of occurrences of this alert type, on this day. */
+    readonly topDevicesList?: IoTSecurityAggregatedAlertPropertiesTopDevicesListItem[];
+}
+export declare function ioTSecurityAggregatedAlertDeserializer(item: any): IoTSecurityAggregatedAlert;
+/** IoT Security solution aggregated alert details. */
+export interface IoTSecurityAggregatedAlertProperties {
+    /** Name of the alert type. */
+    readonly alertType?: string;
+    /** Display name of the alert type. */
+    readonly alertDisplayName?: string;
+    /** Date of detection. */
+    readonly aggregatedDateUtc?: Date;
+    /** Name of the organization that raised the alert. */
+    readonly vendorName?: string;
+    /** Assessed alert severity. */
+    readonly reportedSeverity?: ReportedSeverity;
+    /** Recommended steps for remediation. */
+    readonly remediationSteps?: string;
+    /** Description of the suspected vulnerability and meaning. */
+    readonly description?: string;
+    /** Number of alerts occurrences within the aggregated time window. */
+    readonly count?: number;
+    /** Azure resource ID of the resource that received the alerts. */
+    readonly effectedResourceType?: string;
+    /** The type of the alerted resource (Azure, Non-Azure). */
+    readonly systemSource?: string;
+    /** IoT Security solution alert response. */
+    readonly actionTaken?: string;
+    /** Log analytics query for getting the list of affected devices/alerts. */
+    readonly logAnalyticsQuery?: string;
+    /** 10 devices with the highest number of occurrences of this alert type, on this day. */
+    readonly topDevicesList?: IoTSecurityAggregatedAlertPropertiesTopDevicesListItem[];
+}
+export declare function ioTSecurityAggregatedAlertPropertiesDeserializer(item: any): IoTSecurityAggregatedAlertProperties;
+export declare function ioTSecurityAggregatedAlertPropertiesTopDevicesListItemArrayDeserializer(result: Array<IoTSecurityAggregatedAlertPropertiesTopDevicesListItem>): any[];
+/** model interface IoTSecurityAggregatedAlertPropertiesTopDevicesListItem */
+export interface IoTSecurityAggregatedAlertPropertiesTopDevicesListItem {
+    /** Name of the device. */
+    readonly deviceId?: string;
+    /** Number of alerts raised for this device. */
+    readonly alertsCount?: number;
+    /** Most recent time this alert was raised for this device, on this day. */
+    readonly lastOccurrence?: string;
+}
+export declare function ioTSecurityAggregatedAlertPropertiesTopDevicesListItemDeserializer(item: any): IoTSecurityAggregatedAlertPropertiesTopDevicesListItem;
+/** List of IoT Security solution aggregated alert data. */
+export interface _IoTSecurityAggregatedAlertList {
+    /** The IoTSecurityAggregatedAlert items on this page */
+    value: IoTSecurityAggregatedAlert[];
+    /** The link to the next page of items */
+    nextLink?: string;
+}
+export declare function _ioTSecurityAggregatedAlertListDeserializer(item: any): _IoTSecurityAggregatedAlertList;
+export declare function ioTSecurityAggregatedAlertArrayDeserializer(result: Array<IoTSecurityAggregatedAlert>): any[];
+/** IoT Security solution recommendation information. */
+export interface IoTSecurityAggregatedRecommendation extends ProxyResource {
+    /** Resource tags */
+    tags?: Record<string, string>;
+    /** Name of the recommendation. */
+    recommendationName?: string;
+    /** Display name of the recommendation type. */
+    readonly recommendationDisplayName?: string;
+    /** Description of the suspected vulnerability and meaning. */
+    readonly description?: string;
+    /** Recommendation-type GUID. */
+    readonly recommendationTypeId?: string;
+    /** Name of the organization that made the recommendation. */
+    readonly detectedBy?: string;
+    /** Recommended steps for remediation */
+    readonly remediationSteps?: string;
+    /** Assessed recommendation severity. */
+    readonly reportedSeverity?: ReportedSeverity;
+    /** Number of healthy devices within the IoT Security solution. */
+    readonly healthyDevices?: number;
+    /** Number of unhealthy devices within the IoT Security solution. */
+    readonly unhealthyDeviceCount?: number;
+    /** Log analytics query for getting the list of affected devices/alerts. */
+    readonly logAnalyticsQuery?: string;
+}
+export declare function ioTSecurityAggregatedRecommendationDeserializer(item: any): IoTSecurityAggregatedRecommendation;
+/** IoT Security solution aggregated recommendation information */
+export interface IoTSecurityAggregatedRecommendationProperties {
+    /** Name of the recommendation. */
+    recommendationName?: string;
+    /** Display name of the recommendation type. */
+    readonly recommendationDisplayName?: string;
+    /** Description of the suspected vulnerability and meaning. */
+    readonly description?: string;
+    /** Recommendation-type GUID. */
+    readonly recommendationTypeId?: string;
+    /** Name of the organization that made the recommendation. */
+    readonly detectedBy?: string;
+    /** Recommended steps for remediation */
+    readonly remediationSteps?: string;
+    /** Assessed recommendation severity. */
+    readonly reportedSeverity?: ReportedSeverity;
+    /** Number of healthy devices within the IoT Security solution. */
+    readonly healthyDevices?: number;
+    /** Number of unhealthy devices within the IoT Security solution. */
+    readonly unhealthyDeviceCount?: number;
+    /** Log analytics query for getting the list of affected devices/alerts. */
+    readonly logAnalyticsQuery?: string;
+}
+export declare function ioTSecurityAggregatedRecommendationPropertiesDeserializer(item: any): IoTSecurityAggregatedRecommendationProperties;
+/** List of IoT Security solution aggregated recommendations. */
+export interface _IoTSecurityAggregatedRecommendationList {
+    /** The IoTSecurityAggregatedRecommendation items on this page */
+    value: IoTSecurityAggregatedRecommendation[];
+    /** The link to the next page of items */
+    nextLink?: string;
+}
+export declare function _ioTSecurityAggregatedRecommendationListDeserializer(item: any): _IoTSecurityAggregatedRecommendationList;
+export declare function ioTSecurityAggregatedRecommendationArrayDeserializer(result: Array<IoTSecurityAggregatedRecommendation>): any[];
+export declare function _deviceSecurityGroupPropertiesSerializer(item: DeviceSecurityGroup): any;
+export declare function _deviceSecurityGroupPropertiesDeserializer(item: any): {
+    thresholdRules: any;
+    timeWindowRules: any;
+    allowlistRules: any;
+    denylistRules: any;
+};
+export declare function _ioTSecuritySolutionAnalyticsModelPropertiesDeserializer(item: any): {
+    metrics: any;
+    unhealthyDeviceCount: any;
+    devicesMetrics: any;
+    topAlertedDevices: any;
+    mostPrevalentDeviceAlerts: any;
+    mostPrevalentDeviceRecommendations: any;
+};
+export declare function _ioTSecuritySolutionModelPropertiesSerializer(item: IoTSecuritySolutionModel): any;
+export declare function _ioTSecuritySolutionModelPropertiesDeserializer(item: any): {
+    workspace: any;
+    displayName: any;
+    status: any;
+    export: any;
+    disabledDataSources: any;
+    iotHubs: any;
+    userDefinedResources: any;
+    autoDiscoveredResources: any;
+    recommendationsConfiguration: any;
+    unmaskedIpLoggingStatus: any;
+    additionalWorkspaces: any;
+};
+export declare function _updateIotSecuritySolutionDataPropertiesSerializer(item: UpdateIotSecuritySolutionData): any;
+export declare function _ioTSecurityAggregatedAlertPropertiesDeserializer(item: any): {
+    alertType: any;
+    alertDisplayName: any;
+    aggregatedDateUtc: any;
+    vendorName: any;
+    reportedSeverity: any;
+    remediationSteps: any;
+    description: any;
+    count: any;
+    effectedResourceType: any;
+    systemSource: any;
+    actionTaken: any;
+    logAnalyticsQuery: any;
+    topDevicesList: any;
+};
+export declare function _ioTSecurityAggregatedRecommendationPropertiesDeserializer(item: any): {
+    recommendationName: any;
+    recommendationDisplayName: any;
+    description: any;
+    recommendationTypeId: any;
+    detectedBy: any;
+    remediationSteps: any;
+    reportedSeverity: any;
+    healthyDevices: any;
+    unhealthyDeviceCount: any;
+    logAnalyticsQuery: any;
+};
+//# sourceMappingURL=models.d.ts.map