@azure/arm-securityinsight 1.0.0-beta.1 → 1.0.0-beta.4

package/dist-esm/src/models/index.js

@@ -8,19 +8,29 @@
 /** Known values of {@link AlertRuleKind} that the service accepts. */
 export var KnownAlertRuleKind;
 (function (KnownAlertRuleKind) {
+    /** Scheduled */
     KnownAlertRuleKind["Scheduled"] = "Scheduled";
+    /** MicrosoftSecurityIncidentCreation */
     KnownAlertRuleKind["MicrosoftSecurityIncidentCreation"] = "MicrosoftSecurityIncidentCreation";
+    /** Fusion */
     KnownAlertRuleKind["Fusion"] = "Fusion";
+    /** MLBehaviorAnalytics */
     KnownAlertRuleKind["MLBehaviorAnalytics"] = "MLBehaviorAnalytics";
+    /** ThreatIntelligence */
     KnownAlertRuleKind["ThreatIntelligence"] = "ThreatIntelligence";
+    /** NRT */
     KnownAlertRuleKind["NRT"] = "NRT";
 })(KnownAlertRuleKind || (KnownAlertRuleKind = {}));
 /** Known values of {@link CreatedByType} that the service accepts. */
 export var KnownCreatedByType;
 (function (KnownCreatedByType) {
+    /** User */
     KnownCreatedByType["User"] = "User";
+    /** Application */
     KnownCreatedByType["Application"] = "Application";
+    /** ManagedIdentity */
     KnownCreatedByType["ManagedIdentity"] = "ManagedIdentity";
+    /** Key */
     KnownCreatedByType["Key"] = "Key";
 })(KnownCreatedByType || (KnownCreatedByType = {}));
 /** Known values of {@link TriggersOn} that the service accepts. */
@@ -28,27 +38,35 @@ export var KnownTriggersOn;
 (function (KnownTriggersOn) {
     /** Trigger on Incidents */
     KnownTriggersOn["Incidents"] = "Incidents";
+    /** Trigger on Alerts */
+    KnownTriggersOn["Alerts"] = "Alerts";
 })(KnownTriggersOn || (KnownTriggersOn = {}));
 /** Known values of {@link TriggersWhen} that the service accepts. */
 export var KnownTriggersWhen;
 (function (KnownTriggersWhen) {
     /** Trigger on created objects */
     KnownTriggersWhen["Created"] = "Created";
+    /** Trigger on updated objects */
+    KnownTriggersWhen["Updated"] = "Updated";
 })(KnownTriggersWhen || (KnownTriggersWhen = {}));
-/** Known values of {@link AutomationRuleConditionType} that the service accepts. */
-export var KnownAutomationRuleConditionType;
-(function (KnownAutomationRuleConditionType) {
+/** Known values of {@link ConditionType} that the service accepts. */
+export var KnownConditionType;
+(function (KnownConditionType) {
     /** Evaluate an object property value */
-    KnownAutomationRuleConditionType["Property"] = "Property";
-})(KnownAutomationRuleConditionType || (KnownAutomationRuleConditionType = {}));
-/** Known values of {@link AutomationRuleActionType} that the service accepts. */
-export var KnownAutomationRuleActionType;
-(function (KnownAutomationRuleActionType) {
+    KnownConditionType["Property"] = "Property";
+    /** Evaluate an object property changed value */
+    KnownConditionType["PropertyChanged"] = "PropertyChanged";
+    /** Evaluate an object array property changed value */
+    KnownConditionType["PropertyArrayChanged"] = "PropertyArrayChanged";
+})(KnownConditionType || (KnownConditionType = {}));
+/** Known values of {@link ActionType} that the service accepts. */
+export var KnownActionType;
+(function (KnownActionType) {
     /** Modify an object's properties */
-    KnownAutomationRuleActionType["ModifyProperties"] = "ModifyProperties";
+    KnownActionType["ModifyProperties"] = "ModifyProperties";
     /** Run a playbook on an object */
-    KnownAutomationRuleActionType["RunPlaybook"] = "RunPlaybook";
-})(KnownAutomationRuleActionType || (KnownAutomationRuleActionType = {}));
+    KnownActionType["RunPlaybook"] = "RunPlaybook";
+})(KnownActionType || (KnownActionType = {}));
 /** Known values of {@link IncidentSeverity} that the service accepts. */
 export var KnownIncidentSeverity;
 (function (KnownIncidentSeverity) {
@@ -61,6 +79,44 @@ export var KnownIncidentSeverity;
     /** Informational severity */
     KnownIncidentSeverity["Informational"] = "Informational";
 })(KnownIncidentSeverity || (KnownIncidentSeverity = {}));
+/** Known values of {@link AttackTactic} that the service accepts. */
+export var KnownAttackTactic;
+(function (KnownAttackTactic) {
+    /** Reconnaissance */
+    KnownAttackTactic["Reconnaissance"] = "Reconnaissance";
+    /** ResourceDevelopment */
+    KnownAttackTactic["ResourceDevelopment"] = "ResourceDevelopment";
+    /** InitialAccess */
+    KnownAttackTactic["InitialAccess"] = "InitialAccess";
+    /** Execution */
+    KnownAttackTactic["Execution"] = "Execution";
+    /** Persistence */
+    KnownAttackTactic["Persistence"] = "Persistence";
+    /** PrivilegeEscalation */
+    KnownAttackTactic["PrivilegeEscalation"] = "PrivilegeEscalation";
+    /** DefenseEvasion */
+    KnownAttackTactic["DefenseEvasion"] = "DefenseEvasion";
+    /** CredentialAccess */
+    KnownAttackTactic["CredentialAccess"] = "CredentialAccess";
+    /** Discovery */
+    KnownAttackTactic["Discovery"] = "Discovery";
+    /** LateralMovement */
+    KnownAttackTactic["LateralMovement"] = "LateralMovement";
+    /** Collection */
+    KnownAttackTactic["Collection"] = "Collection";
+    /** Exfiltration */
+    KnownAttackTactic["Exfiltration"] = "Exfiltration";
+    /** CommandAndControl */
+    KnownAttackTactic["CommandAndControl"] = "CommandAndControl";
+    /** Impact */
+    KnownAttackTactic["Impact"] = "Impact";
+    /** PreAttack */
+    KnownAttackTactic["PreAttack"] = "PreAttack";
+    /** ImpairProcessControl */
+    KnownAttackTactic["ImpairProcessControl"] = "ImpairProcessControl";
+    /** InhibitResponseFunction */
+    KnownAttackTactic["InhibitResponseFunction"] = "InhibitResponseFunction";
+})(KnownAttackTactic || (KnownAttackTactic = {}));
 /** Known values of {@link EntityKind} that the service accepts. */
 export var KnownEntityKind;
 (function (KnownEntityKind) {
@@ -106,25 +162,9 @@ export var KnownEntityKind;
     KnownEntityKind["Mailbox"] = "Mailbox";
     /** Entity represents submission mail in the system. */
     KnownEntityKind["SubmissionMail"] = "SubmissionMail";
+    /** Entity represents network interface in the system. */
+    KnownEntityKind["Nic"] = "Nic";
 })(KnownEntityKind || (KnownEntityKind = {}));
-/** Known values of {@link Enum8} that the service accepts. */
-export var KnownEnum8;
-(function (KnownEnum8) {
-    KnownEnum8["Expansion"] = "Expansion";
-    KnownEnum8["Activity"] = "Activity";
-})(KnownEnum8 || (KnownEnum8 = {}));
-/** Known values of {@link EntityQueryKind} that the service accepts. */
-export var KnownEntityQueryKind;
-(function (KnownEntityQueryKind) {
-    KnownEntityQueryKind["Expansion"] = "Expansion";
-    KnownEntityQueryKind["Insight"] = "Insight";
-    KnownEntityQueryKind["Activity"] = "Activity";
-})(KnownEntityQueryKind || (KnownEntityQueryKind = {}));
-/** Known values of {@link CustomEntityQueryKind} that the service accepts. */
-export var KnownCustomEntityQueryKind;
-(function (KnownCustomEntityQueryKind) {
-    KnownCustomEntityQueryKind["Activity"] = "Activity";
-})(KnownCustomEntityQueryKind || (KnownCustomEntityQueryKind = {}));
 /** Known values of {@link EntityTimelineKind} that the service accepts. */
 export var KnownEntityTimelineKind;
 (function (KnownEntityTimelineKind) {
@@ -134,6 +174,8 @@ export var KnownEntityTimelineKind;
     KnownEntityTimelineKind["Bookmark"] = "Bookmark";
     /** security alerts */
     KnownEntityTimelineKind["SecurityAlert"] = "SecurityAlert";
+    /** anomaly */
+    KnownEntityTimelineKind["Anomaly"] = "Anomaly";
 })(KnownEntityTimelineKind || (KnownEntityTimelineKind = {}));
 /** Known values of {@link EntityItemQueryKind} that the service accepts. */
 export var KnownEntityItemQueryKind;
@@ -141,23 +183,42 @@ export var KnownEntityItemQueryKind;
     /** insight */
     KnownEntityItemQueryKind["Insight"] = "Insight";
 })(KnownEntityItemQueryKind || (KnownEntityItemQueryKind = {}));
-/** Known values of {@link AttackTactic} that the service accepts. */
-export var KnownAttackTactic;
-(function (KnownAttackTactic) {
-    KnownAttackTactic["InitialAccess"] = "InitialAccess";
-    KnownAttackTactic["Execution"] = "Execution";
-    KnownAttackTactic["Persistence"] = "Persistence";
-    KnownAttackTactic["PrivilegeEscalation"] = "PrivilegeEscalation";
-    KnownAttackTactic["DefenseEvasion"] = "DefenseEvasion";
-    KnownAttackTactic["CredentialAccess"] = "CredentialAccess";
-    KnownAttackTactic["Discovery"] = "Discovery";
-    KnownAttackTactic["LateralMovement"] = "LateralMovement";
-    KnownAttackTactic["Collection"] = "Collection";
-    KnownAttackTactic["Exfiltration"] = "Exfiltration";
-    KnownAttackTactic["CommandAndControl"] = "CommandAndControl";
-    KnownAttackTactic["Impact"] = "Impact";
-    KnownAttackTactic["PreAttack"] = "PreAttack";
-})(KnownAttackTactic || (KnownAttackTactic = {}));
+/** Known values of {@link EntityQueryKind} that the service accepts. */
+export var KnownEntityQueryKind;
+(function (KnownEntityQueryKind) {
+    /** Expansion */
+    KnownEntityQueryKind["Expansion"] = "Expansion";
+    /** Insight */
+    KnownEntityQueryKind["Insight"] = "Insight";
+    /** Activity */
+    KnownEntityQueryKind["Activity"] = "Activity";
+})(KnownEntityQueryKind || (KnownEntityQueryKind = {}));
+/** Known values of {@link GetInsightsError} that the service accepts. */
+export var KnownGetInsightsError;
+(function (KnownGetInsightsError) {
+    /** Insight */
+    KnownGetInsightsError["Insight"] = "Insight";
+})(KnownGetInsightsError || (KnownGetInsightsError = {}));
+/** Known values of {@link Enum13} that the service accepts. */
+export var KnownEnum13;
+(function (KnownEnum13) {
+    /** Expansion */
+    KnownEnum13["Expansion"] = "Expansion";
+    /** Activity */
+    KnownEnum13["Activity"] = "Activity";
+})(KnownEnum13 || (KnownEnum13 = {}));
+/** Known values of {@link CustomEntityQueryKind} that the service accepts. */
+export var KnownCustomEntityQueryKind;
+(function (KnownCustomEntityQueryKind) {
+    /** Activity */
+    KnownCustomEntityQueryKind["Activity"] = "Activity";
+})(KnownCustomEntityQueryKind || (KnownCustomEntityQueryKind = {}));
+/** Known values of {@link EntityQueryTemplateKind} that the service accepts. */
+export var KnownEntityQueryTemplateKind;
+(function (KnownEntityQueryTemplateKind) {
+    /** Activity */
+    KnownEntityQueryTemplateKind["Activity"] = "Activity";
+})(KnownEntityQueryTemplateKind || (KnownEntityQueryTemplateKind = {}));
 /** Known values of {@link IncidentClassification} that the service accepts. */
 export var KnownIncidentClassification;
 (function (KnownIncidentClassification) {
@@ -188,7 +249,7 @@ export var KnownIncidentLabelType;
     /** Label manually created by a user */
     KnownIncidentLabelType["User"] = "User";
     /** Label automatically created by the system */
-    KnownIncidentLabelType["System"] = "System";
+    KnownIncidentLabelType["AutoAssigned"] = "AutoAssigned";
 })(KnownIncidentLabelType || (KnownIncidentLabelType = {}));
 /** Known values of {@link OwnerType} that the service accepts. */
 export var KnownOwnerType;
@@ -293,127 +354,241 @@ export var KnownAlertStatus;
 /** Known values of {@link Kind} that the service accepts. */
 export var KnownKind;
 (function (KnownKind) {
+    /** DataConnector */
     KnownKind["DataConnector"] = "DataConnector";
+    /** DataType */
     KnownKind["DataType"] = "DataType";
+    /** Workbook */
     KnownKind["Workbook"] = "Workbook";
+    /** WorkbookTemplate */
     KnownKind["WorkbookTemplate"] = "WorkbookTemplate";
+    /** Playbook */
     KnownKind["Playbook"] = "Playbook";
+    /** PlaybookTemplate */
     KnownKind["PlaybookTemplate"] = "PlaybookTemplate";
+    /** AnalyticsRuleTemplate */
     KnownKind["AnalyticsRuleTemplate"] = "AnalyticsRuleTemplate";
+    /** AnalyticsRule */
     KnownKind["AnalyticsRule"] = "AnalyticsRule";
+    /** HuntingQuery */
     KnownKind["HuntingQuery"] = "HuntingQuery";
+    /** InvestigationQuery */
     KnownKind["InvestigationQuery"] = "InvestigationQuery";
+    /** Parser */
     KnownKind["Parser"] = "Parser";
+    /** Watchlist */
     KnownKind["Watchlist"] = "Watchlist";
+    /** WatchlistTemplate */
     KnownKind["WatchlistTemplate"] = "WatchlistTemplate";
+    /** Solution */
     KnownKind["Solution"] = "Solution";
+    /** AzureFunction */
+    KnownKind["AzureFunction"] = "AzureFunction";
+    /** LogicAppsCustomConnector */
+    KnownKind["LogicAppsCustomConnector"] = "LogicAppsCustomConnector";
+    /** AutomationRule */
+    KnownKind["AutomationRule"] = "AutomationRule";
 })(KnownKind || (KnownKind = {}));
 /** Known values of {@link SourceKind} that the service accepts. */
 export var KnownSourceKind;
 (function (KnownSourceKind) {
+    /** LocalWorkspace */
     KnownSourceKind["LocalWorkspace"] = "LocalWorkspace";
+    /** Community */
     KnownSourceKind["Community"] = "Community";
+    /** Solution */
     KnownSourceKind["Solution"] = "Solution";
+    /** SourceRepository */
     KnownSourceKind["SourceRepository"] = "SourceRepository";
 })(KnownSourceKind || (KnownSourceKind = {}));
 /** Known values of {@link SupportTier} that the service accepts. */
 export var KnownSupportTier;
 (function (KnownSupportTier) {
+    /** Microsoft */
     KnownSupportTier["Microsoft"] = "Microsoft";
+    /** Partner */
     KnownSupportTier["Partner"] = "Partner";
+    /** Community */
     KnownSupportTier["Community"] = "Community";
 })(KnownSupportTier || (KnownSupportTier = {}));
 /** Known values of {@link Operator} that the service accepts. */
 export var KnownOperator;
 (function (KnownOperator) {
+    /** AND */
     KnownOperator["AND"] = "AND";
+    /** OR */
     KnownOperator["OR"] = "OR";
 })(KnownOperator || (KnownOperator = {}));
+/** Known values of {@link SecurityMLAnalyticsSettingsKind} that the service accepts. */
+export var KnownSecurityMLAnalyticsSettingsKind;
+(function (KnownSecurityMLAnalyticsSettingsKind) {
+    /** Anomaly */
+    KnownSecurityMLAnalyticsSettingsKind["Anomaly"] = "Anomaly";
+})(KnownSecurityMLAnalyticsSettingsKind || (KnownSecurityMLAnalyticsSettingsKind = {}));
 /** Known values of {@link SettingKind} that the service accepts. */
 export var KnownSettingKind;
 (function (KnownSettingKind) {
+    /** Anomalies */
     KnownSettingKind["Anomalies"] = "Anomalies";
+    /** EyesOn */
     KnownSettingKind["EyesOn"] = "EyesOn";
+    /** EntityAnalytics */
     KnownSettingKind["EntityAnalytics"] = "EntityAnalytics";
+    /** Ueba */
     KnownSettingKind["Ueba"] = "Ueba";
 })(KnownSettingKind || (KnownSettingKind = {}));
 /** Known values of {@link RepoType} that the service accepts. */
 export var KnownRepoType;
 (function (KnownRepoType) {
+    /** Github */
     KnownRepoType["Github"] = "Github";
+    /** DevOps */
     KnownRepoType["DevOps"] = "DevOps";
 })(KnownRepoType || (KnownRepoType = {}));
+/** Known values of {@link Version} that the service accepts. */
+export var KnownVersion;
+(function (KnownVersion) {
+    /** V1 */
+    KnownVersion["V1"] = "V1";
+    /** V2 */
+    KnownVersion["V2"] = "V2";
+})(KnownVersion || (KnownVersion = {}));
 /** Known values of {@link ContentType} that the service accepts. */
 export var KnownContentType;
 (function (KnownContentType) {
+    /** AnalyticRule */
     KnownContentType["AnalyticRule"] = "AnalyticRule";
+    /** Workbook */
     KnownContentType["Workbook"] = "Workbook";
 })(KnownContentType || (KnownContentType = {}));
-/** Known values of {@link Source} that the service accepts. */
-export var KnownSource;
-(function (KnownSource) {
-    KnownSource["LocalFile"] = "Local file";
-    KnownSource["RemoteStorage"] = "Remote storage";
-})(KnownSource || (KnownSource = {}));
+/** Known values of {@link DeploymentFetchStatus} that the service accepts. */
+export var KnownDeploymentFetchStatus;
+(function (KnownDeploymentFetchStatus) {
+    /** Success */
+    KnownDeploymentFetchStatus["Success"] = "Success";
+    /** Unauthorized */
+    KnownDeploymentFetchStatus["Unauthorized"] = "Unauthorized";
+    /** NotFound */
+    KnownDeploymentFetchStatus["NotFound"] = "NotFound";
+})(KnownDeploymentFetchStatus || (KnownDeploymentFetchStatus = {}));
+/** Known values of {@link DeploymentState} that the service accepts. */
+export var KnownDeploymentState;
+(function (KnownDeploymentState) {
+    /** InProgress */
+    KnownDeploymentState["InProgress"] = "In_Progress";
+    /** Completed */
+    KnownDeploymentState["Completed"] = "Completed";
+    /** Queued */
+    KnownDeploymentState["Queued"] = "Queued";
+    /** Canceling */
+    KnownDeploymentState["Canceling"] = "Canceling";
+})(KnownDeploymentState || (KnownDeploymentState = {}));
+/** Known values of {@link DeploymentResult} that the service accepts. */
+export var KnownDeploymentResult;
+(function (KnownDeploymentResult) {
+    /** Success */
+    KnownDeploymentResult["Success"] = "Success";
+    /** Canceled */
+    KnownDeploymentResult["Canceled"] = "Canceled";
+    /** Failed */
+    KnownDeploymentResult["Failed"] = "Failed";
+})(KnownDeploymentResult || (KnownDeploymentResult = {}));
+/** Known values of {@link ThreatIntelligenceResourceKindEnum} that the service accepts. */
+export var KnownThreatIntelligenceResourceKindEnum;
+(function (KnownThreatIntelligenceResourceKindEnum) {
+    /** Entity represents threat intelligence indicator in the system. */
+    KnownThreatIntelligenceResourceKindEnum["Indicator"] = "indicator";
+})(KnownThreatIntelligenceResourceKindEnum || (KnownThreatIntelligenceResourceKindEnum = {}));
+/** Known values of {@link ThreatIntelligenceSortingCriteriaEnum} that the service accepts. */
+export var KnownThreatIntelligenceSortingCriteriaEnum;
+(function (KnownThreatIntelligenceSortingCriteriaEnum) {
+    /** Unsorted */
+    KnownThreatIntelligenceSortingCriteriaEnum["Unsorted"] = "unsorted";
+    /** Ascending */
+    KnownThreatIntelligenceSortingCriteriaEnum["Ascending"] = "ascending";
+    /** Descending */
+    KnownThreatIntelligenceSortingCriteriaEnum["Descending"] = "descending";
+})(KnownThreatIntelligenceSortingCriteriaEnum || (KnownThreatIntelligenceSortingCriteriaEnum = {}));
+/** Known values of {@link SourceType} that the service accepts. */
+export var KnownSourceType;
+(function (KnownSourceType) {
+    /** LocalFile */
+    KnownSourceType["LocalFile"] = "Local file";
+    /** RemoteStorage */
+    KnownSourceType["RemoteStorage"] = "Remote storage";
+})(KnownSourceType || (KnownSourceType = {}));
 /** Known values of {@link DataConnectorKind} that the service accepts. */
 export var KnownDataConnectorKind;
 (function (KnownDataConnectorKind) {
+    /** AzureActiveDirectory */
     KnownDataConnectorKind["AzureActiveDirectory"] = "AzureActiveDirectory";
+    /** AzureSecurityCenter */
     KnownDataConnectorKind["AzureSecurityCenter"] = "AzureSecurityCenter";
+    /** MicrosoftCloudAppSecurity */
     KnownDataConnectorKind["MicrosoftCloudAppSecurity"] = "MicrosoftCloudAppSecurity";
+    /** ThreatIntelligence */
     KnownDataConnectorKind["ThreatIntelligence"] = "ThreatIntelligence";
+    /** ThreatIntelligenceTaxii */
     KnownDataConnectorKind["ThreatIntelligenceTaxii"] = "ThreatIntelligenceTaxii";
+    /** Office365 */
     KnownDataConnectorKind["Office365"] = "Office365";
+    /** OfficeATP */
     KnownDataConnectorKind["OfficeATP"] = "OfficeATP";
+    /** OfficeIRM */
     KnownDataConnectorKind["OfficeIRM"] = "OfficeIRM";
+    /** Office365Project */
+    KnownDataConnectorKind["Office365Project"] = "Office365Project";
+    /** OfficePowerBI */
+    KnownDataConnectorKind["OfficePowerBI"] = "OfficePowerBI";
+    /** AmazonWebServicesCloudTrail */
     KnownDataConnectorKind["AmazonWebServicesCloudTrail"] = "AmazonWebServicesCloudTrail";
+    /** AmazonWebServicesS3 */
     KnownDataConnectorKind["AmazonWebServicesS3"] = "AmazonWebServicesS3";
+    /** AzureAdvancedThreatProtection */
     KnownDataConnectorKind["AzureAdvancedThreatProtection"] = "AzureAdvancedThreatProtection";
+    /** MicrosoftDefenderAdvancedThreatProtection */
     KnownDataConnectorKind["MicrosoftDefenderAdvancedThreatProtection"] = "MicrosoftDefenderAdvancedThreatProtection";
+    /** Dynamics365 */
     KnownDataConnectorKind["Dynamics365"] = "Dynamics365";
+    /** MicrosoftThreatProtection */
     KnownDataConnectorKind["MicrosoftThreatProtection"] = "MicrosoftThreatProtection";
+    /** MicrosoftThreatIntelligence */
     KnownDataConnectorKind["MicrosoftThreatIntelligence"] = "MicrosoftThreatIntelligence";
+    /** GenericUI */
     KnownDataConnectorKind["GenericUI"] = "GenericUI";
+    /** APIPolling */
     KnownDataConnectorKind["APIPolling"] = "APIPolling";
+    /** IOT */
+    KnownDataConnectorKind["IOT"] = "IOT";
 })(KnownDataConnectorKind || (KnownDataConnectorKind = {}));
 /** Known values of {@link ConnectAuthKind} that the service accepts. */
 export var KnownConnectAuthKind;
 (function (KnownConnectAuthKind) {
+    /** Basic */
     KnownConnectAuthKind["Basic"] = "Basic";
+    /** OAuth2 */
     KnownConnectAuthKind["OAuth2"] = "OAuth2";
+    /** APIKey */
     KnownConnectAuthKind["APIKey"] = "APIKey";
 })(KnownConnectAuthKind || (KnownConnectAuthKind = {}));
 /** Known values of {@link DataConnectorAuthorizationState} that the service accepts. */
 export var KnownDataConnectorAuthorizationState;
 (function (KnownDataConnectorAuthorizationState) {
+    /** Valid */
     KnownDataConnectorAuthorizationState["Valid"] = "Valid";
+    /** Invalid */
     KnownDataConnectorAuthorizationState["Invalid"] = "Invalid";
 })(KnownDataConnectorAuthorizationState || (KnownDataConnectorAuthorizationState = {}));
 /** Known values of {@link DataConnectorLicenseState} that the service accepts. */
 export var KnownDataConnectorLicenseState;
 (function (KnownDataConnectorLicenseState) {
+    /** Valid */
     KnownDataConnectorLicenseState["Valid"] = "Valid";
+    /** Invalid */
     KnownDataConnectorLicenseState["Invalid"] = "Invalid";
+    /** Unknown */
     KnownDataConnectorLicenseState["Unknown"] = "Unknown";
 })(KnownDataConnectorLicenseState || (KnownDataConnectorLicenseState = {}));
-/** Known values of {@link ThreatIntelligenceResourceKindEnum} that the service accepts. */
-export var KnownThreatIntelligenceResourceKindEnum;
-(function (KnownThreatIntelligenceResourceKindEnum) {
-    /** Entity represents threat intelligence indicator in the system. */
-    KnownThreatIntelligenceResourceKindEnum["Indicator"] = "indicator";
-})(KnownThreatIntelligenceResourceKindEnum || (KnownThreatIntelligenceResourceKindEnum = {}));
-/** Known values of {@link ThreatIntelligenceSortingCriteriaEnum} that the service accepts. */
-export var KnownThreatIntelligenceSortingCriteriaEnum;
-(function (KnownThreatIntelligenceSortingCriteriaEnum) {
-    KnownThreatIntelligenceSortingCriteriaEnum["Unsorted"] = "unsorted";
-    KnownThreatIntelligenceSortingCriteriaEnum["Ascending"] = "ascending";
-    KnownThreatIntelligenceSortingCriteriaEnum["Descending"] = "descending";
-})(KnownThreatIntelligenceSortingCriteriaEnum || (KnownThreatIntelligenceSortingCriteriaEnum = {}));
-/** Known values of {@link EntityQueryTemplateKind} that the service accepts. */
-export var KnownEntityQueryTemplateKind;
-(function (KnownEntityQueryTemplateKind) {
-    KnownEntityQueryTemplateKind["Activity"] = "Activity";
-})(KnownEntityQueryTemplateKind || (KnownEntityQueryTemplateKind = {}));
 /** Known values of {@link TemplateStatus} that the service accepts. */
 export var KnownTemplateStatus;
 (function (KnownTemplateStatus) {
@@ -467,12 +642,19 @@ export var KnownEntityMappingType;
 /** Known values of {@link MicrosoftSecurityProductName} that the service accepts. */
 export var KnownMicrosoftSecurityProductName;
 (function (KnownMicrosoftSecurityProductName) {
+    /** MicrosoftCloudAppSecurity */
     KnownMicrosoftSecurityProductName["MicrosoftCloudAppSecurity"] = "Microsoft Cloud App Security";
+    /** AzureSecurityCenter */
     KnownMicrosoftSecurityProductName["AzureSecurityCenter"] = "Azure Security Center";
+    /** AzureAdvancedThreatProtection */
     KnownMicrosoftSecurityProductName["AzureAdvancedThreatProtection"] = "Azure Advanced Threat Protection";
+    /** AzureActiveDirectoryIdentityProtection */
     KnownMicrosoftSecurityProductName["AzureActiveDirectoryIdentityProtection"] = "Azure Active Directory Identity Protection";
+    /** AzureSecurityCenterForIoT */
     KnownMicrosoftSecurityProductName["AzureSecurityCenterForIoT"] = "Azure Security Center for IoT";
+    /** Office365AdvancedThreatProtection */
     KnownMicrosoftSecurityProductName["Office365AdvancedThreatProtection"] = "Office 365 Advanced Threat Protection";
+    /** MicrosoftDefenderAdvancedThreatProtection */
     KnownMicrosoftSecurityProductName["MicrosoftDefenderAdvancedThreatProtection"] = "Microsoft Defender Advanced Threat Protection";
 })(KnownMicrosoftSecurityProductName || (KnownMicrosoftSecurityProductName = {}));
 /** Known values of {@link MatchingMethod} that the service accepts. */
@@ -496,9 +678,67 @@ export var KnownAlertDetail;
 /** Known values of {@link EventGroupingAggregationKind} that the service accepts. */
 export var KnownEventGroupingAggregationKind;
 (function (KnownEventGroupingAggregationKind) {
+    /** SingleAlert */
     KnownEventGroupingAggregationKind["SingleAlert"] = "SingleAlert";
+    /** AlertPerResult */
     KnownEventGroupingAggregationKind["AlertPerResult"] = "AlertPerResult";
 })(KnownEventGroupingAggregationKind || (KnownEventGroupingAggregationKind = {}));
+/** Known values of {@link AutomationRulePropertyArrayChangedConditionSupportedArrayType} that the service accepts. */
+export var KnownAutomationRulePropertyArrayChangedConditionSupportedArrayType;
+(function (KnownAutomationRulePropertyArrayChangedConditionSupportedArrayType) {
+    /** Evaluate the condition on the alerts */
+    KnownAutomationRulePropertyArrayChangedConditionSupportedArrayType["Alerts"] = "Alerts";
+    /** Evaluate the condition on the labels */
+    KnownAutomationRulePropertyArrayChangedConditionSupportedArrayType["Labels"] = "Labels";
+    /** Evaluate the condition on the tactics */
+    KnownAutomationRulePropertyArrayChangedConditionSupportedArrayType["Tactics"] = "Tactics";
+    /** Evaluate the condition on the comments */
+    KnownAutomationRulePropertyArrayChangedConditionSupportedArrayType["Comments"] = "Comments";
+})(KnownAutomationRulePropertyArrayChangedConditionSupportedArrayType || (KnownAutomationRulePropertyArrayChangedConditionSupportedArrayType = {}));
+/** Known values of {@link AutomationRulePropertyArrayChangedConditionSupportedChangeType} that the service accepts. */
+export var KnownAutomationRulePropertyArrayChangedConditionSupportedChangeType;
+(function (KnownAutomationRulePropertyArrayChangedConditionSupportedChangeType) {
+    /** Evaluate the condition on items added to the array */
+    KnownAutomationRulePropertyArrayChangedConditionSupportedChangeType["Added"] = "Added";
+})(KnownAutomationRulePropertyArrayChangedConditionSupportedChangeType || (KnownAutomationRulePropertyArrayChangedConditionSupportedChangeType = {}));
+/** Known values of {@link AutomationRulePropertyChangedConditionSupportedPropertyType} that the service accepts. */
+export var KnownAutomationRulePropertyChangedConditionSupportedPropertyType;
+(function (KnownAutomationRulePropertyChangedConditionSupportedPropertyType) {
+    /** Evaluate the condition on the incident severity */
+    KnownAutomationRulePropertyChangedConditionSupportedPropertyType["IncidentSeverity"] = "IncidentSeverity";
+    /** Evaluate the condition on the incident status */
+    KnownAutomationRulePropertyChangedConditionSupportedPropertyType["IncidentStatus"] = "IncidentStatus";
+    /** Evaluate the condition on the incident owner */
+    KnownAutomationRulePropertyChangedConditionSupportedPropertyType["IncidentOwner"] = "IncidentOwner";
+})(KnownAutomationRulePropertyChangedConditionSupportedPropertyType || (KnownAutomationRulePropertyChangedConditionSupportedPropertyType = {}));
+/** Known values of {@link AutomationRulePropertyChangedConditionSupportedChangedType} that the service accepts. */
+export var KnownAutomationRulePropertyChangedConditionSupportedChangedType;
+(function (KnownAutomationRulePropertyChangedConditionSupportedChangedType) {
+    /** Evaluate the condition on the previous value of the property */
+    KnownAutomationRulePropertyChangedConditionSupportedChangedType["ChangedFrom"] = "ChangedFrom";
+    /** Evaluate the condition on the updated value of the property */
+    KnownAutomationRulePropertyChangedConditionSupportedChangedType["ChangedTo"] = "ChangedTo";
+})(KnownAutomationRulePropertyChangedConditionSupportedChangedType || (KnownAutomationRulePropertyChangedConditionSupportedChangedType = {}));
+/** Known values of {@link AutomationRulePropertyConditionSupportedOperator} that the service accepts. */
+export var KnownAutomationRulePropertyConditionSupportedOperator;
+(function (KnownAutomationRulePropertyConditionSupportedOperator) {
+    /** Evaluates if the property equals at least one of the condition values */
+    KnownAutomationRulePropertyConditionSupportedOperator["Equals"] = "Equals";
+    /** Evaluates if the property does not equal any of the condition values */
+    KnownAutomationRulePropertyConditionSupportedOperator["NotEquals"] = "NotEquals";
+    /** Evaluates if the property contains at least one of the condition values */
+    KnownAutomationRulePropertyConditionSupportedOperator["Contains"] = "Contains";
+    /** Evaluates if the property does not contain any of the condition values */
+    KnownAutomationRulePropertyConditionSupportedOperator["NotContains"] = "NotContains";
+    /** Evaluates if the property starts with any of the condition values */
+    KnownAutomationRulePropertyConditionSupportedOperator["StartsWith"] = "StartsWith";
+    /** Evaluates if the property does not start with any of the condition values */
+    KnownAutomationRulePropertyConditionSupportedOperator["NotStartsWith"] = "NotStartsWith";
+    /** Evaluates if the property ends with any of the condition values */
+    KnownAutomationRulePropertyConditionSupportedOperator["EndsWith"] = "EndsWith";
+    /** Evaluates if the property does not end with any of the condition values */
+    KnownAutomationRulePropertyConditionSupportedOperator["NotEndsWith"] = "NotEndsWith";
+})(KnownAutomationRulePropertyConditionSupportedOperator || (KnownAutomationRulePropertyConditionSupportedOperator = {}));
 /** Known values of {@link AutomationRulePropertyConditionSupportedProperty} that the service accepts. */
 export var KnownAutomationRulePropertyConditionSupportedProperty;
 (function (KnownAutomationRulePropertyConditionSupportedProperty) {
@@ -510,15 +750,17 @@ export var KnownAutomationRulePropertyConditionSupportedProperty;
     KnownAutomationRulePropertyConditionSupportedProperty["IncidentSeverity"] = "IncidentSeverity";
     /** The status of the incident */
     KnownAutomationRulePropertyConditionSupportedProperty["IncidentStatus"] = "IncidentStatus";
-    /** The tactics of the incident */
-    KnownAutomationRulePropertyConditionSupportedProperty["IncidentTactics"] = "IncidentTactics";
     /** The related Analytic rule ids of the incident */
     KnownAutomationRulePropertyConditionSupportedProperty["IncidentRelatedAnalyticRuleIds"] = "IncidentRelatedAnalyticRuleIds";
+    /** The tactics of the incident */
+    KnownAutomationRulePropertyConditionSupportedProperty["IncidentTactics"] = "IncidentTactics";
+    /** The labels of the incident */
+    KnownAutomationRulePropertyConditionSupportedProperty["IncidentLabel"] = "IncidentLabel";
     /** The provider name of the incident */
     KnownAutomationRulePropertyConditionSupportedProperty["IncidentProviderName"] = "IncidentProviderName";
     /** The account Azure Active Directory tenant id */
     KnownAutomationRulePropertyConditionSupportedProperty["AccountAadTenantId"] = "AccountAadTenantId";
-    /** The account Azure Active Directory user id. */
+    /** The account Azure Active Directory user id */
     KnownAutomationRulePropertyConditionSupportedProperty["AccountAadUserId"] = "AccountAadUserId";
     /** The account name */
     KnownAutomationRulePropertyConditionSupportedProperty["AccountName"] = "AccountName";
@@ -532,6 +774,10 @@ export var KnownAutomationRulePropertyConditionSupportedProperty;
     KnownAutomationRulePropertyConditionSupportedProperty["AccountObjectGuid"] = "AccountObjectGuid";
     /** The account user principal name suffix */
     KnownAutomationRulePropertyConditionSupportedProperty["AccountUPNSuffix"] = "AccountUPNSuffix";
+    /** The name of the product of the alert */
+    KnownAutomationRulePropertyConditionSupportedProperty["AlertProductNames"] = "AlertProductNames";
+    /** The analytic rule ids of the alert */
+    KnownAutomationRulePropertyConditionSupportedProperty["AlertAnalyticRuleIds"] = "AlertAnalyticRuleIds";
     /** The Azure resource id */
     KnownAutomationRulePropertyConditionSupportedProperty["AzureResourceResourceId"] = "AzureResourceResourceId";
     /** The Azure resource subscription id */
@@ -558,7 +804,7 @@ export var KnownAutomationRulePropertyConditionSupportedProperty;
     KnownAutomationRulePropertyConditionSupportedProperty["HostNTDomain"] = "HostNTDomain";
     /** The host operating system */
     KnownAutomationRulePropertyConditionSupportedProperty["HostOSVersion"] = "HostOSVersion";
-    /** The IoT device id */
+    /** "The IoT device id */
     KnownAutomationRulePropertyConditionSupportedProperty["IoTDeviceId"] = "IoTDeviceId";
     /** The IoT device name */
     KnownAutomationRulePropertyConditionSupportedProperty["IoTDeviceName"] = "IoTDeviceName";
@@ -607,26 +853,6 @@ export var KnownAutomationRulePropertyConditionSupportedProperty;
     /** The url */
     KnownAutomationRulePropertyConditionSupportedProperty["Url"] = "Url";
 })(KnownAutomationRulePropertyConditionSupportedProperty || (KnownAutomationRulePropertyConditionSupportedProperty = {}));
-/** Known values of {@link AutomationRulePropertyConditionSupportedOperator} that the service accepts. */
-export var KnownAutomationRulePropertyConditionSupportedOperator;
-(function (KnownAutomationRulePropertyConditionSupportedOperator) {
-    /** Evaluates if the property equals at least one of the condition values */
-    KnownAutomationRulePropertyConditionSupportedOperator["Equals"] = "Equals";
-    /** Evaluates if the property does not equal any of the condition values */
-    KnownAutomationRulePropertyConditionSupportedOperator["NotEquals"] = "NotEquals";
-    /** Evaluates if the property contains at least one of the condition values */
-    KnownAutomationRulePropertyConditionSupportedOperator["Contains"] = "Contains";
-    /** Evaluates if the property does not contain any of the condition values */
-    KnownAutomationRulePropertyConditionSupportedOperator["NotContains"] = "NotContains";
-    /** Evaluates if the property starts with any of the condition values */
-    KnownAutomationRulePropertyConditionSupportedOperator["StartsWith"] = "StartsWith";
-    /** Evaluates if the property does not start with any of the condition values */
-    KnownAutomationRulePropertyConditionSupportedOperator["NotStartsWith"] = "NotStartsWith";
-    /** Evaluates if the property ends with any of the condition values */
-    KnownAutomationRulePropertyConditionSupportedOperator["EndsWith"] = "EndsWith";
-    /** Evaluates if the property does not end with any of the condition values */
-    KnownAutomationRulePropertyConditionSupportedOperator["NotEndsWith"] = "NotEndsWith";
-})(KnownAutomationRulePropertyConditionSupportedOperator || (KnownAutomationRulePropertyConditionSupportedOperator = {}));
 /** Known values of {@link EntityType} that the service accepts. */
 export var KnownEntityType;
 (function (KnownEntityType) {
@@ -672,33 +898,55 @@ export var KnownEntityType;
     KnownEntityType["Mailbox"] = "Mailbox";
     /** Entity represents submission mail in the system. */
     KnownEntityType["SubmissionMail"] = "SubmissionMail";
+    /** Entity represents network interface in the system. */
+    KnownEntityType["Nic"] = "Nic";
 })(KnownEntityType || (KnownEntityType = {}));
 /** Known values of {@link OutputType} that the service accepts. */
 export var KnownOutputType;
 (function (KnownOutputType) {
+    /** Number */
     KnownOutputType["Number"] = "Number";
+    /** String */
     KnownOutputType["String"] = "String";
+    /** Date */
     KnownOutputType["Date"] = "Date";
+    /** Entity */
     KnownOutputType["Entity"] = "Entity";
 })(KnownOutputType || (KnownOutputType = {}));
+/** Known values of {@link SettingsStatus} that the service accepts. */
+export var KnownSettingsStatus;
+(function (KnownSettingsStatus) {
+    /** Anomaly settings status in Production mode */
+    KnownSettingsStatus["Production"] = "Production";
+    /** Anomaly settings status in Flighting mode */
+    KnownSettingsStatus["Flighting"] = "Flighting";
+})(KnownSettingsStatus || (KnownSettingsStatus = {}));
+/** Known values of {@link EntityProviders} that the service accepts. */
+export var KnownEntityProviders;
+(function (KnownEntityProviders) {
+    /** ActiveDirectory */
+    KnownEntityProviders["ActiveDirectory"] = "ActiveDirectory";
+    /** AzureActiveDirectory */
+    KnownEntityProviders["AzureActiveDirectory"] = "AzureActiveDirectory";
+})(KnownEntityProviders || (KnownEntityProviders = {}));
 /** Known values of {@link UebaDataSources} that the service accepts. */
 export var KnownUebaDataSources;
 (function (KnownUebaDataSources) {
+    /** AuditLogs */
     KnownUebaDataSources["AuditLogs"] = "AuditLogs";
+    /** AzureActivity */
     KnownUebaDataSources["AzureActivity"] = "AzureActivity";
+    /** SecurityEvent */
     KnownUebaDataSources["SecurityEvent"] = "SecurityEvent";
+    /** SigninLogs */
     KnownUebaDataSources["SigninLogs"] = "SigninLogs";
 })(KnownUebaDataSources || (KnownUebaDataSources = {}));
-/** Known values of {@link SkuKind} that the service accepts. */
-export var KnownSkuKind;
-(function (KnownSkuKind) {
-    KnownSkuKind["PerGB"] = "PerGB";
-    KnownSkuKind["CapacityReservation"] = "CapacityReservation";
-})(KnownSkuKind || (KnownSkuKind = {}));
 /** Known values of {@link DataTypeState} that the service accepts. */
 export var KnownDataTypeState;
 (function (KnownDataTypeState) {
+    /** Enabled */
     KnownDataTypeState["Enabled"] = "Enabled";
+    /** Disabled */
     KnownDataTypeState["Disabled"] = "Disabled";
 })(KnownDataTypeState || (KnownDataTypeState = {}));
 /** Known values of {@link PollingFrequency} that the service accepts. */
@@ -714,30 +962,43 @@ export var KnownPollingFrequency;
 /** Known values of {@link ConnectivityType} that the service accepts. */
 export var KnownConnectivityType;
 (function (KnownConnectivityType) {
+    /** IsConnectedQuery */
     KnownConnectivityType["IsConnectedQuery"] = "IsConnectedQuery";
 })(KnownConnectivityType || (KnownConnectivityType = {}));
 /** Known values of {@link ProviderName} that the service accepts. */
 export var KnownProviderName;
 (function (KnownProviderName) {
+    /** MicrosoftOperationalInsightsSolutions */
     KnownProviderName["MicrosoftOperationalInsightsSolutions"] = "Microsoft.OperationalInsights/solutions";
+    /** MicrosoftOperationalInsightsWorkspaces */
     KnownProviderName["MicrosoftOperationalInsightsWorkspaces"] = "Microsoft.OperationalInsights/workspaces";
+    /** MicrosoftOperationalInsightsWorkspacesDatasources */
     KnownProviderName["MicrosoftOperationalInsightsWorkspacesDatasources"] = "Microsoft.OperationalInsights/workspaces/datasources";
+    /** MicrosoftAadiamDiagnosticSettings */
     KnownProviderName["MicrosoftAadiamDiagnosticSettings"] = "microsoft.aadiam/diagnosticSettings";
+    /** MicrosoftOperationalInsightsWorkspacesSharedKeys */
     KnownProviderName["MicrosoftOperationalInsightsWorkspacesSharedKeys"] = "Microsoft.OperationalInsights/workspaces/sharedKeys";
+    /** MicrosoftAuthorizationPolicyAssignments */
     KnownProviderName["MicrosoftAuthorizationPolicyAssignments"] = "Microsoft.Authorization/policyAssignments";
 })(KnownProviderName || (KnownProviderName = {}));
 /** Known values of {@link PermissionProviderScope} that the service accepts. */
 export var KnownPermissionProviderScope;
 (function (KnownPermissionProviderScope) {
+    /** ResourceGroup */
     KnownPermissionProviderScope["ResourceGroup"] = "ResourceGroup";
+    /** Subscription */
     KnownPermissionProviderScope["Subscription"] = "Subscription";
+    /** Workspace */
     KnownPermissionProviderScope["Workspace"] = "Workspace";
 })(KnownPermissionProviderScope || (KnownPermissionProviderScope = {}));
 /** Known values of {@link SettingType} that the service accepts. */
 export var KnownSettingType;
 (function (KnownSettingType) {
+    /** CopyableLabel */
     KnownSettingType["CopyableLabel"] = "CopyableLabel";
+    /** InstructionStepsGroup */
     KnownSettingType["InstructionStepsGroup"] = "InstructionStepsGroup";
+    /** InfoMessage */
     KnownSettingType["InfoMessage"] = "InfoMessage";
 })(KnownSettingType || (KnownSettingType = {}));
 /** Known values of {@link FileHashAlgorithm} that the service accepts. */
@@ -754,6 +1015,18 @@ export var KnownFileHashAlgorithm;
     /** SHA256 Authenticode hash type */
     KnownFileHashAlgorithm["SHA256AC"] = "SHA256AC";
 })(KnownFileHashAlgorithm || (KnownFileHashAlgorithm = {}));
+/** Known values of {@link DeviceImportance} that the service accepts. */
+export var KnownDeviceImportance;
+(function (KnownDeviceImportance) {
+    /** Unknown - Default value */
+    KnownDeviceImportance["Unknown"] = "Unknown";
+    /** Low */
+    KnownDeviceImportance["Low"] = "Low";
+    /** Normal */
+    KnownDeviceImportance["Normal"] = "Normal";
+    /** High */
+    KnownDeviceImportance["High"] = "High";
+})(KnownDeviceImportance || (KnownDeviceImportance = {}));
 /** Known values of {@link AntispamMailDirection} that the service accepts. */
 export var KnownAntispamMailDirection;
 (function (KnownAntispamMailDirection) {