@azure/arm-securityinsight 1.0.0-beta.3 → 1.0.0-beta.5

package/dist-esm/src/models/index.js

@@ -8,19 +8,29 @@
 /** Known values of {@link AlertRuleKind} that the service accepts. */
 export var KnownAlertRuleKind;
 (function (KnownAlertRuleKind) {
+    /** Scheduled */
     KnownAlertRuleKind["Scheduled"] = "Scheduled";
+    /** MicrosoftSecurityIncidentCreation */
     KnownAlertRuleKind["MicrosoftSecurityIncidentCreation"] = "MicrosoftSecurityIncidentCreation";
+    /** Fusion */
     KnownAlertRuleKind["Fusion"] = "Fusion";
+    /** MLBehaviorAnalytics */
     KnownAlertRuleKind["MLBehaviorAnalytics"] = "MLBehaviorAnalytics";
+    /** ThreatIntelligence */
     KnownAlertRuleKind["ThreatIntelligence"] = "ThreatIntelligence";
+    /** NRT */
     KnownAlertRuleKind["NRT"] = "NRT";
 })(KnownAlertRuleKind || (KnownAlertRuleKind = {}));
 /** Known values of {@link CreatedByType} that the service accepts. */
 export var KnownCreatedByType;
 (function (KnownCreatedByType) {
+    /** User */
     KnownCreatedByType["User"] = "User";
+    /** Application */
     KnownCreatedByType["Application"] = "Application";
+    /** ManagedIdentity */
     KnownCreatedByType["ManagedIdentity"] = "ManagedIdentity";
+    /** Key */
     KnownCreatedByType["Key"] = "Key";
 })(KnownCreatedByType || (KnownCreatedByType = {}));
 /** Known values of {@link TriggersOn} that the service accepts. */
@@ -28,18 +38,30 @@ export var KnownTriggersOn;
 (function (KnownTriggersOn) {
     /** Trigger on Incidents */
     KnownTriggersOn["Incidents"] = "Incidents";
+    /** Trigger on Alerts */
+    KnownTriggersOn["Alerts"] = "Alerts";
 })(KnownTriggersOn || (KnownTriggersOn = {}));
 /** Known values of {@link TriggersWhen} that the service accepts. */
 export var KnownTriggersWhen;
 (function (KnownTriggersWhen) {
     /** Trigger on created objects */
     KnownTriggersWhen["Created"] = "Created";
+    /** Trigger on updated objects */
+    KnownTriggersWhen["Updated"] = "Updated";
 })(KnownTriggersWhen || (KnownTriggersWhen = {}));
 /** Known values of {@link ConditionType} that the service accepts. */
 export var KnownConditionType;
 (function (KnownConditionType) {
     /** Evaluate an object property value */
     KnownConditionType["Property"] = "Property";
+    /** Evaluate an object array property value */
+    KnownConditionType["PropertyArray"] = "PropertyArray";
+    /** Evaluate an object property changed value */
+    KnownConditionType["PropertyChanged"] = "PropertyChanged";
+    /** Evaluate an object array property changed value */
+    KnownConditionType["PropertyArrayChanged"] = "PropertyArrayChanged";
+    /** Apply a boolean operator (e.g AND, OR) to conditions */
+    KnownConditionType["Boolean"] = "Boolean";
 })(KnownConditionType || (KnownConditionType = {}));
 /** Known values of {@link ActionType} that the service accepts. */
 export var KnownActionType;
@@ -64,22 +86,39 @@ export var KnownIncidentSeverity;
 /** Known values of {@link AttackTactic} that the service accepts. */
 export var KnownAttackTactic;
 (function (KnownAttackTactic) {
+    /** Reconnaissance */
     KnownAttackTactic["Reconnaissance"] = "Reconnaissance";
+    /** ResourceDevelopment */
     KnownAttackTactic["ResourceDevelopment"] = "ResourceDevelopment";
+    /** InitialAccess */
     KnownAttackTactic["InitialAccess"] = "InitialAccess";
+    /** Execution */
     KnownAttackTactic["Execution"] = "Execution";
+    /** Persistence */
     KnownAttackTactic["Persistence"] = "Persistence";
+    /** PrivilegeEscalation */
     KnownAttackTactic["PrivilegeEscalation"] = "PrivilegeEscalation";
+    /** DefenseEvasion */
     KnownAttackTactic["DefenseEvasion"] = "DefenseEvasion";
+    /** CredentialAccess */
     KnownAttackTactic["CredentialAccess"] = "CredentialAccess";
+    /** Discovery */
     KnownAttackTactic["Discovery"] = "Discovery";
+    /** LateralMovement */
     KnownAttackTactic["LateralMovement"] = "LateralMovement";
+    /** Collection */
     KnownAttackTactic["Collection"] = "Collection";
+    /** Exfiltration */
     KnownAttackTactic["Exfiltration"] = "Exfiltration";
+    /** CommandAndControl */
     KnownAttackTactic["CommandAndControl"] = "CommandAndControl";
+    /** Impact */
     KnownAttackTactic["Impact"] = "Impact";
+    /** PreAttack */
     KnownAttackTactic["PreAttack"] = "PreAttack";
+    /** ImpairProcessControl */
     KnownAttackTactic["ImpairProcessControl"] = "ImpairProcessControl";
+    /** InhibitResponseFunction */
     KnownAttackTactic["InhibitResponseFunction"] = "InhibitResponseFunction";
 })(KnownAttackTactic || (KnownAttackTactic = {}));
 /** Known values of {@link EntityKind} that the service accepts. */
@@ -127,6 +166,8 @@ export var KnownEntityKind;
     KnownEntityKind["Mailbox"] = "Mailbox";
     /** Entity represents submission mail in the system. */
     KnownEntityKind["SubmissionMail"] = "SubmissionMail";
+    /** Entity represents network interface in the system. */
+    KnownEntityKind["Nic"] = "Nic";
 })(KnownEntityKind || (KnownEntityKind = {}));
 /** Known values of {@link EntityTimelineKind} that the service accepts. */
 export var KnownEntityTimelineKind;
@@ -137,6 +178,8 @@ export var KnownEntityTimelineKind;
     KnownEntityTimelineKind["Bookmark"] = "Bookmark";
     /** security alerts */
     KnownEntityTimelineKind["SecurityAlert"] = "SecurityAlert";
+    /** anomaly */
+    KnownEntityTimelineKind["Anomaly"] = "Anomaly";
 })(KnownEntityTimelineKind || (KnownEntityTimelineKind = {}));
 /** Known values of {@link EntityItemQueryKind} that the service accepts. */
 export var KnownEntityItemQueryKind;
@@ -147,26 +190,97 @@ export var KnownEntityItemQueryKind;
 /** Known values of {@link EntityQueryKind} that the service accepts. */
 export var KnownEntityQueryKind;
 (function (KnownEntityQueryKind) {
+    /** Expansion */
     KnownEntityQueryKind["Expansion"] = "Expansion";
+    /** Insight */
     KnownEntityQueryKind["Insight"] = "Insight";
+    /** Activity */
     KnownEntityQueryKind["Activity"] = "Activity";
 })(KnownEntityQueryKind || (KnownEntityQueryKind = {}));
-/** Known values of {@link Enum12} that the service accepts. */
-export var KnownEnum12;
-(function (KnownEnum12) {
-    KnownEnum12["Expansion"] = "Expansion";
-    KnownEnum12["Activity"] = "Activity";
-})(KnownEnum12 || (KnownEnum12 = {}));
+/** Known values of {@link GetInsightsError} that the service accepts. */
+export var KnownGetInsightsError;
+(function (KnownGetInsightsError) {
+    /** Insight */
+    KnownGetInsightsError["Insight"] = "Insight";
+})(KnownGetInsightsError || (KnownGetInsightsError = {}));
+/** Known values of {@link Enum13} that the service accepts. */
+export var KnownEnum13;
+(function (KnownEnum13) {
+    /** Expansion */
+    KnownEnum13["Expansion"] = "Expansion";
+    /** Activity */
+    KnownEnum13["Activity"] = "Activity";
+})(KnownEnum13 || (KnownEnum13 = {}));
 /** Known values of {@link CustomEntityQueryKind} that the service accepts. */
 export var KnownCustomEntityQueryKind;
 (function (KnownCustomEntityQueryKind) {
+    /** Activity */
     KnownCustomEntityQueryKind["Activity"] = "Activity";
 })(KnownCustomEntityQueryKind || (KnownCustomEntityQueryKind = {}));
 /** Known values of {@link EntityQueryTemplateKind} that the service accepts. */
 export var KnownEntityQueryTemplateKind;
 (function (KnownEntityQueryTemplateKind) {
+    /** Activity */
     KnownEntityQueryTemplateKind["Activity"] = "Activity";
 })(KnownEntityQueryTemplateKind || (KnownEntityQueryTemplateKind = {}));
+/** Known values of {@link IngestionMode} that the service accepts. */
+export var KnownIngestionMode;
+(function (KnownIngestionMode) {
+    /** No records should be ingested when invalid records are detected. */
+    KnownIngestionMode["IngestOnlyIfAllAreValid"] = "IngestOnlyIfAllAreValid";
+    /** Valid records should still be ingested when invalid records are detected. */
+    KnownIngestionMode["IngestAnyValidRecords"] = "IngestAnyValidRecords";
+    /** Unspecified */
+    KnownIngestionMode["Unspecified"] = "Unspecified";
+})(KnownIngestionMode || (KnownIngestionMode = {}));
+/** Known values of {@link FileImportContentType} that the service accepts. */
+export var KnownFileImportContentType;
+(function (KnownFileImportContentType) {
+    /** File containing records with the core fields of an indicator, plus the observables to construct the STIX pattern. */
+    KnownFileImportContentType["BasicIndicator"] = "BasicIndicator";
+    /** File containing STIX indicators. */
+    KnownFileImportContentType["StixIndicator"] = "StixIndicator";
+    /** File containing other records. */
+    KnownFileImportContentType["Unspecified"] = "Unspecified";
+})(KnownFileImportContentType || (KnownFileImportContentType = {}));
+/** Known values of {@link FileFormat} that the service accepts. */
+export var KnownFileFormat;
+(function (KnownFileFormat) {
+    /** A CSV file. */
+    KnownFileFormat["CSV"] = "CSV";
+    /** A JSON file. */
+    KnownFileFormat["Json"] = "JSON";
+    /** A file of other format. */
+    KnownFileFormat["Unspecified"] = "Unspecified";
+})(KnownFileFormat || (KnownFileFormat = {}));
+/** Known values of {@link DeleteStatus} that the service accepts. */
+export var KnownDeleteStatus;
+(function (KnownDeleteStatus) {
+    /** The file was deleted. */
+    KnownDeleteStatus["Deleted"] = "Deleted";
+    /** The file was not deleted. */
+    KnownDeleteStatus["NotDeleted"] = "NotDeleted";
+    /** Unspecified */
+    KnownDeleteStatus["Unspecified"] = "Unspecified";
+})(KnownDeleteStatus || (KnownDeleteStatus = {}));
+/** Known values of {@link FileImportState} that the service accepts. */
+export var KnownFileImportState;
+(function (KnownFileImportState) {
+    /** A fatal error has occurred while ingesting the file. */
+    KnownFileImportState["FatalError"] = "FatalError";
+    /** The file has been ingested. */
+    KnownFileImportState["Ingested"] = "Ingested";
+    /** The file has been ingested with errors. */
+    KnownFileImportState["IngestedWithErrors"] = "IngestedWithErrors";
+    /** The file ingestion is in progress. */
+    KnownFileImportState["InProgress"] = "InProgress";
+    /** The file is invalid. */
+    KnownFileImportState["Invalid"] = "Invalid";
+    /** Waiting for the file to be uploaded. */
+    KnownFileImportState["WaitingForUpload"] = "WaitingForUpload";
+    /** Unspecified state. */
+    KnownFileImportState["Unspecified"] = "Unspecified";
+})(KnownFileImportState || (KnownFileImportState = {}));
 /** Known values of {@link IncidentClassification} that the service accepts. */
 export var KnownIncidentClassification;
 (function (KnownIncidentClassification) {
@@ -302,91 +416,143 @@ export var KnownAlertStatus;
 /** Known values of {@link Kind} that the service accepts. */
 export var KnownKind;
 (function (KnownKind) {
+    /** DataConnector */
     KnownKind["DataConnector"] = "DataConnector";
+    /** DataType */
     KnownKind["DataType"] = "DataType";
+    /** Workbook */
     KnownKind["Workbook"] = "Workbook";
+    /** WorkbookTemplate */
     KnownKind["WorkbookTemplate"] = "WorkbookTemplate";
+    /** Playbook */
     KnownKind["Playbook"] = "Playbook";
+    /** PlaybookTemplate */
     KnownKind["PlaybookTemplate"] = "PlaybookTemplate";
+    /** AnalyticsRuleTemplate */
     KnownKind["AnalyticsRuleTemplate"] = "AnalyticsRuleTemplate";
+    /** AnalyticsRule */
     KnownKind["AnalyticsRule"] = "AnalyticsRule";
+    /** HuntingQuery */
     KnownKind["HuntingQuery"] = "HuntingQuery";
+    /** InvestigationQuery */
     KnownKind["InvestigationQuery"] = "InvestigationQuery";
+    /** Parser */
     KnownKind["Parser"] = "Parser";
+    /** Watchlist */
     KnownKind["Watchlist"] = "Watchlist";
+    /** WatchlistTemplate */
     KnownKind["WatchlistTemplate"] = "WatchlistTemplate";
+    /** Solution */
     KnownKind["Solution"] = "Solution";
+    /** AzureFunction */
     KnownKind["AzureFunction"] = "AzureFunction";
+    /** LogicAppsCustomConnector */
     KnownKind["LogicAppsCustomConnector"] = "LogicAppsCustomConnector";
+    /** AutomationRule */
     KnownKind["AutomationRule"] = "AutomationRule";
 })(KnownKind || (KnownKind = {}));
 /** Known values of {@link SourceKind} that the service accepts. */
 export var KnownSourceKind;
 (function (KnownSourceKind) {
+    /** LocalWorkspace */
     KnownSourceKind["LocalWorkspace"] = "LocalWorkspace";
+    /** Community */
     KnownSourceKind["Community"] = "Community";
+    /** Solution */
     KnownSourceKind["Solution"] = "Solution";
+    /** SourceRepository */
     KnownSourceKind["SourceRepository"] = "SourceRepository";
 })(KnownSourceKind || (KnownSourceKind = {}));
 /** Known values of {@link SupportTier} that the service accepts. */
 export var KnownSupportTier;
 (function (KnownSupportTier) {
+    /** Microsoft */
     KnownSupportTier["Microsoft"] = "Microsoft";
+    /** Partner */
     KnownSupportTier["Partner"] = "Partner";
+    /** Community */
     KnownSupportTier["Community"] = "Community";
 })(KnownSupportTier || (KnownSupportTier = {}));
 /** Known values of {@link Operator} that the service accepts. */
 export var KnownOperator;
 (function (KnownOperator) {
+    /** AND */
     KnownOperator["AND"] = "AND";
+    /** OR */
     KnownOperator["OR"] = "OR";
 })(KnownOperator || (KnownOperator = {}));
+/** Known values of {@link SecurityMLAnalyticsSettingsKind} that the service accepts. */
+export var KnownSecurityMLAnalyticsSettingsKind;
+(function (KnownSecurityMLAnalyticsSettingsKind) {
+    /** Anomaly */
+    KnownSecurityMLAnalyticsSettingsKind["Anomaly"] = "Anomaly";
+})(KnownSecurityMLAnalyticsSettingsKind || (KnownSecurityMLAnalyticsSettingsKind = {}));
 /** Known values of {@link SettingKind} that the service accepts. */
 export var KnownSettingKind;
 (function (KnownSettingKind) {
+    /** Anomalies */
     KnownSettingKind["Anomalies"] = "Anomalies";
+    /** EyesOn */
     KnownSettingKind["EyesOn"] = "EyesOn";
+    /** EntityAnalytics */
     KnownSettingKind["EntityAnalytics"] = "EntityAnalytics";
+    /** Ueba */
     KnownSettingKind["Ueba"] = "Ueba";
 })(KnownSettingKind || (KnownSettingKind = {}));
 /** Known values of {@link RepoType} that the service accepts. */
 export var KnownRepoType;
 (function (KnownRepoType) {
+    /** Github */
     KnownRepoType["Github"] = "Github";
+    /** DevOps */
     KnownRepoType["DevOps"] = "DevOps";
 })(KnownRepoType || (KnownRepoType = {}));
 /** Known values of {@link Version} that the service accepts. */
 export var KnownVersion;
 (function (KnownVersion) {
+    /** V1 */
     KnownVersion["V1"] = "V1";
+    /** V2 */
     KnownVersion["V2"] = "V2";
 })(KnownVersion || (KnownVersion = {}));
 /** Known values of {@link ContentType} that the service accepts. */
 export var KnownContentType;
 (function (KnownContentType) {
+    /** AnalyticRule */
     KnownContentType["AnalyticRule"] = "AnalyticRule";
+    /** Workbook */
     KnownContentType["Workbook"] = "Workbook";
 })(KnownContentType || (KnownContentType = {}));
 /** Known values of {@link DeploymentFetchStatus} that the service accepts. */
 export var KnownDeploymentFetchStatus;
 (function (KnownDeploymentFetchStatus) {
+    /** Success */
     KnownDeploymentFetchStatus["Success"] = "Success";
+    /** Unauthorized */
     KnownDeploymentFetchStatus["Unauthorized"] = "Unauthorized";
+    /** NotFound */
     KnownDeploymentFetchStatus["NotFound"] = "NotFound";
 })(KnownDeploymentFetchStatus || (KnownDeploymentFetchStatus = {}));
 /** Known values of {@link DeploymentState} that the service accepts. */
 export var KnownDeploymentState;
 (function (KnownDeploymentState) {
+    /** InProgress */
     KnownDeploymentState["InProgress"] = "In_Progress";
+    /** Completed */
     KnownDeploymentState["Completed"] = "Completed";
+    /** Queued */
     KnownDeploymentState["Queued"] = "Queued";
+    /** Canceling */
     KnownDeploymentState["Canceling"] = "Canceling";
 })(KnownDeploymentState || (KnownDeploymentState = {}));
 /** Known values of {@link DeploymentResult} that the service accepts. */
 export var KnownDeploymentResult;
 (function (KnownDeploymentResult) {
+    /** Success */
     KnownDeploymentResult["Success"] = "Success";
+    /** Canceled */
     KnownDeploymentResult["Canceled"] = "Canceled";
+    /** Failed */
     KnownDeploymentResult["Failed"] = "Failed";
 })(KnownDeploymentResult || (KnownDeploymentResult = {}));
 /** Known values of {@link ThreatIntelligenceResourceKindEnum} that the service accepts. */
@@ -398,66 +564,91 @@ export var KnownThreatIntelligenceResourceKindEnum;
 /** Known values of {@link ThreatIntelligenceSortingCriteriaEnum} that the service accepts. */
 export var KnownThreatIntelligenceSortingCriteriaEnum;
 (function (KnownThreatIntelligenceSortingCriteriaEnum) {
+    /** Unsorted */
     KnownThreatIntelligenceSortingCriteriaEnum["Unsorted"] = "unsorted";
+    /** Ascending */
     KnownThreatIntelligenceSortingCriteriaEnum["Ascending"] = "ascending";
+    /** Descending */
     KnownThreatIntelligenceSortingCriteriaEnum["Descending"] = "descending";
 })(KnownThreatIntelligenceSortingCriteriaEnum || (KnownThreatIntelligenceSortingCriteriaEnum = {}));
 /** Known values of {@link SourceType} that the service accepts. */
 export var KnownSourceType;
 (function (KnownSourceType) {
+    /** LocalFile */
     KnownSourceType["LocalFile"] = "Local file";
+    /** RemoteStorage */
     KnownSourceType["RemoteStorage"] = "Remote storage";
 })(KnownSourceType || (KnownSourceType = {}));
-/** Known values of {@link ProvisioningState} that the service accepts. */
-export var KnownProvisioningState;
-(function (KnownProvisioningState) {
-    KnownProvisioningState["Succeeded"] = "Succeeded";
-    KnownProvisioningState["Failed"] = "Failed";
-    KnownProvisioningState["Canceled"] = "Canceled";
-    KnownProvisioningState["InProgress"] = "InProgress";
-})(KnownProvisioningState || (KnownProvisioningState = {}));
 /** Known values of {@link DataConnectorKind} that the service accepts. */
 export var KnownDataConnectorKind;
 (function (KnownDataConnectorKind) {
+    /** AzureActiveDirectory */
     KnownDataConnectorKind["AzureActiveDirectory"] = "AzureActiveDirectory";
+    /** AzureSecurityCenter */
     KnownDataConnectorKind["AzureSecurityCenter"] = "AzureSecurityCenter";
+    /** MicrosoftCloudAppSecurity */
     KnownDataConnectorKind["MicrosoftCloudAppSecurity"] = "MicrosoftCloudAppSecurity";
+    /** ThreatIntelligence */
     KnownDataConnectorKind["ThreatIntelligence"] = "ThreatIntelligence";
+    /** ThreatIntelligenceTaxii */
     KnownDataConnectorKind["ThreatIntelligenceTaxii"] = "ThreatIntelligenceTaxii";
+    /** Office365 */
     KnownDataConnectorKind["Office365"] = "Office365";
+    /** OfficeATP */
     KnownDataConnectorKind["OfficeATP"] = "OfficeATP";
+    /** OfficeIRM */
     KnownDataConnectorKind["OfficeIRM"] = "OfficeIRM";
+    /** Office365Project */
     KnownDataConnectorKind["Office365Project"] = "Office365Project";
+    /** OfficePowerBI */
     KnownDataConnectorKind["OfficePowerBI"] = "OfficePowerBI";
+    /** AmazonWebServicesCloudTrail */
     KnownDataConnectorKind["AmazonWebServicesCloudTrail"] = "AmazonWebServicesCloudTrail";
+    /** AmazonWebServicesS3 */
     KnownDataConnectorKind["AmazonWebServicesS3"] = "AmazonWebServicesS3";
+    /** AzureAdvancedThreatProtection */
     KnownDataConnectorKind["AzureAdvancedThreatProtection"] = "AzureAdvancedThreatProtection";
+    /** MicrosoftDefenderAdvancedThreatProtection */
     KnownDataConnectorKind["MicrosoftDefenderAdvancedThreatProtection"] = "MicrosoftDefenderAdvancedThreatProtection";
+    /** Dynamics365 */
     KnownDataConnectorKind["Dynamics365"] = "Dynamics365";
+    /** MicrosoftThreatProtection */
     KnownDataConnectorKind["MicrosoftThreatProtection"] = "MicrosoftThreatProtection";
+    /** MicrosoftThreatIntelligence */
     KnownDataConnectorKind["MicrosoftThreatIntelligence"] = "MicrosoftThreatIntelligence";
+    /** GenericUI */
     KnownDataConnectorKind["GenericUI"] = "GenericUI";
+    /** APIPolling */
     KnownDataConnectorKind["APIPolling"] = "APIPolling";
+    /** IOT */
     KnownDataConnectorKind["IOT"] = "IOT";
 })(KnownDataConnectorKind || (KnownDataConnectorKind = {}));
 /** Known values of {@link ConnectAuthKind} that the service accepts. */
 export var KnownConnectAuthKind;
 (function (KnownConnectAuthKind) {
+    /** Basic */
     KnownConnectAuthKind["Basic"] = "Basic";
+    /** OAuth2 */
     KnownConnectAuthKind["OAuth2"] = "OAuth2";
+    /** APIKey */
     KnownConnectAuthKind["APIKey"] = "APIKey";
 })(KnownConnectAuthKind || (KnownConnectAuthKind = {}));
 /** Known values of {@link DataConnectorAuthorizationState} that the service accepts. */
 export var KnownDataConnectorAuthorizationState;
 (function (KnownDataConnectorAuthorizationState) {
+    /** Valid */
     KnownDataConnectorAuthorizationState["Valid"] = "Valid";
+    /** Invalid */
     KnownDataConnectorAuthorizationState["Invalid"] = "Invalid";
 })(KnownDataConnectorAuthorizationState || (KnownDataConnectorAuthorizationState = {}));
 /** Known values of {@link DataConnectorLicenseState} that the service accepts. */
 export var KnownDataConnectorLicenseState;
 (function (KnownDataConnectorLicenseState) {
+    /** Valid */
     KnownDataConnectorLicenseState["Valid"] = "Valid";
+    /** Invalid */
     KnownDataConnectorLicenseState["Invalid"] = "Invalid";
+    /** Unknown */
     KnownDataConnectorLicenseState["Unknown"] = "Unknown";
 })(KnownDataConnectorLicenseState || (KnownDataConnectorLicenseState = {}));
 /** Known values of {@link TemplateStatus} that the service accepts. */
@@ -510,15 +701,30 @@ export var KnownEntityMappingType;
     /** Submission mail entity type */
     KnownEntityMappingType["SubmissionMail"] = "SubmissionMail";
 })(KnownEntityMappingType || (KnownEntityMappingType = {}));
+/** Known values of {@link EventGroupingAggregationKind} that the service accepts. */
+export var KnownEventGroupingAggregationKind;
+(function (KnownEventGroupingAggregationKind) {
+    /** SingleAlert */
+    KnownEventGroupingAggregationKind["SingleAlert"] = "SingleAlert";
+    /** AlertPerResult */
+    KnownEventGroupingAggregationKind["AlertPerResult"] = "AlertPerResult";
+})(KnownEventGroupingAggregationKind || (KnownEventGroupingAggregationKind = {}));
 /** Known values of {@link MicrosoftSecurityProductName} that the service accepts. */
 export var KnownMicrosoftSecurityProductName;
 (function (KnownMicrosoftSecurityProductName) {
+    /** MicrosoftCloudAppSecurity */
     KnownMicrosoftSecurityProductName["MicrosoftCloudAppSecurity"] = "Microsoft Cloud App Security";
+    /** AzureSecurityCenter */
     KnownMicrosoftSecurityProductName["AzureSecurityCenter"] = "Azure Security Center";
+    /** AzureAdvancedThreatProtection */
     KnownMicrosoftSecurityProductName["AzureAdvancedThreatProtection"] = "Azure Advanced Threat Protection";
+    /** AzureActiveDirectoryIdentityProtection */
     KnownMicrosoftSecurityProductName["AzureActiveDirectoryIdentityProtection"] = "Azure Active Directory Identity Protection";
+    /** AzureSecurityCenterForIoT */
     KnownMicrosoftSecurityProductName["AzureSecurityCenterForIoT"] = "Azure Security Center for IoT";
+    /** Office365AdvancedThreatProtection */
     KnownMicrosoftSecurityProductName["Office365AdvancedThreatProtection"] = "Office 365 Advanced Threat Protection";
+    /** MicrosoftDefenderAdvancedThreatProtection */
     KnownMicrosoftSecurityProductName["MicrosoftDefenderAdvancedThreatProtection"] = "Microsoft Defender Advanced Threat Protection";
 })(KnownMicrosoftSecurityProductName || (KnownMicrosoftSecurityProductName = {}));
 /** Known values of {@link MatchingMethod} that the service accepts. */
@@ -539,12 +745,84 @@ export var KnownAlertDetail;
     /** Alert severity */
     KnownAlertDetail["Severity"] = "Severity";
 })(KnownAlertDetail || (KnownAlertDetail = {}));
-/** Known values of {@link EventGroupingAggregationKind} that the service accepts. */
-export var KnownEventGroupingAggregationKind;
-(function (KnownEventGroupingAggregationKind) {
-    KnownEventGroupingAggregationKind["SingleAlert"] = "SingleAlert";
-    KnownEventGroupingAggregationKind["AlertPerResult"] = "AlertPerResult";
-})(KnownEventGroupingAggregationKind || (KnownEventGroupingAggregationKind = {}));
+/** Known values of {@link AutomationRuleBooleanConditionSupportedOperator} that the service accepts. */
+export var KnownAutomationRuleBooleanConditionSupportedOperator;
+(function (KnownAutomationRuleBooleanConditionSupportedOperator) {
+    /** Evaluates as true if all the item conditions are evaluated as true */
+    KnownAutomationRuleBooleanConditionSupportedOperator["And"] = "And";
+    /** Evaluates as true if at least one of the item conditions are evaluated as true */
+    KnownAutomationRuleBooleanConditionSupportedOperator["Or"] = "Or";
+})(KnownAutomationRuleBooleanConditionSupportedOperator || (KnownAutomationRuleBooleanConditionSupportedOperator = {}));
+/** Known values of {@link AutomationRulePropertyArrayChangedConditionSupportedArrayType} that the service accepts. */
+export var KnownAutomationRulePropertyArrayChangedConditionSupportedArrayType;
+(function (KnownAutomationRulePropertyArrayChangedConditionSupportedArrayType) {
+    /** Evaluate the condition on the alerts */
+    KnownAutomationRulePropertyArrayChangedConditionSupportedArrayType["Alerts"] = "Alerts";
+    /** Evaluate the condition on the labels */
+    KnownAutomationRulePropertyArrayChangedConditionSupportedArrayType["Labels"] = "Labels";
+    /** Evaluate the condition on the tactics */
+    KnownAutomationRulePropertyArrayChangedConditionSupportedArrayType["Tactics"] = "Tactics";
+    /** Evaluate the condition on the comments */
+    KnownAutomationRulePropertyArrayChangedConditionSupportedArrayType["Comments"] = "Comments";
+})(KnownAutomationRulePropertyArrayChangedConditionSupportedArrayType || (KnownAutomationRulePropertyArrayChangedConditionSupportedArrayType = {}));
+/** Known values of {@link AutomationRulePropertyArrayChangedConditionSupportedChangeType} that the service accepts. */
+export var KnownAutomationRulePropertyArrayChangedConditionSupportedChangeType;
+(function (KnownAutomationRulePropertyArrayChangedConditionSupportedChangeType) {
+    /** Evaluate the condition on items added to the array */
+    KnownAutomationRulePropertyArrayChangedConditionSupportedChangeType["Added"] = "Added";
+})(KnownAutomationRulePropertyArrayChangedConditionSupportedChangeType || (KnownAutomationRulePropertyArrayChangedConditionSupportedChangeType = {}));
+/** Known values of {@link AutomationRulePropertyArrayConditionSupportedArrayType} that the service accepts. */
+export var KnownAutomationRulePropertyArrayConditionSupportedArrayType;
+(function (KnownAutomationRulePropertyArrayConditionSupportedArrayType) {
+    /** Evaluate the condition on the custom detail keys */
+    KnownAutomationRulePropertyArrayConditionSupportedArrayType["CustomDetails"] = "CustomDetails";
+    /** Evaluate the condition on a custom detail's values */
+    KnownAutomationRulePropertyArrayConditionSupportedArrayType["CustomDetailValues"] = "CustomDetailValues";
+})(KnownAutomationRulePropertyArrayConditionSupportedArrayType || (KnownAutomationRulePropertyArrayConditionSupportedArrayType = {}));
+/** Known values of {@link AutomationRulePropertyArrayConditionSupportedArrayConditionType} that the service accepts. */
+export var KnownAutomationRulePropertyArrayConditionSupportedArrayConditionType;
+(function (KnownAutomationRulePropertyArrayConditionSupportedArrayConditionType) {
+    /** Evaluate the condition as true if any item fulfills it */
+    KnownAutomationRulePropertyArrayConditionSupportedArrayConditionType["AnyItem"] = "AnyItem";
+})(KnownAutomationRulePropertyArrayConditionSupportedArrayConditionType || (KnownAutomationRulePropertyArrayConditionSupportedArrayConditionType = {}));
+/** Known values of {@link AutomationRulePropertyChangedConditionSupportedPropertyType} that the service accepts. */
+export var KnownAutomationRulePropertyChangedConditionSupportedPropertyType;
+(function (KnownAutomationRulePropertyChangedConditionSupportedPropertyType) {
+    /** Evaluate the condition on the incident severity */
+    KnownAutomationRulePropertyChangedConditionSupportedPropertyType["IncidentSeverity"] = "IncidentSeverity";
+    /** Evaluate the condition on the incident status */
+    KnownAutomationRulePropertyChangedConditionSupportedPropertyType["IncidentStatus"] = "IncidentStatus";
+    /** Evaluate the condition on the incident owner */
+    KnownAutomationRulePropertyChangedConditionSupportedPropertyType["IncidentOwner"] = "IncidentOwner";
+})(KnownAutomationRulePropertyChangedConditionSupportedPropertyType || (KnownAutomationRulePropertyChangedConditionSupportedPropertyType = {}));
+/** Known values of {@link AutomationRulePropertyChangedConditionSupportedChangedType} that the service accepts. */
+export var KnownAutomationRulePropertyChangedConditionSupportedChangedType;
+(function (KnownAutomationRulePropertyChangedConditionSupportedChangedType) {
+    /** Evaluate the condition on the previous value of the property */
+    KnownAutomationRulePropertyChangedConditionSupportedChangedType["ChangedFrom"] = "ChangedFrom";
+    /** Evaluate the condition on the updated value of the property */
+    KnownAutomationRulePropertyChangedConditionSupportedChangedType["ChangedTo"] = "ChangedTo";
+})(KnownAutomationRulePropertyChangedConditionSupportedChangedType || (KnownAutomationRulePropertyChangedConditionSupportedChangedType = {}));
+/** Known values of {@link AutomationRulePropertyConditionSupportedOperator} that the service accepts. */
+export var KnownAutomationRulePropertyConditionSupportedOperator;
+(function (KnownAutomationRulePropertyConditionSupportedOperator) {
+    /** Evaluates if the property equals at least one of the condition values */
+    KnownAutomationRulePropertyConditionSupportedOperator["Equals"] = "Equals";
+    /** Evaluates if the property does not equal any of the condition values */
+    KnownAutomationRulePropertyConditionSupportedOperator["NotEquals"] = "NotEquals";
+    /** Evaluates if the property contains at least one of the condition values */
+    KnownAutomationRulePropertyConditionSupportedOperator["Contains"] = "Contains";
+    /** Evaluates if the property does not contain any of the condition values */
+    KnownAutomationRulePropertyConditionSupportedOperator["NotContains"] = "NotContains";
+    /** Evaluates if the property starts with any of the condition values */
+    KnownAutomationRulePropertyConditionSupportedOperator["StartsWith"] = "StartsWith";
+    /** Evaluates if the property does not start with any of the condition values */
+    KnownAutomationRulePropertyConditionSupportedOperator["NotStartsWith"] = "NotStartsWith";
+    /** Evaluates if the property ends with any of the condition values */
+    KnownAutomationRulePropertyConditionSupportedOperator["EndsWith"] = "EndsWith";
+    /** Evaluates if the property does not end with any of the condition values */
+    KnownAutomationRulePropertyConditionSupportedOperator["NotEndsWith"] = "NotEndsWith";
+})(KnownAutomationRulePropertyConditionSupportedOperator || (KnownAutomationRulePropertyConditionSupportedOperator = {}));
 /** Known values of {@link AutomationRulePropertyConditionSupportedProperty} that the service accepts. */
 export var KnownAutomationRulePropertyConditionSupportedProperty;
 (function (KnownAutomationRulePropertyConditionSupportedProperty) {
@@ -564,6 +842,12 @@ export var KnownAutomationRulePropertyConditionSupportedProperty;
     KnownAutomationRulePropertyConditionSupportedProperty["IncidentLabel"] = "IncidentLabel";
     /** The provider name of the incident */
     KnownAutomationRulePropertyConditionSupportedProperty["IncidentProviderName"] = "IncidentProviderName";
+    /** The update source of the incident */
+    KnownAutomationRulePropertyConditionSupportedProperty["IncidentUpdatedBySource"] = "IncidentUpdatedBySource";
+    /** The incident custom detail key */
+    KnownAutomationRulePropertyConditionSupportedProperty["IncidentCustomDetailsKey"] = "IncidentCustomDetailsKey";
+    /** The incident custom detail value */
+    KnownAutomationRulePropertyConditionSupportedProperty["IncidentCustomDetailsValue"] = "IncidentCustomDetailsValue";
     /** The account Azure Active Directory tenant id */
     KnownAutomationRulePropertyConditionSupportedProperty["AccountAadTenantId"] = "AccountAadTenantId";
     /** The account Azure Active Directory user id */
@@ -582,6 +866,8 @@ export var KnownAutomationRulePropertyConditionSupportedProperty;
     KnownAutomationRulePropertyConditionSupportedProperty["AccountUPNSuffix"] = "AccountUPNSuffix";
     /** The name of the product of the alert */
     KnownAutomationRulePropertyConditionSupportedProperty["AlertProductNames"] = "AlertProductNames";
+    /** The analytic rule ids of the alert */
+    KnownAutomationRulePropertyConditionSupportedProperty["AlertAnalyticRuleIds"] = "AlertAnalyticRuleIds";
     /** The Azure resource id */
     KnownAutomationRulePropertyConditionSupportedProperty["AzureResourceResourceId"] = "AzureResourceResourceId";
     /** The Azure resource subscription id */
@@ -657,26 +943,6 @@ export var KnownAutomationRulePropertyConditionSupportedProperty;
     /** The url */
     KnownAutomationRulePropertyConditionSupportedProperty["Url"] = "Url";
 })(KnownAutomationRulePropertyConditionSupportedProperty || (KnownAutomationRulePropertyConditionSupportedProperty = {}));
-/** Known values of {@link AutomationRulePropertyConditionSupportedOperator} that the service accepts. */
-export var KnownAutomationRulePropertyConditionSupportedOperator;
-(function (KnownAutomationRulePropertyConditionSupportedOperator) {
-    /** Evaluates if the property equals at least one of the condition values */
-    KnownAutomationRulePropertyConditionSupportedOperator["Equals"] = "Equals";
-    /** Evaluates if the property does not equal any of the condition values */
-    KnownAutomationRulePropertyConditionSupportedOperator["NotEquals"] = "NotEquals";
-    /** Evaluates if the property contains at least one of the condition values */
-    KnownAutomationRulePropertyConditionSupportedOperator["Contains"] = "Contains";
-    /** Evaluates if the property does not contain any of the condition values */
-    KnownAutomationRulePropertyConditionSupportedOperator["NotContains"] = "NotContains";
-    /** Evaluates if the property starts with any of the condition values */
-    KnownAutomationRulePropertyConditionSupportedOperator["StartsWith"] = "StartsWith";
-    /** Evaluates if the property does not start with any of the condition values */
-    KnownAutomationRulePropertyConditionSupportedOperator["NotStartsWith"] = "NotStartsWith";
-    /** Evaluates if the property ends with any of the condition values */
-    KnownAutomationRulePropertyConditionSupportedOperator["EndsWith"] = "EndsWith";
-    /** Evaluates if the property does not end with any of the condition values */
-    KnownAutomationRulePropertyConditionSupportedOperator["NotEndsWith"] = "NotEndsWith";
-})(KnownAutomationRulePropertyConditionSupportedOperator || (KnownAutomationRulePropertyConditionSupportedOperator = {}));
 /** Known values of {@link EntityType} that the service accepts. */
 export var KnownEntityType;
 (function (KnownEntityType) {
@@ -722,33 +988,55 @@ export var KnownEntityType;
     KnownEntityType["Mailbox"] = "Mailbox";
     /** Entity represents submission mail in the system. */
     KnownEntityType["SubmissionMail"] = "SubmissionMail";
+    /** Entity represents network interface in the system. */
+    KnownEntityType["Nic"] = "Nic";
 })(KnownEntityType || (KnownEntityType = {}));
 /** Known values of {@link OutputType} that the service accepts. */
 export var KnownOutputType;
 (function (KnownOutputType) {
+    /** Number */
     KnownOutputType["Number"] = "Number";
+    /** String */
     KnownOutputType["String"] = "String";
+    /** Date */
     KnownOutputType["Date"] = "Date";
+    /** Entity */
     KnownOutputType["Entity"] = "Entity";
 })(KnownOutputType || (KnownOutputType = {}));
+/** Known values of {@link SettingsStatus} that the service accepts. */
+export var KnownSettingsStatus;
+(function (KnownSettingsStatus) {
+    /** Anomaly settings status in Production mode */
+    KnownSettingsStatus["Production"] = "Production";
+    /** Anomaly settings status in Flighting mode */
+    KnownSettingsStatus["Flighting"] = "Flighting";
+})(KnownSettingsStatus || (KnownSettingsStatus = {}));
+/** Known values of {@link EntityProviders} that the service accepts. */
+export var KnownEntityProviders;
+(function (KnownEntityProviders) {
+    /** ActiveDirectory */
+    KnownEntityProviders["ActiveDirectory"] = "ActiveDirectory";
+    /** AzureActiveDirectory */
+    KnownEntityProviders["AzureActiveDirectory"] = "AzureActiveDirectory";
+})(KnownEntityProviders || (KnownEntityProviders = {}));
 /** Known values of {@link UebaDataSources} that the service accepts. */
 export var KnownUebaDataSources;
 (function (KnownUebaDataSources) {
+    /** AuditLogs */
     KnownUebaDataSources["AuditLogs"] = "AuditLogs";
+    /** AzureActivity */
     KnownUebaDataSources["AzureActivity"] = "AzureActivity";
+    /** SecurityEvent */
     KnownUebaDataSources["SecurityEvent"] = "SecurityEvent";
+    /** SigninLogs */
     KnownUebaDataSources["SigninLogs"] = "SigninLogs";
 })(KnownUebaDataSources || (KnownUebaDataSources = {}));
-/** Known values of {@link SkuKind} that the service accepts. */
-export var KnownSkuKind;
-(function (KnownSkuKind) {
-    KnownSkuKind["PerGB"] = "PerGB";
-    KnownSkuKind["CapacityReservation"] = "CapacityReservation";
-})(KnownSkuKind || (KnownSkuKind = {}));
 /** Known values of {@link DataTypeState} that the service accepts. */
 export var KnownDataTypeState;
 (function (KnownDataTypeState) {
+    /** Enabled */
     KnownDataTypeState["Enabled"] = "Enabled";
+    /** Disabled */
     KnownDataTypeState["Disabled"] = "Disabled";
 })(KnownDataTypeState || (KnownDataTypeState = {}));
 /** Known values of {@link PollingFrequency} that the service accepts. */
@@ -764,30 +1052,43 @@ export var KnownPollingFrequency;
 /** Known values of {@link ConnectivityType} that the service accepts. */
 export var KnownConnectivityType;
 (function (KnownConnectivityType) {
+    /** IsConnectedQuery */
     KnownConnectivityType["IsConnectedQuery"] = "IsConnectedQuery";
 })(KnownConnectivityType || (KnownConnectivityType = {}));
 /** Known values of {@link ProviderName} that the service accepts. */
 export var KnownProviderName;
 (function (KnownProviderName) {
+    /** MicrosoftOperationalInsightsSolutions */
     KnownProviderName["MicrosoftOperationalInsightsSolutions"] = "Microsoft.OperationalInsights/solutions";
+    /** MicrosoftOperationalInsightsWorkspaces */
     KnownProviderName["MicrosoftOperationalInsightsWorkspaces"] = "Microsoft.OperationalInsights/workspaces";
+    /** MicrosoftOperationalInsightsWorkspacesDatasources */
     KnownProviderName["MicrosoftOperationalInsightsWorkspacesDatasources"] = "Microsoft.OperationalInsights/workspaces/datasources";
+    /** MicrosoftAadiamDiagnosticSettings */
     KnownProviderName["MicrosoftAadiamDiagnosticSettings"] = "microsoft.aadiam/diagnosticSettings";
+    /** MicrosoftOperationalInsightsWorkspacesSharedKeys */
     KnownProviderName["MicrosoftOperationalInsightsWorkspacesSharedKeys"] = "Microsoft.OperationalInsights/workspaces/sharedKeys";
+    /** MicrosoftAuthorizationPolicyAssignments */
     KnownProviderName["MicrosoftAuthorizationPolicyAssignments"] = "Microsoft.Authorization/policyAssignments";
 })(KnownProviderName || (KnownProviderName = {}));
 /** Known values of {@link PermissionProviderScope} that the service accepts. */
 export var KnownPermissionProviderScope;
 (function (KnownPermissionProviderScope) {
+    /** ResourceGroup */
     KnownPermissionProviderScope["ResourceGroup"] = "ResourceGroup";
+    /** Subscription */
     KnownPermissionProviderScope["Subscription"] = "Subscription";
+    /** Workspace */
     KnownPermissionProviderScope["Workspace"] = "Workspace";
 })(KnownPermissionProviderScope || (KnownPermissionProviderScope = {}));
 /** Known values of {@link SettingType} that the service accepts. */
 export var KnownSettingType;
 (function (KnownSettingType) {
+    /** CopyableLabel */
     KnownSettingType["CopyableLabel"] = "CopyableLabel";
+    /** InstructionStepsGroup */
     KnownSettingType["InstructionStepsGroup"] = "InstructionStepsGroup";
+    /** InfoMessage */
     KnownSettingType["InfoMessage"] = "InfoMessage";
 })(KnownSettingType || (KnownSettingType = {}));
 /** Known values of {@link FileHashAlgorithm} that the service accepts. */
@@ -804,6 +1105,18 @@ export var KnownFileHashAlgorithm;
     /** SHA256 Authenticode hash type */
     KnownFileHashAlgorithm["SHA256AC"] = "SHA256AC";
 })(KnownFileHashAlgorithm || (KnownFileHashAlgorithm = {}));
+/** Known values of {@link DeviceImportance} that the service accepts. */
+export var KnownDeviceImportance;
+(function (KnownDeviceImportance) {
+    /** Unknown - Default value */
+    KnownDeviceImportance["Unknown"] = "Unknown";
+    /** Low */
+    KnownDeviceImportance["Low"] = "Low";
+    /** Normal */
+    KnownDeviceImportance["Normal"] = "Normal";
+    /** High */
+    KnownDeviceImportance["High"] = "High";
+})(KnownDeviceImportance || (KnownDeviceImportance = {}));
 /** Known values of {@link AntispamMailDirection} that the service accepts. */
 export var KnownAntispamMailDirection;
 (function (KnownAntispamMailDirection) {