@azure/arm-securityinsight 1.0.0-beta.1 → 1.0.0-beta.2

package/dist-esm/src/models/index.d.ts

@@ -1,18 +1,18 @@
 import * as coreClient from "@azure/core-client";
-export declare type AutomationRuleConditionUnion = AutomationRuleCondition | AutomationRulePropertyValuesCondition;
-export declare type AutomationRuleActionUnion = AutomationRuleAction | AutomationRuleRunPlaybookAction | AutomationRuleModifyPropertiesAction;
+export declare type AutomationRuleConditionUnion = AutomationRuleCondition | PropertyConditionProperties;
+export declare type AutomationRuleActionUnion = AutomationRuleAction | AutomationRuleModifyPropertiesAction | AutomationRuleRunPlaybookAction;
 export declare type EntityTimelineItemUnion = EntityTimelineItem | ActivityTimelineItem | BookmarkTimelineItem | SecurityAlertTimelineItem;
 export declare type EntityQueryItemUnion = EntityQueryItem | InsightQueryItem;
-export declare type DataConnectorsCheckRequirementsUnion = DataConnectorsCheckRequirements | AADCheckRequirements | AatpCheckRequirements | ASCCheckRequirements | AwsCloudTrailCheckRequirements | AwsS3CheckRequirements | Dynamics365CheckRequirements | McasCheckRequirements | MdatpCheckRequirements | MstiCheckRequirements | MtpCheckRequirements | OfficeATPCheckRequirements | OfficeIRMCheckRequirements | TICheckRequirements | TiTaxiiCheckRequirements;
+export declare type DataConnectorsCheckRequirementsUnion = DataConnectorsCheckRequirements | AADCheckRequirements | AatpCheckRequirements | ASCCheckRequirements | AwsCloudTrailCheckRequirements | AwsS3CheckRequirements | Dynamics365CheckRequirements | McasCheckRequirements | MdatpCheckRequirements | MstiCheckRequirements | MtpCheckRequirements | OfficeATPCheckRequirements | OfficeIRMCheckRequirements | Office365ProjectCheckRequirements | OfficePowerBICheckRequirements | TICheckRequirements | TiTaxiiCheckRequirements | IoTCheckRequirements;
 export declare type AlertRuleTemplateUnion = AlertRuleTemplate | MLBehaviorAnalyticsAlertRuleTemplate | FusionAlertRuleTemplate | ThreatIntelligenceAlertRuleTemplate | MicrosoftSecurityIncidentCreationAlertRuleTemplate | ScheduledAlertRuleTemplate | NrtAlertRuleTemplate;
 export declare type EntityUnion = Entity | SecurityAlert | HuntingBookmark | AccountEntity | AzureResourceEntity | CloudApplicationEntity | DnsEntity | FileEntity | FileHashEntity | HostEntity | IoTDeviceEntity | IpEntity | MailboxEntity | MailClusterEntity | MailMessageEntity | MalwareEntity | ProcessEntity | RegistryKeyEntity | RegistryValueEntity | SecurityGroupEntity | SubmissionMailEntity | UrlEntity;
 export declare type EntityQueryTemplateUnion = EntityQueryTemplate | ActivityEntityQueryTemplate;
-export declare type ThreatIntelligenceInformationUnion = ThreatIntelligenceInformation | ThreatIntelligenceIndicatorModel;
 export declare type AlertRuleUnion = AlertRule | MLBehaviorAnalyticsAlertRule | FusionAlertRule | ThreatIntelligenceAlertRule | MicrosoftSecurityIncidentCreationAlertRule | ScheduledAlertRule | NrtAlertRule;
 export declare type EntityQueryUnion = EntityQuery | ExpansionEntityQuery | ActivityEntityQuery;
 export declare type CustomEntityQueryUnion = CustomEntityQuery | ActivityCustomEntityQuery;
 export declare type SettingsUnion = Settings | Anomalies | EyesOn | EntityAnalytics | Ueba;
-export declare type DataConnectorUnion = DataConnector | AADDataConnector | MstiDataConnector | MTPDataConnector | AatpDataConnector | ASCDataConnector | AwsCloudTrailDataConnector | AwsS3DataConnector | McasDataConnector | Dynamics365DataConnector | OfficeATPDataConnector | OfficeIRMDataConnector | MdatpDataConnector | OfficeDataConnector | TIDataConnector | TiTaxiiDataConnector | CodelessUiDataConnector | CodelessApiPollingDataConnector;
+export declare type ThreatIntelligenceInformationUnion = ThreatIntelligenceInformation | ThreatIntelligenceIndicatorModel;
+export declare type DataConnectorUnion = DataConnector | AADDataConnector | MstiDataConnector | MTPDataConnector | AatpDataConnector | ASCDataConnector | AwsCloudTrailDataConnector | AwsS3DataConnector | McasDataConnector | Dynamics365DataConnector | OfficeATPDataConnector | Office365ProjectDataConnector | OfficePowerBIDataConnector | OfficeIRMDataConnector | MdatpDataConnector | OfficeDataConnector | TIDataConnector | TiTaxiiDataConnector | IoTDataConnector | CodelessUiDataConnector | CodelessApiPollingDataConnector;
 /** List all the alert rules. */
 export interface AlertRulesList {
     /**
@@ -104,25 +104,13 @@ export interface AlertRuleTemplatesList {
     /** Array of alert rule templates. */
     value: AlertRuleTemplateUnion[];
 }
-/** List all the automation rules. */
-export interface AutomationRulesList {
-    /**
-     * URL to fetch the next set of automation rules.
-     * NOTE: This property will not be serialized. It can only be populated by the server.
-     */
-    readonly nextLink?: string;
-    /** Array of automation rules. */
-    value: AutomationRule[];
-}
 /** Describes automation rule triggering logic */
 export interface AutomationRuleTriggeringLogic {
-    /** Determines whether the automation rule is enabled or disabled. */
+    /** Determines whether the automation rule is enabled or disabled */
     isEnabled: boolean;
     /** Determines when the automation rule should automatically expire and be disabled. */
     expirationTimeUtc?: Date;
-    /** The type of object the automation rule triggers on */
     triggersOn: TriggersOn;
-    /** The type of event the automation rule triggers on */
     triggersWhen: TriggersWhen;
     /** The conditions to evaluate to determine if the automation rule should be triggered on a given object */
     conditions?: AutomationRuleConditionUnion[];
@@ -135,8 +123,7 @@ export interface AutomationRuleCondition {
 /** Describes an automation rule action */
 export interface AutomationRuleAction {
     /** Polymorphic discriminator, which specifies the different types this object can be */
-    actionType: "RunPlaybook" | "ModifyProperties";
-    /** The order of execution of the automation rule action */
+    actionType: "ModifyProperties" | "RunPlaybook";
     order: number;
 }
 /** Information on the client (user or application) that made some action */
@@ -150,10 +137,18 @@ export interface ClientInfo {
     /** The user principal name of the client. */
     userPrincipalName?: string;
 }
+export interface AutomationRulesList {
+    value?: AutomationRule[];
+    nextLink?: string;
+}
+export interface ManualTriggerRequestBody {
+    tenantId?: string;
+    logicAppsResourceId?: string;
+}
 /** List all the bookmarks. */
 export interface BookmarkList {
     /**
-     * URL to fetch the next set of cases.
+     * URL to fetch the next set of bookmarks.
      * NOTE: This property will not be serialized. It can only be populated by the server.
      */
     readonly nextLink?: string;
@@ -186,6 +181,20 @@ export interface IncidentInfo {
     /** Relation Name */
     relationName?: string;
 }
+/** Describes the entity mappings of a single entity */
+export interface BookmarkEntityMappings {
+    /** The entity type */
+    entityType?: string;
+    /** Array of fields mapping for that entity type */
+    fieldMappings?: EntityFieldMapping[];
+}
+/** Map identifiers of a single entity */
+export interface EntityFieldMapping {
+    /** Alert V3 identifier */
+    identifier?: string;
+    /** The value of the identifier */
+    value?: string;
+}
 /** List of relations. */
 export interface RelationList {
     /**
@@ -354,16 +363,6 @@ export interface EnrichmentDomainWhoisContact {
     /** The email address for this contact */
     email?: string;
 }
-/** List of all the entity queries. */
-export interface EntityQueryList {
-    /**
-     * URL to fetch the next set of entity queries.
-     * NOTE: This property will not be serialized. It can only be populated by the server.
-     */
-    readonly nextLink?: string;
-    /** Array of entity queries. */
-    value: EntityQueryUnion[];
-}
 /** List of all the entities. */
 export interface EntityList {
     /**
@@ -538,6 +537,26 @@ export interface InsightsTableResultColumnsItem {
     /** the name of the colum */
     name?: string;
 }
+/** List of all the entity queries. */
+export interface EntityQueryList {
+    /**
+     * URL to fetch the next set of entity queries.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly nextLink?: string;
+    /** Array of entity queries. */
+    value: EntityQueryUnion[];
+}
+/** List of all the entity query templates. */
+export interface EntityQueryTemplateList {
+    /**
+     * URL to fetch the next set of entity query templates.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly nextLink?: string;
+    /** Array of entity query templates. */
+    value: EntityQueryTemplateUnion[];
+}
 /** List all the incidents. */
 export interface IncidentList {
     /**
@@ -570,11 +589,21 @@ export interface IncidentAdditionalData {
      * NOTE: This property will not be serialized. It can only be populated by the server.
      */
     readonly alertProductNames?: string[];
+    /**
+     * The provider incident url to the incident in Microsoft 365 Defender portal
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly providerIncidentUrl?: string;
     /**
      * The tactics associated with incident
      * NOTE: This property will not be serialized. It can only be populated by the server.
      */
     readonly tactics?: AttackTactic[];
+    /**
+     * The techniques associated with incident's tactics'
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly techniques?: string[];
 }
 /** Represents an incident label */
 export interface IncidentLabel {
@@ -764,6 +793,16 @@ export interface MetadataCategories {
     /** Industry verticals for the solution content item */
     verticals?: string[];
 }
+/** List of all the office365 consents. */
+export interface OfficeConsentList {
+    /**
+     * URL to fetch the next set of office consents.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly nextLink?: string;
+    /** Array of the consents. */
+    value: OfficeConsent[];
+}
 /** List of the Sentinel onboarding states */
 export interface SentinelOnboardingStatesList {
     /** Array of Sentinel onboarding states */
@@ -823,111 +862,59 @@ export interface ContentPathMap {
     /** The path to the content. */
     path?: string;
 }
-/** List all the watchlists. */
-export interface WatchlistList {
-    /**
-     * URL to fetch the next set of watchlists.
-     * NOTE: This property will not be serialized. It can only be populated by the server.
-     */
-    readonly nextLink?: string;
-    /** Array of watchlist. */
-    value: Watchlist[];
-}
-/** List all the watchlist items. */
-export interface WatchlistItemList {
-    /**
-     * URL to fetch the next set of watchlist item.
-     * NOTE: This property will not be serialized. It can only be populated by the server.
-     */
-    readonly nextLink?: string;
-    /** Array of watchlist items. */
-    value: WatchlistItem[];
-}
-/** List all the data connectors. */
-export interface DataConnectorList {
-    /**
-     * URL to fetch the next set of data connectors.
-     * NOTE: This property will not be serialized. It can only be populated by the server.
-     */
-    readonly nextLink?: string;
-    /** Array of data connectors. */
-    value: DataConnectorUnion[];
-}
-/** Represents Codeless API Polling data connector. */
-export interface DataConnectorConnectBody {
-    /** The authentication kind used to poll the data */
-    kind?: ConnectAuthKind;
-    /** The API key of the audit server. */
-    apiKey?: string;
-    /** The client secret of the OAuth 2.0 application. */
-    clientSecret?: string;
-    /** The client id of the OAuth 2.0 application. */
-    clientId?: string;
-    /** The authorization code used in OAuth 2.0 code flow to issue a token. */
-    authorizationCode?: string;
-    /** The user name in the audit log server. */
-    userName?: string;
-    /** The user password in the audit log server. */
-    password?: string;
-    requestConfigUserInputValues?: Record<string, unknown>[];
-}
-/** Common error response for all Azure Resource Manager APIs to return error details for failed operations. (This also follows the OData error response format.). */
-export interface ErrorResponse {
-    /** The error object. */
-    error?: ErrorDetail;
-}
-/** The error detail. */
-export interface ErrorDetail {
-    /**
-     * The error code.
-     * NOTE: This property will not be serialized. It can only be populated by the server.
-     */
-    readonly code?: string;
-    /**
-     * The error message.
-     * NOTE: This property will not be serialized. It can only be populated by the server.
-     */
-    readonly message?: string;
-    /**
-     * The error target.
-     * NOTE: This property will not be serialized. It can only be populated by the server.
-     */
-    readonly target?: string;
-    /**
-     * The error details.
-     * NOTE: This property will not be serialized. It can only be populated by the server.
-     */
-    readonly details?: ErrorDetail[];
-    /**
-     * The error additional info.
-     * NOTE: This property will not be serialized. It can only be populated by the server.
-     */
-    readonly additionalInfo?: ErrorAdditionalInfo[];
-}
-/** The resource management error additional info. */
-export interface ErrorAdditionalInfo {
-    /**
-     * The additional info type.
-     * NOTE: This property will not be serialized. It can only be populated by the server.
-     */
-    readonly type?: string;
-    /**
-     * The additional info.
-     * NOTE: This property will not be serialized. It can only be populated by the server.
-     */
-    readonly info?: Record<string, unknown>;
-}
-/** Data connector requirements properties. */
-export interface DataConnectorsCheckRequirements {
-    /** Polymorphic discriminator, which specifies the different types this object can be */
-    kind: "AzureActiveDirectory" | "AzureAdvancedThreatProtection" | "AzureSecurityCenter" | "AmazonWebServicesCloudTrail" | "AmazonWebServicesS3" | "Dynamics365" | "MicrosoftCloudAppSecurity" | "MicrosoftDefenderAdvancedThreatProtection" | "MicrosoftThreatIntelligence" | "MicrosoftThreatProtection" | "OfficeATP" | "OfficeIRM" | "ThreatIntelligence" | "ThreatIntelligenceTaxii";
+/** Resources created in user's repository for the source-control. */
+export interface RepositoryResourceInfo {
+    /** The webhook object created for the source-control. */
+    webhook?: Webhook;
+    /** Resources created in GitHub for this source-control. */
+    gitHubResourceInfo?: GitHubResourceInfo;
+    /** Resources created in Azure DevOps for this source-control. */
+    azureDevOpsResourceInfo?: AzureDevOpsResourceInfo;
+}
+/** Detail about the webhook object. */
+export interface Webhook {
+    /** Unique identifier for the webhook. */
+    webhookId?: string;
+    /** URL that gets invoked by the webhook. */
+    webhookUrl?: string;
+    /** Time when the webhook secret was updated. */
+    webhookSecretUpdateTime?: string;
+    /** A flag to instruct the backend service to rotate webhook secret. */
+    rotateWebhookSecret?: boolean;
+}
+/** Resources created in GitHub repository. */
+export interface GitHubResourceInfo {
+    /** GitHub application installation id. */
+    appInstallationId?: string;
+}
+/** Resources created in Azure DevOps repository. */
+export interface AzureDevOpsResourceInfo {
+    /** Id of the pipeline created for the source-control. */
+    pipelineId?: string;
+    /** Id of the service-connection created for the source-control. */
+    serviceConnectionId?: string;
+}
+/** Information regarding a deployment. */
+export interface DeploymentInfo {
+    /** Status while fetching the last deployment. */
+    deploymentFetchStatus?: DeploymentFetchStatus;
+    /** Deployment information. */
+    deployment?: Deployment;
+    /** Additional details about the deployment that can be shown to the user. */
+    message?: string;
 }
-/** Data connector requirements status. */
-export interface DataConnectorRequirementsState {
-    /** Authorization state for this connector */
-    authorizationState?: DataConnectorAuthorizationState;
-    /** License state for this connector */
-    licenseState?: DataConnectorLicenseState;
+/** Description about a deployment. */
+export interface Deployment {
+    /** Deployment identifier. */
+    deploymentId?: string;
+    /** Current status of the deployment. */
+    deploymentState?: DeploymentState;
+    /** The outcome of the deployment. */
+    deploymentResult?: DeploymentResult;
+    /** The time when the deployment finished. */
+    deploymentTime?: Date;
+    /** Url to access repository action logs. */
+    deploymentLogsUrl?: string;
 }
 /** Describes threat kill chain phase entity */
 export interface ThreatIntelligenceKillChainPhase {
@@ -974,11 +961,6 @@ export interface ThreatIntelligenceGranularMarkingModel {
     /** granular marking model selectors */
     selectors?: string[];
 }
-/** Describes an entity with kind. */
-export interface ThreatIntelligenceResourceKind {
-    /** The kind of the entity. */
-    kind: ThreatIntelligenceResourceKindEnum;
-}
 /** List of all the threat intelligence information objects. */
 export interface ThreatIntelligenceInformationList {
     /**
@@ -1058,6 +1040,66 @@ export interface ThreatIntelligenceAppendTags {
     /** List of tags to be appended. */
     threatIntelligenceTags?: string[];
 }
+/** List all the watchlists. */
+export interface WatchlistList {
+    /**
+     * URL to fetch the next set of watchlists.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly nextLink?: string;
+    /** Array of watchlist. */
+    value: Watchlist[];
+}
+/** List all the watchlist items. */
+export interface WatchlistItemList {
+    /**
+     * URL to fetch the next set of watchlist item.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly nextLink?: string;
+    /** Array of watchlist items. */
+    value: WatchlistItem[];
+}
+/** List all the data connectors. */
+export interface DataConnectorList {
+    /**
+     * URL to fetch the next set of data connectors.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly nextLink?: string;
+    /** Array of data connectors. */
+    value: DataConnectorUnion[];
+}
+/** Represents Codeless API Polling data connector. */
+export interface DataConnectorConnectBody {
+    /** The authentication kind used to poll the data */
+    kind?: ConnectAuthKind;
+    /** The API key of the audit server. */
+    apiKey?: string;
+    /** The client secret of the OAuth 2.0 application. */
+    clientSecret?: string;
+    /** The client id of the OAuth 2.0 application. */
+    clientId?: string;
+    /** The authorization code used in OAuth 2.0 code flow to issue a token. */
+    authorizationCode?: string;
+    /** The user name in the audit log server. */
+    userName?: string;
+    /** The user password in the audit log server. */
+    password?: string;
+    requestConfigUserInputValues?: Record<string, unknown>[];
+}
+/** Data connector requirements properties. */
+export interface DataConnectorsCheckRequirements {
+    /** Polymorphic discriminator, which specifies the different types this object can be */
+    kind: "AzureActiveDirectory" | "AzureAdvancedThreatProtection" | "AzureSecurityCenter" | "AmazonWebServicesCloudTrail" | "AmazonWebServicesS3" | "Dynamics365" | "MicrosoftCloudAppSecurity" | "MicrosoftDefenderAdvancedThreatProtection" | "MicrosoftThreatIntelligence" | "MicrosoftThreatProtection" | "OfficeATP" | "OfficeIRM" | "Office365Project" | "OfficePowerBI" | "ThreatIntelligence" | "ThreatIntelligenceTaxii" | "IOT";
+}
+/** Data connector requirements status. */
+export interface DataConnectorRequirementsState {
+    /** Authorization state for this connector */
+    authorizationState?: DataConnectorAuthorizationState;
+    /** License state for this connector */
+    licenseState?: DataConnectorLicenseState;
+}
 /** Lists the operations available in the SecurityInsights RP. */
 export interface OperationsList {
     /**
@@ -1090,26 +1132,6 @@ export interface OperationDisplay {
     /** Resource name */
     resource?: string;
 }
-/** List of all the office365 consents. */
-export interface OfficeConsentList {
-    /**
-     * URL to fetch the next set of office consents.
-     * NOTE: This property will not be serialized. It can only be populated by the server.
-     */
-    readonly nextLink?: string;
-    /** Array of the consents. */
-    value: OfficeConsent[];
-}
-/** List of all the entity query templates. */
-export interface EntityQueryTemplateList {
-    /**
-     * URL to fetch the next set of entity query templates.
-     * NOTE: This property will not be serialized. It can only be populated by the server.
-     */
-    readonly nextLink?: string;
-    /** Array of entity query templates. */
-    value: EntityQueryTemplateUnion[];
-}
 /** alert rule template data sources */
 export interface AlertRuleTemplateDataSource {
     /** The connector id that provides the following data types */
@@ -1146,8 +1168,6 @@ export interface QueryBasedAlertRuleTemplateProperties {
     query?: string;
     /** The severity for alerts created by this alert rule. */
     severity?: AlertSeverity;
-    /** The tactics of the alert rule */
-    tactics?: AttackTactic[];
     /** The version of this template - in format <a.b.c>, where all are numbers. For example <1.0.2>. */
     version?: string;
     /** Dictionary of string key-value pairs of columns to be attached to the alert */
@@ -1184,6 +1204,79 @@ export interface AlertDetailsOverride {
     /** the column name to take the alert severity from */
     alertSeverityColumnName?: string;
 }
+/** Represents a supported source signal configuration in Fusion detection. */
+export interface FusionSourceSettings {
+    /** Determines whether this source signal is enabled or disabled in Fusion detection. */
+    enabled: boolean;
+    /** Name of the Fusion source signal. Refer to Fusion alert rule template for supported values. */
+    sourceName: string;
+    /** Configuration for all source subtypes under this source signal consumed in fusion detection. */
+    sourceSubTypes?: FusionSourceSubTypeSetting[];
+}
+/** Represents a supported source subtype configuration under a source signal in Fusion detection. */
+export interface FusionSourceSubTypeSetting {
+    /** Determines whether this source subtype under source signal is enabled or disabled in Fusion detection. */
+    enabled: boolean;
+    /** The Name of the source subtype under a given source signal in Fusion detection. Refer to Fusion alert rule template for supported values. */
+    sourceSubTypeName: string;
+    /**
+     * The display name of source subtype under a source signal consumed in Fusion detection.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly sourceSubTypeDisplayName?: string;
+    /** Severity configuration for a source subtype consumed in fusion detection. */
+    severityFilters: FusionSubTypeSeverityFilter;
+}
+/** Represents severity configuration for a source subtype consumed in Fusion detection. */
+export interface FusionSubTypeSeverityFilter {
+    /**
+     * Determines whether this source subtype supports severity configuration or not.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly isSupported?: boolean;
+    /** Individual Severity configuration settings for a given source subtype consumed in Fusion detection. */
+    filters?: FusionSubTypeSeverityFiltersItem[];
+}
+/** Represents a Severity filter setting for a given source subtype consumed in Fusion detection. */
+export interface FusionSubTypeSeverityFiltersItem {
+    /** The Severity for a given source subtype consumed in Fusion detection. */
+    severity: AlertSeverity;
+    /** Determines whether this severity is enabled or disabled for this source subtype consumed in Fusion detection. */
+    enabled: boolean;
+}
+/** Represents a Fusion scenario exclusion patterns in Fusion detection. */
+export interface FusionScenarioExclusionPattern {
+    /** Scenario exclusion pattern. */
+    exclusionPattern: string;
+    /** DateTime when scenario exclusion pattern is added in UTC. */
+    dateAddedInUTC: string;
+}
+/** Represents a source signal consumed in Fusion detection. */
+export interface FusionTemplateSourceSetting {
+    /** The name of a source signal consumed in Fusion detection. */
+    sourceName: string;
+    /** All supported source subtypes under this source signal consumed in fusion detection. */
+    sourceSubTypes?: FusionTemplateSourceSubType[];
+}
+/** Represents a source subtype under a source signal consumed in Fusion detection. */
+export interface FusionTemplateSourceSubType {
+    /** The name of source subtype under a source signal consumed in Fusion detection. */
+    sourceSubTypeName: string;
+    /**
+     * The display name of source subtype under a source signal consumed in Fusion detection.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly sourceSubTypeDisplayName?: string;
+    /** Severity configuration available for a source subtype consumed in fusion detection. */
+    severityFilter: FusionTemplateSubTypeSeverityFilter;
+}
+/** Represents severity configurations available for a source subtype consumed in Fusion detection. */
+export interface FusionTemplateSubTypeSeverityFilter {
+    /** Determines whether severity configuration is supported for this source subtype consumed in Fusion detection. */
+    isSupported: boolean;
+    /** List of all supported severities for this source subtype consumed in Fusion detection. */
+    severityFilters?: AlertSeverity[];
+}
 /** MicrosoftSecurityIncidentCreation rule common property bag. */
 export interface MicrosoftSecurityIncidentCreationAlertRuleCommonProperties {
     /** the alerts' displayNames on which the cases will be generated */
@@ -1195,44 +1288,6 @@ export interface MicrosoftSecurityIncidentCreationAlertRuleCommonProperties {
     /** the alerts' severities on which the cases will be generated */
     severitiesFilter?: AlertSeverity[];
 }
-/** Query based alert rule base property bag. */
-export interface QueryBasedAlertRuleProperties {
-    /** The Name of the alert rule template used to create this rule. */
-    alertRuleTemplateName?: string;
-    /** The version of the alert rule template used to create this rule - in format <a.b.c>, where all are numbers, for example 0 <1.0.2> */
-    templateVersion?: string;
-    /** The description of the alert rule. */
-    description?: string;
-    /** The query that creates alerts for this rule. */
-    query?: string;
-    /** The display name for alerts created by this alert rule. */
-    displayName: string;
-    /** Determines whether this alert rule is enabled or disabled. */
-    enabled: boolean;
-    /**
-     * The last time that this alert rule has been modified.
-     * NOTE: This property will not be serialized. It can only be populated by the server.
-     */
-    readonly lastModifiedUtc?: Date;
-    /** The suppression (in ISO 8601 duration format) to wait since last time this alert rule been triggered. */
-    suppressionDuration: string;
-    /** Determines whether the suppression for this alert rule is enabled or disabled. */
-    suppressionEnabled: boolean;
-    /** The severity for alerts created by this alert rule. */
-    severity?: AlertSeverity;
-    /** The tactics of the alert rule */
-    tactics?: AttackTactic[];
-    /** The settings of the incidents that created from alerts triggered by this analytics rule */
-    incidentConfiguration?: IncidentConfiguration;
-    /** Dictionary of string key-value pairs of columns to be attached to the alert */
-    customDetails?: {
-        [propertyName: string]: string;
-    };
-    /** Array of the entity mappings of the alert rule */
-    entityMappings?: EntityMapping[];
-    /** The alert details override settings */
-    alertDetailsOverride?: AlertDetailsOverride;
-}
 /** Incident Configuration property bag. */
 export interface IncidentConfiguration {
     /** Create incidents from alerts triggered by this analytics rule */
@@ -1259,59 +1314,61 @@ export interface GroupingConfiguration {
 }
 /** Scheduled alert rule template property bag. */
 export interface ScheduledAlertRuleCommonProperties {
+    /** The query that creates alerts for this rule. */
+    query?: string;
     /** The frequency (in ISO 8601 duration format) for this alert rule to run. */
     queryFrequency?: string;
     /** The period (in ISO 8601 duration format) that this alert rule looks at. */
     queryPeriod?: string;
+    /** The severity for alerts created by this alert rule. */
+    severity?: AlertSeverity;
     /** The operation against the threshold that triggers alert rule. */
     triggerOperator?: TriggerOperator;
     /** The threshold triggers this alert rule. */
     triggerThreshold?: number;
     /** The event grouping settings. */
     eventGroupingSettings?: EventGroupingSettings;
+    /** Dictionary of string key-value pairs of columns to be attached to the alert */
+    customDetails?: {
+        [propertyName: string]: string;
+    };
+    /** Array of the entity mappings of the alert rule */
+    entityMappings?: EntityMapping[];
+    /** The alert details override settings */
+    alertDetailsOverride?: AlertDetailsOverride;
 }
 /** Event grouping settings property bag. */
 export interface EventGroupingSettings {
     /** The event grouping aggregation kinds */
     aggregationKind?: EventGroupingAggregationKind;
 }
-/** The configuration of the run playbook automation rule action */
-export interface AutomationRuleRunPlaybookActionConfiguration {
-    /** The resource id of the playbook resource */
-    logicAppResourceId?: string;
-    /** The tenant id of the playbook resource */
-    tenantId?: string;
-}
-/** The configuration of the modify properties automation rule action */
-export interface AutomationRuleModifyPropertiesActionConfiguration {
+export interface IncidentPropertiesAction {
+    /** The severity of the incident */
+    severity?: IncidentSeverity;
+    /** The status of the incident */
+    status?: IncidentStatus;
     /** The reason the incident was closed */
     classification?: IncidentClassification;
-    /** Describes the reason the incident was closed */
-    classificationComment?: string;
     /** The classification reason the incident was closed with */
     classificationReason?: IncidentClassificationReason;
+    /** Describes the reason the incident was closed */
+    classificationComment?: string;
+    /** Information on the user an incident is assigned to */
+    owner?: IncidentOwnerInfo;
     /** List of labels to add to the incident */
     labels?: IncidentLabel[];
-    /** Describes a user that the incident is assigned to */
-    owner?: IncidentOwnerInfo;
-    /** The severity of the incident */
-    severity?: IncidentSeverity;
-    /** The status of the incident */
-    status?: IncidentStatus;
 }
-/** The configuration of the automation rule condition */
-export interface AutomationRulePropertyValuesConditionProperties {
-    /** The property to evaluate */
+export interface AutomationRulePropertyValuesCondition {
+    /** The property to evaluate in an automation rule property condition */
     propertyName?: AutomationRulePropertyConditionSupportedProperty;
-    /** The operator to use for evaluation the condition */
     operator?: AutomationRulePropertyConditionSupportedOperator;
-    /** The values to use for evaluating the condition */
     propertyValues?: string[];
 }
-/** The Activity query definitions */
-export interface ActivityEntityQueriesPropertiesQueryDefinitions {
-    /** The Activity query to run on a given entity */
-    query?: string;
+export interface PlaybookActionProperties {
+    /** The resource id of the playbook resource */
+    logicAppResourceId?: string;
+    /** The tenant id of the playbook resource */
+    tenantId?: string;
 }
 /** An properties abstract Query item for entity */
 export interface EntityQueryItemProperties {
@@ -1378,6 +1435,23 @@ export interface InsightQueryItemPropertiesReferenceTimeRange {
     /** Additional query time for looking back. */
     beforeRange?: string;
 }
+/** The Activity query definitions */
+export interface ActivityEntityQueriesPropertiesQueryDefinitions {
+    /** The Activity query to run on a given entity */
+    query?: string;
+}
+/** The Activity query definitions */
+export interface ActivityEntityQueryTemplatePropertiesQueryDefinitions {
+    /** The Activity query to run on a given entity */
+    query?: string;
+    /** The dimensions we want to summarize the timeline results on, this is comma separated list */
+    summarizeBy?: string;
+}
+/** The data type definition */
+export interface DataTypeDefinitions {
+    /** The data type name */
+    dataType?: string;
+}
 /** The pricing tier of the solution */
 export interface Sku {
     /** The kind of the tier */
@@ -1432,6 +1506,16 @@ export interface Dynamics365DataConnectorDataTypes {
     /** Common Data Service data type connection. */
     dynamics365CdsActivities: Dynamics365DataConnectorDataTypesDynamics365CdsActivities;
 }
+/** The available data types for Office Microsoft Project data connector. */
+export interface Office365ProjectConnectorDataTypes {
+    /** Logs data type. */
+    logs: Office365ProjectConnectorDataTypesLogs;
+}
+/** The available data types for Office Microsoft PowerBI data connector. */
+export interface OfficePowerBIConnectorDataTypes {
+    /** Logs data type. */
+    logs: OfficePowerBIConnectorDataTypesLogs;
+}
 /** The available data types for office data connector. */
 export interface OfficeDataConnectorDataTypes {
     /** Exchange data type connection. */
@@ -1511,7 +1595,7 @@ export interface ConnectivityCriteria {
 /** Connector Availability Status */
 export interface Availability {
     /** The connector Availability Status */
-    status?: "1";
+    status?: 1;
     /** Set connector as preview */
     isPreview?: boolean;
 }
@@ -1670,18 +1754,6 @@ export interface CodelessConnectorPollingResponseProperties {
     /** Describes if the data in the response is Gzip */
     isGzipCompressed?: boolean;
 }
-/** The Activity query definitions */
-export interface ActivityEntityQueryTemplatePropertiesQueryDefinitions {
-    /** The Activity query to run on a given entity */
-    query?: string;
-    /** The dimensions we want to summarize the timeline results on, this is comma separated list */
-    summarizeBy?: string;
-}
-/** The data type definition */
-export interface DataTypeDefinitions {
-    /** The data type name */
-    dataType?: string;
-}
 /** ThreatIntelligence property bag. */
 export interface ThreatIntelligence {
     /**
@@ -1768,6 +1840,11 @@ export declare type Entity = Resource & {
     /** The kind of the entity. */
     kind: EntityKind;
 };
+/** Specific entity query template. */
+export declare type EntityQueryTemplate = Resource & {
+    /** the entity query template kind */
+    kind: EntityQueryTemplateKind;
+};
 /** Consent for Office365 tenant that already made. */
 export declare type OfficeConsent = Resource & {
     /** The tenantId of the Office365 with the consent. */
@@ -1775,11 +1852,6 @@ export declare type OfficeConsent = Resource & {
     /** Help to easily cascade among the data layers. */
     consentId?: string;
 };
-/** Specific entity query template. */
-export declare type EntityQueryTemplate = Resource & {
-    /** the entity query template kind */
-    kind: EntityQueryTemplateKind;
-};
 /** Action property bag. */
 export declare type ActionResponseProperties = ActionPropertiesBase & {
     /** The name of the logic app's workflow. */
@@ -1791,25 +1863,22 @@ export declare type ActionRequestProperties = ActionPropertiesBase & {
     triggerUri: string;
 };
 /** Describes an automation rule condition that evaluates a property's value */
-export declare type AutomationRulePropertyValuesCondition = AutomationRuleCondition & {
+export declare type PropertyConditionProperties = AutomationRuleCondition & {
     /** Polymorphic discriminator, which specifies the different types this object can be */
     conditionType: "Property";
-    /** The configuration of the automation rule condition */
-    conditionProperties: AutomationRulePropertyValuesConditionProperties;
-};
-/** Describes an automation rule action to run a playbook */
-export declare type AutomationRuleRunPlaybookAction = AutomationRuleAction & {
-    /** Polymorphic discriminator, which specifies the different types this object can be */
-    actionType: "RunPlaybook";
-    /** The configuration of the run playbook automation rule action */
-    actionConfiguration: AutomationRuleRunPlaybookActionConfiguration;
+    conditionProperties?: AutomationRulePropertyValuesCondition;
 };
 /** Describes an automation rule action to modify an object's properties */
 export declare type AutomationRuleModifyPropertiesAction = AutomationRuleAction & {
     /** Polymorphic discriminator, which specifies the different types this object can be */
     actionType: "ModifyProperties";
-    /** The configuration of the modify properties automation rule action */
-    actionConfiguration: AutomationRuleModifyPropertiesActionConfiguration;
+    actionConfiguration?: IncidentPropertiesAction;
+};
+/** Describes an automation rule action to run a playbook */
+export declare type AutomationRuleRunPlaybookAction = AutomationRuleAction & {
+    /** Polymorphic discriminator, which specifies the different types this object can be */
+    actionType: "RunPlaybook";
+    actionConfiguration?: PlaybookActionProperties;
 };
 /** Represents Activity timeline item. */
 export declare type ActivityTimelineItem = EntityTimelineItem & {
@@ -2864,6 +2933,20 @@ export declare type OfficeIRMCheckRequirements = DataConnectorsCheckRequirements
     /** The tenant id to connect to, and get the data from. */
     tenantId?: string;
 };
+/** Represents Office365 Project requirements check request. */
+export declare type Office365ProjectCheckRequirements = DataConnectorsCheckRequirements & {
+    /** Polymorphic discriminator, which specifies the different types this object can be */
+    kind: "Office365Project";
+    /** The tenant id to connect to, and get the data from. */
+    tenantId?: string;
+};
+/** Represents Office PowerBI requirements check request. */
+export declare type OfficePowerBICheckRequirements = DataConnectorsCheckRequirements & {
+    /** Polymorphic discriminator, which specifies the different types this object can be */
+    kind: "OfficePowerBI";
+    /** The tenant id to connect to, and get the data from. */
+    tenantId?: string;
+};
 /** Threat Intelligence Platforms data connector check requirements */
 export declare type TICheckRequirements = DataConnectorsCheckRequirements & {
     /** Polymorphic discriminator, which specifies the different types this object can be */
@@ -2878,110 +2961,33 @@ export declare type TiTaxiiCheckRequirements = DataConnectorsCheckRequirements &
     /** The tenant id to connect to, and get the data from. */
     tenantId?: string;
 };
-/** Threat intelligence indicator entity used in request body. */
-export declare type ThreatIntelligenceIndicatorModelForRequestBody = ThreatIntelligenceResourceKind & {
-    /** Etag of the azure resource */
-    etag?: string;
-    /**
-     * A bag of custom fields that should be part of the entity and will be presented to the user.
-     * NOTE: This property will not be serialized. It can only be populated by the server.
-     */
-    readonly additionalData?: {
-        [propertyName: string]: Record<string, unknown>;
-    };
-    /**
-     * The graph item display name which is a short humanly readable description of the graph item instance. This property is optional and might be system generated.
-     * NOTE: This property will not be serialized. It can only be populated by the server.
-     */
-    readonly friendlyName?: string;
-    /** List of tags */
-    threatIntelligenceTags?: string[];
-    /** Last updated time in UTC */
-    lastUpdatedTimeUtc?: string;
-    /** Source of a threat intelligence entity */
-    source?: string;
-    /** Display name of a threat intelligence entity */
-    displayName?: string;
-    /** Description of a threat intelligence entity */
-    description?: string;
-    /** Indicator types of threat intelligence entities */
-    indicatorTypes?: string[];
-    /** Pattern of a threat intelligence entity */
-    pattern?: string;
-    /** Pattern type of a threat intelligence entity */
-    patternType?: string;
-    /** Pattern version of a threat intelligence entity */
-    patternVersion?: string;
-    /** Kill chain phases */
-    killChainPhases?: ThreatIntelligenceKillChainPhase[];
-    /** Parsed patterns */
-    parsedPattern?: ThreatIntelligenceParsedPattern[];
-    /** External ID of threat intelligence entity */
-    externalId?: string;
-    /** Created by reference of threat intelligence entity */
-    createdByRef?: string;
-    /** Is threat intelligence entity defanged */
-    defanged?: boolean;
-    /** External last updated time in UTC */
-    externalLastUpdatedTimeUtc?: string;
-    /** External References */
-    externalReferences?: ThreatIntelligenceExternalReference[];
-    /** Granular Markings */
-    granularMarkings?: ThreatIntelligenceGranularMarkingModel[];
-    /** Labels  of threat intelligence entity */
-    labels?: string[];
-    /** Is threat intelligence entity revoked */
-    revoked?: boolean;
-    /** Confidence of threat intelligence entity */
-    confidence?: number;
-    /** Threat intelligence entity object marking references */
-    objectMarkingRefs?: string[];
-    /** Language of threat intelligence entity */
-    language?: string;
-    /** Threat types */
-    threatTypes?: string[];
-    /** Valid from */
-    validFrom?: string;
-    /** Valid until */
-    validUntil?: string;
-    /** Created by */
-    created?: string;
-    /** Modified by */
-    modified?: string;
-    /** Extensions map */
-    extensions?: {
-        [propertyName: string]: any;
-    };
-};
-/** Threat intelligence information object. */
-export declare type ThreatIntelligenceInformation = ResourceWithEtag & ThreatIntelligenceResourceKind & {};
-/** MLBehaviorAnalytics alert rule template properties. */
-export declare type MLBehaviorAnalyticsAlertRuleTemplateProperties = AlertRuleTemplatePropertiesBase & {
-    /** The severity for alerts created by this alert rule. */
-    severity: AlertSeverity;
-    /** The tactics of the alert rule template. */
-    tactics?: AttackTactic[];
-};
-/** Fusion alert rule template properties */
-export declare type FusionAlertRuleTemplateProperties = AlertRuleTemplatePropertiesBase & {
-    /** The severity for alerts created by this alert rule. */
-    severity: AlertSeverity;
-    /** The tactics of the alert rule template */
-    tactics?: AttackTactic[];
+/** Represents IoT requirements check request. */
+export declare type IoTCheckRequirements = DataConnectorsCheckRequirements & {
+    /** Polymorphic discriminator, which specifies the different types this object can be */
+    kind: "IOT";
+    /** The subscription id to connect to, and get the data from. */
+    subscriptionId?: string;
 };
-/** Threat Intelligence alert rule template properties */
-export declare type ThreatIntelligenceAlertRuleTemplateProperties = AlertRuleTemplatePropertiesBase & {
-    /** The severity for alerts created by this alert rule. */
-    severity: AlertSeverity;
-    /** The tactics of the alert rule template */
+/** Alert rule template with MITRE property bag. */
+export declare type AlertRuleTemplateWithMitreProperties = AlertRuleTemplatePropertiesBase & {
+    /** The tactics of the alert rule */
     tactics?: AttackTactic[];
+    /** The techniques of the alert rule */
+    techniques?: string[];
 };
 /** MicrosoftSecurityIncidentCreation rule template properties */
-export declare type MicrosoftSecurityIncidentCreationAlertRuleTemplateProperties = AlertRuleTemplatePropertiesBase & MicrosoftSecurityIncidentCreationAlertRuleCommonProperties & {};
-/** Scheduled alert rule template properties */
-export declare type ScheduledAlertRuleTemplateProperties = AlertRuleTemplatePropertiesBase & QueryBasedAlertRuleTemplateProperties & ScheduledAlertRuleCommonProperties & {};
+export declare type MicrosoftSecurityIncidentCreationAlertRuleTemplateProperties = AlertRuleTemplatePropertiesBase & {
+    /** the alerts' displayNames on which the cases will be generated */
+    displayNamesFilter?: string[];
+    /** the alerts' displayNames on which the cases will not be generated */
+    displayNamesExcludeFilter?: string[];
+    /** The alerts' productName on which the cases will be generated */
+    productFilter?: MicrosoftSecurityProductName;
+    /** the alerts' severities on which the cases will be generated */
+    severitiesFilter?: AlertSeverity[];
+};
 /** NRT alert rule template properties */
-export declare type NrtAlertRuleTemplateProperties = AlertRuleTemplatePropertiesBase & QueryBasedAlertRuleTemplateProperties & {};
+export declare type NrtAlertRuleTemplateProperties = AlertRuleTemplateWithMitreProperties & QueryBasedAlertRuleTemplateProperties & {};
 /** MicrosoftSecurityIncidentCreation rule property bag. */
 export declare type MicrosoftSecurityIncidentCreationAlertRuleProperties = MicrosoftSecurityIncidentCreationAlertRuleCommonProperties & {
     /** The Name of the alert rule template used to create this rule. */
@@ -2999,27 +3005,51 @@ export declare type MicrosoftSecurityIncidentCreationAlertRuleProperties = Micro
     readonly lastModifiedUtc?: Date;
 };
 /** Scheduled alert rule base property bag. */
-export declare type ScheduledAlertRuleProperties = ScheduledAlertRuleCommonProperties & QueryBasedAlertRuleProperties & {};
-/** Nrt alert rule base property bag. */
-export declare type NrtAlertRuleProperties = QueryBasedAlertRuleProperties & {};
-/** Represents Insight Query. */
-export declare type InsightQueryItemProperties = EntityQueryItemProperties & {
-    /** The insight display name. */
-    displayName?: string;
-    /** The insight description. */
+export declare type ScheduledAlertRuleProperties = ScheduledAlertRuleCommonProperties & {
+    /** The Name of the alert rule template used to create this rule. */
+    alertRuleTemplateName?: string;
+    /** The version of the alert rule template used to create this rule - in format <a.b.c>, where all are numbers, for example 0 <1.0.2> */
+    templateVersion?: string;
+    /** The description of the alert rule. */
     description?: string;
-    /** The base query of the insight. */
-    baseQuery?: string;
-    /** The insight table query. */
-    tableQuery?: InsightQueryItemPropertiesTableQuery;
-    /** The insight chart query. */
-    chartQuery?: Record<string, unknown>;
-    /** The activity query definitions. */
-    additionalQuery?: InsightQueryItemPropertiesAdditionalQuery;
-    /** The insight chart query. */
-    defaultTimeRange?: InsightQueryItemPropertiesDefaultTimeRange;
-    /** The insight chart query. */
-    referenceTimeRange?: InsightQueryItemPropertiesReferenceTimeRange;
+    /** The display name for alerts created by this alert rule. */
+    displayName: string;
+    /** Determines whether this alert rule is enabled or disabled. */
+    enabled: boolean;
+    /**
+     * The last time that this alert rule has been modified.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly lastModifiedUtc?: Date;
+    /** The suppression (in ISO 8601 duration format) to wait since last time this alert rule been triggered. */
+    suppressionDuration: string;
+    /** Determines whether the suppression for this alert rule is enabled or disabled. */
+    suppressionEnabled: boolean;
+    /** The tactics of the alert rule */
+    tactics?: AttackTactic[];
+    /** The techniques of the alert rule */
+    techniques?: string[];
+    /** The settings of the incidents that created from alerts triggered by this analytics rule */
+    incidentConfiguration?: IncidentConfiguration;
+};
+/** Represents Insight Query. */
+export declare type InsightQueryItemProperties = EntityQueryItemProperties & {
+    /** The insight display name. */
+    displayName?: string;
+    /** The insight description. */
+    description?: string;
+    /** The base query of the insight. */
+    baseQuery?: string;
+    /** The insight table query. */
+    tableQuery?: InsightQueryItemPropertiesTableQuery;
+    /** The insight chart query. */
+    chartQuery?: Record<string, unknown>;
+    /** The activity query definitions. */
+    additionalQuery?: InsightQueryItemPropertiesAdditionalQuery;
+    /** The insight chart query. */
+    defaultTimeRange?: InsightQueryItemPropertiesDefaultTimeRange;
+    /** The insight chart query. */
+    referenceTimeRange?: InsightQueryItemPropertiesReferenceTimeRange;
 };
 /** AAD (Azure Active Directory) requirements check properties. */
 export declare type AADCheckRequirementsProperties = DataConnectorTenantId & {};
@@ -3039,6 +3069,10 @@ export declare type MTPCheckRequirementsProperties = DataConnectorTenantId & {};
 export declare type OfficeATPCheckRequirementsProperties = DataConnectorTenantId & {};
 /** OfficeIRM (Microsoft Insider Risk Management) requirements check properties. */
 export declare type OfficeIRMCheckRequirementsProperties = DataConnectorTenantId & {};
+/** Office365 Project requirements check properties. */
+export declare type Office365ProjectCheckRequirementsProperties = DataConnectorTenantId & {};
+/** Office PowerBI requirements check properties. */
+export declare type OfficePowerBICheckRequirementsProperties = DataConnectorTenantId & {};
 /** Threat Intelligence Platforms data connector required properties. */
 export declare type TICheckRequirementsProperties = DataConnectorTenantId & {};
 /** Threat Intelligence TAXII data connector required properties. */
@@ -3069,6 +3103,16 @@ export declare type Dynamics365DataConnectorProperties = DataConnectorTenantId &
 };
 /** OfficeATP (Office 365 Advanced Threat Protection) data connector properties. */
 export declare type OfficeATPDataConnectorProperties = DataConnectorTenantId & DataConnectorWithAlertsProperties & {};
+/** Office Microsoft Project data connector properties. */
+export declare type Office365ProjectDataConnectorProperties = DataConnectorTenantId & {
+    /** The available data types for the connector. */
+    dataTypes: Office365ProjectConnectorDataTypes;
+};
+/** Office Microsoft PowerBI data connector properties. */
+export declare type OfficePowerBIDataConnectorProperties = DataConnectorTenantId & {
+    /** The available data types for the connector. */
+    dataTypes: OfficePowerBIConnectorDataTypes;
+};
 /** OfficeIRM (Microsoft Insider Risk Management) data connector properties. */
 export declare type OfficeIRMDataConnectorProperties = DataConnectorTenantId & DataConnectorWithAlertsProperties & {};
 /** MDATP (Microsoft Defender Advanced Threat Protection) data connector properties. */
@@ -3111,6 +3155,11 @@ export declare type ASCDataConnectorProperties = DataConnectorWithAlertsProperti
     /** The subscription id to connect to, and get the data from. */
     subscriptionId?: string;
 };
+/** IoT data connector properties. */
+export declare type IoTDataConnectorProperties = DataConnectorWithAlertsProperties & {
+    /** The subscription id to connect to, and get the data from. */
+    subscriptionId?: string;
+};
 /** The available data types for MCAS (Microsoft Cloud App Security) data connector. */
 export declare type McasDataConnectorDataTypes = AlertsDataTypeOfDataConnector & {
     /** Discovery log data type connection. */
@@ -3134,6 +3183,10 @@ export declare type AwsCloudTrailDataConnectorDataTypesLogs = DataConnectorDataT
 export declare type AwsS3DataConnectorDataTypesLogs = DataConnectorDataTypeCommon & {};
 /** Common Data Service data type connection. */
 export declare type Dynamics365DataConnectorDataTypesDynamics365CdsActivities = DataConnectorDataTypeCommon & {};
+/** Logs data type. */
+export declare type Office365ProjectConnectorDataTypesLogs = DataConnectorDataTypeCommon & {};
+/** Logs data type. */
+export declare type OfficePowerBIConnectorDataTypesLogs = DataConnectorDataTypeCommon & {};
 /** Exchange data type connection. */
 export declare type OfficeDataConnectorDataTypesExchange = DataConnectorDataTypeCommon & {};
 /** SharePoint data type connection. */
@@ -3172,36 +3225,35 @@ export declare type ActionRequest = ResourceWithEtag & {
     /** Logic App Callback URL for this specific workflow. */
     triggerUri?: string;
 };
-/** Represents an automation rule. */
 export declare type AutomationRule = ResourceWithEtag & {
-    /** The display name of the automation  rule */
-    displayName?: string;
+    /** The display name of the automation rule */
+    displayName: string;
     /** The order of execution of the automation rule */
-    order?: number;
-    /** The triggering logic of the automation rule */
-    triggeringLogic?: AutomationRuleTriggeringLogic;
+    order: number;
+    /** Describes automation rule triggering logic */
+    triggeringLogic: AutomationRuleTriggeringLogic;
     /** The actions to execute when the automation rule is triggered */
-    actions?: AutomationRuleActionUnion[];
-    /**
-     * The time the automation rule was created
-     * NOTE: This property will not be serialized. It can only be populated by the server.
-     */
-    readonly createdTimeUtc?: Date;
+    actions: AutomationRuleActionUnion[];
     /**
      * The last time the automation rule was updated
      * NOTE: This property will not be serialized. It can only be populated by the server.
      */
     readonly lastModifiedTimeUtc?: Date;
     /**
-     * Describes the client that created the automation rule
+     * The time the automation rule was created
      * NOTE: This property will not be serialized. It can only be populated by the server.
      */
-    readonly createdBy?: ClientInfo;
+    readonly createdTimeUtc?: Date;
     /**
-     * Describes the client that last updated the automation rule
+     * Information on the client (user or application) that made some action
      * NOTE: This property will not be serialized. It can only be populated by the server.
      */
     readonly lastModifiedBy?: ClientInfo;
+    /**
+     * Information on the client (user or application) that made some action
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly createdBy?: ClientInfo;
 };
 /** Represents a bookmark in Azure Security Insights. */
 export declare type Bookmark = ResourceWithEtag & {
@@ -3231,6 +3283,12 @@ export declare type Bookmark = ResourceWithEtag & {
     queryEndTime?: Date;
     /** Describes an incident that relates to bookmark */
     incidentInfo?: IncidentInfo;
+    /** Describes the entity mappings of the bookmark */
+    entityMappings?: BookmarkEntityMappings[];
+    /** A list of relevant mitre attacks */
+    tactics?: AttackTactic[];
+    /** A list of relevant mitre techniques */
+    techniques?: string[];
 };
 /** Represents a relation between two resources */
 export declare type Relation = ResourceWithEtag & {
@@ -3369,6 +3427,20 @@ export declare type MetadataModel = ResourceWithEtag & {
     firstPublishDate?: Date;
     /** last publish date for the solution content item */
     lastPublishDate?: Date;
+    /** The custom version of the content. A optional free text */
+    customVersion?: string;
+    /** Schema version of the content. Can be used to distinguish between different flow based on the schema version */
+    contentSchemaVersion?: string;
+    /** the icon identifier. this id can later be fetched from the solution template */
+    icon?: string;
+    /** the tactics the resource covers */
+    threatAnalysisTactics?: string[];
+    /** the techniques the resource covers, these have to be aligned with the tactics being used */
+    threatAnalysisTechniques?: string[];
+    /** preview image file names. These will be taken from the solution artifacts */
+    previewImages?: string[];
+    /** preview image file names. These will be taken from the solution artifacts. used for dark theme support */
+    previewImagesDark?: string[];
 };
 /** Metadata patch request body. */
 export declare type MetadataPatch = ResourceWithEtag & {
@@ -3396,6 +3468,20 @@ export declare type MetadataPatch = ResourceWithEtag & {
     firstPublishDate?: Date;
     /** last publish date for the solution content item */
     lastPublishDate?: Date;
+    /** The custom version of the content. A optional free text */
+    customVersion?: string;
+    /** Schema version of the content. Can be used to distinguish between different flow based on the schema version */
+    contentSchemaVersion?: string;
+    /** the icon identifier. this id can later be fetched from the solution template */
+    icon?: string;
+    /** the tactics the resource covers */
+    threatAnalysisTactics?: string[];
+    /** the techniques the resource covers, these have to be aligned with the tactics being used */
+    threatAnalysisTechniques?: string[];
+    /** preview image file names. These will be taken from the solution artifacts */
+    previewImages?: string[];
+    /** preview image file names. These will be taken from the solution artifacts. used for dark theme support */
+    previewImagesDark?: string[];
 };
 /** Sentinel onboarding state */
 export declare type SentinelOnboardingState = ResourceWithEtag & {
@@ -3411,6 +3497,8 @@ export declare type Settings = ResourceWithEtag & {
 export declare type SourceControl = ResourceWithEtag & {
     /** The id (a Guid) of the source control */
     idPropertiesId?: string;
+    /** The version number associated with the source control */
+    version?: Version;
     /** The display name of the source control */
     displayName?: string;
     /** A description of the source control */
@@ -3421,6 +3509,15 @@ export declare type SourceControl = ResourceWithEtag & {
     contentTypes?: ContentType[];
     /** Repository metadata. */
     repository?: Repository;
+    /** Information regarding the resources created in user's repository. */
+    repositoryResourceInfo?: RepositoryResourceInfo;
+    /** Information regarding the latest deployment for the source control. */
+    lastDeploymentInfo?: DeploymentInfo;
+};
+/** Threat intelligence information object. */
+export declare type ThreatIntelligenceInformation = ResourceWithEtag & {
+    /** The kind of the entity. */
+    kind: ThreatIntelligenceResourceKindEnum;
 };
 /** Represents a Watchlist in Azure Security Insights. */
 export declare type Watchlist = ResourceWithEtag & {
@@ -3430,8 +3527,10 @@ export declare type Watchlist = ResourceWithEtag & {
     displayName?: string;
     /** The provider of the watchlist */
     provider?: string;
-    /** The source of the watchlist */
-    source?: Source;
+    /** The filename of the watchlist, called 'source' */
+    source?: string;
+    /** The sourceType of the watchlist */
+    sourceType?: SourceType;
     /** The time the watchlist was created */
     created?: Date;
     /** The last time the watchlist was updated */
@@ -3464,8 +3563,6 @@ export declare type Watchlist = ResourceWithEtag & {
     contentType?: string;
     /** The status of the Watchlist upload : New, InProgress or Complete. Pls note : When a Watchlist upload status is equal to InProgress, the Watchlist cannot be deleted */
     uploadStatus?: string;
-    /** The number of Watchlist Items in the Watchlist */
-    watchlistItemsCount?: number;
 };
 /** Represents a Watchlist item in Azure Security Insights. */
 export declare type WatchlistItem = ResourceWithEtag & {
@@ -3517,30 +3614,32 @@ export declare type MLBehaviorAnalyticsAlertRuleTemplate = AlertRuleTemplate & {
     requiredDataConnectors?: AlertRuleTemplateDataSource[];
     /** The alert rule template status. */
     status?: TemplateStatus;
+    /** The tactics of the alert rule */
+    tactics?: AttackTactic[];
+    /** The techniques of the alert rule */
+    techniques?: string[];
     /** The severity for alerts created by this alert rule. */
     severity?: AlertSeverity;
-    /** The tactics of the alert rule template. */
-    tactics?: AttackTactic[];
 };
 /** Represents Fusion alert rule template. */
 export declare type FusionAlertRuleTemplate = AlertRuleTemplate & {
     /** the number of alert rules that were created by this template */
     alertRulesCreatedByTemplateCount?: number;
     /**
-     * The last time that this alert rule template has been updated.
+     * The time that this alert rule template has been added.
      * NOTE: This property will not be serialized. It can only be populated by the server.
      */
-    readonly lastUpdatedDateUTC?: Date;
+    readonly createdDateUTC?: Date;
     /**
-     * The time that this alert rule template has been added.
+     * The time that this alert rule template was last updated.
      * NOTE: This property will not be serialized. It can only be populated by the server.
      */
-    readonly createdDateUTC?: Date;
+    readonly lastUpdatedDateUTC?: Date;
     /** The description of the alert rule template. */
     description?: string;
     /** The display name for alert rule template. */
     displayName?: string;
-    /** The required data sources for this template */
+    /** The required data connectors for this template */
     requiredDataConnectors?: AlertRuleTemplateDataSource[];
     /** The alert rule template status. */
     status?: TemplateStatus;
@@ -3548,6 +3647,10 @@ export declare type FusionAlertRuleTemplate = AlertRuleTemplate & {
     severity?: AlertSeverity;
     /** The tactics of the alert rule template */
     tactics?: AttackTactic[];
+    /** The techniques of the alert rule */
+    techniques?: string[];
+    /** All supported source signal configurations consumed in fusion detection. */
+    sourceSettings?: FusionTemplateSourceSetting[];
 };
 /** Represents Threat Intelligence alert rule template. */
 export declare type ThreatIntelligenceAlertRuleTemplate = AlertRuleTemplate & {
@@ -3571,10 +3674,12 @@ export declare type ThreatIntelligenceAlertRuleTemplate = AlertRuleTemplate & {
     requiredDataConnectors?: AlertRuleTemplateDataSource[];
     /** The alert rule template status. */
     status?: TemplateStatus;
+    /** The tactics of the alert rule */
+    tactics?: AttackTactic[];
+    /** The techniques of the alert rule */
+    techniques?: string[];
     /** The severity for alerts created by this alert rule. */
     severity?: AlertSeverity;
-    /** The tactics of the alert rule template */
-    tactics?: AttackTactic[];
 };
 /** Represents MicrosoftSecurityIncidentCreation rule template. */
 export declare type MicrosoftSecurityIncidentCreationAlertRuleTemplate = AlertRuleTemplate & {
@@ -3612,31 +3717,43 @@ export declare type ScheduledAlertRuleTemplate = AlertRuleTemplate & {
     /** the number of alert rules that were created by this template */
     alertRulesCreatedByTemplateCount?: number;
     /**
-     * The last time that this alert rule template has been updated.
+     * The time that this alert rule template has been added.
      * NOTE: This property will not be serialized. It can only be populated by the server.
      */
-    readonly lastUpdatedDateUTC?: Date;
+    readonly createdDateUTC?: Date;
     /**
-     * The time that this alert rule template has been added.
+     * The time that this alert rule template was last updated.
      * NOTE: This property will not be serialized. It can only be populated by the server.
      */
-    readonly createdDateUTC?: Date;
+    readonly lastUpdatedDateUTC?: Date;
     /** The description of the alert rule template. */
     description?: string;
     /** The display name for alert rule template. */
     displayName?: string;
-    /** The required data sources for this template */
+    /** The required data connectors for this template */
     requiredDataConnectors?: AlertRuleTemplateDataSource[];
     /** The alert rule template status. */
     status?: TemplateStatus;
     /** The query that creates alerts for this rule. */
     query?: string;
+    /** The frequency (in ISO 8601 duration format) for this alert rule to run. */
+    queryFrequency?: string;
+    /** The period (in ISO 8601 duration format) that this alert rule looks at. */
+    queryPeriod?: string;
     /** The severity for alerts created by this alert rule. */
     severity?: AlertSeverity;
-    /** The tactics of the alert rule */
+    /** The operation against the threshold that triggers alert rule. */
+    triggerOperator?: TriggerOperator;
+    /** The threshold triggers this alert rule. */
+    triggerThreshold?: number;
+    /** The tactics of the alert rule template */
     tactics?: AttackTactic[];
+    /** The techniques of the alert rule */
+    techniques?: string[];
     /** The version of this template - in format <a.b.c>, where all are numbers. For example <1.0.2>. */
     version?: string;
+    /** The event grouping settings. */
+    eventGroupingSettings?: EventGroupingSettings;
     /** Dictionary of string key-value pairs of columns to be attached to the alert */
     customDetails?: {
         [propertyName: string]: string;
@@ -3645,16 +3762,6 @@ export declare type ScheduledAlertRuleTemplate = AlertRuleTemplate & {
     entityMappings?: EntityMapping[];
     /** The alert details override settings */
     alertDetailsOverride?: AlertDetailsOverride;
-    /** The frequency (in ISO 8601 duration format) for this alert rule to run. */
-    queryFrequency?: string;
-    /** The period (in ISO 8601 duration format) that this alert rule looks at. */
-    queryPeriod?: string;
-    /** The operation against the threshold that triggers alert rule. */
-    triggerOperator?: TriggerOperator;
-    /** The threshold triggers this alert rule. */
-    triggerThreshold?: number;
-    /** The event grouping settings. */
-    eventGroupingSettings?: EventGroupingSettings;
 };
 /** Represents NRT alert rule template. */
 export declare type NrtAlertRuleTemplate = AlertRuleTemplate & {
@@ -3678,12 +3785,14 @@ export declare type NrtAlertRuleTemplate = AlertRuleTemplate & {
     requiredDataConnectors?: AlertRuleTemplateDataSource[];
     /** The alert rule template status. */
     status?: TemplateStatus;
+    /** The tactics of the alert rule */
+    tactics?: AttackTactic[];
+    /** The techniques of the alert rule */
+    techniques?: string[];
     /** The query that creates alerts for this rule. */
     query?: string;
     /** The severity for alerts created by this alert rule. */
     severity?: AlertSeverity;
-    /** The tactics of the alert rule */
-    tactics?: AttackTactic[];
     /** The version of this template - in format <a.b.c>, where all are numbers. For example <1.0.2>. */
     version?: string;
     /** Dictionary of string key-value pairs of columns to be attached to the alert */
@@ -4810,78 +4919,15 @@ export declare type ActivityEntityQueryTemplate = EntityQueryTemplate & {
         [propertyName: string]: string[];
     };
 };
-/** Threat intelligence indicator entity. */
-export declare type ThreatIntelligenceIndicatorModel = ThreatIntelligenceInformation & {
-    /**
-     * A bag of custom fields that should be part of the entity and will be presented to the user.
-     * NOTE: This property will not be serialized. It can only be populated by the server.
-     */
-    readonly additionalData?: {
-        [propertyName: string]: Record<string, unknown>;
-    };
-    /**
-     * The graph item display name which is a short humanly readable description of the graph item instance. This property is optional and might be system generated.
-     * NOTE: This property will not be serialized. It can only be populated by the server.
-     */
-    readonly friendlyName?: string;
-    /** List of tags */
-    threatIntelligenceTags?: string[];
-    /** Last updated time in UTC */
-    lastUpdatedTimeUtc?: string;
-    /** Source of a threat intelligence entity */
-    source?: string;
-    /** Display name of a threat intelligence entity */
-    displayName?: string;
-    /** Description of a threat intelligence entity */
-    description?: string;
-    /** Indicator types of threat intelligence entities */
-    indicatorTypes?: string[];
-    /** Pattern of a threat intelligence entity */
-    pattern?: string;
-    /** Pattern type of a threat intelligence entity */
-    patternType?: string;
-    /** Pattern version of a threat intelligence entity */
-    patternVersion?: string;
-    /** Kill chain phases */
-    killChainPhases?: ThreatIntelligenceKillChainPhase[];
-    /** Parsed patterns */
-    parsedPattern?: ThreatIntelligenceParsedPattern[];
-    /** External ID of threat intelligence entity */
-    externalId?: string;
-    /** Created by reference of threat intelligence entity */
-    createdByRef?: string;
-    /** Is threat intelligence entity defanged */
-    defanged?: boolean;
-    /** External last updated time in UTC */
-    externalLastUpdatedTimeUtc?: string;
-    /** External References */
-    externalReferences?: ThreatIntelligenceExternalReference[];
-    /** Granular Markings */
-    granularMarkings?: ThreatIntelligenceGranularMarkingModel[];
-    /** Labels  of threat intelligence entity */
-    labels?: string[];
-    /** Is threat intelligence entity revoked */
-    revoked?: boolean;
-    /** Confidence of threat intelligence entity */
-    confidence?: number;
-    /** Threat intelligence entity object marking references */
-    objectMarkingRefs?: string[];
-    /** Language of threat intelligence entity */
-    language?: string;
-    /** Threat types */
-    threatTypes?: string[];
-    /** Valid from */
-    validFrom?: string;
-    /** Valid until */
-    validUntil?: string;
-    /** Created by */
-    created?: string;
-    /** Modified by */
-    modified?: string;
-    /** Extensions map */
-    extensions?: {
-        [propertyName: string]: any;
-    };
+/** MLBehaviorAnalytics alert rule template properties. */
+export declare type MLBehaviorAnalyticsAlertRuleTemplateProperties = AlertRuleTemplateWithMitreProperties & {
+    /** The severity for alerts created by this alert rule. */
+    severity: AlertSeverity;
+};
+/** Threat Intelligence alert rule template properties */
+export declare type ThreatIntelligenceAlertRuleTemplateProperties = AlertRuleTemplateWithMitreProperties & {
+    /** The severity for alerts created by this alert rule. */
+    severity: AlertSeverity;
 };
 export declare type PermissionsCustomsItem = Customs & {};
 /** Represents MLBehaviorAnalytics alert rule. */
@@ -4915,6 +4961,11 @@ export declare type MLBehaviorAnalyticsAlertRule = AlertRule & {
      * NOTE: This property will not be serialized. It can only be populated by the server.
      */
     readonly tactics?: AttackTactic[];
+    /**
+     * The techniques of the alert rule
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly techniques?: string[];
 };
 /** Represents Fusion alert rule. */
 export declare type FusionAlertRule = AlertRule & {
@@ -4932,6 +4983,10 @@ export declare type FusionAlertRule = AlertRule & {
     readonly displayName?: string;
     /** Determines whether this alert rule is enabled or disabled. */
     enabled?: boolean;
+    /** Configuration for all supported source signals in fusion detection. */
+    sourceSettings?: FusionSourceSettings[];
+    /** Configuration to exclude scenarios in fusion detection. */
+    scenarioExclusionPatterns?: FusionScenarioExclusionPattern[];
     /**
      * The last time that this alert has been modified.
      * NOTE: This property will not be serialized. It can only be populated by the server.
@@ -4947,6 +5002,11 @@ export declare type FusionAlertRule = AlertRule & {
      * NOTE: This property will not be serialized. It can only be populated by the server.
      */
     readonly tactics?: AttackTactic[];
+    /**
+     * The techniques of the alert rule
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly techniques?: string[];
 };
 /** Represents Threat Intelligence alert rule. */
 export declare type ThreatIntelligenceAlertRule = AlertRule & {
@@ -4979,6 +5039,11 @@ export declare type ThreatIntelligenceAlertRule = AlertRule & {
      * NOTE: This property will not be serialized. It can only be populated by the server.
      */
     readonly tactics?: AttackTactic[];
+    /**
+     * The techniques of the alert rule
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly techniques?: string[];
 };
 /** Represents MicrosoftSecurityIncidentCreation rule. */
 export declare type MicrosoftSecurityIncidentCreationAlertRule = AlertRule & {
@@ -5006,24 +5071,34 @@ export declare type MicrosoftSecurityIncidentCreationAlertRule = AlertRule & {
 };
 /** Represents scheduled alert rule. */
 export declare type ScheduledAlertRule = AlertRule & {
+    /** The query that creates alerts for this rule. */
+    query?: string;
     /** The frequency (in ISO 8601 duration format) for this alert rule to run. */
     queryFrequency?: string;
     /** The period (in ISO 8601 duration format) that this alert rule looks at. */
     queryPeriod?: string;
+    /** The severity for alerts created by this alert rule. */
+    severity?: AlertSeverity;
     /** The operation against the threshold that triggers alert rule. */
     triggerOperator?: TriggerOperator;
     /** The threshold triggers this alert rule. */
     triggerThreshold?: number;
     /** The event grouping settings. */
     eventGroupingSettings?: EventGroupingSettings;
+    /** Dictionary of string key-value pairs of columns to be attached to the alert */
+    customDetails?: {
+        [propertyName: string]: string;
+    };
+    /** Array of the entity mappings of the alert rule */
+    entityMappings?: EntityMapping[];
+    /** The alert details override settings */
+    alertDetailsOverride?: AlertDetailsOverride;
     /** The Name of the alert rule template used to create this rule. */
     alertRuleTemplateName?: string;
     /** The version of the alert rule template used to create this rule - in format <a.b.c>, where all are numbers, for example 0 <1.0.2> */
     templateVersion?: string;
     /** The description of the alert rule. */
     description?: string;
-    /** The query that creates alerts for this rule. */
-    query?: string;
     /** The display name for alerts created by this alert rule. */
     displayName?: string;
     /** Determines whether this alert rule is enabled or disabled. */
@@ -5037,20 +5112,12 @@ export declare type ScheduledAlertRule = AlertRule & {
     suppressionDuration?: string;
     /** Determines whether the suppression for this alert rule is enabled or disabled. */
     suppressionEnabled?: boolean;
-    /** The severity for alerts created by this alert rule. */
-    severity?: AlertSeverity;
     /** The tactics of the alert rule */
     tactics?: AttackTactic[];
+    /** The techniques of the alert rule */
+    techniques?: string[];
     /** The settings of the incidents that created from alerts triggered by this analytics rule */
     incidentConfiguration?: IncidentConfiguration;
-    /** Dictionary of string key-value pairs of columns to be attached to the alert */
-    customDetails?: {
-        [propertyName: string]: string;
-    };
-    /** Array of the entity mappings of the alert rule */
-    entityMappings?: EntityMapping[];
-    /** The alert details override settings */
-    alertDetailsOverride?: AlertDetailsOverride;
 };
 /** Represents NRT alert rule. */
 export declare type NrtAlertRule = AlertRule & {
@@ -5062,6 +5129,10 @@ export declare type NrtAlertRule = AlertRule & {
     description?: string;
     /** The query that creates alerts for this rule. */
     query?: string;
+    /** The tactics of the alert rule */
+    tactics?: AttackTactic[];
+    /** The techniques of the alert rule */
+    techniques?: string[];
     /** The display name for alerts created by this alert rule. */
     displayName?: string;
     /** Determines whether this alert rule is enabled or disabled. */
@@ -5077,8 +5148,6 @@ export declare type NrtAlertRule = AlertRule & {
     suppressionEnabled?: boolean;
     /** The severity for alerts created by this alert rule. */
     severity?: AlertSeverity;
-    /** The tactics of the alert rule */
-    tactics?: AttackTactic[];
     /** The settings of the incidents that created from alerts triggered by this analytics rule */
     incidentConfiguration?: IncidentConfiguration;
     /** Dictionary of string key-value pairs of columns to be attached to the alert */
@@ -5200,31 +5269,104 @@ export declare type Ueba = Settings & {
     /** The relevant data sources that enriched by ueba */
     dataSources?: UebaDataSources[];
 };
-/** Represents AAD (Azure Active Directory) data connector. */
-export declare type AADDataConnector = DataConnector & {
-    /** The tenant id to connect to, and get the data from. */
-    tenantId?: string;
-    /** The available data types for the connector. */
-    dataTypes?: AlertsDataTypeOfDataConnector;
-};
-/** Represents Microsoft Threat Intelligence data connector. */
-export declare type MstiDataConnector = DataConnector & {
-    /** The tenant id to connect to, and get the data from. */
-    tenantId?: string;
-    /** The available data types for the connector. */
-    dataTypes?: MstiDataConnectorDataTypes;
-};
-/** Represents MTP (Microsoft Threat Protection) data connector. */
-export declare type MTPDataConnector = DataConnector & {
-    /** The tenant id to connect to, and get the data from. */
-    tenantId?: string;
-    /** The available data types for the connector. */
-    dataTypes?: MTPDataConnectorDataTypes;
-};
-/** Represents AATP (Azure Advanced Threat Protection) data connector. */
-export declare type AatpDataConnector = DataConnector & {
-    /** The tenant id to connect to, and get the data from. */
-    tenantId?: string;
+/** Threat intelligence indicator entity. */
+export declare type ThreatIntelligenceIndicatorModel = ThreatIntelligenceInformation & {
+    /**
+     * A bag of custom fields that should be part of the entity and will be presented to the user.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly additionalData?: {
+        [propertyName: string]: Record<string, unknown>;
+    };
+    /**
+     * The graph item display name which is a short humanly readable description of the graph item instance. This property is optional and might be system generated.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly friendlyName?: string;
+    /** List of tags */
+    threatIntelligenceTags?: string[];
+    /** Last updated time in UTC */
+    lastUpdatedTimeUtc?: string;
+    /** Source of a threat intelligence entity */
+    source?: string;
+    /** Display name of a threat intelligence entity */
+    displayName?: string;
+    /** Description of a threat intelligence entity */
+    description?: string;
+    /** Indicator types of threat intelligence entities */
+    indicatorTypes?: string[];
+    /** Pattern of a threat intelligence entity */
+    pattern?: string;
+    /** Pattern type of a threat intelligence entity */
+    patternType?: string;
+    /** Pattern version of a threat intelligence entity */
+    patternVersion?: string;
+    /** Kill chain phases */
+    killChainPhases?: ThreatIntelligenceKillChainPhase[];
+    /** Parsed patterns */
+    parsedPattern?: ThreatIntelligenceParsedPattern[];
+    /** External ID of threat intelligence entity */
+    externalId?: string;
+    /** Created by reference of threat intelligence entity */
+    createdByRef?: string;
+    /** Is threat intelligence entity defanged */
+    defanged?: boolean;
+    /** External last updated time in UTC */
+    externalLastUpdatedTimeUtc?: string;
+    /** External References */
+    externalReferences?: ThreatIntelligenceExternalReference[];
+    /** Granular Markings */
+    granularMarkings?: ThreatIntelligenceGranularMarkingModel[];
+    /** Labels  of threat intelligence entity */
+    labels?: string[];
+    /** Is threat intelligence entity revoked */
+    revoked?: boolean;
+    /** Confidence of threat intelligence entity */
+    confidence?: number;
+    /** Threat intelligence entity object marking references */
+    objectMarkingRefs?: string[];
+    /** Language of threat intelligence entity */
+    language?: string;
+    /** Threat types */
+    threatTypes?: string[];
+    /** Valid from */
+    validFrom?: string;
+    /** Valid until */
+    validUntil?: string;
+    /** Created by */
+    created?: string;
+    /** Modified by */
+    modified?: string;
+    /** Extensions map */
+    extensions?: {
+        [propertyName: string]: any;
+    };
+};
+/** Represents AAD (Azure Active Directory) data connector. */
+export declare type AADDataConnector = DataConnector & {
+    /** The tenant id to connect to, and get the data from. */
+    tenantId?: string;
+    /** The available data types for the connector. */
+    dataTypes?: AlertsDataTypeOfDataConnector;
+};
+/** Represents Microsoft Threat Intelligence data connector. */
+export declare type MstiDataConnector = DataConnector & {
+    /** The tenant id to connect to, and get the data from. */
+    tenantId?: string;
+    /** The available data types for the connector. */
+    dataTypes?: MstiDataConnectorDataTypes;
+};
+/** Represents MTP (Microsoft Threat Protection) data connector. */
+export declare type MTPDataConnector = DataConnector & {
+    /** The tenant id to connect to, and get the data from. */
+    tenantId?: string;
+    /** The available data types for the connector. */
+    dataTypes?: MTPDataConnectorDataTypes;
+};
+/** Represents AATP (Azure Advanced Threat Protection) data connector. */
+export declare type AatpDataConnector = DataConnector & {
+    /** The tenant id to connect to, and get the data from. */
+    tenantId?: string;
     /** The available data types for the connector. */
     dataTypes?: AlertsDataTypeOfDataConnector;
 };
@@ -5274,6 +5416,20 @@ export declare type OfficeATPDataConnector = DataConnector & {
     /** The available data types for the connector. */
     dataTypes?: AlertsDataTypeOfDataConnector;
 };
+/** Represents Office Microsoft Project data connector. */
+export declare type Office365ProjectDataConnector = DataConnector & {
+    /** The tenant id to connect to, and get the data from. */
+    tenantId?: string;
+    /** The available data types for the connector. */
+    dataTypes?: Office365ProjectConnectorDataTypes;
+};
+/** Represents Office Microsoft PowerBI data connector. */
+export declare type OfficePowerBIDataConnector = DataConnector & {
+    /** The tenant id to connect to, and get the data from. */
+    tenantId?: string;
+    /** The available data types for the connector. */
+    dataTypes?: OfficePowerBIConnectorDataTypes;
+};
 /** Represents OfficeIRM (Microsoft Insider Risk Management) data connector. */
 export declare type OfficeIRMDataConnector = DataConnector & {
     /** The tenant id to connect to, and get the data from. */
@@ -5327,6 +5483,13 @@ export declare type TiTaxiiDataConnector = DataConnector & {
     /** The available data types for Threat Intelligence TAXII data connector. */
     dataTypes?: TiTaxiiDataConnectorDataTypes;
 };
+/** Represents IoT data connector. */
+export declare type IoTDataConnector = DataConnector & {
+    /** The available data types for the connector. */
+    dataTypes?: AlertsDataTypeOfDataConnector;
+    /** The subscription id to connect to, and get the data from. */
+    subscriptionId?: string;
+};
 /** Represents Codeless UI data connector. */
 export declare type CodelessUiDataConnector = DataConnector & {
     /** Config to describe the instructions blade */
@@ -5339,6 +5502,16 @@ export declare type CodelessApiPollingDataConnector = DataConnector & {
     /** Config to describe the polling instructions */
     pollingConfig?: CodelessConnectorPollingConfigProperties;
 };
+/** Defines headers for Watchlists_delete operation. */
+export interface WatchlistsDeleteHeaders {
+    /** Contains the status URL on which clients are expected to poll the status of the delete operation. */
+    azureAsyncOperation?: string;
+}
+/** Defines headers for Watchlists_createOrUpdate operation. */
+export interface WatchlistsCreateOrUpdateHeaders {
+    /** Contains the status URL on which clients are expected to poll the status of the operation. */
+    azureAsyncOperation?: string;
+}
 /** Known values of {@link AlertRuleKind} that the service accepts. */
 export declare enum KnownAlertRuleKind {
     Scheduled = "Scheduled",
@@ -5405,35 +5578,35 @@ export declare enum KnownTriggersWhen {
  * **Created**: Trigger on created objects
  */
 export declare type TriggersWhen = string;
-/** Known values of {@link AutomationRuleConditionType} that the service accepts. */
-export declare enum KnownAutomationRuleConditionType {
+/** Known values of {@link ConditionType} that the service accepts. */
+export declare enum KnownConditionType {
     /** Evaluate an object property value */
     Property = "Property"
 }
 /**
- * Defines values for AutomationRuleConditionType. \
- * {@link KnownAutomationRuleConditionType} can be used interchangeably with AutomationRuleConditionType,
+ * Defines values for ConditionType. \
+ * {@link KnownConditionType} can be used interchangeably with ConditionType,
  *  this enum contains the known values that the service supports.
  * ### Known values supported by the service
  * **Property**: Evaluate an object property value
  */
-export declare type AutomationRuleConditionType = string;
-/** Known values of {@link AutomationRuleActionType} that the service accepts. */
-export declare enum KnownAutomationRuleActionType {
+export declare type ConditionType = string;
+/** Known values of {@link ActionType} that the service accepts. */
+export declare enum KnownActionType {
     /** Modify an object's properties */
     ModifyProperties = "ModifyProperties",
     /** Run a playbook on an object */
     RunPlaybook = "RunPlaybook"
 }
 /**
- * Defines values for AutomationRuleActionType. \
- * {@link KnownAutomationRuleActionType} can be used interchangeably with AutomationRuleActionType,
+ * Defines values for ActionType. \
+ * {@link KnownActionType} can be used interchangeably with ActionType,
  *  this enum contains the known values that the service supports.
  * ### Known values supported by the service
  * **ModifyProperties**: Modify an object's properties \
  * **RunPlaybook**: Run a playbook on an object
  */
-export declare type AutomationRuleActionType = string;
+export declare type ActionType = string;
 /** Known values of {@link IncidentSeverity} that the service accepts. */
 export declare enum KnownIncidentSeverity {
     /** High severity */
@@ -5456,6 +5629,50 @@ export declare enum KnownIncidentSeverity {
  * **Informational**: Informational severity
  */
 export declare type IncidentSeverity = string;
+/** Known values of {@link AttackTactic} that the service accepts. */
+export declare enum KnownAttackTactic {
+    Reconnaissance = "Reconnaissance",
+    ResourceDevelopment = "ResourceDevelopment",
+    InitialAccess = "InitialAccess",
+    Execution = "Execution",
+    Persistence = "Persistence",
+    PrivilegeEscalation = "PrivilegeEscalation",
+    DefenseEvasion = "DefenseEvasion",
+    CredentialAccess = "CredentialAccess",
+    Discovery = "Discovery",
+    LateralMovement = "LateralMovement",
+    Collection = "Collection",
+    Exfiltration = "Exfiltration",
+    CommandAndControl = "CommandAndControl",
+    Impact = "Impact",
+    PreAttack = "PreAttack",
+    ImpairProcessControl = "ImpairProcessControl",
+    InhibitResponseFunction = "InhibitResponseFunction"
+}
+/**
+ * Defines values for AttackTactic. \
+ * {@link KnownAttackTactic} can be used interchangeably with AttackTactic,
+ *  this enum contains the known values that the service supports.
+ * ### Known values supported by the service
+ * **Reconnaissance** \
+ * **ResourceDevelopment** \
+ * **InitialAccess** \
+ * **Execution** \
+ * **Persistence** \
+ * **PrivilegeEscalation** \
+ * **DefenseEvasion** \
+ * **CredentialAccess** \
+ * **Discovery** \
+ * **LateralMovement** \
+ * **Collection** \
+ * **Exfiltration** \
+ * **CommandAndControl** \
+ * **Impact** \
+ * **PreAttack** \
+ * **ImpairProcessControl** \
+ * **InhibitResponseFunction**
+ */
+export declare type AttackTactic = string;
 /** Known values of {@link EntityKind} that the service accepts. */
 export declare enum KnownEntityKind {
     /** Entity represents account in the system. */
@@ -5529,20 +5746,38 @@ export declare enum KnownEntityKind {
  * **SubmissionMail**: Entity represents submission mail in the system.
  */
 export declare type EntityKind = string;
-/** Known values of {@link Enum8} that the service accepts. */
-export declare enum KnownEnum8 {
-    Expansion = "Expansion",
-    Activity = "Activity"
+/** Known values of {@link EntityTimelineKind} that the service accepts. */
+export declare enum KnownEntityTimelineKind {
+    /** activity */
+    Activity = "Activity",
+    /** bookmarks */
+    Bookmark = "Bookmark",
+    /** security alerts */
+    SecurityAlert = "SecurityAlert"
 }
 /**
- * Defines values for Enum8. \
- * {@link KnownEnum8} can be used interchangeably with Enum8,
+ * Defines values for EntityTimelineKind. \
+ * {@link KnownEntityTimelineKind} can be used interchangeably with EntityTimelineKind,
  *  this enum contains the known values that the service supports.
  * ### Known values supported by the service
- * **Expansion** \
- * **Activity**
+ * **Activity**: activity \
+ * **Bookmark**: bookmarks \
+ * **SecurityAlert**: security alerts
+ */
+export declare type EntityTimelineKind = string;
+/** Known values of {@link EntityItemQueryKind} that the service accepts. */
+export declare enum KnownEntityItemQueryKind {
+    /** insight */
+    Insight = "Insight"
+}
+/**
+ * Defines values for EntityItemQueryKind. \
+ * {@link KnownEntityItemQueryKind} can be used interchangeably with EntityItemQueryKind,
+ *  this enum contains the known values that the service supports.
+ * ### Known values supported by the service
+ * **Insight**: insight
  */
-export declare type Enum8 = string;
+export declare type EntityItemQueryKind = string;
 /** Known values of {@link EntityQueryKind} that the service accepts. */
 export declare enum KnownEntityQueryKind {
     Expansion = "Expansion",
@@ -5559,86 +5794,44 @@ export declare enum KnownEntityQueryKind {
  * **Activity**
  */
 export declare type EntityQueryKind = string;
-/** Known values of {@link CustomEntityQueryKind} that the service accepts. */
-export declare enum KnownCustomEntityQueryKind {
+/** Known values of {@link Enum12} that the service accepts. */
+export declare enum KnownEnum12 {
+    Expansion = "Expansion",
     Activity = "Activity"
 }
 /**
- * Defines values for CustomEntityQueryKind. \
- * {@link KnownCustomEntityQueryKind} can be used interchangeably with CustomEntityQueryKind,
+ * Defines values for Enum12. \
+ * {@link KnownEnum12} can be used interchangeably with Enum12,
  *  this enum contains the known values that the service supports.
  * ### Known values supported by the service
+ * **Expansion** \
  * **Activity**
  */
-export declare type CustomEntityQueryKind = string;
-/** Known values of {@link EntityTimelineKind} that the service accepts. */
-export declare enum KnownEntityTimelineKind {
-    /** activity */
-    Activity = "Activity",
-    /** bookmarks */
-    Bookmark = "Bookmark",
-    /** security alerts */
-    SecurityAlert = "SecurityAlert"
-}
-/**
- * Defines values for EntityTimelineKind. \
- * {@link KnownEntityTimelineKind} can be used interchangeably with EntityTimelineKind,
- *  this enum contains the known values that the service supports.
- * ### Known values supported by the service
- * **Activity**: activity \
- * **Bookmark**: bookmarks \
- * **SecurityAlert**: security alerts
- */
-export declare type EntityTimelineKind = string;
-/** Known values of {@link EntityItemQueryKind} that the service accepts. */
-export declare enum KnownEntityItemQueryKind {
-    /** insight */
-    Insight = "Insight"
+export declare type Enum12 = string;
+/** Known values of {@link CustomEntityQueryKind} that the service accepts. */
+export declare enum KnownCustomEntityQueryKind {
+    Activity = "Activity"
 }
 /**
- * Defines values for EntityItemQueryKind. \
- * {@link KnownEntityItemQueryKind} can be used interchangeably with EntityItemQueryKind,
+ * Defines values for CustomEntityQueryKind. \
+ * {@link KnownCustomEntityQueryKind} can be used interchangeably with CustomEntityQueryKind,
  *  this enum contains the known values that the service supports.
  * ### Known values supported by the service
- * **Insight**: insight
+ * **Activity**
  */
-export declare type EntityItemQueryKind = string;
-/** Known values of {@link AttackTactic} that the service accepts. */
-export declare enum KnownAttackTactic {
-    InitialAccess = "InitialAccess",
-    Execution = "Execution",
-    Persistence = "Persistence",
-    PrivilegeEscalation = "PrivilegeEscalation",
-    DefenseEvasion = "DefenseEvasion",
-    CredentialAccess = "CredentialAccess",
-    Discovery = "Discovery",
-    LateralMovement = "LateralMovement",
-    Collection = "Collection",
-    Exfiltration = "Exfiltration",
-    CommandAndControl = "CommandAndControl",
-    Impact = "Impact",
-    PreAttack = "PreAttack"
+export declare type CustomEntityQueryKind = string;
+/** Known values of {@link EntityQueryTemplateKind} that the service accepts. */
+export declare enum KnownEntityQueryTemplateKind {
+    Activity = "Activity"
 }
 /**
- * Defines values for AttackTactic. \
- * {@link KnownAttackTactic} can be used interchangeably with AttackTactic,
+ * Defines values for EntityQueryTemplateKind. \
+ * {@link KnownEntityQueryTemplateKind} can be used interchangeably with EntityQueryTemplateKind,
  *  this enum contains the known values that the service supports.
  * ### Known values supported by the service
- * **InitialAccess** \
- * **Execution** \
- * **Persistence** \
- * **PrivilegeEscalation** \
- * **DefenseEvasion** \
- * **CredentialAccess** \
- * **Discovery** \
- * **LateralMovement** \
- * **Collection** \
- * **Exfiltration** \
- * **CommandAndControl** \
- * **Impact** \
- * **PreAttack**
+ * **Activity**
  */
-export declare type AttackTactic = string;
+export declare type EntityQueryTemplateKind = string;
 /** Known values of {@link IncidentClassification} that the service accepts. */
 export declare enum KnownIncidentClassification {
     /** Incident classification was undetermined */
@@ -5688,7 +5881,7 @@ export declare enum KnownIncidentLabelType {
     /** Label manually created by a user */
     User = "User",
     /** Label automatically created by the system */
-    System = "System"
+    AutoAssigned = "AutoAssigned"
 }
 /**
  * Defines values for IncidentLabelType. \
@@ -5696,7 +5889,7 @@ export declare enum KnownIncidentLabelType {
  *  this enum contains the known values that the service supports.
  * ### Known values supported by the service
  * **User**: Label manually created by a user \
- * **System**: Label automatically created by the system
+ * **AutoAssigned**: Label automatically created by the system
  */
 export declare type IncidentLabelType = string;
 /** Known values of {@link OwnerType} that the service accepts. */
@@ -5892,7 +6085,10 @@ export declare enum KnownKind {
     Parser = "Parser",
     Watchlist = "Watchlist",
     WatchlistTemplate = "WatchlistTemplate",
-    Solution = "Solution"
+    Solution = "Solution",
+    AzureFunction = "AzureFunction",
+    LogicAppsCustomConnector = "LogicAppsCustomConnector",
+    AutomationRule = "AutomationRule"
 }
 /**
  * Defines values for Kind. \
@@ -5912,7 +6108,10 @@ export declare enum KnownKind {
  * **Parser** \
  * **Watchlist** \
  * **WatchlistTemplate** \
- * **Solution**
+ * **Solution** \
+ * **AzureFunction** \
+ * **LogicAppsCustomConnector** \
+ * **AutomationRule**
  */
 export declare type Kind = string;
 /** Known values of {@link SourceKind} that the service accepts. */
@@ -5995,6 +6194,20 @@ export declare enum KnownRepoType {
  * **DevOps**
  */
 export declare type RepoType = string;
+/** Known values of {@link Version} that the service accepts. */
+export declare enum KnownVersion {
+    V1 = "V1",
+    V2 = "V2"
+}
+/**
+ * Defines values for Version. \
+ * {@link KnownVersion} can be used interchangeably with Version,
+ *  this enum contains the known values that the service supports.
+ * ### Known values supported by the service
+ * **V1** \
+ * **V2**
+ */
+export declare type Version = string;
 /** Known values of {@link ContentType} that the service accepts. */
 export declare enum KnownContentType {
     AnalyticRule = "AnalyticRule",
@@ -6009,20 +6222,99 @@ export declare enum KnownContentType {
  * **Workbook**
  */
 export declare type ContentType = string;
-/** Known values of {@link Source} that the service accepts. */
-export declare enum KnownSource {
+/** Known values of {@link DeploymentFetchStatus} that the service accepts. */
+export declare enum KnownDeploymentFetchStatus {
+    Success = "Success",
+    Unauthorized = "Unauthorized",
+    NotFound = "NotFound"
+}
+/**
+ * Defines values for DeploymentFetchStatus. \
+ * {@link KnownDeploymentFetchStatus} can be used interchangeably with DeploymentFetchStatus,
+ *  this enum contains the known values that the service supports.
+ * ### Known values supported by the service
+ * **Success** \
+ * **Unauthorized** \
+ * **NotFound**
+ */
+export declare type DeploymentFetchStatus = string;
+/** Known values of {@link DeploymentState} that the service accepts. */
+export declare enum KnownDeploymentState {
+    InProgress = "In_Progress",
+    Completed = "Completed",
+    Queued = "Queued",
+    Canceling = "Canceling"
+}
+/**
+ * Defines values for DeploymentState. \
+ * {@link KnownDeploymentState} can be used interchangeably with DeploymentState,
+ *  this enum contains the known values that the service supports.
+ * ### Known values supported by the service
+ * **In_Progress** \
+ * **Completed** \
+ * **Queued** \
+ * **Canceling**
+ */
+export declare type DeploymentState = string;
+/** Known values of {@link DeploymentResult} that the service accepts. */
+export declare enum KnownDeploymentResult {
+    Success = "Success",
+    Canceled = "Canceled",
+    Failed = "Failed"
+}
+/**
+ * Defines values for DeploymentResult. \
+ * {@link KnownDeploymentResult} can be used interchangeably with DeploymentResult,
+ *  this enum contains the known values that the service supports.
+ * ### Known values supported by the service
+ * **Success** \
+ * **Canceled** \
+ * **Failed**
+ */
+export declare type DeploymentResult = string;
+/** Known values of {@link ThreatIntelligenceResourceKindEnum} that the service accepts. */
+export declare enum KnownThreatIntelligenceResourceKindEnum {
+    /** Entity represents threat intelligence indicator in the system. */
+    Indicator = "indicator"
+}
+/**
+ * Defines values for ThreatIntelligenceResourceKindEnum. \
+ * {@link KnownThreatIntelligenceResourceKindEnum} can be used interchangeably with ThreatIntelligenceResourceKindEnum,
+ *  this enum contains the known values that the service supports.
+ * ### Known values supported by the service
+ * **indicator**: Entity represents threat intelligence indicator in the system.
+ */
+export declare type ThreatIntelligenceResourceKindEnum = string;
+/** Known values of {@link ThreatIntelligenceSortingCriteriaEnum} that the service accepts. */
+export declare enum KnownThreatIntelligenceSortingCriteriaEnum {
+    Unsorted = "unsorted",
+    Ascending = "ascending",
+    Descending = "descending"
+}
+/**
+ * Defines values for ThreatIntelligenceSortingCriteriaEnum. \
+ * {@link KnownThreatIntelligenceSortingCriteriaEnum} can be used interchangeably with ThreatIntelligenceSortingCriteriaEnum,
+ *  this enum contains the known values that the service supports.
+ * ### Known values supported by the service
+ * **unsorted** \
+ * **ascending** \
+ * **descending**
+ */
+export declare type ThreatIntelligenceSortingCriteriaEnum = string;
+/** Known values of {@link SourceType} that the service accepts. */
+export declare enum KnownSourceType {
     LocalFile = "Local file",
     RemoteStorage = "Remote storage"
 }
 /**
- * Defines values for Source. \
- * {@link KnownSource} can be used interchangeably with Source,
+ * Defines values for SourceType. \
+ * {@link KnownSourceType} can be used interchangeably with SourceType,
  *  this enum contains the known values that the service supports.
  * ### Known values supported by the service
  * **Local file** \
  * **Remote storage**
  */
-export declare type Source = string;
+export declare type SourceType = string;
 /** Known values of {@link DataConnectorKind} that the service accepts. */
 export declare enum KnownDataConnectorKind {
     AzureActiveDirectory = "AzureActiveDirectory",
@@ -6033,6 +6325,8 @@ export declare enum KnownDataConnectorKind {
     Office365 = "Office365",
     OfficeATP = "OfficeATP",
     OfficeIRM = "OfficeIRM",
+    Office365Project = "Office365Project",
+    OfficePowerBI = "OfficePowerBI",
     AmazonWebServicesCloudTrail = "AmazonWebServicesCloudTrail",
     AmazonWebServicesS3 = "AmazonWebServicesS3",
     AzureAdvancedThreatProtection = "AzureAdvancedThreatProtection",
@@ -6041,7 +6335,8 @@ export declare enum KnownDataConnectorKind {
     MicrosoftThreatProtection = "MicrosoftThreatProtection",
     MicrosoftThreatIntelligence = "MicrosoftThreatIntelligence",
     GenericUI = "GenericUI",
-    APIPolling = "APIPolling"
+    APIPolling = "APIPolling",
+    IOT = "IOT"
 }
 /**
  * Defines values for DataConnectorKind. \
@@ -6056,6 +6351,8 @@ export declare enum KnownDataConnectorKind {
  * **Office365** \
  * **OfficeATP** \
  * **OfficeIRM** \
+ * **Office365Project** \
+ * **OfficePowerBI** \
  * **AmazonWebServicesCloudTrail** \
  * **AmazonWebServicesS3** \
  * **AzureAdvancedThreatProtection** \
@@ -6064,7 +6361,8 @@ export declare enum KnownDataConnectorKind {
  * **MicrosoftThreatProtection** \
  * **MicrosoftThreatIntelligence** \
  * **GenericUI** \
- * **APIPolling**
+ * **APIPolling** \
+ * **IOT**
  */
 export declare type DataConnectorKind = string;
 /** Known values of {@link ConnectAuthKind} that the service accepts. */
@@ -6113,47 +6411,6 @@ export declare enum KnownDataConnectorLicenseState {
  * **Unknown**
  */
 export declare type DataConnectorLicenseState = string;
-/** Known values of {@link ThreatIntelligenceResourceKindEnum} that the service accepts. */
-export declare enum KnownThreatIntelligenceResourceKindEnum {
-    /** Entity represents threat intelligence indicator in the system. */
-    Indicator = "indicator"
-}
-/**
- * Defines values for ThreatIntelligenceResourceKindEnum. \
- * {@link KnownThreatIntelligenceResourceKindEnum} can be used interchangeably with ThreatIntelligenceResourceKindEnum,
- *  this enum contains the known values that the service supports.
- * ### Known values supported by the service
- * **indicator**: Entity represents threat intelligence indicator in the system.
- */
-export declare type ThreatIntelligenceResourceKindEnum = string;
-/** Known values of {@link ThreatIntelligenceSortingCriteriaEnum} that the service accepts. */
-export declare enum KnownThreatIntelligenceSortingCriteriaEnum {
-    Unsorted = "unsorted",
-    Ascending = "ascending",
-    Descending = "descending"
-}
-/**
- * Defines values for ThreatIntelligenceSortingCriteriaEnum. \
- * {@link KnownThreatIntelligenceSortingCriteriaEnum} can be used interchangeably with ThreatIntelligenceSortingCriteriaEnum,
- *  this enum contains the known values that the service supports.
- * ### Known values supported by the service
- * **unsorted** \
- * **ascending** \
- * **descending**
- */
-export declare type ThreatIntelligenceSortingCriteriaEnum = string;
-/** Known values of {@link EntityQueryTemplateKind} that the service accepts. */
-export declare enum KnownEntityQueryTemplateKind {
-    Activity = "Activity"
-}
-/**
- * Defines values for EntityQueryTemplateKind. \
- * {@link KnownEntityQueryTemplateKind} can be used interchangeably with EntityQueryTemplateKind,
- *  this enum contains the known values that the service supports.
- * ### Known values supported by the service
- * **Activity**
- */
-export declare type EntityQueryTemplateKind = string;
 /** Known values of {@link TemplateStatus} that the service accepts. */
 export declare enum KnownTemplateStatus {
     /** Alert rule template installed. and can not use more then once */
@@ -6320,15 +6577,17 @@ export declare enum KnownAutomationRulePropertyConditionSupportedProperty {
     IncidentSeverity = "IncidentSeverity",
     /** The status of the incident */
     IncidentStatus = "IncidentStatus",
-    /** The tactics of the incident */
-    IncidentTactics = "IncidentTactics",
     /** The related Analytic rule ids of the incident */
     IncidentRelatedAnalyticRuleIds = "IncidentRelatedAnalyticRuleIds",
+    /** The tactics of the incident */
+    IncidentTactics = "IncidentTactics",
+    /** The labels of the incident */
+    IncidentLabel = "IncidentLabel",
     /** The provider name of the incident */
     IncidentProviderName = "IncidentProviderName",
     /** The account Azure Active Directory tenant id */
     AccountAadTenantId = "AccountAadTenantId",
-    /** The account Azure Active Directory user id. */
+    /** The account Azure Active Directory user id */
     AccountAadUserId = "AccountAadUserId",
     /** The account name */
     AccountName = "AccountName",
@@ -6342,6 +6601,8 @@ export declare enum KnownAutomationRulePropertyConditionSupportedProperty {
     AccountObjectGuid = "AccountObjectGuid",
     /** The account user principal name suffix */
     AccountUPNSuffix = "AccountUPNSuffix",
+    /** The name of the product of the alert */
+    AlertProductNames = "AlertProductNames",
     /** The Azure resource id */
     AzureResourceResourceId = "AzureResourceResourceId",
     /** The Azure resource subscription id */
@@ -6368,7 +6629,7 @@ export declare enum KnownAutomationRulePropertyConditionSupportedProperty {
     HostNTDomain = "HostNTDomain",
     /** The host operating system */
     HostOSVersion = "HostOSVersion",
-    /** The IoT device id */
+    /** "The IoT device id */
     IoTDeviceId = "IoTDeviceId",
     /** The IoT device name */
     IoTDeviceName = "IoTDeviceName",
@@ -6426,17 +6687,19 @@ export declare enum KnownAutomationRulePropertyConditionSupportedProperty {
  * **IncidentDescription**: The description of the incident \
  * **IncidentSeverity**: The severity of the incident \
  * **IncidentStatus**: The status of the incident \
- * **IncidentTactics**: The tactics of the incident \
  * **IncidentRelatedAnalyticRuleIds**: The related Analytic rule ids of the incident \
+ * **IncidentTactics**: The tactics of the incident \
+ * **IncidentLabel**: The labels of the incident \
  * **IncidentProviderName**: The provider name of the incident \
  * **AccountAadTenantId**: The account Azure Active Directory tenant id \
- * **AccountAadUserId**: The account Azure Active Directory user id. \
+ * **AccountAadUserId**: The account Azure Active Directory user id \
  * **AccountName**: The account name \
  * **AccountNTDomain**: The account NetBIOS domain name \
  * **AccountPUID**: The account Azure Active Directory Passport User ID \
  * **AccountSid**: The account security identifier \
  * **AccountObjectGuid**: The account unique identifier \
  * **AccountUPNSuffix**: The account user principal name suffix \
+ * **AlertProductNames**: The name of the product of the alert \
  * **AzureResourceResourceId**: The Azure resource id \
  * **AzureResourceSubscriptionId**: The Azure resource subscription id \
  * **CloudApplicationAppId**: The cloud application identifier \
@@ -6450,7 +6713,7 @@ export declare enum KnownAutomationRulePropertyConditionSupportedProperty {
  * **HostNetBiosName**: The host NetBIOS name \
  * **HostNTDomain**: The host NT domain \
  * **HostOSVersion**: The host operating system \
- * **IoTDeviceId**: The IoT device id \
+ * **IoTDeviceId**: "The IoT device id \
  * **IoTDeviceName**: The IoT device name \
  * **IoTDeviceType**: The IoT device type \
  * **IoTDeviceVendor**: The IoT device vendor \
@@ -6925,29 +7188,98 @@ export interface AlertRuleTemplatesListNextOptionalParams extends coreClient.Ope
 /** Contains response data for the listNext operation. */
 export declare type AlertRuleTemplatesListNextResponse = AlertRuleTemplatesList;
 /** Optional parameters. */
-export interface AutomationRulesListOptionalParams extends coreClient.OperationOptions {
-}
-/** Contains response data for the list operation. */
-export declare type AutomationRulesListResponse = AutomationRulesList;
-/** Optional parameters. */
 export interface AutomationRulesGetOptionalParams extends coreClient.OperationOptions {
 }
 /** Contains response data for the get operation. */
 export declare type AutomationRulesGetResponse = AutomationRule;
 /** Optional parameters. */
 export interface AutomationRulesCreateOrUpdateOptionalParams extends coreClient.OperationOptions {
+    /** The automation rule */
+    automationRuleToUpsert?: AutomationRule;
 }
 /** Contains response data for the createOrUpdate operation. */
 export declare type AutomationRulesCreateOrUpdateResponse = AutomationRule;
 /** Optional parameters. */
 export interface AutomationRulesDeleteOptionalParams extends coreClient.OperationOptions {
 }
+/** Contains response data for the delete operation. */
+export declare type AutomationRulesDeleteResponse = Record<string, unknown>;
+/** Optional parameters. */
+export interface AutomationRulesListOptionalParams extends coreClient.OperationOptions {
+}
+/** Contains response data for the list operation. */
+export declare type AutomationRulesListResponse = AutomationRulesList;
 /** Optional parameters. */
 export interface AutomationRulesListNextOptionalParams extends coreClient.OperationOptions {
 }
 /** Contains response data for the listNext operation. */
 export declare type AutomationRulesListNextResponse = AutomationRulesList;
 /** Optional parameters. */
+export interface IncidentsRunPlaybookOptionalParams extends coreClient.OperationOptions {
+    requestBody?: ManualTriggerRequestBody;
+}
+/** Contains response data for the runPlaybook operation. */
+export declare type IncidentsRunPlaybookResponse = Record<string, unknown>;
+/** Optional parameters. */
+export interface IncidentsListOptionalParams extends coreClient.OperationOptions {
+    /** Filters the results, based on a Boolean condition. Optional. */
+    filter?: string;
+    /** Sorts the results. Optional. */
+    orderby?: string;
+    /** Returns only the first n results. Optional. */
+    top?: number;
+    /** Skiptoken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element, the value of the nextLink element will include a skiptoken parameter that specifies a starting point to use for subsequent calls. Optional. */
+    skipToken?: string;
+}
+/** Contains response data for the list operation. */
+export declare type IncidentsListResponse = IncidentList;
+/** Optional parameters. */
+export interface IncidentsGetOptionalParams extends coreClient.OperationOptions {
+}
+/** Contains response data for the get operation. */
+export declare type IncidentsGetResponse = Incident;
+/** Optional parameters. */
+export interface IncidentsCreateOrUpdateOptionalParams extends coreClient.OperationOptions {
+}
+/** Contains response data for the createOrUpdate operation. */
+export declare type IncidentsCreateOrUpdateResponse = Incident;
+/** Optional parameters. */
+export interface IncidentsDeleteOptionalParams extends coreClient.OperationOptions {
+}
+/** Optional parameters. */
+export interface IncidentsCreateTeamOptionalParams extends coreClient.OperationOptions {
+}
+/** Contains response data for the createTeam operation. */
+export declare type IncidentsCreateTeamResponse = TeamInformation;
+/** Optional parameters. */
+export interface IncidentsListAlertsOptionalParams extends coreClient.OperationOptions {
+}
+/** Contains response data for the listAlerts operation. */
+export declare type IncidentsListAlertsResponse = IncidentAlertList;
+/** Optional parameters. */
+export interface IncidentsListBookmarksOptionalParams extends coreClient.OperationOptions {
+}
+/** Contains response data for the listBookmarks operation. */
+export declare type IncidentsListBookmarksResponse = IncidentBookmarkList;
+/** Optional parameters. */
+export interface IncidentsListEntitiesOptionalParams extends coreClient.OperationOptions {
+}
+/** Contains response data for the listEntities operation. */
+export declare type IncidentsListEntitiesResponse = IncidentEntitiesResponse;
+/** Optional parameters. */
+export interface IncidentsListNextOptionalParams extends coreClient.OperationOptions {
+    /** Filters the results, based on a Boolean condition. Optional. */
+    filter?: string;
+    /** Sorts the results. Optional. */
+    orderby?: string;
+    /** Returns only the first n results. Optional. */
+    top?: number;
+    /** Skiptoken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element, the value of the nextLink element will include a skiptoken parameter that specifies a starting point to use for subsequent calls. Optional. */
+    skipToken?: string;
+}
+/** Contains response data for the listNext operation. */
+export declare type IncidentsListNextResponse = IncidentList;
+/** Optional parameters. */
 export interface BookmarksListOptionalParams extends coreClient.OperationOptions {
 }
 /** Contains response data for the list operation. */
@@ -7025,33 +7357,6 @@ export interface DomainWhoisGetOptionalParams extends coreClient.OperationOption
 /** Contains response data for the get operation. */
 export declare type DomainWhoisGetResponse = EnrichmentDomainWhois;
 /** Optional parameters. */
-export interface EntityQueriesListOptionalParams extends coreClient.OperationOptions {
-    /** The entity query kind we want to fetch */
-    kind?: Enum8;
-}
-/** Contains response data for the list operation. */
-export declare type EntityQueriesListResponse = EntityQueryList;
-/** Optional parameters. */
-export interface EntityQueriesGetOptionalParams extends coreClient.OperationOptions {
-}
-/** Contains response data for the get operation. */
-export declare type EntityQueriesGetResponse = EntityQueryUnion;
-/** Optional parameters. */
-export interface EntityQueriesCreateOrUpdateOptionalParams extends coreClient.OperationOptions {
-}
-/** Contains response data for the createOrUpdate operation. */
-export declare type EntityQueriesCreateOrUpdateResponse = EntityQueryUnion;
-/** Optional parameters. */
-export interface EntityQueriesDeleteOptionalParams extends coreClient.OperationOptions {
-}
-/** Optional parameters. */
-export interface EntityQueriesListNextOptionalParams extends coreClient.OperationOptions {
-    /** The entity query kind we want to fetch */
-    kind?: Enum8;
-}
-/** Contains response data for the listNext operation. */
-export declare type EntityQueriesListNextResponse = EntityQueryList;
-/** Optional parameters. */
 export interface EntitiesListOptionalParams extends coreClient.OperationOptions {
 }
 /** Contains response data for the list operation. */
@@ -7118,64 +7423,47 @@ export interface EntityRelationsGetRelationOptionalParams extends coreClient.Ope
 /** Contains response data for the getRelation operation. */
 export declare type EntityRelationsGetRelationResponse = Relation;
 /** Optional parameters. */
-export interface IncidentsListOptionalParams extends coreClient.OperationOptions {
-    /** Filters the results, based on a Boolean condition. Optional. */
-    filter?: string;
-    /** Sorts the results. Optional. */
-    orderby?: string;
-    /** Returns only the first n results. Optional. */
-    top?: number;
-    /** Skiptoken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element, the value of the nextLink element will include a skiptoken parameter that specifies a starting point to use for subsequent calls. Optional. */
-    skipToken?: string;
+export interface EntityQueriesListOptionalParams extends coreClient.OperationOptions {
+    /** The entity query kind we want to fetch */
+    kind?: Enum12;
 }
 /** Contains response data for the list operation. */
-export declare type IncidentsListResponse = IncidentList;
+export declare type EntityQueriesListResponse = EntityQueryList;
 /** Optional parameters. */
-export interface IncidentsGetOptionalParams extends coreClient.OperationOptions {
+export interface EntityQueriesGetOptionalParams extends coreClient.OperationOptions {
 }
 /** Contains response data for the get operation. */
-export declare type IncidentsGetResponse = Incident;
+export declare type EntityQueriesGetResponse = EntityQueryUnion;
 /** Optional parameters. */
-export interface IncidentsCreateOrUpdateOptionalParams extends coreClient.OperationOptions {
+export interface EntityQueriesCreateOrUpdateOptionalParams extends coreClient.OperationOptions {
 }
 /** Contains response data for the createOrUpdate operation. */
-export declare type IncidentsCreateOrUpdateResponse = Incident;
+export declare type EntityQueriesCreateOrUpdateResponse = EntityQueryUnion;
 /** Optional parameters. */
-export interface IncidentsDeleteOptionalParams extends coreClient.OperationOptions {
+export interface EntityQueriesDeleteOptionalParams extends coreClient.OperationOptions {
 }
 /** Optional parameters. */
-export interface IncidentsCreateTeamOptionalParams extends coreClient.OperationOptions {
-}
-/** Contains response data for the createTeam operation. */
-export declare type IncidentsCreateTeamResponse = TeamInformation;
-/** Optional parameters. */
-export interface IncidentsListAlertsOptionalParams extends coreClient.OperationOptions {
+export interface EntityQueriesListNextOptionalParams extends coreClient.OperationOptions {
+    /** The entity query kind we want to fetch */
+    kind?: Enum12;
 }
-/** Contains response data for the listAlerts operation. */
-export declare type IncidentsListAlertsResponse = IncidentAlertList;
+/** Contains response data for the listNext operation. */
+export declare type EntityQueriesListNextResponse = EntityQueryList;
 /** Optional parameters. */
-export interface IncidentsListBookmarksOptionalParams extends coreClient.OperationOptions {
+export interface EntityQueryTemplatesListOptionalParams extends coreClient.OperationOptions {
 }
-/** Contains response data for the listBookmarks operation. */
-export declare type IncidentsListBookmarksResponse = IncidentBookmarkList;
+/** Contains response data for the list operation. */
+export declare type EntityQueryTemplatesListResponse = EntityQueryTemplateList;
 /** Optional parameters. */
-export interface IncidentsListEntitiesOptionalParams extends coreClient.OperationOptions {
+export interface EntityQueryTemplatesGetOptionalParams extends coreClient.OperationOptions {
 }
-/** Contains response data for the listEntities operation. */
-export declare type IncidentsListEntitiesResponse = IncidentEntitiesResponse;
+/** Contains response data for the get operation. */
+export declare type EntityQueryTemplatesGetResponse = EntityQueryTemplateUnion;
 /** Optional parameters. */
-export interface IncidentsListNextOptionalParams extends coreClient.OperationOptions {
-    /** Filters the results, based on a Boolean condition. Optional. */
-    filter?: string;
-    /** Sorts the results. Optional. */
-    orderby?: string;
-    /** Returns only the first n results. Optional. */
-    top?: number;
-    /** Skiptoken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element, the value of the nextLink element will include a skiptoken parameter that specifies a starting point to use for subsequent calls. Optional. */
-    skipToken?: string;
+export interface EntityQueryTemplatesListNextOptionalParams extends coreClient.OperationOptions {
 }
 /** Contains response data for the listNext operation. */
-export declare type IncidentsListNextResponse = IncidentList;
+export declare type EntityQueryTemplatesListNextResponse = EntityQueryTemplateList;
 /** Optional parameters. */
 export interface IncidentCommentsListOptionalParams extends coreClient.OperationOptions {
     /** Filters the results, based on a Boolean condition. Optional. */
@@ -7299,6 +7587,24 @@ export interface MetadataListNextOptionalParams extends coreClient.OperationOpti
 /** Contains response data for the listNext operation. */
 export declare type MetadataListNextResponse = MetadataList;
 /** Optional parameters. */
+export interface OfficeConsentsListOptionalParams extends coreClient.OperationOptions {
+}
+/** Contains response data for the list operation. */
+export declare type OfficeConsentsListResponse = OfficeConsentList;
+/** Optional parameters. */
+export interface OfficeConsentsGetOptionalParams extends coreClient.OperationOptions {
+}
+/** Contains response data for the get operation. */
+export declare type OfficeConsentsGetResponse = OfficeConsent;
+/** Optional parameters. */
+export interface OfficeConsentsDeleteOptionalParams extends coreClient.OperationOptions {
+}
+/** Optional parameters. */
+export interface OfficeConsentsListNextOptionalParams extends coreClient.OperationOptions {
+}
+/** Contains response data for the listNext operation. */
+export declare type OfficeConsentsListNextResponse = OfficeConsentList;
+/** Optional parameters. */
 export interface SentinelOnboardingStatesGetOptionalParams extends coreClient.OperationOptions {
 }
 /** Contains response data for the get operation. */
@@ -7370,86 +7676,6 @@ export interface SourceControlsListNextOptionalParams extends coreClient.Operati
 /** Contains response data for the listNext operation. */
 export declare type SourceControlsListNextResponse = SourceControlList;
 /** Optional parameters. */
-export interface WatchlistsListOptionalParams extends coreClient.OperationOptions {
-}
-/** Contains response data for the list operation. */
-export declare type WatchlistsListResponse = WatchlistList;
-/** Optional parameters. */
-export interface WatchlistsGetOptionalParams extends coreClient.OperationOptions {
-}
-/** Contains response data for the get operation. */
-export declare type WatchlistsGetResponse = Watchlist;
-/** Optional parameters. */
-export interface WatchlistsDeleteOptionalParams extends coreClient.OperationOptions {
-}
-/** Optional parameters. */
-export interface WatchlistsCreateOrUpdateOptionalParams extends coreClient.OperationOptions {
-}
-/** Contains response data for the createOrUpdate operation. */
-export declare type WatchlistsCreateOrUpdateResponse = Watchlist;
-/** Optional parameters. */
-export interface WatchlistsListNextOptionalParams extends coreClient.OperationOptions {
-}
-/** Contains response data for the listNext operation. */
-export declare type WatchlistsListNextResponse = WatchlistList;
-/** Optional parameters. */
-export interface WatchlistItemsListOptionalParams extends coreClient.OperationOptions {
-}
-/** Contains response data for the list operation. */
-export declare type WatchlistItemsListResponse = WatchlistItemList;
-/** Optional parameters. */
-export interface WatchlistItemsGetOptionalParams extends coreClient.OperationOptions {
-}
-/** Contains response data for the get operation. */
-export declare type WatchlistItemsGetResponse = WatchlistItem;
-/** Optional parameters. */
-export interface WatchlistItemsDeleteOptionalParams extends coreClient.OperationOptions {
-}
-/** Optional parameters. */
-export interface WatchlistItemsCreateOrUpdateOptionalParams extends coreClient.OperationOptions {
-}
-/** Contains response data for the createOrUpdate operation. */
-export declare type WatchlistItemsCreateOrUpdateResponse = WatchlistItem;
-/** Optional parameters. */
-export interface WatchlistItemsListNextOptionalParams extends coreClient.OperationOptions {
-}
-/** Contains response data for the listNext operation. */
-export declare type WatchlistItemsListNextResponse = WatchlistItemList;
-/** Optional parameters. */
-export interface DataConnectorsListOptionalParams extends coreClient.OperationOptions {
-}
-/** Contains response data for the list operation. */
-export declare type DataConnectorsListResponse = DataConnectorList;
-/** Optional parameters. */
-export interface DataConnectorsGetOptionalParams extends coreClient.OperationOptions {
-}
-/** Contains response data for the get operation. */
-export declare type DataConnectorsGetResponse = DataConnectorUnion;
-/** Optional parameters. */
-export interface DataConnectorsCreateOrUpdateOptionalParams extends coreClient.OperationOptions {
-}
-/** Contains response data for the createOrUpdate operation. */
-export declare type DataConnectorsCreateOrUpdateResponse = DataConnectorUnion;
-/** Optional parameters. */
-export interface DataConnectorsDeleteOptionalParams extends coreClient.OperationOptions {
-}
-/** Optional parameters. */
-export interface DataConnectorsConnectOptionalParams extends coreClient.OperationOptions {
-}
-/** Optional parameters. */
-export interface DataConnectorsDisconnectOptionalParams extends coreClient.OperationOptions {
-}
-/** Optional parameters. */
-export interface DataConnectorsListNextOptionalParams extends coreClient.OperationOptions {
-}
-/** Contains response data for the listNext operation. */
-export declare type DataConnectorsListNextResponse = DataConnectorList;
-/** Optional parameters. */
-export interface DataConnectorsCheckRequirementsPostOptionalParams extends coreClient.OperationOptions {
-}
-/** Contains response data for the post operation. */
-export declare type DataConnectorsCheckRequirementsPostResponse = DataConnectorRequirementsState;
-/** Optional parameters. */
 export interface ThreatIntelligenceIndicatorCreateIndicatorOptionalParams extends coreClient.OperationOptions {
 }
 /** Contains response data for the createIndicator operation. */
@@ -7517,48 +7743,105 @@ export interface ThreatIntelligenceIndicatorMetricsListOptionalParams extends co
 /** Contains response data for the list operation. */
 export declare type ThreatIntelligenceIndicatorMetricsListResponse = ThreatIntelligenceMetricsList;
 /** Optional parameters. */
-export interface OperationsListOptionalParams extends coreClient.OperationOptions {
+export interface WatchlistsListOptionalParams extends coreClient.OperationOptions {
+    /** Skiptoken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element, the value of the nextLink element will include a skiptoken parameter that specifies a starting point to use for subsequent calls. Optional. */
+    skipToken?: string;
 }
 /** Contains response data for the list operation. */
-export declare type OperationsListResponse = OperationsList;
+export declare type WatchlistsListResponse = WatchlistList;
 /** Optional parameters. */
-export interface OperationsListNextOptionalParams extends coreClient.OperationOptions {
+export interface WatchlistsGetOptionalParams extends coreClient.OperationOptions {
+}
+/** Contains response data for the get operation. */
+export declare type WatchlistsGetResponse = Watchlist;
+/** Optional parameters. */
+export interface WatchlistsDeleteOptionalParams extends coreClient.OperationOptions {
+}
+/** Contains response data for the delete operation. */
+export declare type WatchlistsDeleteResponse = WatchlistsDeleteHeaders;
+/** Optional parameters. */
+export interface WatchlistsCreateOrUpdateOptionalParams extends coreClient.OperationOptions {
+}
+/** Contains response data for the createOrUpdate operation. */
+export declare type WatchlistsCreateOrUpdateResponse = Watchlist;
+/** Optional parameters. */
+export interface WatchlistsListNextOptionalParams extends coreClient.OperationOptions {
+    /** Skiptoken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element, the value of the nextLink element will include a skiptoken parameter that specifies a starting point to use for subsequent calls. Optional. */
+    skipToken?: string;
 }
 /** Contains response data for the listNext operation. */
-export declare type OperationsListNextResponse = OperationsList;
+export declare type WatchlistsListNextResponse = WatchlistList;
 /** Optional parameters. */
-export interface OfficeConsentsListOptionalParams extends coreClient.OperationOptions {
+export interface WatchlistItemsListOptionalParams extends coreClient.OperationOptions {
+    /** Skiptoken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element, the value of the nextLink element will include a skiptoken parameter that specifies a starting point to use for subsequent calls. Optional. */
+    skipToken?: string;
 }
 /** Contains response data for the list operation. */
-export declare type OfficeConsentsListResponse = OfficeConsentList;
+export declare type WatchlistItemsListResponse = WatchlistItemList;
 /** Optional parameters. */
-export interface OfficeConsentsGetOptionalParams extends coreClient.OperationOptions {
+export interface WatchlistItemsGetOptionalParams extends coreClient.OperationOptions {
 }
 /** Contains response data for the get operation. */
-export declare type OfficeConsentsGetResponse = OfficeConsent;
+export declare type WatchlistItemsGetResponse = WatchlistItem;
 /** Optional parameters. */
-export interface OfficeConsentsDeleteOptionalParams extends coreClient.OperationOptions {
+export interface WatchlistItemsDeleteOptionalParams extends coreClient.OperationOptions {
 }
 /** Optional parameters. */
-export interface OfficeConsentsListNextOptionalParams extends coreClient.OperationOptions {
+export interface WatchlistItemsCreateOrUpdateOptionalParams extends coreClient.OperationOptions {
+}
+/** Contains response data for the createOrUpdate operation. */
+export declare type WatchlistItemsCreateOrUpdateResponse = WatchlistItem;
+/** Optional parameters. */
+export interface WatchlistItemsListNextOptionalParams extends coreClient.OperationOptions {
+    /** Skiptoken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element, the value of the nextLink element will include a skiptoken parameter that specifies a starting point to use for subsequent calls. Optional. */
+    skipToken?: string;
 }
 /** Contains response data for the listNext operation. */
-export declare type OfficeConsentsListNextResponse = OfficeConsentList;
+export declare type WatchlistItemsListNextResponse = WatchlistItemList;
 /** Optional parameters. */
-export interface EntityQueryTemplatesListOptionalParams extends coreClient.OperationOptions {
+export interface DataConnectorsListOptionalParams extends coreClient.OperationOptions {
 }
 /** Contains response data for the list operation. */
-export declare type EntityQueryTemplatesListResponse = EntityQueryTemplateList;
+export declare type DataConnectorsListResponse = DataConnectorList;
 /** Optional parameters. */
-export interface EntityQueryTemplatesGetOptionalParams extends coreClient.OperationOptions {
+export interface DataConnectorsGetOptionalParams extends coreClient.OperationOptions {
 }
 /** Contains response data for the get operation. */
-export declare type EntityQueryTemplatesGetResponse = EntityQueryTemplateUnion;
+export declare type DataConnectorsGetResponse = DataConnectorUnion;
 /** Optional parameters. */
-export interface EntityQueryTemplatesListNextOptionalParams extends coreClient.OperationOptions {
+export interface DataConnectorsCreateOrUpdateOptionalParams extends coreClient.OperationOptions {
+}
+/** Contains response data for the createOrUpdate operation. */
+export declare type DataConnectorsCreateOrUpdateResponse = DataConnectorUnion;
+/** Optional parameters. */
+export interface DataConnectorsDeleteOptionalParams extends coreClient.OperationOptions {
+}
+/** Optional parameters. */
+export interface DataConnectorsConnectOptionalParams extends coreClient.OperationOptions {
+}
+/** Optional parameters. */
+export interface DataConnectorsDisconnectOptionalParams extends coreClient.OperationOptions {
+}
+/** Optional parameters. */
+export interface DataConnectorsListNextOptionalParams extends coreClient.OperationOptions {
 }
 /** Contains response data for the listNext operation. */
-export declare type EntityQueryTemplatesListNextResponse = EntityQueryTemplateList;
+export declare type DataConnectorsListNextResponse = DataConnectorList;
+/** Optional parameters. */
+export interface DataConnectorsCheckRequirementsPostOptionalParams extends coreClient.OperationOptions {
+}
+/** Contains response data for the post operation. */
+export declare type DataConnectorsCheckRequirementsPostResponse = DataConnectorRequirementsState;
+/** Optional parameters. */
+export interface OperationsListOptionalParams extends coreClient.OperationOptions {
+}
+/** Contains response data for the list operation. */
+export declare type OperationsListResponse = OperationsList;
+/** Optional parameters. */
+export interface OperationsListNextOptionalParams extends coreClient.OperationOptions {
+}
+/** Contains response data for the listNext operation. */
+export declare type OperationsListNextResponse = OperationsList;
 /** Optional parameters. */
 export interface SecurityInsightsOptionalParams extends coreClient.ServiceClientOptions {
     /** server parameter */