@azure/arm-securityinsight 1.0.0-beta.1 → 1.0.0-beta.2

package/dist-esm/samples-dev/createsOrUpdatesANrtAlertRule.js

@@ -0,0 +1,54 @@
+/*
+ * Copyright (c) Microsoft Corporation.
+ * Licensed under the MIT License.
+ *
+ * Code generated by Microsoft (R) AutoRest Code Generator.
+ * Changes may cause incorrect behavior and will be lost if the code is regenerated.
+ */
+import { __awaiter } from "tslib";
+// Copyright (c) Microsoft Corporation.
+// Licensed under the MIT License.
+/**
+ * This sample demonstrates how to Creates or updates the alert rule.
+ *
+ * @summary Creates or updates the alert rule.
+ * x-ms-original-file: specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2021-09-01-preview/examples/alertRules/CreateNrtAlertRule.json
+ */
+import { SecurityInsights } from "@azure/arm-securityinsight";
+import { DefaultAzureCredential } from "@azure/identity";
+function createsOrUpdatesANrtAlertRule() {
+    return __awaiter(this, void 0, void 0, function* () {
+        const subscriptionId = "d0cfe6b2-9ac0-4464-9919-dccaee2e48c0";
+        const resourceGroupName = "myRg";
+        const workspaceName = "myWorkspace";
+        const ruleId = "73e01a99-5cd7-4139-a149-9f2736ff2ab5";
+        const alertRule = {
+            description: "",
+            displayName: "Rule2",
+            enabled: true,
+            etag: '"0300bf09-0000-0000-0000-5c37296e0000"',
+            incidentConfiguration: {
+                createIncident: true,
+                groupingConfiguration: {
+                    enabled: true,
+                    groupByEntities: ["Host", "Account"],
+                    lookbackDuration: "PT5H",
+                    matchingMethod: "Selected",
+                    reopenClosedIncident: false
+                }
+            },
+            kind: "NRT",
+            query: "ProtectionStatus | extend HostCustomEntity = Computer | extend IPCustomEntity = ComputerIP_Hidden",
+            severity: "High",
+            suppressionDuration: "PT1H",
+            suppressionEnabled: false,
+            tactics: ["Persistence", "LateralMovement"]
+        };
+        const credential = new DefaultAzureCredential();
+        const client = new SecurityInsights(credential, subscriptionId);
+        const result = yield client.alertRules.createOrUpdate(resourceGroupName, workspaceName, ruleId, alertRule);
+        console.log(result);
+    });
+}
+createsOrUpdatesANrtAlertRule().catch(console.error);
+//# sourceMappingURL=createsOrUpdatesANrtAlertRule.js.map

package/dist-esm/samples-dev/createsOrUpdatesANrtAlertRule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createsOrUpdatesANrtAlertRule.js","sourceRoot":"","sources":["../../samples-dev/createsOrUpdatesANrtAlertRule.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;;AAEH,uCAAuC;AACvC,kCAAkC;AAClC;;;;;GAKG;AACH,OAAO,EAAgB,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAC5E,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAEzD,SAAe,6BAA6B;;QAC1C,MAAM,cAAc,GAAG,sCAAsC,CAAC;QAC9D,MAAM,iBAAiB,GAAG,MAAM,CAAC;QACjC,MAAM,aAAa,GAAG,aAAa,CAAC;QACpC,MAAM,MAAM,GAAG,sCAAsC,CAAC;QACtD,MAAM,SAAS,GAAiB;YAC9B,WAAW,EAAE,EAAE;YACf,WAAW,EAAE,OAAO;YACpB,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,wCAAwC;YAC9C,qBAAqB,EAAE;gBACrB,cAAc,EAAE,IAAI;gBACpB,qBAAqB,EAAE;oBACrB,OAAO,EAAE,IAAI;oBACb,eAAe,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC;oBACpC,gBAAgB,EAAE,MAAM;oBACxB,cAAc,EAAE,UAAU;oBAC1B,oBAAoB,EAAE,KAAK;iBAC5B;aACF;YACD,IAAI,EAAE,KAAK;YACX,KAAK,EACH,mGAAmG;YACrG,QAAQ,EAAE,MAAM;YAChB,mBAAmB,EAAE,MAAM;YAC3B,kBAAkB,EAAE,KAAK;YACzB,OAAO,EAAE,CAAC,aAAa,EAAE,iBAAiB,CAAC;SAC5C,CAAC;QACF,MAAM,UAAU,GAAG,IAAI,sBAAsB,EAAE,CAAC;QAChD,MAAM,MAAM,GAAG,IAAI,gBAAgB,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;QAChE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,cAAc,CACnD,iBAAiB,EACjB,aAAa,EACb,MAAM,EACN,SAAS,CACV,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC;CAAA;AAED,6BAA6B,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC"}

package/dist-esm/samples-dev/createsOrUpdatesAScheduledAlertRule.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=createsOrUpdatesAScheduledAlertRule.d.ts.map

package/dist-esm/samples-dev/createsOrUpdatesAScheduledAlertRule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createsOrUpdatesAScheduledAlertRule.d.ts","sourceRoot":"","sources":["../../samples-dev/createsOrUpdatesAScheduledAlertRule.ts"],"names":[],"mappings":""}

package/dist-esm/samples-dev/createsOrUpdatesAScheduledAlertRule.js

@@ -0,0 +1,79 @@
+/*
+ * Copyright (c) Microsoft Corporation.
+ * Licensed under the MIT License.
+ *
+ * Code generated by Microsoft (R) AutoRest Code Generator.
+ * Changes may cause incorrect behavior and will be lost if the code is regenerated.
+ */
+import { __awaiter } from "tslib";
+// Copyright (c) Microsoft Corporation.
+// Licensed under the MIT License.
+/**
+ * This sample demonstrates how to Creates or updates the alert rule.
+ *
+ * @summary Creates or updates the alert rule.
+ * x-ms-original-file: specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2021-09-01-preview/examples/alertRules/CreateScheduledAlertRule.json
+ */
+import { SecurityInsights } from "@azure/arm-securityinsight";
+import { DefaultAzureCredential } from "@azure/identity";
+function createsOrUpdatesAScheduledAlertRule() {
+    return __awaiter(this, void 0, void 0, function* () {
+        const subscriptionId = "d0cfe6b2-9ac0-4464-9919-dccaee2e48c0";
+        const resourceGroupName = "myRg";
+        const workspaceName = "myWorkspace";
+        const ruleId = "73e01a99-5cd7-4139-a149-9f2736ff2ab5";
+        const alertRule = {
+            description: "An example for a scheduled rule",
+            alertDetailsOverride: {
+                alertDescriptionFormat: "Suspicious activity was made by {{ComputerIP}}",
+                alertDisplayNameFormat: "Alert from {{Computer}}"
+            },
+            customDetails: {
+                operatingSystemName: "OSName",
+                operatingSystemType: "OSType"
+            },
+            displayName: "My scheduled rule",
+            enabled: true,
+            entityMappings: [
+                {
+                    entityType: "Host",
+                    fieldMappings: [{ columnName: "Computer", identifier: "FullName" }]
+                },
+                {
+                    entityType: "IP",
+                    fieldMappings: [{ columnName: "ComputerIP", identifier: "Address" }]
+                }
+            ],
+            etag: '"0300bf09-0000-0000-0000-5c37296e0000"',
+            eventGroupingSettings: { aggregationKind: "AlertPerResult" },
+            incidentConfiguration: {
+                createIncident: true,
+                groupingConfiguration: {
+                    enabled: true,
+                    groupByAlertDetails: ["DisplayName"],
+                    groupByCustomDetails: ["OperatingSystemType", "OperatingSystemName"],
+                    groupByEntities: ["Host"],
+                    lookbackDuration: "PT5H",
+                    matchingMethod: "Selected",
+                    reopenClosedIncident: false
+                }
+            },
+            kind: "Scheduled",
+            query: "Heartbeat",
+            queryFrequency: "PT1H",
+            queryPeriod: "P2DT1H30M",
+            severity: "High",
+            suppressionDuration: "PT1H",
+            suppressionEnabled: false,
+            tactics: ["Persistence", "LateralMovement"],
+            triggerOperator: "GreaterThan",
+            triggerThreshold: 0
+        };
+        const credential = new DefaultAzureCredential();
+        const client = new SecurityInsights(credential, subscriptionId);
+        const result = yield client.alertRules.createOrUpdate(resourceGroupName, workspaceName, ruleId, alertRule);
+        console.log(result);
+    });
+}
+createsOrUpdatesAScheduledAlertRule().catch(console.error);
+//# sourceMappingURL=createsOrUpdatesAScheduledAlertRule.js.map

package/dist-esm/samples-dev/createsOrUpdatesAScheduledAlertRule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createsOrUpdatesAScheduledAlertRule.js","sourceRoot":"","sources":["../../samples-dev/createsOrUpdatesAScheduledAlertRule.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;;AAEH,uCAAuC;AACvC,kCAAkC;AAClC;;;;;GAKG;AACH,OAAO,EAEL,gBAAgB,EACjB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAEzD,SAAe,mCAAmC;;QAChD,MAAM,cAAc,GAAG,sCAAsC,CAAC;QAC9D,MAAM,iBAAiB,GAAG,MAAM,CAAC;QACjC,MAAM,aAAa,GAAG,aAAa,CAAC;QACpC,MAAM,MAAM,GAAG,sCAAsC,CAAC;QACtD,MAAM,SAAS,GAAuB;YACpC,WAAW,EAAE,iCAAiC;YAC9C,oBAAoB,EAAE;gBACpB,sBAAsB,EAAE,gDAAgD;gBACxE,sBAAsB,EAAE,yBAAyB;aAClD;YACD,aAAa,EAAE;gBACb,mBAAmB,EAAE,QAAQ;gBAC7B,mBAAmB,EAAE,QAAQ;aAC9B;YACD,WAAW,EAAE,mBAAmB;YAChC,OAAO,EAAE,IAAI;YACb,cAAc,EAAE;gBACd;oBACE,UAAU,EAAE,MAAM;oBAClB,aAAa,EAAE,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;iBACpE;gBACD;oBACE,UAAU,EAAE,IAAI;oBAChB,aAAa,EAAE,CAAC,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;iBACrE;aACF;YACD,IAAI,EAAE,wCAAwC;YAC9C,qBAAqB,EAAE,EAAE,eAAe,EAAE,gBAAgB,EAAE;YAC5D,qBAAqB,EAAE;gBACrB,cAAc,EAAE,IAAI;gBACpB,qBAAqB,EAAE;oBACrB,OAAO,EAAE,IAAI;oBACb,mBAAmB,EAAE,CAAC,aAAa,CAAC;oBACpC,oBAAoB,EAAE,CAAC,qBAAqB,EAAE,qBAAqB,CAAC;oBACpE,eAAe,EAAE,CAAC,MAAM,CAAC;oBACzB,gBAAgB,EAAE,MAAM;oBACxB,cAAc,EAAE,UAAU;oBAC1B,oBAAoB,EAAE,KAAK;iBAC5B;aACF;YACD,IAAI,EAAE,WAAW;YACjB,KAAK,EAAE,WAAW;YAClB,cAAc,EAAE,MAAM;YACtB,WAAW,EAAE,WAAW;YACxB,QAAQ,EAAE,MAAM;YAChB,mBAAmB,EAAE,MAAM;YAC3B,kBAAkB,EAAE,KAAK;YACzB,OAAO,EAAE,CAAC,aAAa,EAAE,iBAAiB,CAAC;YAC3C,eAAe,EAAE,aAAa;YAC9B,gBAAgB,EAAE,CAAC;SACpB,CAAC;QACF,MAAM,UAAU,GAAG,IAAI,sBAAsB,EAAE,CAAC;QAChD,MAAM,MAAM,GAAG,IAAI,gBAAgB,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;QAChE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,cAAc,CACnD,iBAAiB,EACjB,aAAa,EACb,MAAM,EACN,SAAS,CACV,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC;CAAA;AAED,mCAAmC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC"}

package/dist-esm/samples-dev/createsOrUpdatesAThreatIntelligenceTaxiiDataConnector.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=createsOrUpdatesAThreatIntelligenceTaxiiDataConnector.d.ts.map

package/dist-esm/samples-dev/createsOrUpdatesAThreatIntelligenceTaxiiDataConnector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createsOrUpdatesAThreatIntelligenceTaxiiDataConnector.d.ts","sourceRoot":"","sources":["../../samples-dev/createsOrUpdatesAThreatIntelligenceTaxiiDataConnector.ts"],"names":[],"mappings":""}

package/dist-esm/samples-dev/createsOrUpdatesAThreatIntelligenceTaxiiDataConnector.js

@@ -0,0 +1,46 @@
+/*
+ * Copyright (c) Microsoft Corporation.
+ * Licensed under the MIT License.
+ *
+ * Code generated by Microsoft (R) AutoRest Code Generator.
+ * Changes may cause incorrect behavior and will be lost if the code is regenerated.
+ */
+import { __awaiter } from "tslib";
+// Copyright (c) Microsoft Corporation.
+// Licensed under the MIT License.
+/**
+ * This sample demonstrates how to Creates or updates the data connector.
+ *
+ * @summary Creates or updates the data connector.
+ * x-ms-original-file: specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2021-09-01-preview/examples/dataConnectors/CreateThreatIntelligenceTaxiiDataConnector.json
+ */
+import { SecurityInsights } from "@azure/arm-securityinsight";
+import { DefaultAzureCredential } from "@azure/identity";
+function createsOrUpdatesAThreatIntelligenceTaxiiDataConnector() {
+    return __awaiter(this, void 0, void 0, function* () {
+        const subscriptionId = "d0cfe6b2-9ac0-4464-9919-dccaee2e48c0";
+        const resourceGroupName = "myRg";
+        const workspaceName = "myWorkspace";
+        const dataConnectorId = "73e01a99-5cd7-4139-a149-9f2736ff2ab5";
+        const dataConnector = {
+            collectionId: "135",
+            dataTypes: { taxiiClient: { state: "Enabled" } },
+            etag: "d12423f6-a60b-4ca5-88c0-feb1a182d0f0",
+            friendlyName: "testTaxii",
+            kind: "ThreatIntelligenceTaxii",
+            password: "--",
+            pollingFrequency: "OnceADay",
+            taxiiLookbackPeriod: new Date("2020-01-01T13:00:30.123Z"),
+            taxiiServer: "https://limo.anomali.com/api/v1/taxii2/feeds",
+            tenantId: "06b3ccb8-1384-4bcc-aec7-852f6d57161b",
+            userName: "--",
+            workspaceId: "dd124572-4962-4495-9bd2-9dade12314b4"
+        };
+        const credential = new DefaultAzureCredential();
+        const client = new SecurityInsights(credential, subscriptionId);
+        const result = yield client.dataConnectors.createOrUpdate(resourceGroupName, workspaceName, dataConnectorId, dataConnector);
+        console.log(result);
+    });
+}
+createsOrUpdatesAThreatIntelligenceTaxiiDataConnector().catch(console.error);
+//# sourceMappingURL=createsOrUpdatesAThreatIntelligenceTaxiiDataConnector.js.map

package/dist-esm/samples-dev/createsOrUpdatesAThreatIntelligenceTaxiiDataConnector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createsOrUpdatesAThreatIntelligenceTaxiiDataConnector.js","sourceRoot":"","sources":["../../samples-dev/createsOrUpdatesAThreatIntelligenceTaxiiDataConnector.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;;AAEH,uCAAuC;AACvC,kCAAkC;AAClC;;;;;GAKG;AACH,OAAO,EAEL,gBAAgB,EACjB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAEzD,SAAe,qDAAqD;;QAClE,MAAM,cAAc,GAAG,sCAAsC,CAAC;QAC9D,MAAM,iBAAiB,GAAG,MAAM,CAAC;QACjC,MAAM,aAAa,GAAG,aAAa,CAAC;QACpC,MAAM,eAAe,GAAG,sCAAsC,CAAC;QAC/D,MAAM,aAAa,GAAyB;YAC1C,YAAY,EAAE,KAAK;YACnB,SAAS,EAAE,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE;YAChD,IAAI,EAAE,sCAAsC;YAC5C,YAAY,EAAE,WAAW;YACzB,IAAI,EAAE,yBAAyB;YAC/B,QAAQ,EAAE,IAAI;YACd,gBAAgB,EAAE,UAAU;YAC5B,mBAAmB,EAAE,IAAI,IAAI,CAAC,0BAA0B,CAAC;YACzD,WAAW,EAAE,8CAA8C;YAC3D,QAAQ,EAAE,sCAAsC;YAChD,QAAQ,EAAE,IAAI;YACd,WAAW,EAAE,sCAAsC;SACpD,CAAC;QACF,MAAM,UAAU,GAAG,IAAI,sBAAsB,EAAE,CAAC;QAChD,MAAM,MAAM,GAAG,IAAI,gBAAgB,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;QAChE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,cAAc,CACvD,iBAAiB,EACjB,aAAa,EACb,eAAe,EACf,aAAa,CACd,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC;CAAA;AAED,qDAAqD,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC"}

package/dist-esm/samples-dev/createsOrUpdatesAWatchlist.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=createsOrUpdatesAWatchlist.d.ts.map

package/dist-esm/samples-dev/createsOrUpdatesAWatchlist.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createsOrUpdatesAWatchlist.d.ts","sourceRoot":"","sources":["../../samples-dev/createsOrUpdatesAWatchlist.ts"],"names":[],"mappings":""}

package/dist-esm/samples-dev/createsOrUpdatesAWatchlist.js

@@ -0,0 +1,40 @@
+/*
+ * Copyright (c) Microsoft Corporation.
+ * Licensed under the MIT License.
+ *
+ * Code generated by Microsoft (R) AutoRest Code Generator.
+ * Changes may cause incorrect behavior and will be lost if the code is regenerated.
+ */
+import { __awaiter } from "tslib";
+// Copyright (c) Microsoft Corporation.
+// Licensed under the MIT License.
+/**
+ * This sample demonstrates how to Creates or updates a watchlist and its watchlist items (bulk creation, e.g. through text/csv content type). To create a Watchlist and its items, we should call this endpoint with rawContent and contentType properties.
+ *
+ * @summary Creates or updates a watchlist and its watchlist items (bulk creation, e.g. through text/csv content type). To create a Watchlist and its items, we should call this endpoint with rawContent and contentType properties.
+ * x-ms-original-file: specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2021-09-01-preview/examples/watchlists/CreateWatchlist.json
+ */
+import { SecurityInsights } from "@azure/arm-securityinsight";
+import { DefaultAzureCredential } from "@azure/identity";
+function createsOrUpdatesAWatchlist() {
+    return __awaiter(this, void 0, void 0, function* () {
+        const subscriptionId = "d0cfe6b2-9ac0-4464-9919-dccaee2e48c0";
+        const resourceGroupName = "myRg";
+        const workspaceName = "myWorkspace";
+        const watchlistAlias = "highValueAsset";
+        const watchlist = {
+            description: "Watchlist from CSV content",
+            displayName: "High Value Assets Watchlist",
+            etag: '"0300bf09-0000-0000-0000-5c37296e0000"',
+            itemsSearchKey: "header1",
+            provider: "Microsoft",
+            source: "Local file"
+        };
+        const credential = new DefaultAzureCredential();
+        const client = new SecurityInsights(credential, subscriptionId);
+        const result = yield client.watchlists.createOrUpdate(resourceGroupName, workspaceName, watchlistAlias, watchlist);
+        console.log(result);
+    });
+}
+createsOrUpdatesAWatchlist().catch(console.error);
+//# sourceMappingURL=createsOrUpdatesAWatchlist.js.map

package/dist-esm/samples-dev/createsOrUpdatesAWatchlist.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createsOrUpdatesAWatchlist.js","sourceRoot":"","sources":["../../samples-dev/createsOrUpdatesAWatchlist.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;;AAEH,uCAAuC;AACvC,kCAAkC;AAClC;;;;;GAKG;AACH,OAAO,EAAa,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AACzE,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAEzD,SAAe,0BAA0B;;QACvC,MAAM,cAAc,GAAG,sCAAsC,CAAC;QAC9D,MAAM,iBAAiB,GAAG,MAAM,CAAC;QACjC,MAAM,aAAa,GAAG,aAAa,CAAC;QACpC,MAAM,cAAc,GAAG,gBAAgB,CAAC;QACxC,MAAM,SAAS,GAAc;YAC3B,WAAW,EAAE,4BAA4B;YACzC,WAAW,EAAE,6BAA6B;YAC1C,IAAI,EAAE,wCAAwC;YAC9C,cAAc,EAAE,SAAS;YACzB,QAAQ,EAAE,WAAW;YACrB,MAAM,EAAE,YAAY;SACrB,CAAC;QACF,MAAM,UAAU,GAAG,IAAI,sBAAsB,EAAE,CAAC;QAChD,MAAM,MAAM,GAAG,IAAI,gBAAgB,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;QAChE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,cAAc,CACnD,iBAAiB,EACjB,aAAa,EACb,cAAc,EACd,SAAS,CACV,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC;CAAA;AAED,0BAA0B,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC"}

package/dist-esm/samples-dev/createsOrUpdatesAWatchlistAndBulkCreatesWatchlistItems.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=createsOrUpdatesAWatchlistAndBulkCreatesWatchlistItems.d.ts.map

package/dist-esm/samples-dev/createsOrUpdatesAWatchlistAndBulkCreatesWatchlistItems.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createsOrUpdatesAWatchlistAndBulkCreatesWatchlistItems.d.ts","sourceRoot":"","sources":["../../samples-dev/createsOrUpdatesAWatchlistAndBulkCreatesWatchlistItems.ts"],"names":[],"mappings":""}

package/dist-esm/samples-dev/createsOrUpdatesAWatchlistAndBulkCreatesWatchlistItems.js

@@ -0,0 +1,43 @@
+/*
+ * Copyright (c) Microsoft Corporation.
+ * Licensed under the MIT License.
+ *
+ * Code generated by Microsoft (R) AutoRest Code Generator.
+ * Changes may cause incorrect behavior and will be lost if the code is regenerated.
+ */
+import { __awaiter } from "tslib";
+// Copyright (c) Microsoft Corporation.
+// Licensed under the MIT License.
+/**
+ * This sample demonstrates how to Creates or updates a watchlist and its watchlist items (bulk creation, e.g. through text/csv content type). To create a Watchlist and its items, we should call this endpoint with rawContent and contentType properties.
+ *
+ * @summary Creates or updates a watchlist and its watchlist items (bulk creation, e.g. through text/csv content type). To create a Watchlist and its items, we should call this endpoint with rawContent and contentType properties.
+ * x-ms-original-file: specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2021-09-01-preview/examples/watchlists/CreateWatchlistAndWatchlistItems.json
+ */
+import { SecurityInsights } from "@azure/arm-securityinsight";
+import { DefaultAzureCredential } from "@azure/identity";
+function createsOrUpdatesAWatchlistAndBulkCreatesWatchlistItems() {
+    return __awaiter(this, void 0, void 0, function* () {
+        const subscriptionId = "d0cfe6b2-9ac0-4464-9919-dccaee2e48c0";
+        const resourceGroupName = "myRg";
+        const workspaceName = "myWorkspace";
+        const watchlistAlias = "highValueAsset";
+        const watchlist = {
+            description: "Watchlist from CSV content",
+            contentType: "text/csv",
+            displayName: "High Value Assets Watchlist",
+            etag: '"0300bf09-0000-0000-0000-5c37296e0000"',
+            itemsSearchKey: "header1",
+            numberOfLinesToSkip: 1,
+            provider: "Microsoft",
+            rawContent: "This line will be skipped\nheader1,header2\nvalue1,value2",
+            source: "Local file"
+        };
+        const credential = new DefaultAzureCredential();
+        const client = new SecurityInsights(credential, subscriptionId);
+        const result = yield client.watchlists.createOrUpdate(resourceGroupName, workspaceName, watchlistAlias, watchlist);
+        console.log(result);
+    });
+}
+createsOrUpdatesAWatchlistAndBulkCreatesWatchlistItems().catch(console.error);
+//# sourceMappingURL=createsOrUpdatesAWatchlistAndBulkCreatesWatchlistItems.js.map

package/dist-esm/samples-dev/createsOrUpdatesAWatchlistAndBulkCreatesWatchlistItems.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createsOrUpdatesAWatchlistAndBulkCreatesWatchlistItems.js","sourceRoot":"","sources":["../../samples-dev/createsOrUpdatesAWatchlistAndBulkCreatesWatchlistItems.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;;AAEH,uCAAuC;AACvC,kCAAkC;AAClC;;;;;GAKG;AACH,OAAO,EAAa,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AACzE,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAEzD,SAAe,sDAAsD;;QACnE,MAAM,cAAc,GAAG,sCAAsC,CAAC;QAC9D,MAAM,iBAAiB,GAAG,MAAM,CAAC;QACjC,MAAM,aAAa,GAAG,aAAa,CAAC;QACpC,MAAM,cAAc,GAAG,gBAAgB,CAAC;QACxC,MAAM,SAAS,GAAc;YAC3B,WAAW,EAAE,4BAA4B;YACzC,WAAW,EAAE,UAAU;YACvB,WAAW,EAAE,6BAA6B;YAC1C,IAAI,EAAE,wCAAwC;YAC9C,cAAc,EAAE,SAAS;YACzB,mBAAmB,EAAE,CAAC;YACtB,QAAQ,EAAE,WAAW;YACrB,UAAU,EAAE,2DAA2D;YACvE,MAAM,EAAE,YAAY;SACrB,CAAC;QACF,MAAM,UAAU,GAAG,IAAI,sBAAsB,EAAE,CAAC;QAChD,MAAM,MAAM,GAAG,IAAI,gBAAgB,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;QAChE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,cAAc,CACnD,iBAAiB,EACjB,aAAa,EACb,cAAc,EACd,SAAS,CACV,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC;CAAA;AAED,sDAAsD,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC"}

package/dist-esm/samples-dev/createsOrUpdatesAWatchlistItem.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=createsOrUpdatesAWatchlistItem.d.ts.map

package/dist-esm/samples-dev/createsOrUpdatesAWatchlistItem.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createsOrUpdatesAWatchlistItem.d.ts","sourceRoot":"","sources":["../../samples-dev/createsOrUpdatesAWatchlistItem.ts"],"names":[],"mappings":""}

package/dist-esm/samples-dev/createsOrUpdatesAWatchlistItem.js

@@ -0,0 +1,44 @@
+/*
+ * Copyright (c) Microsoft Corporation.
+ * Licensed under the MIT License.
+ *
+ * Code generated by Microsoft (R) AutoRest Code Generator.
+ * Changes may cause incorrect behavior and will be lost if the code is regenerated.
+ */
+import { __awaiter } from "tslib";
+// Copyright (c) Microsoft Corporation.
+// Licensed under the MIT License.
+/**
+ * This sample demonstrates how to Creates or updates a watchlist item.
+ *
+ * @summary Creates or updates a watchlist item.
+ * x-ms-original-file: specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2021-09-01-preview/examples/watchlists/CreateWatchlistItem.json
+ */
+import { SecurityInsights } from "@azure/arm-securityinsight";
+import { DefaultAzureCredential } from "@azure/identity";
+function createsOrUpdatesAWatchlistItem() {
+    return __awaiter(this, void 0, void 0, function* () {
+        const subscriptionId = "d0cfe6b2-9ac0-4464-9919-dccaee2e48c0";
+        const resourceGroupName = "myRg";
+        const workspaceName = "myWorkspace";
+        const watchlistAlias = "highValueAsset";
+        const watchlistItemId = "82ba292c-dc97-4dfc-969d-d4dd9e666842";
+        const watchlistItem = {
+            etag: "0300bf09-0000-0000-0000-5c37296e0000",
+            itemsKeyValue: {
+                "Business tier": "10.0.2.0/24",
+                "Data tier": "10.0.2.0/24",
+                "Gateway subnet": "10.0.255.224/27",
+                "Private DMZ in": "10.0.0.0/27",
+                "Public DMZ out": "10.0.0.96/27",
+                "Web Tier": "10.0.1.0/24"
+            }
+        };
+        const credential = new DefaultAzureCredential();
+        const client = new SecurityInsights(credential, subscriptionId);
+        const result = yield client.watchlistItems.createOrUpdate(resourceGroupName, workspaceName, watchlistAlias, watchlistItemId, watchlistItem);
+        console.log(result);
+    });
+}
+createsOrUpdatesAWatchlistItem().catch(console.error);
+//# sourceMappingURL=createsOrUpdatesAWatchlistItem.js.map

package/dist-esm/samples-dev/createsOrUpdatesAWatchlistItem.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createsOrUpdatesAWatchlistItem.js","sourceRoot":"","sources":["../../samples-dev/createsOrUpdatesAWatchlistItem.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;;AAEH,uCAAuC;AACvC,kCAAkC;AAClC;;;;;GAKG;AACH,OAAO,EAAiB,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAC7E,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAEzD,SAAe,8BAA8B;;QAC3C,MAAM,cAAc,GAAG,sCAAsC,CAAC;QAC9D,MAAM,iBAAiB,GAAG,MAAM,CAAC;QACjC,MAAM,aAAa,GAAG,aAAa,CAAC;QACpC,MAAM,cAAc,GAAG,gBAAgB,CAAC;QACxC,MAAM,eAAe,GAAG,sCAAsC,CAAC;QAC/D,MAAM,aAAa,GAAkB;YACnC,IAAI,EAAE,sCAAsC;YAC5C,aAAa,EAAE;gBACb,eAAe,EAAE,aAAa;gBAC9B,WAAW,EAAE,aAAa;gBAC1B,gBAAgB,EAAE,iBAAiB;gBACnC,gBAAgB,EAAE,aAAa;gBAC/B,gBAAgB,EAAE,cAAc;gBAChC,UAAU,EAAE,aAAa;aAC1B;SACF,CAAC;QACF,MAAM,UAAU,GAAG,IAAI,sBAAsB,EAAE,CAAC;QAChD,MAAM,MAAM,GAAG,IAAI,gBAAgB,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;QAChE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,cAAc,CACvD,iBAAiB,EACjB,aAAa,EACb,cAAc,EACd,eAAe,EACf,aAAa,CACd,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC;CAAA;AAED,8BAA8B,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC"}

package/dist-esm/samples-dev/createsOrUpdatesAnActionOfAlertRule.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=createsOrUpdatesAnActionOfAlertRule.d.ts.map

package/dist-esm/samples-dev/createsOrUpdatesAnActionOfAlertRule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createsOrUpdatesAnActionOfAlertRule.d.ts","sourceRoot":"","sources":["../../samples-dev/createsOrUpdatesAnActionOfAlertRule.ts"],"names":[],"mappings":""}

package/dist-esm/samples-dev/createsOrUpdatesAnActionOfAlertRule.js

@@ -0,0 +1,38 @@
+/*
+ * Copyright (c) Microsoft Corporation.
+ * Licensed under the MIT License.
+ *
+ * Code generated by Microsoft (R) AutoRest Code Generator.
+ * Changes may cause incorrect behavior and will be lost if the code is regenerated.
+ */
+import { __awaiter } from "tslib";
+// Copyright (c) Microsoft Corporation.
+// Licensed under the MIT License.
+/**
+ * This sample demonstrates how to Creates or updates the action of alert rule.
+ *
+ * @summary Creates or updates the action of alert rule.
+ * x-ms-original-file: specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2021-09-01-preview/examples/actions/CreateActionOfAlertRule.json
+ */
+import { SecurityInsights } from "@azure/arm-securityinsight";
+import { DefaultAzureCredential } from "@azure/identity";
+function createsOrUpdatesAnActionOfAlertRule() {
+    return __awaiter(this, void 0, void 0, function* () {
+        const subscriptionId = "d0cfe6b2-9ac0-4464-9919-dccaee2e48c0";
+        const resourceGroupName = "myRg";
+        const workspaceName = "myWorkspace";
+        const ruleId = "73e01a99-5cd7-4139-a149-9f2736ff2ab5";
+        const actionId = "912bec42-cb66-4c03-ac63-1761b6898c3e";
+        const action = {
+            etag: '"0300bf09-0000-0000-0000-5c37296e0000"',
+            logicAppResourceId: "/subscriptions/d0cfe6b2-9ac0-4464-9919-dccaee2e48c0/resourceGroups/myRg/providers/Microsoft.Logic/workflows/MyAlerts",
+            triggerUri: "https://prod-31.northcentralus.logic.azure.com:443/workflows/cd3765391efd48549fd7681ded1d48d7/triggers/manual/paths/invoke?api-version=2016-10-01&sp=%2Ftriggers%2Fmanual%2Frun&sv=1.0&sig=signature"
+        };
+        const credential = new DefaultAzureCredential();
+        const client = new SecurityInsights(credential, subscriptionId);
+        const result = yield client.actions.createOrUpdate(resourceGroupName, workspaceName, ruleId, actionId, action);
+        console.log(result);
+    });
+}
+createsOrUpdatesAnActionOfAlertRule().catch(console.error);
+//# sourceMappingURL=createsOrUpdatesAnActionOfAlertRule.js.map

package/dist-esm/samples-dev/createsOrUpdatesAnActionOfAlertRule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createsOrUpdatesAnActionOfAlertRule.js","sourceRoot":"","sources":["../../samples-dev/createsOrUpdatesAnActionOfAlertRule.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;;AAEH,uCAAuC;AACvC,kCAAkC;AAClC;;;;;GAKG;AACH,OAAO,EAAiB,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAC7E,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAEzD,SAAe,mCAAmC;;QAChD,MAAM,cAAc,GAAG,sCAAsC,CAAC;QAC9D,MAAM,iBAAiB,GAAG,MAAM,CAAC;QACjC,MAAM,aAAa,GAAG,aAAa,CAAC;QACpC,MAAM,MAAM,GAAG,sCAAsC,CAAC;QACtD,MAAM,QAAQ,GAAG,sCAAsC,CAAC;QACxD,MAAM,MAAM,GAAkB;YAC5B,IAAI,EAAE,wCAAwC;YAC9C,kBAAkB,EAChB,sHAAsH;YACxH,UAAU,EACR,sMAAsM;SACzM,CAAC;QACF,MAAM,UAAU,GAAG,IAAI,sBAAsB,EAAE,CAAC;QAChD,MAAM,MAAM,GAAG,IAAI,gBAAgB,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;QAChE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,cAAc,CAChD,iBAAiB,EACjB,aAAa,EACb,MAAM,EACN,QAAQ,EACR,MAAM,CACP,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC;CAAA;AAED,mCAAmC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC"}

package/dist-esm/samples-dev/createsOrUpdatesAnActivityEntityQuery.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=createsOrUpdatesAnActivityEntityQuery.d.ts.map

package/dist-esm/samples-dev/createsOrUpdatesAnActivityEntityQuery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createsOrUpdatesAnActivityEntityQuery.d.ts","sourceRoot":"","sources":["../../samples-dev/createsOrUpdatesAnActivityEntityQuery.ts"],"names":[],"mappings":""}

package/dist-esm/samples-dev/createsOrUpdatesAnActivityEntityQuery.js

@@ -0,0 +1,52 @@
+/*
+ * Copyright (c) Microsoft Corporation.
+ * Licensed under the MIT License.
+ *
+ * Code generated by Microsoft (R) AutoRest Code Generator.
+ * Changes may cause incorrect behavior and will be lost if the code is regenerated.
+ */
+import { __awaiter } from "tslib";
+// Copyright (c) Microsoft Corporation.
+// Licensed under the MIT License.
+/**
+ * This sample demonstrates how to Creates or updates the entity query.
+ *
+ * @summary Creates or updates the entity query.
+ * x-ms-original-file: specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2021-09-01-preview/examples/entityQueries/CreateEntityQueryActivity.json
+ */
+import { SecurityInsights } from "@azure/arm-securityinsight";
+import { DefaultAzureCredential } from "@azure/identity";
+function createsOrUpdatesAnActivityEntityQuery() {
+    return __awaiter(this, void 0, void 0, function* () {
+        const subscriptionId = "d0cfe6b2-9ac0-4464-9919-dccaee2e48c0";
+        const resourceGroupName = "myRg";
+        const workspaceName = "myWorkspace";
+        const entityQueryId = "07da3cc8-c8ad-4710-a44e-334cdcb7882b";
+        const entityQuery = {
+            description: "Account deleted on host",
+            content: "On '{{Computer}}' the account '{{TargetAccount}}' was deleted by '{{AddedBy}}'",
+            enabled: true,
+            entitiesFilter: { hostOsFamily: ["Windows"] },
+            etag: '"0300bf09-0000-0000-0000-5c37296e0000"',
+            inputEntityType: "Host",
+            kind: "Activity",
+            queryDefinitions: {
+                query: "let GetAccountActions = (v_Host_Name:string, v_Host_NTDomain:string, v_Host_DnsDomain:string, v_Host_AzureID:string, v_Host_OMSAgentID:string){\nSecurityEvent\n| where EventID in (4725, 4726, 4767, 4720, 4722, 4723, 4724)\n// parsing for Host to handle variety of conventions coming from data\n| extend Host_HostName = case(\nComputer has '@', tostring(split(Computer, '@')[0]),\nComputer has '\\', tostring(split(Computer, '\\')[1]),\nComputer has '.', tostring(split(Computer, '.')[0]),\nComputer\n)\n| extend Host_NTDomain = case(\nComputer has '\\', tostring(split(Computer, '\\')[0]), \nComputer has '.', tostring(split(Computer, '.')[-2]), \nComputer\n)\n| extend Host_DnsDomain = case(\nComputer has '\\', tostring(split(Computer, '\\')[0]), \nComputer has '.', strcat_array(array_slice(split(Computer,'.'),-2,-1),'.'), \nComputer\n)\n| where (Host_HostName =~ v_Host_Name and Host_NTDomain =~ v_Host_NTDomain) \nor (Host_HostName =~ v_Host_Name and Host_DnsDomain =~ v_Host_DnsDomain) \nor v_Host_AzureID =~ _ResourceId \nor v_Host_OMSAgentID == SourceComputerId\n| project TimeGenerated, EventID, Activity, Computer, TargetAccount, TargetUserName, TargetDomainName, TargetSid, SubjectUserName, SubjectUserSid, _ResourceId, SourceComputerId\n| extend AddedBy = SubjectUserName\n// Future support for Activities\n| extend timestamp = TimeGenerated, HostCustomEntity = Computer, AccountCustomEntity = TargetAccount\n};\nGetAccountActions('{{Host_HostName}}', '{{Host_NTDomain}}', '{{Host_DnsDomain}}', '{{Host_AzureID}}', '{{Host_OMSAgentID}}')\n \n| where EventID == 4726 "
+            },
+            requiredInputFieldsSets: [
+                ["Host_HostName", "Host_NTDomain"],
+                ["Host_HostName", "Host_DnsDomain"],
+                ["Host_AzureID"],
+                ["Host_OMSAgentID"]
+            ],
+            templateName: undefined,
+            title: "An account was deleted on this host"
+        };
+        const credential = new DefaultAzureCredential();
+        const client = new SecurityInsights(credential, subscriptionId);
+        const result = yield client.entityQueries.createOrUpdate(resourceGroupName, workspaceName, entityQueryId, entityQuery);
+        console.log(result);
+    });
+}
+createsOrUpdatesAnActivityEntityQuery().catch(console.error);
+//# sourceMappingURL=createsOrUpdatesAnActivityEntityQuery.js.map

package/dist-esm/samples-dev/createsOrUpdatesAnActivityEntityQuery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createsOrUpdatesAnActivityEntityQuery.js","sourceRoot":"","sources":["../../samples-dev/createsOrUpdatesAnActivityEntityQuery.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;;AAEH,uCAAuC;AACvC,kCAAkC;AAClC;;;;;GAKG;AACH,OAAO,EAEL,gBAAgB,EACjB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAEzD,SAAe,qCAAqC;;QAClD,MAAM,cAAc,GAAG,sCAAsC,CAAC;QAC9D,MAAM,iBAAiB,GAAG,MAAM,CAAC;QACjC,MAAM,aAAa,GAAG,aAAa,CAAC;QACpC,MAAM,aAAa,GAAG,sCAAsC,CAAC;QAC7D,MAAM,WAAW,GAA8B;YAC7C,WAAW,EAAE,yBAAyB;YACtC,OAAO,EACL,gFAAgF;YAClF,OAAO,EAAE,IAAI;YACb,cAAc,EAAE,EAAE,YAAY,EAAE,CAAC,SAAS,CAAC,EAAE;YAC7C,IAAI,EAAE,wCAAwC;YAC9C,eAAe,EAAE,MAAM;YACvB,IAAI,EAAE,UAAU;YAChB,gBAAgB,EAAE;gBAChB,KAAK,EACH,6iDAA6iD;aAChjD;YACD,uBAAuB,EAAE;gBACvB,CAAC,eAAe,EAAE,eAAe,CAAC;gBAClC,CAAC,eAAe,EAAE,gBAAgB,CAAC;gBACnC,CAAC,cAAc,CAAC;gBAChB,CAAC,iBAAiB,CAAC;aACpB;YACD,YAAY,EAAE,SAAS;YACvB,KAAK,EAAE,qCAAqC;SAC7C,CAAC;QACF,MAAM,UAAU,GAAG,IAAI,sBAAsB,EAAE,CAAC;QAChD,MAAM,MAAM,GAAG,IAAI,gBAAgB,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;QAChE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,cAAc,CACtD,iBAAiB,EACjB,aAAa,EACb,aAAa,EACb,WAAW,CACZ,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC;CAAA;AAED,qCAAqC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC"}

package/dist-esm/samples-dev/createsOrUpdatesAnAutomationRule.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=createsOrUpdatesAnAutomationRule.d.ts.map

package/dist-esm/samples-dev/createsOrUpdatesAnAutomationRule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createsOrUpdatesAnAutomationRule.d.ts","sourceRoot":"","sources":["../../samples-dev/createsOrUpdatesAnAutomationRule.ts"],"names":[],"mappings":""}

package/dist-esm/samples-dev/createsOrUpdatesAnAutomationRule.js

@@ -0,0 +1,70 @@
+/*
+ * Copyright (c) Microsoft Corporation.
+ * Licensed under the MIT License.
+ *
+ * Code generated by Microsoft (R) AutoRest Code Generator.
+ * Changes may cause incorrect behavior and will be lost if the code is regenerated.
+ */
+import { __awaiter } from "tslib";
+// Copyright (c) Microsoft Corporation.
+// Licensed under the MIT License.
+/**
+ * This sample demonstrates how to Creates or updates the automation rule.
+ *
+ * @summary Creates or updates the automation rule.
+ * x-ms-original-file: specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2021-09-01-preview/examples/automationRules/CreateAutomationRule.json
+ */
+import { SecurityInsights } from "@azure/arm-securityinsight";
+import { DefaultAzureCredential } from "@azure/identity";
+function createsOrUpdatesAnAutomationRule() {
+    return __awaiter(this, void 0, void 0, function* () {
+        const subscriptionId = "d0cfe6b2-9ac0-4464-9919-dccaee2e48c0";
+        const resourceGroupName = "myRg";
+        const workspaceName = "myWorkspace";
+        const automationRuleId = "73e01a99-5cd7-4139-a149-9f2736ff2ab5";
+        const automationRule = {
+            actions: [
+                {
+                    actionConfiguration: { severity: "High" },
+                    actionType: "ModifyProperties",
+                    order: 1
+                },
+                {
+                    actionConfiguration: {
+                        logicAppResourceId: "/subscriptions/d0cfe6b2-9ac0-4464-9919-dccaee2e48c0/resourceGroups/myRg/providers/Microsoft.Logic/workflows/IncidentPlaybook",
+                        tenantId: "ee48efaf-50c6-411b-9345-b2bdc3eb4abc"
+                    },
+                    actionType: "RunPlaybook",
+                    order: 2
+                }
+            ],
+            displayName: "High severity incidents escalation",
+            etag: '"0300bf09-0000-0000-0000-5c37296e0000"',
+            order: 1,
+            triggeringLogic: {
+                conditions: [
+                    {
+                        conditionProperties: {
+                            operator: "Contains",
+                            propertyName: "IncidentRelatedAnalyticRuleIds",
+                            propertyValues: [
+                                "/subscriptions/d0cfe6b2-9ac0-4464-9919-dccaee2e48c0/resourceGroups/myRg/providers/Microsoft.OperationalInsights/workspaces/myWorkspace/providers/Microsoft.SecurityInsights/alertRules/fab3d2d4-747f-46a7-8ef0-9c0be8112bf7",
+                                "/subscriptions/d0cfe6b2-9ac0-4464-9919-dccaee2e48c0/resourceGroups/myRg/providers/Microsoft.OperationalInsights/workspaces/myWorkspace/providers/Microsoft.SecurityInsights/alertRules/8deb8303-e94d-46ff-96e0-5fd94b33df1a"
+                            ]
+                        },
+                        conditionType: "Property"
+                    }
+                ],
+                isEnabled: true,
+                triggersOn: "Incidents",
+                triggersWhen: "Created"
+            }
+        };
+        const credential = new DefaultAzureCredential();
+        const client = new SecurityInsights(credential, subscriptionId);
+        const result = yield client.automationRules.createOrUpdate(resourceGroupName, workspaceName, automationRuleId, { automationRuleToUpsert: automationRule });
+        console.log(result);
+    });
+}
+createsOrUpdatesAnAutomationRule().catch(console.error);
+//# sourceMappingURL=createsOrUpdatesAnAutomationRule.js.map

package/dist-esm/samples-dev/createsOrUpdatesAnAutomationRule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createsOrUpdatesAnAutomationRule.js","sourceRoot":"","sources":["../../samples-dev/createsOrUpdatesAnAutomationRule.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;;AAEH,uCAAuC;AACvC,kCAAkC;AAClC;;;;;GAKG;AACH,OAAO,EAAkB,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAC9E,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAEzD,SAAe,gCAAgC;;QAC7C,MAAM,cAAc,GAAG,sCAAsC,CAAC;QAC9D,MAAM,iBAAiB,GAAG,MAAM,CAAC;QACjC,MAAM,aAAa,GAAG,aAAa,CAAC;QACpC,MAAM,gBAAgB,GAAG,sCAAsC,CAAC;QAChE,MAAM,cAAc,GAAmB;YACrC,OAAO,EAAE;gBACP;oBACE,mBAAmB,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE;oBACzC,UAAU,EAAE,kBAAkB;oBAC9B,KAAK,EAAE,CAAC;iBACT;gBACD;oBACE,mBAAmB,EAAE;wBACnB,kBAAkB,EAChB,8HAA8H;wBAChI,QAAQ,EAAE,sCAAsC;qBACjD;oBACD,UAAU,EAAE,aAAa;oBACzB,KAAK,EAAE,CAAC;iBACT;aACF;YACD,WAAW,EAAE,oCAAoC;YACjD,IAAI,EAAE,wCAAwC;YAC9C,KAAK,EAAE,CAAC;YACR,eAAe,EAAE;gBACf,UAAU,EAAE;oBACV;wBACE,mBAAmB,EAAE;4BACnB,QAAQ,EAAE,UAAU;4BACpB,YAAY,EAAE,gCAAgC;4BAC9C,cAAc,EAAE;gCACd,6NAA6N;gCAC7N,6NAA6N;6BAC9N;yBACF;wBACD,aAAa,EAAE,UAAU;qBAC1B;iBACF;gBACD,SAAS,EAAE,IAAI;gBACf,UAAU,EAAE,WAAW;gBACvB,YAAY,EAAE,SAAS;aACxB;SACF,CAAC;QACF,MAAM,UAAU,GAAG,IAAI,sBAAsB,EAAE,CAAC;QAChD,MAAM,MAAM,GAAG,IAAI,gBAAgB,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;QAChE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,cAAc,CACxD,iBAAiB,EACjB,aAAa,EACb,gBAAgB,EAChB,EAAE,sBAAsB,EAAE,cAAc,EAAE,CAC3C,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC;CAAA;AAED,gCAAgC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC"}

package/dist-esm/samples-dev/createsOrUpdatesAnIncident.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=createsOrUpdatesAnIncident.d.ts.map

package/dist-esm/samples-dev/createsOrUpdatesAnIncident.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createsOrUpdatesAnIncident.d.ts","sourceRoot":"","sources":["../../samples-dev/createsOrUpdatesAnIncident.ts"],"names":[],"mappings":""}