@binalyze/air-sdk 5.22.4 → 5.24.3

package/dist/sdk/typescript-axios/sdk.gen.d.ts

@@ -1,5 +1,5 @@
 import { type Options as ClientOptions, type Client, type TDataShape } from './client';
-import type { AppGetBasicInfoData, AppGetBasicInfoResponses, LoggerDownloadLogsDirData, LoggerDownloadLogsDirResponses, ParamsGetDroneAnalyzersData, ParamsGetDroneAnalyzersResponses, ParamsEDiscoveryPatternsData, ParamsEDiscoveryPatternsResponses, ParamsEventLogRecordTypesData, ParamsEventLogRecordTypesResponses, ParamsEvidenceListData, ParamsEvidenceListResponses, ParamsGetMitreAttackTacticsData, ParamsGetMitreAttackTacticsResponses, EndpointExportEndpoints0Data, EndpointExportEndpoints0Responses, EndpointExportEndpoints1Data, EndpointExportEndpoints1Responses, AssetsUpdateTagsData, AssetsUpdateTagsResponses, AssetsUpdateTags2Data, AssetsUpdateTags2Responses, AssetsUpdateLabelData, AssetsUpdateLabelResponses, AssetsUpdateLabel2Data, AssetsUpdateLabel2Responses, AssetsGetManyData, AssetsGetManyResponses, AssetsGetMany2Data, AssetsGetMany2Responses, AssetsGetManyByFilterData, AssetsGetManyByFilterResponses, AssetsGetManyByFilter2Data, AssetsGetManyByFilter2Responses, EndpointGetEndpointsWithTaskCountData, EndpointGetEndpointsWithTaskCountResponses, EndpointGetEndpointsStats0Data, EndpointGetEndpointsStats0Responses, EndpointGetEndpointsStats1Data, EndpointGetEndpointsStats1Responses, EndpointGetDeviceNameConflicts0Data, EndpointGetDeviceNameConflicts0Responses, EndpointGetDeviceNameConflicts1Data, EndpointGetDeviceNameConflicts1Responses, AssetsGetMany3Data, AssetsGetMany3Responses, AssetsGetMany4Data, AssetsGetMany4Responses, EndpointImportPpcAsEndpoint0Data, EndpointImportPpcAsEndpoint0Responses, EndpointImportPpcAsEndpoint1Data, EndpointImportPpcAsEndpoint1Responses, EndpointImportPpcToExistedEndpoint0Data, EndpointImportPpcToExistedEndpoint0Responses, EndpointImportPpcToExistedEndpoint1Data, EndpointImportPpcToExistedEndpoint1Responses, EndpointUninstallAgentsAndPurgeByFilter0Data, EndpointUninstallAgentsAndPurgeByFilter0Responses, EndpointUninstallAgentsAndPurgeByFilter1Data, EndpointUninstallAgentsAndPurgeByFilter1Responses, EndpointUninstallAgentsAndPurgeByFilter2Data, EndpointUninstallAgentsAndPurgeByFilter2Responses, EndpointUninstallEndpointsByFilter0Data, EndpointUninstallEndpointsByFilter0Responses, EndpointUninstallEndpointsByFilter1Data, EndpointUninstallEndpointsByFilter1Responses, EndpointPurgeAssetDataByFilter0Data, EndpointPurgeAssetDataByFilter0Responses, EndpointPurgeAssetDataByFilter1Data, EndpointPurgeAssetDataByFilter1Responses, AssetsRemoveTagsData, AssetsRemoveTagsResponses, AssetsAddTagsData, AssetsAddTagsResponses, AssetsRemoveTags2Data, AssetsRemoveTags2Responses, AssetsAddTags2Data, AssetsAddTags2Responses, AssetsSetMitreAttackDatabaseVersionData, AssetsSetMitreAttackDatabaseVersionResponses, AssetsSetMitreAttackDatabaseVersion2Data, AssetsSetMitreAttackDatabaseVersion2Responses, EndpointFilterDisks0Data, EndpointFilterDisks0Responses, EndpointFilterDisks1Data, EndpointFilterDisks1Responses, EndpointFilterByPolicyFilter0Data, EndpointFilterByPolicyFilter0Responses, EndpointFilterByPolicyFilter1Data, EndpointFilterByPolicyFilter1Responses, EndpointSearch0Data, EndpointSearch0Responses, EndpointSearch1Data, EndpointSearch1Responses, EndpointGetCasesById0Data, EndpointGetCasesById0Responses, EndpointGetCasesById1Data, EndpointGetCasesById1Responses, EndpointExportCasesByEndpointId0Data, EndpointExportCasesByEndpointId0Responses, EndpointExportCasesByEndpointId1Data, EndpointExportCasesByEndpointId1Responses, EndpointSetExcludeFromUpdatesToEndpointsByFilter0Data, EndpointSetExcludeFromUpdatesToEndpointsByFilter0Responses, EndpointSetExcludeFromUpdatesToEndpointsByFilter1Data, EndpointSetExcludeFromUpdatesToEndpointsByFilter1Responses, EndpointDownloadLogFile0Data, EndpointDownloadLogFile0Responses, EndpointDownloadLogFile1Data, EndpointDownloadLogFile1Responses, EndpointSyncLdap0Data, EndpointSyncLdap0Responses, EndpointSyncLdap1Data, EndpointSyncLdap1Responses, EndpointGetCloudAssetDetails0Data, EndpointGetCloudAssetDetails0Responses, EndpointGetCloudAssetDetails1Data, EndpointGetCloudAssetDetails1Responses, EndpointDeployCloudAssetsByFilter0Data, EndpointDeployCloudAssetsByFilter0Responses, EndpointDeployCloudAssetsByFilter1Data, EndpointDeployCloudAssetsByFilter1Responses, EndpointUpdateEndpointConnectionRoute0Data, EndpointUpdateEndpointConnectionRoute0Responses, EndpointUpdateEndpointConnectionRoute1Data, EndpointUpdateEndpointConnectionRoute1Responses, EndpointSetMaintenanceMode0Data, EndpointSetMaintenanceMode0Responses, EndpointSetMaintenanceMode1Data, EndpointSetMaintenanceMode1Responses, EndpointTagFilterTagsData, EndpointTagFilterTagsResponses, EndpointTagDeleteAllTagsData, EndpointTagDeleteAllTagsResponses, EndpointTagDeleteTagData, EndpointTagDeleteTagResponses, EndpointGroupGetChildGroupsOfGroupData, EndpointGroupGetChildGroupsOfGroupResponses, EndpointGroupGetRootGroupsData, EndpointGroupGetRootGroupsResponses, GetTaskDisplayTypesData, GetTaskDisplayTypesResponses, TaskDeleteData, TaskDeleteResponses, TasksGetByIdData, TasksGetByIdResponses, TasksGetManyData, TasksGetManyResponses, TaskRenameTaskData, TaskRenameTaskResponses, TasksGetDataData, TasksGetDataResponses, TaskDeleteByFilterData, TaskDeleteByFilterResponses, TaskDeleteAndPurgeByFilterData, TaskDeleteAndPurgeByFilterResponses, TaskCancelByFilterData, TaskCancelByFilterResponses, TaskCancelData, TaskCancelResponses, TaskCreateOffNetworkTaskData, TaskCreateOffNetworkTaskResponses, TaskImportOffNetworkCollectionToTaskData, TaskImportOffNetworkCollectionToTaskResponses, TaskDownloadOffNetworkTaskData, TaskDownloadOffNetworkTaskResponses, TaskGenerateOffNetworkZipPasswordData, TaskGenerateOffNetworkZipPasswordResponses, AssetsAssignRebootTaskData, AssetsAssignRebootTaskResponses, AssetsAssignRebootTask2Data, AssetsAssignRebootTask2Responses, AssetsAssignShutdownTaskData, AssetsAssignShutdownTaskResponses, AssetsAssignShutdownTask2Data, AssetsAssignShutdownTask2Responses, EndpointTaskAssignRetrieveLogTask0Data, EndpointTaskAssignRetrieveLogTask0Responses, EndpointTaskAssignRetrieveLogTask1Data, EndpointTaskAssignRetrieveLogTask1Responses, AssetsAssignVersionUpdateTaskData, AssetsAssignVersionUpdateTaskResponses, AssetsAssignVersionUpdateTask2Data, AssetsAssignVersionUpdateTask2Responses, AssetsAssignIsolationTaskData, AssetsAssignIsolationTaskResponses, AssetsAssignIsolationTask2Data, AssetsAssignIsolationTask2Responses, AssetsGetTasksData, AssetsGetTasksResponses, AssetsGetTasks2Data, AssetsGetTasks2Responses, EndpointTaskPurgeLocalData0Data, EndpointTaskPurgeLocalData0Responses, EndpointTaskPurgeLocalData1Data, EndpointTaskPurgeLocalData1Responses, EndpointTaskRetryUpload0Data, EndpointTaskRetryUpload0Responses, EndpointTaskRetryUpload1Data, EndpointTaskRetryUpload1Responses, EndpointTaskGetComparableTasksByVendorDeviceIdData, EndpointTaskGetComparableTasksByVendorDeviceIdResponses, TasksAssignmentsGetManyData, TasksAssignmentsGetManyResponses, TaskAssignmentCancelData, TaskAssignmentCancelResponses, TaskAssignmentDeleteData, TaskAssignmentDeleteResponses, TaskAssignmentGetData, TaskAssignmentGetResponses, TaskAssignmentGenerateTaskAssignmentReportData, TaskAssignmentGenerateTaskAssignmentReportResponses, TasksV2ApiControllerGetTaskByIdData, TasksV2ApiControllerGetTaskByIdResponses, TasksV2ApiControllerGetTaskByIdErrors, TasksV2ApiControllerUpdateTaskData, TasksV2ApiControllerUpdateTaskResponses, TasksV2ApiControllerUpdateTaskErrors, TasksV2ApiControllerListTaskAssetsData, TasksV2ApiControllerListTaskAssetsResponses, TasksV2ApiControllerListTaskAssetsErrors, TasksV2ApiControllerListTaskAssignmentsData, TasksV2ApiControllerListTaskAssignmentsResponses, TasksV2ApiControllerListTaskAssignmentsErrors, TasksTriageV2ApiControllerListHuntTasksData, TasksTriageV2ApiControllerListHuntTasksResponses, TasksTriageV2ApiControllerListHuntTasksErrors, TasksTriageV2ApiControllerCancelData, TasksTriageV2ApiControllerCancelResponses, TasksTriageV2ApiControllerCancelErrors, TasksTriageV2ApiControllerDeleteData, TasksTriageV2ApiControllerDeleteResponses, TasksTriageV2ApiControllerDeleteErrors, TasksTriageV2ApiControllerCancelOneData, TasksTriageV2ApiControllerCancelOneResponses, TasksTriageV2ApiControllerCancelOneErrors, TasksTriageV2ApiControllerDeleteOneData, TasksTriageV2ApiControllerDeleteOneResponses, TasksTriageV2ApiControllerDeleteOneErrors, SettingsGetSettingsData, SettingsGetSettingsResponses, SettingsSaveGeneralSettingsData, SettingsSaveGeneralSettingsResponses, SettingsSaveProxyData, SettingsSaveProxyResponses, SettingsTestProxy0Data, SettingsTestProxy0Responses, SettingsTestProxy0Errors, SettingsTestProxy1Data, SettingsTestProxy1Responses, SettingsTestProxy1Errors, SettingsGetTrustedCertificatesData, SettingsGetTrustedCertificatesResponses, SettingsAddTrustedCertificateData, SettingsAddTrustedCertificateResponses, SettingsAddTrustedCertificateErrors, SettingsAddTrustedCertificateWithoutValidationData, SettingsAddTrustedCertificateWithoutValidationResponses, SettingsAddTrustedCertificateWithoutValidationErrors, SettingsDeleteTrustedCertificateData, SettingsDeleteTrustedCertificateResponses, SettingsDeleteTrustedCertificateErrors, SettingsValidateTrustedCertificateData, SettingsValidateTrustedCertificateResponses, SettingsValidateTrustedCertificateErrors, SettingsSaveActiveDirectoryData, SettingsSaveActiveDirectoryResponses, SettingsValidateActiveDirectoryData, SettingsValidateActiveDirectoryResponses, SettingsGetSyslogEventTypesData, SettingsGetSyslogEventTypesResponses, SettingsSaveSyslogData, SettingsSaveSyslogResponses, SettingsValidateSyslogData, SettingsValidateSyslogResponses, SettingsSaveSmtpData, SettingsSaveSmtpResponses, SettingsValidateSmtpData, SettingsValidateSmtpResponses, SettingsSaveSslData, SettingsSaveSslResponses, SettingsValidateSslData, SettingsValidateSslResponses, SettingsSavePolicyData, SettingsSavePolicyResponses, SettingsSaveBackupRestoreData, SettingsSaveBackupRestoreResponses, SettingsValidateSftpData, SettingsValidateSftpResponses, SettingsValidateS3Data, SettingsValidateS3Responses, SettingsSaveAgentData, SettingsSaveAgentResponses, SettingsSaveEnforceTfaData, SettingsSaveEnforceTfaResponses, SettingsSaveAutoAssetTaggingData, SettingsSaveAutoAssetTaggingResponses, SettingsSaveInterActData, SettingsSaveInterActResponses, SettingsSaveFleetAiData, SettingsSaveFleetAiResponses, SettingsSaveCaseAutoCloseData, SettingsSaveCaseAutoCloseResponses, SettingsValidateIpRestrictionData, SettingsValidateIpRestrictionResponses, SettingsSaveIpRestrictionData, SettingsSaveIpRestrictionResponses, SettingsSaveLocardData, SettingsSaveLocardResponses, SettingsSaveRfc3161Data, SettingsSaveRfc3161Responses, SettingsValidateConsoleAddressData, SettingsValidateConsoleAddressResponses, SettingsSaveConsoleAddressData, SettingsSaveConsoleAddressResponses, SettingsSaveBannerData, SettingsSaveBannerResponses, SettingsSaveUninstallationPasswordProtectionData, SettingsSaveUninstallationPasswordProtectionResponses, SettingsGetAutoUpdateSettingsData, SettingsGetAutoUpdateSettingsResponses, SettingsSaveAutoUpdateSettingsData, SettingsSaveAutoUpdateSettingsResponses, SettingsGetAutoUpdateWindowsData, SettingsGetAutoUpdateWindowsResponses, SettingsSaveMitreAttackDatabaseSettingsData, SettingsSaveMitreAttackDatabaseSettingsResponses, SettingsGetMitreAttackDatabaseVersionsData, SettingsGetMitreAttackDatabaseVersionsResponses, SettingsGetMitreAttackDatabaseReleaseNotesData, SettingsGetMitreAttackDatabaseReleaseNotesResponses, SettingsSaveMandatoryCaseSelectionData, SettingsSaveMandatoryCaseSelectionResponses, SettingsSingleSignOnCallbackData, SettingsSingleSignOnCallbackResponses, SettingsGetSsoProvidersData, SettingsGetSsoProvidersResponses, SettingsCreateSsoProviderData, SettingsCreateSsoProviderResponses, SettingsDeleteSsoProviderData, SettingsDeleteSsoProviderResponses, SettingsUpdateSsoProviderData, SettingsUpdateSsoProviderResponses, AuthCheckAuthData, AuthCheckAuthResponses, AuthUpdateProfileData, AuthUpdateProfileResponses, AuthOneClickLoginData, AuthOneClickLoginResponses, AuthLoginData, AuthLoginResponses, AuthGenerateOneClickLoginUrlData, AuthGenerateOneClickLoginUrlResponses, AuthRenewOneClickLoginUrlData, AuthRenewOneClickLoginUrlResponses, AuthRegeneratePatTokenData, AuthRegeneratePatTokenResponses, AuthGetUserSessionHistoryData, AuthGetUserSessionHistoryResponses, UserManagementUsersGetManyData, UserManagementUsersGetManyResponses, UserCreateData, UserCreateResponses, UserDeleteData, UserDeleteResponses, UserManagementUsersGetData, UserManagementUsersGetResponses, UserPatchUserData, UserPatchUserResponses, UserUpdateUserData, UserUpdateUserResponses, UserManagementUsersPurgeAndDeleteData, UserManagementUsersPurgeAndDeleteResponses, UserResetTfaData, UserResetTfaResponses, UserChangePasswordData, UserChangePasswordResponses, UserResetUserPasswordData, UserResetUserPasswordResponses, UserCreateApiUserData, UserCreateApiUserResponses, UserRolesGetPrivilegesData, UserRolesGetPrivilegesResponses, UserRolesGetRolesData, UserRolesGetRolesResponses, UserRolesCreateRoleData, UserRolesCreateRoleResponses, UserRolesDeleteRoleData, UserRolesDeleteRoleResponses, UserRolesGetRoleData, UserRolesGetRoleResponses, UserRolesUpdateRoleData, UserRolesUpdateRoleResponses, UserGroupFilterGroupsData, UserGroupFilterGroupsResponses, UserGroupCreateGroupData, UserGroupCreateGroupResponses, UserGroupDeleteGroupData, UserGroupDeleteGroupResponses, UserGroupGetGroupData, UserGroupGetGroupResponses, UserGroupUpdateGroupData, UserGroupUpdateGroupResponses, UserPatTokensGetManyData, UserPatTokensGetManyResponses, UserPatTokensCreateData, UserPatTokensCreateResponses, UserPatTokensRotateData, UserPatTokensRotateResponses, UserPatTokensRotateErrors, UserPatTokensDeleteData, UserPatTokensDeleteResponses, UserPatTokensDeleteErrors, LicenseGetLicenseData, LicenseGetLicenseResponses, LicenseSetLicenseData, LicenseSetLicenseResponses, LicenseRefreshLicenseData, LicenseRefreshLicenseResponses, LicenseGetSubscriptionDetailsData, LicenseGetSubscriptionDetailsResponses, LicenseGetQuotaData, LicenseGetQuotaResponses, AcquisitionProfilesGetOneData, AcquisitionProfilesGetOneResponses, AcquisitionCreateData, AcquisitionCreateResponses, AcquisitionDeleteData, AcquisitionDeleteResponses, AcquisitionGetData, AcquisitionGetResponses, AcquisitionUpdateData, AcquisitionUpdateResponses, AcquisitionDeleteBulkData, AcquisitionDeleteBulkResponses, AcquisitionAssignEvidenceTaskData, AcquisitionAssignEvidenceTaskResponses, AcquisitionAssignEvidenceTask2Data, AcquisitionAssignEvidenceTask2Responses, CreateOffNetworkAcquisitionTaskFileData, CreateOffNetworkAcquisitionTaskFileResponses, AcquisitionAcquireImageData, AcquisitionAcquireImageResponses, AcquisitionUpdateScheduledEvidenceAcquisitionData, AcquisitionUpdateScheduledEvidenceAcquisitionResponses, AcquisitionUpdateScheduledImageAcquisitionData, AcquisitionUpdateScheduledImageAcquisitionResponses, AcquisitionValidateOsQueriesData, AcquisitionValidateOsQueriesResponses, AcquisitionLibraryDeviceV2ApiControllerListData, AcquisitionLibraryDeviceV2ApiControllerListResponses, AcquisitionLibraryDeviceV2ApiControllerListErrors, AcquisitionLibraryDeviceV2ApiControllerCreateData, AcquisitionLibraryDeviceV2ApiControllerCreateResponses, AcquisitionLibraryDeviceV2ApiControllerCreateErrors, AcquisitionLibraryDeviceV2ApiControllerBulkDeleteData, AcquisitionLibraryDeviceV2ApiControllerBulkDeleteResponses, AcquisitionLibraryDeviceV2ApiControllerBulkDeleteErrors, AcquisitionLibraryDeviceV2ApiControllerDeleteData, AcquisitionLibraryDeviceV2ApiControllerDeleteResponses, AcquisitionLibraryDeviceV2ApiControllerDeleteErrors, AcquisitionLibraryDeviceV2ApiControllerGetData, AcquisitionLibraryDeviceV2ApiControllerGetResponses, AcquisitionLibraryDeviceV2ApiControllerGetErrors, AcquisitionLibraryDeviceV2ApiControllerUpdateData, AcquisitionLibraryDeviceV2ApiControllerUpdateResponses, AcquisitionLibraryDeviceV2ApiControllerUpdateErrors, GitRepositoriesGetManyData, GitRepositoriesGetManyResponses, GitRepositoriesCreateData, GitRepositoriesCreateResponses, GitRepositoriesDeleteData, GitRepositoriesDeleteResponses, GitRepositoriesGetOneData, GitRepositoriesGetOneResponses, GitRepositoriesUpdateData, GitRepositoriesUpdateResponses, GitRepositoriesBulkDeleteData, GitRepositoriesBulkDeleteResponses, GitRepositoriesTriggerSyncData, GitRepositoriesTriggerSyncResponses, GitRepositoriesGetSyncLogsData, GitRepositoriesGetSyncLogsResponses, GitRepositoriesBrowseTreeData, GitRepositoriesBrowseTreeResponses, GitRepositoriesTestConnectionData, GitRepositoriesTestConnectionResponses, GitRepositoriesGetRepositoryBranchesData, GitRepositoriesGetRepositoryBranchesResponses, GetManyTriageRulesData, GetManyTriageRulesResponses, CreateTriageRuleData, CreateTriageRuleResponses, DeleteTriageRuleData, DeleteTriageRuleResponses, GetTriageRuleData, GetTriageRuleResponses, UpdateTriageRuleData, UpdateTriageRuleResponses, DeleteBulkTriageRulesData, DeleteBulkTriageRulesResponses, ValidateTriageRuleData, ValidateTriageRuleResponses, AssignTriageTaskData, AssignTriageTaskResponses, UpdateScheduledTriageTaskData, UpdateScheduledTriageTaskResponses, CreateOffNetworkTriageTaskFileData, CreateOffNetworkTriageTaskFileResponses, FilterTriageRuleTagsData, FilterTriageRuleTagsResponses, CreateTriageRuleTagData, CreateTriageRuleTagResponses, DeleteTriageRuleTagData, DeleteTriageRuleTagResponses, TriageLibraryV2ApiControllerListData, TriageLibraryV2ApiControllerListResponses, TriageLibraryV2ApiControllerListErrors, TriageLibraryV2ApiControllerCreateData, TriageLibraryV2ApiControllerCreateResponses, TriageLibraryV2ApiControllerCreateErrors, TriageLibraryV2ApiControllerBulkDeleteData, TriageLibraryV2ApiControllerBulkDeleteResponses, TriageLibraryV2ApiControllerBulkDeleteErrors, TriageLibraryV2ApiControllerValidateData, TriageLibraryV2ApiControllerValidateResponses, TriageLibraryV2ApiControllerValidateErrors, TriageLibraryV2ApiControllerDeleteData, TriageLibraryV2ApiControllerDeleteResponses, TriageLibraryV2ApiControllerDeleteErrors, TriageLibraryV2ApiControllerGetData, TriageLibraryV2ApiControllerGetResponses, TriageLibraryV2ApiControllerGetErrors, TriageLibraryV2ApiControllerUpdateData, TriageLibraryV2ApiControllerUpdateResponses, TriageLibraryV2ApiControllerUpdateErrors, TriageLibraryExportV2ApiControllerExportData, TriageLibraryExportV2ApiControllerExportResponses, TriageLibraryExportV2ApiControllerExportErrors, TriageLibraryExportV2ApiControllerDownloadData, TriageLibraryExportV2ApiControllerDownloadResponses, TriageLibraryExportV2ApiControllerDownloadErrors, EvidenceGetCaseReport0Data, EvidenceGetCaseReport0Responses, EvidenceGetCaseReport1Data, EvidenceGetCaseReport1Responses, EvidenceDownloadExternalEvidenceData, EvidenceDownloadExternalEvidenceResponses, EvidenceGetCaseReportFileInfoData, EvidenceGetCaseReportFileInfoResponses, EvidenceGetCasePpcFileData, EvidenceGetCasePpcFileResponses, EvidenceRepositoryCreateSmbData, EvidenceRepositoryCreateSmbResponses, EvidenceRepositoryUpdateSmbData, EvidenceRepositoryUpdateSmbResponses, EvidenceRepositoryCreateSftpData, EvidenceRepositoryCreateSftpResponses, EvidenceRepositoryUpdateSftpData, EvidenceRepositoryUpdateSftpResponses, EvidenceRepositoryCreateFtpsData, EvidenceRepositoryCreateFtpsResponses, EvidenceRepositoryUpdateFtpsData, EvidenceRepositoryUpdateFtpsResponses, EvidenceRepositoryCreateAzureStorageData, EvidenceRepositoryCreateAzureStorageResponses, EvidenceRepositoryUpdateAzureStorageData, EvidenceRepositoryUpdateAzureStorageResponses, EvidenceRepositoryCreateAmazonS3Data, EvidenceRepositoryCreateAmazonS3Responses, EvidenceRepositoryUpdateAmazonS3Data, EvidenceRepositoryUpdateAmazonS3Responses, EvidenceRepositoryCreateS3CompatibleData, EvidenceRepositoryCreateS3CompatibleResponses, EvidenceRepositoryUpdateS3CompatibleData, EvidenceRepositoryUpdateS3CompatibleResponses, EvidenceRepositoryDeleteData, EvidenceRepositoryDeleteResponses, EvidenceRepositoriesGetData, EvidenceRepositoriesGetResponses, EvidenceRepositoriesGetManyData, EvidenceRepositoriesGetManyResponses, EvidenceRepositoryValidateByIdData, EvidenceRepositoryValidateByIdResponses, EvidenceRepositoryValidateAmazonS3Data, EvidenceRepositoryValidateAmazonS3Responses, EvidenceRepositoryValidateS3CompatibleData, EvidenceRepositoryValidateS3CompatibleResponses, EvidenceRepositoryValidateAzureStorageData, EvidenceRepositoryValidateAzureStorageResponses, EvidenceRepositoryValidateFtpsRepositoryData, EvidenceRepositoryValidateFtpsRepositoryResponses, EvidenceRepositoryValidateSftpRepositoryData, EvidenceRepositoryValidateSftpRepositoryResponses, EvidenceRepositoryValidateGoogleCloudStorageData, EvidenceRepositoryValidateGoogleCloudStorageResponses, EvidenceRepositoryCreateGoogleCloudStorageData, EvidenceRepositoryCreateGoogleCloudStorageResponses, EvidenceRepositoryUpdateGoogleCloudStorageData, EvidenceRepositoryUpdateGoogleCloudStorageResponses, NotificationDeleteAllData, NotificationDeleteAllResponses, NotificationFilterData, NotificationFilterResponses, NotificationMarkAllAsReadData, NotificationMarkAllAsReadResponses, NotificationMarkAsReadData, NotificationMarkAsReadResponses, AuditLogsGetManyData, AuditLogsGetManyResponses, AuditLogExportData, AuditLogExportResponses, AuditLogsGetEventTypesData, AuditLogsGetEventTypesResponses, AuditLogsGetEventFilterData, AuditLogsGetEventFilterResponses, AuditLogsUpdateEventFilterData, AuditLogsUpdateEventFilterResponses, PolicyGetMatchStatsData, PolicyGetMatchStatsResponses, PolicyFilterData, PolicyFilterResponses, PolicyCreateData, PolicyCreateResponses, PolicyUpdatePrioritiesData, PolicyUpdatePrioritiesResponses, PolicyDeleteData, PolicyDeleteResponses, PolicyGetData, PolicyGetResponses, PolicyUpdateData, PolicyUpdateResponses, PolicyUpdateStatusData, PolicyUpdateStatusResponses, PolicyCheckNameExistsData, PolicyCheckNameExistsResponses, OrganizationsGetManyData, OrganizationsGetManyResponses, OrganizationCreateData, OrganizationCreateResponses, OrganizationCheckNameExistsData, OrganizationCheckNameExistsResponses, OrganizationDeleteData, OrganizationDeleteResponses, OrganizationGetData, OrganizationGetResponses, OrganizationUpdateData, OrganizationUpdateResponses, OrganizationRemoveUsersData, OrganizationRemoveUsersResponses, OrganizationAssignUsersData, OrganizationAssignUsersResponses, OrganizationRemoveGroupsData, OrganizationRemoveGroupsResponses, OrganizationAssignGroupsData, OrganizationAssignGroupsResponses, OrganizationGetOrganizationIdByTokenData, OrganizationGetOrganizationIdByTokenResponses, OrganizationUpdateShareableDeploymentStatusData, OrganizationUpdateShareableDeploymentStatusResponses, OrganizationUpdateDeploymentTokenData, OrganizationUpdateDeploymentTokenResponses, OrganizationRemoveTagsData, OrganizationRemoveTagsResponses, OrganizationAddTagsData, OrganizationAddTagsResponses, OrganizationGetUsersData, OrganizationGetUsersResponses, AutoAssetTagFilterData, AutoAssetTagFilterResponses, AutoAssetTagSaveAutoAssetTagData, AutoAssetTagSaveAutoAssetTagResponses, AutoAssetTagDeleteData, AutoAssetTagDeleteResponses, AutoAssetTagGetByIdData, AutoAssetTagGetByIdResponses, AutoAssetTagUpdateAutoAssetTagData, AutoAssetTagUpdateAutoAssetTagResponses, AutoAssetTagUpdateStatusData, AutoAssetTagUpdateStatusResponses, AutoAssetTagDeleteBulkData, AutoAssetTagDeleteBulkResponses, AutoAssetTagAssignAutoAssetTaggingTaskData, AutoAssetTagAssignAutoAssetTaggingTaskResponses, AutoAssetTagUpdateScheduledAatTaskData, AutoAssetTagUpdateScheduledAatTaskResponses, CasesCheckNameData, CasesCheckNameResponses, CaseExportCasesData, CaseExportCasesResponses, CaseExportCaseNotesData, CaseExportCaseNotesResponses, CaseExportCaseEndpoints0Data, CaseExportCaseEndpoints0Responses, CaseExportCaseEndpoints1Data, CaseExportCaseEndpoints1Responses, CasesGetData, CasesGetResponses, CaseUpdateCaseData, CaseUpdateCaseResponses, CasesGetManyData, CasesGetManyResponses, CasesCreateData, CasesCreateResponses, CasesCloseData, CasesCloseResponses, CaseReopenCaseData, CaseReopenCaseResponses, CaseArchiveCaseData, CaseArchiveCaseResponses, CasesCloseByFilterData, CasesCloseByFilterResponses, CasesArchiveByFilterData, CasesArchiveByFilterResponses, CasesChangeOwnerData, CasesChangeOwnerResponses, CasesGetTasksData, CasesGetTasksResponses, CaseFilterTaskAssignmentsData, CaseFilterTaskAssignmentsResponses, CasesGetEndpointsData, CasesGetEndpointsResponses, CasesGetEndpoints2Data, CasesGetEndpoints2Responses, CasesGetActivitiesData, CasesGetActivitiesResponses, CaseExportActivitiesData, CaseExportActivitiesResponses, CaseAddCaseNoteData, CaseAddCaseNoteResponses, CaseDeleteCaseNoteData, CaseDeleteCaseNoteResponses, CaseEditCaseNoteData, CaseEditCaseNoteResponses, CaseImportTaskAssignmentData, CaseImportTaskAssignmentResponses, CasesGetUsersData, CasesGetUsersResponses, CaseRemoveEndpointsFromCaseByFilter0Data, CaseRemoveEndpointsFromCaseByFilter0Responses, CaseRemoveEndpointsFromCaseByFilter1Data, CaseRemoveEndpointsFromCaseByFilter1Responses, CaseRemoveTaskAssignmentFromCaseData, CaseRemoveTaskAssignmentFromCaseResponses, CaseTagsFilterData, CaseTagsFilterResponses, CaseTagsCreateData, CaseTagsCreateResponses, CaseTagsDeleteData, CaseTagsDeleteResponses, CaseCategoriesFilterData, CaseCategoriesFilterResponses, CaseCategoriesCreateData, CaseCategoriesCreateResponses, CaseCategoriesDeleteData, CaseCategoriesDeleteResponses, GetCaseCloseReportHistoryData, GetCaseCloseReportHistoryResponses, GetCaseCloseReportData, GetCaseCloseReportResponses, UpdateCaseCloseReportData, UpdateCaseCloseReportResponses, GetCaseCloseReport2Data, GetCaseCloseReport2Responses, UpdateCaseCloseReport2Data, UpdateCaseCloseReport2Responses, ExportClosureReportFindingsData, ExportClosureReportFindingsResponses, ExportClosureReportFlagsData, ExportClosureReportFlagsResponses, ExportClosureReportAssetsData, ExportClosureReportAssetsResponses, InteractCommandsGetManyData, InteractCommandsGetManyResponses, InteractCommandsDownloadResultFileData, InteractCommandsDownloadResultFileResponses, InteractShellAssignTaskData, InteractShellAssignTaskResponses, InteractGetInterActShellReportData, InteractGetInterActShellReportResponses, InteractSessionExecuteCommandData, InteractSessionExecuteCommandResponses, InteractSessionExecuteAsyncCommandData, InteractSessionExecuteAsyncCommandResponses, InteractSessionInterruptCommandData, InteractSessionInterruptCommandResponses, InteractSessionCloseData, InteractSessionCloseResponses, InteractSessionGetCommandMessageData, InteractSessionGetCommandMessageResponses, InteractLibraryFilterData, InteractLibraryFilterResponses, InteractLibraryCheckLibraryFileExistsData, InteractLibraryCheckLibraryFileExistsResponses, InteractLibraryUploadData, InteractLibraryUploadResponses, InteractLibraryDownloadData, InteractLibraryDownloadResponses, InteractLibraryDeleteBulkData, InteractLibraryDeleteBulkResponses, InteractLibraryDeleteData, InteractLibraryDeleteResponses, InteractCommandSnippetsGetManyData, InteractCommandSnippetsGetManyResponses, InteractCommandSnippetsCreateData, InteractCommandSnippetsCreateResponses, InteractCommandSnippetsDeleteData, InteractCommandSnippetsDeleteResponses, InteractCommandSnippetsGetOneData, InteractCommandSnippetsGetOneResponses, InteractCommandSnippetsUpdateData, InteractCommandSnippetsUpdateResponses, InteractCommandSnippetsBulkDeleteData, InteractCommandSnippetsBulkDeleteResponses, InteractCommandSnippetTagsGetManyData, InteractCommandSnippetTagsGetManyResponses, InteractCommandSnippetTagsCreateData, InteractCommandSnippetTagsCreateResponses, InteractCommandSnippetTagsDeleteData, InteractCommandSnippetTagsDeleteResponses, InteractCommandSnippetTagsUpdateData, InteractCommandSnippetTagsUpdateResponses, InteractLibrarySnippetV2ApiControllerListData, InteractLibrarySnippetV2ApiControllerListResponses, InteractLibrarySnippetV2ApiControllerListErrors, InteractLibrarySnippetV2ApiControllerCreateData, InteractLibrarySnippetV2ApiControllerCreateResponses, InteractLibrarySnippetV2ApiControllerCreateErrors, InteractLibrarySnippetV2ApiControllerBulkDeleteData, InteractLibrarySnippetV2ApiControllerBulkDeleteResponses, InteractLibrarySnippetV2ApiControllerBulkDeleteErrors, InteractLibrarySnippetV2ApiControllerDeleteData, InteractLibrarySnippetV2ApiControllerDeleteResponses, InteractLibrarySnippetV2ApiControllerDeleteErrors, InteractLibrarySnippetV2ApiControllerGetData, InteractLibrarySnippetV2ApiControllerGetResponses, InteractLibrarySnippetV2ApiControllerGetErrors, InteractLibrarySnippetV2ApiControllerUpdateData, InteractLibrarySnippetV2ApiControllerUpdateResponses, InteractLibrarySnippetV2ApiControllerUpdateErrors, InteractLibraryTagV2ApiControllerListData, InteractLibraryTagV2ApiControllerListResponses, InteractLibraryTagV2ApiControllerListErrors, InteractLibraryTagV2ApiControllerCreateData, InteractLibraryTagV2ApiControllerCreateResponses, InteractLibraryTagV2ApiControllerCreateErrors, InteractLibraryTagV2ApiControllerBulkDeleteData, InteractLibraryTagV2ApiControllerBulkDeleteResponses, InteractLibraryTagV2ApiControllerBulkDeleteErrors, InteractLibraryTagV2ApiControllerDeleteData, InteractLibraryTagV2ApiControllerDeleteResponses, InteractLibraryTagV2ApiControllerDeleteErrors, InteractLibraryTagV2ApiControllerGetData, InteractLibraryTagV2ApiControllerGetResponses, InteractLibraryTagV2ApiControllerGetErrors, InteractLibraryTagV2ApiControllerUpdateData, InteractLibraryTagV2ApiControllerUpdateResponses, InteractLibraryTagV2ApiControllerUpdateErrors, InteractLibraryFileV2ApiControllerListData, InteractLibraryFileV2ApiControllerListResponses, InteractLibraryFileV2ApiControllerListErrors, InteractLibraryFileV2ApiControllerUploadData, InteractLibraryFileV2ApiControllerUploadResponses, InteractLibraryFileV2ApiControllerUploadErrors, InteractLibraryFileV2ApiControllerBulkDeleteData, InteractLibraryFileV2ApiControllerBulkDeleteResponses, InteractLibraryFileV2ApiControllerBulkDeleteErrors, InteractLibraryFileV2ApiControllerDeleteData, InteractLibraryFileV2ApiControllerDeleteResponses, InteractLibraryFileV2ApiControllerDeleteErrors, InteractLibraryFileV2ApiControllerDownloadData, InteractLibraryFileV2ApiControllerDownloadResponses, InteractLibraryFileV2ApiControllerDownloadErrors, MultipartUploadInitializeHeadData, MultipartUploadInitializeHeadResponses, MultipartUploadInitializeData, MultipartUploadInitializeResponses, MultipartUploadFinalizeData, MultipartUploadFinalizeResponses, MultipartUploadIsReadyData, MultipartUploadIsReadyResponses, MultipartUploadDeleteFilePartsData, MultipartUploadDeleteFilePartsResponses, MultipartUploadUploadPartData, MultipartUploadUploadPartResponses, BaselineCompareData, BaselineCompareResponses, BaselineAcquireData, BaselineAcquireResponses, BaselineGetComparisonReportData, BaselineGetComparisonReportResponses, BaselineGetComparisonReportByVendorDeviceIdData, BaselineGetComparisonReportByVendorDeviceIdResponses, ApiTokensGetManyData, ApiTokensGetManyResponses, ApiTokensCreateData, ApiTokensCreateResponses, ApiTokensGetCurrentData, ApiTokensGetCurrentResponses, ApiTokensDeleteData, ApiTokensDeleteResponses, ApiTokensGetOneData, ApiTokensGetOneResponses, ApiTokensUpdateData, ApiTokensUpdateResponses, ApiTokensBulkDeleteData, ApiTokensBulkDeleteResponses, SystemApiTokensGetManyData, SystemApiTokensGetManyResponses, SystemApiTokensCreateData, SystemApiTokensCreateResponses, SystemApiTokensDeleteData, SystemApiTokensDeleteResponses, SystemApiTokensGetOneData, SystemApiTokensGetOneResponses, SystemApiTokensUpdateData, SystemApiTokensUpdateResponses, CloudAccountsFilterData, CloudAccountsFilterResponses, CloudAccountsCreateCloudAccountData, CloudAccountsCreateCloudAccountResponses, CloudAccountsGetConfigData, CloudAccountsGetConfigResponses, CloudAccountsExportData, CloudAccountsExportResponses, CloudAccountsDeleteData, CloudAccountsDeleteResponses, CloudAccountsGetCloudAccountByIdData, CloudAccountsGetCloudAccountByIdResponses, CloudAccountsUpdateCloudAccountData, CloudAccountsUpdateCloudAccountResponses, CloudAccountsSyncCloudAccountData, CloudAccountsSyncCloudAccountResponses, CloudAccountsSyncAllCloudAccountData, CloudAccountsSyncAllCloudAccountResponses, InvestigationGetInvestigationByIdData, InvestigationGetInvestigationByIdResponses, InvestigationUpdateInvestigationData, InvestigationUpdateInvestigationResponses, InvestigationGetInvestigationMigrationsSummaryData, InvestigationGetInvestigationMigrationsSummaryResponses, InvestigationGetEvidenceDataStructureData, InvestigationGetEvidenceDataStructureResponses, InvestigationGetEvidenceDataData, InvestigationGetEvidenceDataResponses, InvestigationGetEvidenceRelationDataData, InvestigationGetEvidenceRelationDataResponses, InvestigationExportFlagsData, InvestigationExportFlagsResponses, InvestigationCreateExportRequestForFlagsData, InvestigationCreateExportRequestForFlagsResponses, InvestigationExportEvidenceDataData, InvestigationExportEvidenceDataResponses, InvestigationCreateExportRequestForSectionDataData, InvestigationCreateExportRequestForSectionDataResponses, InvestigationGetAssetsByInvestigationIdData, InvestigationGetAssetsByInvestigationIdResponses, InvestigationGetSectionsByEndpointsData, InvestigationGetSectionsByEndpointsResponses, InvestigationGetSummaryData, InvestigationGetSummaryResponses, InvestigationGetFindingDataStructureData, InvestigationGetFindingDataStructureResponses, InvestigationFilterEndpointFindingsData, InvestigationFilterEndpointFindingsResponses, InvestigationGetFindingsSummaryData, InvestigationGetFindingsSummaryResponses, InvestigationGetMitreMatchesData, InvestigationGetMitreMatchesResponses, InvestigationGlobalSearchData, InvestigationGlobalSearchResponses, InvestigationEvidenceCountsData, InvestigationEvidenceCountsResponses, InvestigationRemoveEvidenceFlagData, InvestigationRemoveEvidenceFlagResponses, InvestigationFlagEvidenceData, InvestigationFlagEvidenceResponses, InvestigationUpdateEvidenceNoteData, InvestigationUpdateEvidenceNoteResponses, InvestigationCreateInvestigationEvidenceData, InvestigationCreateInvestigationEvidenceResponses, InvestigationUpdateInvestigationEvidenceData, InvestigationUpdateInvestigationEvidenceResponses, InvestigationImportDataToInvestigationEvidenceData, InvestigationImportDataToInvestigationEvidenceResponses, InvestigationGetAllImportsData, InvestigationGetAllImportsResponses, InvestigationDeleteImportData, InvestigationDeleteImportResponses, InvestigationGetImportErrorsData, InvestigationGetImportErrorsResponses, InvestigationImportPstEvidencesToInvestigationData, InvestigationImportPstEvidencesToInvestigationResponses, InvestigationRetryImportTaskAssignmentData, InvestigationRetryImportTaskAssignmentResponses, InvestigationMarkInvestigationEvidenceAsFindingData, InvestigationMarkInvestigationEvidenceAsFindingResponses, InvestigationUpdateInvestigationFindingData, InvestigationUpdateInvestigationFindingResponses, InvestigationGetInvestigationTaskAssignmentForImportedEvidenceData, InvestigationGetInvestigationTaskAssignmentForImportedEvidenceResponses, InvestigationGetInvestigationTaskAssignmentDataImportProgressData, InvestigationGetInvestigationTaskAssignmentDataImportProgressResponses, InvestigationGetInvestigationHubDataImportProgressData, InvestigationGetInvestigationHubDataImportProgressResponses, InvestigationExportFindingsDataData, InvestigationExportFindingsDataResponses, InvestigationCreateExportRequestForFindingsData, InvestigationCreateExportRequestForFindingsResponses, InvestigationImportTornadoEvidenceToInvestigation0Data, InvestigationImportTornadoEvidenceToInvestigation0Responses, InvestigationImportTornadoEvidenceToInvestigation1Data, InvestigationImportTornadoEvidenceToInvestigation1Responses, InvestigationExclusionAddFindingExclusionRuleData, InvestigationExclusionAddFindingExclusionRuleResponses, InvestigationExclusionBulkAddFindingExclusionRulesData, InvestigationExclusionBulkAddFindingExclusionRulesResponses, InvestigationExclusionGetFindingExclusionRulesMatchesData, InvestigationExclusionGetFindingExclusionRulesMatchesResponses, InvestigationExclusionDeleteFindingExclusionRuleData, InvestigationExclusionDeleteFindingExclusionRuleResponses, InvestigationExclusionFilterFindingExclusionRulesData, InvestigationExclusionFilterFindingExclusionRulesResponses, InvestigationExclusionGetExclusionReasonsData, InvestigationExclusionGetExclusionReasonsResponses, InvestigationExclusionApplyFindingExclusionRuleForOrganizationData, InvestigationExclusionApplyFindingExclusionRuleForOrganizationResponses, InvestigationExclusionApplyFindingExclusionRuleForAllAssetsData, InvestigationExclusionApplyFindingExclusionRuleForAllAssetsResponses, InvestigationExclusionDeleteIndividualFindingExclusionRuleData, InvestigationExclusionDeleteIndividualFindingExclusionRuleResponses, InvestigationReportExportReportsData, InvestigationReportExportReportsResponses, InvestigationReportFilterReportsData, InvestigationReportFilterReportsResponses, InvestigationReportCreateReportData, InvestigationReportCreateReportResponses, InvestigationReportDeleteReportData, InvestigationReportDeleteReportResponses, InvestigationReportGetReportData, InvestigationReportGetReportResponses, InvestigationReportUpdateReportData, InvestigationReportUpdateReportResponses, InvestigationReportGeneratePdfReportData, InvestigationReportGeneratePdfReportResponses, InvestigationReportDownloadPdfReportData, InvestigationReportDownloadPdfReportResponses, InvestigationFlagFilterFlagsData, InvestigationFlagFilterFlagsResponses, InvestigationFlagCreateFlagData, InvestigationFlagCreateFlagResponses, InvestigationFlagDeleteFlagData, InvestigationFlagDeleteFlagResponses, InvestigationFlagUpdateFlagData, InvestigationFlagUpdateFlagResponses, InvestigationActivityFilterData, InvestigationActivityFilterResponses, InvestigationActivityMarkAsReadData, InvestigationActivityMarkAsReadResponses, InvestigationCommentFilterCommentsData, InvestigationCommentFilterCommentsResponses, InvestigationCommentCommentEvidenceData, InvestigationCommentCommentEvidenceResponses, InvestigationCommentDeleteCommentData, InvestigationCommentDeleteCommentResponses, InvestigationAdvancedFilterGetFiltersData, InvestigationAdvancedFilterGetFiltersResponses, InvestigationAdvancedFilterCreateFilterData, InvestigationAdvancedFilterCreateFilterResponses, InvestigationAdvancedFilterDeleteFilterData, InvestigationAdvancedFilterDeleteFilterResponses, InvestigationAdvancedFilterUpdateFilterData, InvestigationAdvancedFilterUpdateFilterResponses, InvestigationTimelineGetTimelineEventCountByAdvancedFilterData, InvestigationTimelineGetTimelineEventCountByAdvancedFilterResponses, InvestigationTimelineFilterTimelineEventsData, InvestigationTimelineFilterTimelineEventsResponses, InvestigationTimelineGetTimelineStructureData, InvestigationTimelineGetTimelineStructureResponses, InvestigationTimelineGetTotalTimelineCountData, InvestigationTimelineGetTotalTimelineCountResponses, InvestigationTimelineExportTimelineDataData, InvestigationTimelineExportTimelineDataResponses, InvestigationTimelineCreateExportRequestForTimelineData, InvestigationTimelineCreateExportRequestForTimelineResponses, InvestigationTaskExecutionLogGetTaskExecutionLogsData, InvestigationTaskExecutionLogGetTaskExecutionLogsResponses, InvestigationTaskExecutionLogFilterTaskExecutionLogsData, InvestigationTaskExecutionLogFilterTaskExecutionLogsResponses, RelayServerUpdateTagsData, RelayServerUpdateTagsResponses, RelayServerUpdateLabelData, RelayServerUpdateLabelResponses, RelayServerGetByIdData, RelayServerGetByIdResponses, RelayServerFilterData, RelayServerFilterResponses, RelayServerAssignRebootTaskData, RelayServerAssignRebootTaskResponses, RelayServerAssignRetrieveLogTaskData, RelayServerAssignRetrieveLogTaskResponses, RelayServerAssignFixUpdateRequiredIssueTaskData, RelayServerAssignFixUpdateRequiredIssueTaskResponses, RelayServerRemoveRelayServerData, RelayServerRemoveRelayServerResponses, RelayServerUpdateAddressData, RelayServerUpdateAddressResponses, RelayProRemoveData, RelayProRemoveResponses, RelayProUpdateRelayUrlData, RelayProUpdateRelayUrlResponses, RecentActivitiesGetManyData, RecentActivitiesGetManyResponses, RecentActivitiesCreateData, RecentActivitiesCreateResponses, ProcessorGetAllProcessorsData, ProcessorGetAllProcessorsResponses, ProcessorGetProcessorsByAssetTypeData, ProcessorGetProcessorsByAssetTypeResponses, ProcessorGetProcessorTypeByAssetTypeData, ProcessorGetProcessorTypeByAssetTypeResponses, AssetV2ApiControllerGetStatsData, AssetV2ApiControllerGetStatsResponses, AssetV2ApiControllerGetStatsErrors, AssetV2ApiControllerExportAssetsData, AssetV2ApiControllerExportAssetsResponses, AssetV2ApiControllerExportAssetsErrors, AssetV2ApiControllerFilterAssetsData, AssetV2ApiControllerFilterAssetsResponses, AssetV2ApiControllerFilterAssetsErrors, AssetV2ApiControllerDeleteAssetData, AssetV2ApiControllerDeleteAssetResponses, AssetV2ApiControllerDeleteAssetErrors, AssetV2ApiControllerGetAssetData, AssetV2ApiControllerGetAssetResponses, AssetV2ApiControllerGetAssetErrors, AssetV2ApiControllerReplaceTagsData, AssetV2ApiControllerReplaceTagsResponses, AssetV2ApiControllerReplaceTagsErrors, AssetV2ApiControllerUpdateLabelData, AssetV2ApiControllerUpdateLabelResponses, AssetV2ApiControllerUpdateLabelErrors, AssetActionV2ApiControllerRebootData, AssetActionV2ApiControllerRebootResponses, AssetActionV2ApiControllerRebootErrors, AssetActionV2ApiControllerShutdownData, AssetActionV2ApiControllerShutdownResponses, AssetActionV2ApiControllerShutdownErrors, AssetActionV2ApiControllerIsolateData, AssetActionV2ApiControllerIsolateResponses, AssetActionV2ApiControllerIsolateErrors, AssetActionV2ApiControllerUnisolateData, AssetActionV2ApiControllerUnisolateResponses, AssetActionV2ApiControllerUnisolateErrors, AssetActionV2ApiControllerRetrieveLogsData, AssetActionV2ApiControllerRetrieveLogsResponses, AssetActionV2ApiControllerRetrieveLogsErrors, AssetActionV2ApiControllerVersionUpdateData, AssetActionV2ApiControllerVersionUpdateResponses, AssetActionV2ApiControllerVersionUpdateErrors, AssetActionV2ApiControllerEnableMaintenanceData, AssetActionV2ApiControllerEnableMaintenanceResponses, AssetActionV2ApiControllerEnableMaintenanceErrors, AssetActionV2ApiControllerDisableMaintenanceData, AssetActionV2ApiControllerDisableMaintenanceResponses, AssetActionV2ApiControllerDisableMaintenanceErrors, AssetActionV2ApiControllerImportPpcToExistingAssetData, AssetActionV2ApiControllerImportPpcToExistingAssetResponses, AssetActionV2ApiControllerImportPpcToExistingAssetErrors, AssetBulkActionV2ApiControllerRebootData, AssetBulkActionV2ApiControllerRebootResponses, AssetBulkActionV2ApiControllerRebootErrors, AssetBulkActionV2ApiControllerShutdownData, AssetBulkActionV2ApiControllerShutdownResponses, AssetBulkActionV2ApiControllerShutdownErrors, AssetBulkActionV2ApiControllerIsolateData, AssetBulkActionV2ApiControllerIsolateResponses, AssetBulkActionV2ApiControllerIsolateErrors, AssetBulkActionV2ApiControllerUnisolateData, AssetBulkActionV2ApiControllerUnisolateResponses, AssetBulkActionV2ApiControllerUnisolateErrors, AssetBulkActionV2ApiControllerRetrieveLogsData, AssetBulkActionV2ApiControllerRetrieveLogsResponses, AssetBulkActionV2ApiControllerRetrieveLogsErrors, AssetBulkActionV2ApiControllerVersionUpdateData, AssetBulkActionV2ApiControllerVersionUpdateResponses, AssetBulkActionV2ApiControllerVersionUpdateErrors, AssetBulkActionV2ApiControllerEnableMaintenanceData, AssetBulkActionV2ApiControllerEnableMaintenanceResponses, AssetBulkActionV2ApiControllerEnableMaintenanceErrors, AssetBulkActionV2ApiControllerDisableMaintenanceData, AssetBulkActionV2ApiControllerDisableMaintenanceResponses, AssetBulkActionV2ApiControllerDisableMaintenanceErrors, AssetBulkMetadataV2ApiControllerAddTagsData, AssetBulkMetadataV2ApiControllerAddTagsResponses, AssetBulkMetadataV2ApiControllerAddTagsErrors, AssetBulkMetadataV2ApiControllerRemoveTagsData, AssetBulkMetadataV2ApiControllerRemoveTagsResponses, AssetBulkMetadataV2ApiControllerRemoveTagsErrors, AssetBulkMetadataV2ApiControllerSetUpdateExclusionData, AssetBulkMetadataV2ApiControllerSetUpdateExclusionResponses, AssetBulkMetadataV2ApiControllerSetUpdateExclusionErrors, AssetBulkMetadataV2ApiControllerSetConnectionRouteData, AssetBulkMetadataV2ApiControllerSetConnectionRouteResponses, AssetBulkMetadataV2ApiControllerSetConnectionRouteErrors, AssetBulkMetadataV2ApiControllerSetMitreDatabaseVersionData, AssetBulkMetadataV2ApiControllerSetMitreDatabaseVersionResponses, AssetBulkMetadataV2ApiControllerSetMitreDatabaseVersionErrors, AssetBulkMetadataV2ApiControllerDeleteAssetsData, AssetBulkMetadataV2ApiControllerDeleteAssetsResponses, AssetBulkMetadataV2ApiControllerDeleteAssetsErrors, AssetBulkMetadataV2ApiControllerImportOffNetworkPpcData, AssetBulkMetadataV2ApiControllerImportOffNetworkPpcResponses, AssetBulkMetadataV2ApiControllerImportOffNetworkPpcErrors, AssetBulkTriageV2ApiControllerRunTriageData, AssetBulkTriageV2ApiControllerRunTriageResponses, AssetBulkTriageV2ApiControllerRunTriageErrors, AssetTriageV2ApiControllerFilterTriageTasksData, AssetTriageV2ApiControllerFilterTriageTasksResponses, AssetTriageV2ApiControllerFilterTriageTasksErrors, AssetTriageV2ApiControllerRunTriageData, AssetTriageV2ApiControllerRunTriageResponses, AssetTriageV2ApiControllerRunTriageErrors, AssetTriageV2ApiControllerCancelTriageData, AssetTriageV2ApiControllerCancelTriageResponses, AssetTriageV2ApiControllerCancelTriageErrors, AssetTriageV2ApiControllerDeleteTriageAssignmentData, AssetTriageV2ApiControllerDeleteTriageAssignmentResponses, AssetTriageV2ApiControllerDeleteTriageAssignmentErrors, AssetAcquisitionV2ApiControllerAcquireData, AssetAcquisitionV2ApiControllerAcquireResponses, AssetAcquisitionV2ApiControllerAcquireErrors, AssetAcquisitionV2ApiControllerCancelAcquisitionData, AssetAcquisitionV2ApiControllerCancelAcquisitionResponses, AssetAcquisitionV2ApiControllerCancelAcquisitionErrors, AssetAcquisitionV2ApiControllerDeleteAcquisitionAssignmentData, AssetAcquisitionV2ApiControllerDeleteAcquisitionAssignmentResponses, AssetAcquisitionV2ApiControllerDeleteAcquisitionAssignmentErrors, AssetAcquisitionV2ApiControllerFilterAcquisitionTasksData, AssetAcquisitionV2ApiControllerFilterAcquisitionTasksResponses, AssetAcquisitionV2ApiControllerFilterAcquisitionTasksErrors, AssetInteractMessageV2ApiControllerListForAssetData, AssetInteractMessageV2ApiControllerListForAssetResponses, AssetInteractMessageV2ApiControllerListForAssetErrors, AssetInteractV2ApiControllerRunCommandData, AssetInteractV2ApiControllerRunCommandResponses, AssetInteractV2ApiControllerRunCommandErrors, AssetInteractV2ApiControllerCancelCommandData, AssetInteractV2ApiControllerCancelCommandResponses, AssetInteractV2ApiControllerCancelCommandErrors, AssetInteractV2ApiControllerCloseSessionData, AssetInteractV2ApiControllerCloseSessionResponses, AssetInteractV2ApiControllerCloseSessionErrors, AssetInteractMessageV2ApiControllerListSessionsForAssetData, AssetInteractMessageV2ApiControllerListSessionsForAssetResponses, AssetInteractMessageV2ApiControllerListSessionsForAssetErrors, AssetInteractMessageV2ApiControllerGetMessageData, AssetInteractMessageV2ApiControllerGetMessageResponses, AssetInteractMessageV2ApiControllerGetMessageErrors, AssetInteractMessageV2ApiControllerDownloadMessageOutputData, AssetInteractMessageV2ApiControllerDownloadMessageOutputResponses, AssetInteractMessageV2ApiControllerDownloadMessageOutputErrors, AssetInteractMessageV2ApiControllerGetSessionReportData, AssetInteractMessageV2ApiControllerGetSessionReportResponses, AssetInteractMessageV2ApiControllerGetSessionReportErrors, WebhookFilterParsersData, WebhookFilterParsersResponses, WebhookFilterData, WebhookFilterResponses, WebhookCreateData, WebhookCreateResponses, WebhookDeleteData, WebhookDeleteResponses, WebhookGetData, WebhookGetResponses, WebhookUpdateData, WebhookUpdateResponses, WebhookDeleteBulkData, WebhookDeleteBulkResponses, EventSubscriptionFilterEventSubscriptionsData, EventSubscriptionFilterEventSubscriptionsResponses, EventSubscriptionCreateEventSubscriptionData, EventSubscriptionCreateEventSubscriptionResponses, EventSubscriptionDeleteEventSubscriptionData, EventSubscriptionDeleteEventSubscriptionResponses, EventSubscriptionGetEventSubscriptionData, EventSubscriptionGetEventSubscriptionResponses, EventSubscriptionUpdateEventSubscriptionData, EventSubscriptionUpdateEventSubscriptionResponses, EventSubscriptionSubscriptionEventNamesData, EventSubscriptionSubscriptionEventNamesResponses, EventSubscriptionDeleteBulkEventSubscriptionsData, EventSubscriptionDeleteBulkEventSubscriptionsResponses, EventSubscriptionTestEventSubscriptionData, EventSubscriptionTestEventSubscriptionResponses, InvestigationDataUsageGetActualDataUsagesData, InvestigationDataUsageGetActualDataUsagesResponses, InvestigationDataUsageExportActualDataUsagesData, InvestigationDataUsageExportActualDataUsagesResponses, InvestigationDataUsageCreateExportRequestForActualDataUsagesData, InvestigationDataUsageCreateExportRequestForActualDataUsagesResponses, InvestigationDataUsageGetActualDataUsageStatisticsData, InvestigationDataUsageGetActualDataUsageStatisticsResponses, InvestigationDataUsageGetHistoricalDataUsageStatisticsData, InvestigationDataUsageGetHistoricalDataUsageStatisticsResponses, InvestigationDataUsageGetDataUsageFiltersData, InvestigationDataUsageGetDataUsageFiltersResponses, InvestigationDataUsageGetFiltersData, InvestigationDataUsageGetFiltersResponses, InvestigationDataUsageDeleteFilterData, InvestigationDataUsageDeleteFilterResponses, InvestigationDataUsageGetFilterData, InvestigationDataUsageGetFilterResponses, InvestigationDataUsageUpdateFilterData, InvestigationDataUsageUpdateFilterResponses, InvestigationDataUsageCreateFilterData, InvestigationDataUsageCreateFilterResponses, PresetFiltersGetManyData, PresetFiltersGetManyResponses, PresetFiltersCreateData, PresetFiltersCreateResponses, PresetFiltersDeleteData, PresetFiltersDeleteResponses, PresetFiltersUpdateData, PresetFiltersUpdateResponses, AutomationHubGetExecutionHistoryData, AutomationHubGetExecutionHistoryResponses, AutomationHubFilterAutomationsData, AutomationHubFilterAutomationsResponses, AutomationHubCreateAutomationData, AutomationHubCreateAutomationResponses, AutomationHubGetActionTypesData, AutomationHubGetActionTypesResponses, AutomationHubTestActionData, AutomationHubTestActionResponses, AutomationHubGetTriggerTypesData, AutomationHubGetTriggerTypesResponses, AutomationHubGetTagsData, AutomationHubGetTagsResponses, AutomationHubExecuteIntegrationData, AutomationHubExecuteIntegrationResponses, AutomationHubDeleteAutomationData, AutomationHubDeleteAutomationResponses, AutomationHubGetAutomationData, AutomationHubGetAutomationResponses, AutomationHubUpdateAutomationData, AutomationHubUpdateAutomationResponses, AutomationHubGetAutomationExecutionsData, AutomationHubGetAutomationExecutionsResponses, AutomationHubGetAutomationChangeHistoryData, AutomationHubGetAutomationChangeHistoryResponses, AutomationHubEnableAutomationData, AutomationHubEnableAutomationResponses, AutomationHubDisableAutomationData, AutomationHubDisableAutomationResponses, FullTextSearchProfilesGetManyData, FullTextSearchProfilesGetManyResponses, FullTextSearchProfilesCreateData, FullTextSearchProfilesCreateResponses, FullTextSearchProfilesDeleteData, FullTextSearchProfilesDeleteResponses, FullTextSearchProfilesGetOneData, FullTextSearchProfilesGetOneResponses, FullTextSearchProfilesUpdateData, FullTextSearchProfilesUpdateResponses, FullTextSearchProfilesDeleteBulkData, FullTextSearchProfilesDeleteBulkResponses, FullTextSearchTaskAssignData, FullTextSearchTaskAssignResponses, FullTextSearchTaskUpdateScheduledFullTextSearchTaskData, FullTextSearchTaskUpdateScheduledFullTextSearchTaskResponses, CloudAcquisitionProfilesGetManyData, CloudAcquisitionProfilesGetManyResponses, CloudAcquisitionProfilesCreateData, CloudAcquisitionProfilesCreateResponses, CloudAcquisitionProfilesDeleteData, CloudAcquisitionProfilesDeleteResponses, CloudAcquisitionProfilesGetOneData, CloudAcquisitionProfilesGetOneResponses, CloudAcquisitionProfilesUpdateData, CloudAcquisitionProfilesUpdateResponses, CloudAcquisitionLibraryApiControllerListData, CloudAcquisitionLibraryApiControllerListResponses, CloudAcquisitionLibraryApiControllerListErrors, CloudAcquisitionLibraryApiControllerCreateData, CloudAcquisitionLibraryApiControllerCreateResponses, CloudAcquisitionLibraryApiControllerCreateErrors, CloudAcquisitionLibraryApiControllerBulkDeleteData, CloudAcquisitionLibraryApiControllerBulkDeleteResponses, CloudAcquisitionLibraryApiControllerBulkDeleteErrors, CloudAcquisitionLibraryApiControllerDeleteData, CloudAcquisitionLibraryApiControllerDeleteResponses, CloudAcquisitionLibraryApiControllerDeleteErrors, CloudAcquisitionLibraryApiControllerGetData, CloudAcquisitionLibraryApiControllerGetResponses, CloudAcquisitionLibraryApiControllerGetErrors, CloudAcquisitionLibraryApiControllerUpdateData, CloudAcquisitionLibraryApiControllerUpdateResponses, CloudAcquisitionLibraryApiControllerUpdateErrors, ImageEvidenceAcquisitionProfilesGetManyData, ImageEvidenceAcquisitionProfilesGetManyResponses, ImageEvidenceAcquisitionProfilesCreateData, ImageEvidenceAcquisitionProfilesCreateResponses, ImageEvidenceAcquisitionProfilesDeleteData, ImageEvidenceAcquisitionProfilesDeleteResponses, ImageEvidenceAcquisitionProfilesGetOneData, ImageEvidenceAcquisitionProfilesGetOneResponses, ImageEvidenceAcquisitionProfilesUpdateData, ImageEvidenceAcquisitionProfilesUpdateResponses, ImageEvidenceAcquisitionProfilesDeleteBulkData, ImageEvidenceAcquisitionProfilesDeleteBulkResponses, DiskImageAcquisitionLibraryApiControllerListData, DiskImageAcquisitionLibraryApiControllerListResponses, DiskImageAcquisitionLibraryApiControllerListErrors, DiskImageAcquisitionLibraryApiControllerCreateData, DiskImageAcquisitionLibraryApiControllerCreateResponses, DiskImageAcquisitionLibraryApiControllerCreateErrors, DiskImageAcquisitionLibraryApiControllerBulkDeleteData, DiskImageAcquisitionLibraryApiControllerBulkDeleteResponses, DiskImageAcquisitionLibraryApiControllerBulkDeleteErrors, DiskImageAcquisitionLibraryApiControllerDeleteData, DiskImageAcquisitionLibraryApiControllerDeleteResponses, DiskImageAcquisitionLibraryApiControllerDeleteErrors, DiskImageAcquisitionLibraryApiControllerGetData, DiskImageAcquisitionLibraryApiControllerGetResponses, DiskImageAcquisitionLibraryApiControllerGetErrors, DiskImageAcquisitionLibraryApiControllerUpdateData, DiskImageAcquisitionLibraryApiControllerUpdateResponses, DiskImageAcquisitionLibraryApiControllerUpdateErrors, DiskImageAcquisitionTasksCreateData, DiskImageAcquisitionTasksCreateResponses, DiskImageAcquisitionTasksDownloadData, DiskImageAcquisitionTasksDownloadResponses } from './types.gen';
+import type { AppGetBasicInfoData, AppGetBasicInfoResponses, LoggerDownloadLogsDirData, LoggerDownloadLogsDirResponses, ParamsGetDroneAnalyzersData, ParamsGetDroneAnalyzersResponses, ParamsEDiscoveryPatternsData, ParamsEDiscoveryPatternsResponses, ParamsEventLogRecordTypesData, ParamsEventLogRecordTypesResponses, ParamsEvidenceListData, ParamsEvidenceListResponses, ParamsGetMitreAttackTacticsData, ParamsGetMitreAttackTacticsResponses, CapabilitiesV2ApiControllerGetData, CapabilitiesV2ApiControllerGetResponses, CapabilitiesV2ApiControllerGetErrors, OpenApiAliasV2ApiControllerGetData, OpenApiAliasV2ApiControllerGetResponses, OpenApiAliasV2ApiControllerGetErrors, EndpointExportEndpoints0Data, EndpointExportEndpoints0Responses, EndpointExportEndpoints1Data, EndpointExportEndpoints1Responses, AssetsUpdateTagsData, AssetsUpdateTagsResponses, AssetsUpdateTags2Data, AssetsUpdateTags2Responses, AssetsUpdateLabelData, AssetsUpdateLabelResponses, AssetsUpdateLabel2Data, AssetsUpdateLabel2Responses, AssetsGetManyData, AssetsGetManyResponses, AssetsGetMany2Data, AssetsGetMany2Responses, AssetsGetManyByFilterData, AssetsGetManyByFilterResponses, AssetsGetManyByFilter2Data, AssetsGetManyByFilter2Responses, AssetsGetManyByFilterExpressionData, AssetsGetManyByFilterExpressionResponses, AssetsGetManyByFilterExpression2Data, AssetsGetManyByFilterExpression2Responses, EndpointGetEndpointsWithTaskCountData, EndpointGetEndpointsWithTaskCountResponses, EndpointGetDeviceNameConflicts0Data, EndpointGetDeviceNameConflicts0Responses, EndpointGetDeviceNameConflicts1Data, EndpointGetDeviceNameConflicts1Responses, AssetsGetMany3Data, AssetsGetMany3Responses, AssetsGetMany4Data, AssetsGetMany4Responses, EndpointImportPpcAsEndpoint0Data, EndpointImportPpcAsEndpoint0Responses, EndpointImportPpcAsEndpoint1Data, EndpointImportPpcAsEndpoint1Responses, EndpointImportPpcToExistedEndpoint0Data, EndpointImportPpcToExistedEndpoint0Responses, EndpointImportPpcToExistedEndpoint1Data, EndpointImportPpcToExistedEndpoint1Responses, EndpointUninstallAgentsAndPurgeByFilter0Data, EndpointUninstallAgentsAndPurgeByFilter0Responses, EndpointUninstallAgentsAndPurgeByFilter1Data, EndpointUninstallAgentsAndPurgeByFilter1Responses, EndpointUninstallAgentsAndPurgeByFilter2Data, EndpointUninstallAgentsAndPurgeByFilter2Responses, EndpointUninstallEndpointsByFilter0Data, EndpointUninstallEndpointsByFilter0Responses, EndpointUninstallEndpointsByFilter1Data, EndpointUninstallEndpointsByFilter1Responses, EndpointPurgeAssetDataByFilter0Data, EndpointPurgeAssetDataByFilter0Responses, EndpointPurgeAssetDataByFilter1Data, EndpointPurgeAssetDataByFilter1Responses, AssetsRemoveTagsData, AssetsRemoveTagsResponses, AssetsAddTagsData, AssetsAddTagsResponses, AssetsRemoveTags2Data, AssetsRemoveTags2Responses, AssetsAddTags2Data, AssetsAddTags2Responses, AssetsSetMitreAttackDatabaseVersionData, AssetsSetMitreAttackDatabaseVersionResponses, AssetsSetMitreAttackDatabaseVersion2Data, AssetsSetMitreAttackDatabaseVersion2Responses, EndpointFilterDisks0Data, EndpointFilterDisks0Responses, EndpointFilterDisks1Data, EndpointFilterDisks1Responses, EndpointFilterByPolicyFilter0Data, EndpointFilterByPolicyFilter0Responses, EndpointFilterByPolicyFilter1Data, EndpointFilterByPolicyFilter1Responses, EndpointSearch0Data, EndpointSearch0Responses, EndpointSearch1Data, EndpointSearch1Responses, EndpointGetCasesById0Data, EndpointGetCasesById0Responses, EndpointGetCasesById1Data, EndpointGetCasesById1Responses, EndpointExportCasesByEndpointId0Data, EndpointExportCasesByEndpointId0Responses, EndpointExportCasesByEndpointId1Data, EndpointExportCasesByEndpointId1Responses, EndpointSetExcludeFromUpdatesToEndpointsByFilter0Data, EndpointSetExcludeFromUpdatesToEndpointsByFilter0Responses, EndpointSetExcludeFromUpdatesToEndpointsByFilter1Data, EndpointSetExcludeFromUpdatesToEndpointsByFilter1Responses, EndpointDownloadLogFile0Data, EndpointDownloadLogFile0Responses, EndpointDownloadLogFile1Data, EndpointDownloadLogFile1Responses, EndpointSyncLdap0Data, EndpointSyncLdap0Responses, EndpointSyncLdap1Data, EndpointSyncLdap1Responses, EndpointGetCloudAssetDetails0Data, EndpointGetCloudAssetDetails0Responses, EndpointGetCloudAssetDetails1Data, EndpointGetCloudAssetDetails1Responses, EndpointDeployCloudAssetsByFilter0Data, EndpointDeployCloudAssetsByFilter0Responses, EndpointDeployCloudAssetsByFilter1Data, EndpointDeployCloudAssetsByFilter1Responses, EndpointUpdateEndpointConnectionRoute0Data, EndpointUpdateEndpointConnectionRoute0Responses, EndpointUpdateEndpointConnectionRoute1Data, EndpointUpdateEndpointConnectionRoute1Responses, EndpointSetMaintenanceMode0Data, EndpointSetMaintenanceMode0Responses, EndpointSetMaintenanceMode1Data, EndpointSetMaintenanceMode1Responses, EndpointTagFilterAssetTagsData, EndpointTagFilterAssetTagsResponses, EndpointTagCreateAssetTagData, EndpointTagCreateAssetTagResponses, EndpointTagDeleteAllAssetTagsData, EndpointTagDeleteAllAssetTagsResponses, EndpointTagDeleteAssetTagData, EndpointTagDeleteAssetTagResponses, EndpointTagRenameAssetTagData, EndpointTagRenameAssetTagResponses, EndpointGroupGetChildGroupsOfGroupData, EndpointGroupGetChildGroupsOfGroupResponses, EndpointGroupGetRootGroupsData, EndpointGroupGetRootGroupsResponses, GetTaskDisplayTypesData, GetTaskDisplayTypesResponses, TaskDeleteData, TaskDeleteResponses, TasksGetByIdData, TasksGetByIdResponses, TasksGetManyData, TasksGetManyResponses, TaskRenameTaskData, TaskRenameTaskResponses, TasksGetDataData, TasksGetDataResponses, TaskDeleteByFilterData, TaskDeleteByFilterResponses, TaskDeleteAndPurgeByFilterData, TaskDeleteAndPurgeByFilterResponses, TaskCancelByFilterData, TaskCancelByFilterResponses, TaskCancelData, TaskCancelResponses, TaskCreateOffNetworkTaskData, TaskCreateOffNetworkTaskResponses, TaskImportOffNetworkCollectionToTaskData, TaskImportOffNetworkCollectionToTaskResponses, TaskDownloadOffNetworkTaskData, TaskDownloadOffNetworkTaskResponses, TaskGenerateOffNetworkZipPasswordData, TaskGenerateOffNetworkZipPasswordResponses, AssetsAssignRebootTaskData, AssetsAssignRebootTaskResponses, AssetsAssignRebootTask2Data, AssetsAssignRebootTask2Responses, AssetsAssignShutdownTaskData, AssetsAssignShutdownTaskResponses, AssetsAssignShutdownTask2Data, AssetsAssignShutdownTask2Responses, EndpointTaskAssignRetrieveLogTask0Data, EndpointTaskAssignRetrieveLogTask0Responses, EndpointTaskAssignRetrieveLogTask1Data, EndpointTaskAssignRetrieveLogTask1Responses, AssetsAssignVersionUpdateTaskData, AssetsAssignVersionUpdateTaskResponses, AssetsAssignVersionUpdateTask2Data, AssetsAssignVersionUpdateTask2Responses, AssetsAssignIsolationTaskData, AssetsAssignIsolationTaskResponses, AssetsAssignIsolationTask2Data, AssetsAssignIsolationTask2Responses, AssetsGetTasksData, AssetsGetTasksResponses, AssetsGetTasks2Data, AssetsGetTasks2Responses, EndpointTaskPurgeLocalData0Data, EndpointTaskPurgeLocalData0Responses, EndpointTaskPurgeLocalData1Data, EndpointTaskPurgeLocalData1Responses, EndpointTaskRetryUpload0Data, EndpointTaskRetryUpload0Responses, EndpointTaskRetryUpload1Data, EndpointTaskRetryUpload1Responses, EndpointTaskGetComparableTasksByVendorDeviceIdData, EndpointTaskGetComparableTasksByVendorDeviceIdResponses, TasksAssignmentsGetManyData, TasksAssignmentsGetManyResponses, TaskAssignmentCancelData, TaskAssignmentCancelResponses, TaskAssignmentDeleteData, TaskAssignmentDeleteResponses, TaskAssignmentGetData, TaskAssignmentGetResponses, TaskAssignmentGenerateTaskAssignmentReportData, TaskAssignmentGenerateTaskAssignmentReportResponses, TasksV2ApiControllerGetTaskByIdData, TasksV2ApiControllerGetTaskByIdResponses, TasksV2ApiControllerGetTaskByIdErrors, TasksV2ApiControllerUpdateTaskData, TasksV2ApiControllerUpdateTaskResponses, TasksV2ApiControllerUpdateTaskErrors, TasksV2ApiControllerListTaskAssetsData, TasksV2ApiControllerListTaskAssetsResponses, TasksV2ApiControllerListTaskAssetsErrors, TasksV2ApiControllerListTaskAssignmentsData, TasksV2ApiControllerListTaskAssignmentsResponses, TasksV2ApiControllerListTaskAssignmentsErrors, TasksTriageV2ApiControllerListHuntTasksData, TasksTriageV2ApiControllerListHuntTasksResponses, TasksTriageV2ApiControllerListHuntTasksErrors, TasksTriageV2ApiControllerCancelData, TasksTriageV2ApiControllerCancelResponses, TasksTriageV2ApiControllerCancelErrors, TasksTriageV2ApiControllerDeleteData, TasksTriageV2ApiControllerDeleteResponses, TasksTriageV2ApiControllerDeleteErrors, TasksTriageV2ApiControllerCancelOneData, TasksTriageV2ApiControllerCancelOneResponses, TasksTriageV2ApiControllerCancelOneErrors, TasksTriageV2ApiControllerDeleteOneData, TasksTriageV2ApiControllerDeleteOneResponses, TasksTriageV2ApiControllerDeleteOneErrors, SettingsGetSettingsData, SettingsGetSettingsResponses, SettingsSaveGeneralSettingsData, SettingsSaveGeneralSettingsResponses, SettingsSaveProxyData, SettingsSaveProxyResponses, SettingsTestProxy0Data, SettingsTestProxy0Responses, SettingsTestProxy0Errors, SettingsTestProxy1Data, SettingsTestProxy1Responses, SettingsTestProxy1Errors, SettingsGetTrustedCertificatesData, SettingsGetTrustedCertificatesResponses, SettingsAddTrustedCertificateData, SettingsAddTrustedCertificateResponses, SettingsAddTrustedCertificateErrors, SettingsAddTrustedCertificateWithoutValidationData, SettingsAddTrustedCertificateWithoutValidationResponses, SettingsAddTrustedCertificateWithoutValidationErrors, SettingsDeleteTrustedCertificateData, SettingsDeleteTrustedCertificateResponses, SettingsDeleteTrustedCertificateErrors, SettingsValidateTrustedCertificateData, SettingsValidateTrustedCertificateResponses, SettingsValidateTrustedCertificateErrors, SettingsSaveActiveDirectoryData, SettingsSaveActiveDirectoryResponses, SettingsValidateActiveDirectoryData, SettingsValidateActiveDirectoryResponses, SettingsGetSyslogEventTypesData, SettingsGetSyslogEventTypesResponses, SettingsSaveSyslogData, SettingsSaveSyslogResponses, SettingsValidateSyslogData, SettingsValidateSyslogResponses, SettingsSaveSmtpData, SettingsSaveSmtpResponses, SettingsValidateSmtpData, SettingsValidateSmtpResponses, SettingsSaveSslData, SettingsSaveSslResponses, SettingsValidateSslData, SettingsValidateSslResponses, SettingsSavePolicyData, SettingsSavePolicyResponses, SettingsSaveBackupRestoreData, SettingsSaveBackupRestoreResponses, SettingsValidateSftpData, SettingsValidateSftpResponses, SettingsValidateS3Data, SettingsValidateS3Responses, SettingsSaveAgentData, SettingsSaveAgentResponses, SettingsSaveEnforceTfaData, SettingsSaveEnforceTfaResponses, SettingsSaveAutoAssetTaggingData, SettingsSaveAutoAssetTaggingResponses, SettingsSaveInterActData, SettingsSaveInterActResponses, SettingsSaveFleetAiData, SettingsSaveFleetAiResponses, SettingsSaveCaseAutoCloseData, SettingsSaveCaseAutoCloseResponses, SettingsValidateIpRestrictionData, SettingsValidateIpRestrictionResponses, SettingsSaveIpRestrictionData, SettingsSaveIpRestrictionResponses, SettingsSaveLocardData, SettingsSaveLocardResponses, SettingsSaveRfc3161Data, SettingsSaveRfc3161Responses, SettingsValidateConsoleAddressData, SettingsValidateConsoleAddressResponses, SettingsSaveConsoleAddressData, SettingsSaveConsoleAddressResponses, SettingsSaveBannerData, SettingsSaveBannerResponses, SettingsSaveUninstallationPasswordProtectionData, SettingsSaveUninstallationPasswordProtectionResponses, SettingsGetAutoUpdateSettingsData, SettingsGetAutoUpdateSettingsResponses, SettingsSaveAutoUpdateSettingsData, SettingsSaveAutoUpdateSettingsResponses, SettingsGetAutoUpdateWindowsData, SettingsGetAutoUpdateWindowsResponses, SettingsSaveMitreAttackDatabaseSettingsData, SettingsSaveMitreAttackDatabaseSettingsResponses, SettingsGetMitreAttackDatabaseVersionsData, SettingsGetMitreAttackDatabaseVersionsResponses, SettingsGetMitreAttackDatabaseReleaseNotesData, SettingsGetMitreAttackDatabaseReleaseNotesResponses, SettingsSaveMandatoryCaseSelectionData, SettingsSaveMandatoryCaseSelectionResponses, SettingsSingleSignOnCallbackData, SettingsSingleSignOnCallbackResponses, SettingsGetSsoProvidersData, SettingsGetSsoProvidersResponses, SettingsCreateSsoProviderData, SettingsCreateSsoProviderResponses, SettingsDeleteSsoProviderData, SettingsDeleteSsoProviderResponses, SettingsUpdateSsoProviderData, SettingsUpdateSsoProviderResponses, AuthCheckAuthData, AuthCheckAuthResponses, AuthUpdateProfileData, AuthUpdateProfileResponses, AuthOneClickLoginData, AuthOneClickLoginResponses, AuthLoginData, AuthLoginResponses, AuthGenerateOneClickLoginUrlData, AuthGenerateOneClickLoginUrlResponses, AuthRenewOneClickLoginUrlData, AuthRenewOneClickLoginUrlResponses, AuthRegeneratePatTokenData, AuthRegeneratePatTokenResponses, AuthGetUserSessionHistoryData, AuthGetUserSessionHistoryResponses, UserManagementUsersGetManyData, UserManagementUsersGetManyResponses, UserCreateData, UserCreateResponses, UserDeleteData, UserDeleteResponses, UserManagementUsersGetData, UserManagementUsersGetResponses, UserPatchUserData, UserPatchUserResponses, UserUpdateUserData, UserUpdateUserResponses, UserManagementUsersPurgeAndDeleteData, UserManagementUsersPurgeAndDeleteResponses, UserResetTfaData, UserResetTfaResponses, UserChangePasswordData, UserChangePasswordResponses, UserResetUserPasswordData, UserResetUserPasswordResponses, UserCreateApiUserData, UserCreateApiUserResponses, UserRolesGetPrivilegesData, UserRolesGetPrivilegesResponses, UserRolesGetRolesData, UserRolesGetRolesResponses, UserRolesCreateRoleData, UserRolesCreateRoleResponses, UserRolesDeleteRoleData, UserRolesDeleteRoleResponses, UserRolesGetRoleData, UserRolesGetRoleResponses, UserRolesUpdateRoleData, UserRolesUpdateRoleResponses, UserGroupFilterGroupsData, UserGroupFilterGroupsResponses, UserGroupCreateGroupData, UserGroupCreateGroupResponses, UserGroupDeleteGroupData, UserGroupDeleteGroupResponses, UserGroupGetGroupData, UserGroupGetGroupResponses, UserGroupUpdateGroupData, UserGroupUpdateGroupResponses, UserPatTokensGetManyData, UserPatTokensGetManyResponses, UserPatTokensCreateData, UserPatTokensCreateResponses, UserPatTokensRotateData, UserPatTokensRotateResponses, UserPatTokensRotateErrors, UserPatTokensDeleteData, UserPatTokensDeleteResponses, UserPatTokensDeleteErrors, LicenseGetLicenseData, LicenseGetLicenseResponses, LicenseSetLicenseData, LicenseSetLicenseResponses, LicenseRefreshLicenseData, LicenseRefreshLicenseResponses, LicenseGetSubscriptionDetailsData, LicenseGetSubscriptionDetailsResponses, LicenseGetQuotaData, LicenseGetQuotaResponses, AcquisitionProfilesGetOneData, AcquisitionProfilesGetOneResponses, AcquisitionCreateData, AcquisitionCreateResponses, AcquisitionDeleteData, AcquisitionDeleteResponses, AcquisitionGetData, AcquisitionGetResponses, AcquisitionUpdateData, AcquisitionUpdateResponses, AcquisitionDeleteBulkData, AcquisitionDeleteBulkResponses, AcquisitionAssignEvidenceTaskData, AcquisitionAssignEvidenceTaskResponses, AcquisitionAssignEvidenceTask2Data, AcquisitionAssignEvidenceTask2Responses, CreateOffNetworkAcquisitionTaskFileData, CreateOffNetworkAcquisitionTaskFileResponses, AcquisitionAcquireImageData, AcquisitionAcquireImageResponses, AcquisitionUpdateScheduledEvidenceAcquisitionData, AcquisitionUpdateScheduledEvidenceAcquisitionResponses, AcquisitionUpdateScheduledImageAcquisitionData, AcquisitionUpdateScheduledImageAcquisitionResponses, AcquisitionValidateOsQueriesData, AcquisitionValidateOsQueriesResponses, AcquisitionLibraryDeviceV2ApiControllerListData, AcquisitionLibraryDeviceV2ApiControllerListResponses, AcquisitionLibraryDeviceV2ApiControllerListErrors, AcquisitionLibraryDeviceV2ApiControllerCreateData, AcquisitionLibraryDeviceV2ApiControllerCreateResponses, AcquisitionLibraryDeviceV2ApiControllerCreateErrors, AcquisitionLibraryDeviceV2ApiControllerBulkDeleteData, AcquisitionLibraryDeviceV2ApiControllerBulkDeleteResponses, AcquisitionLibraryDeviceV2ApiControllerBulkDeleteErrors, AcquisitionLibraryDeviceV2ApiControllerDeleteData, AcquisitionLibraryDeviceV2ApiControllerDeleteResponses, AcquisitionLibraryDeviceV2ApiControllerDeleteErrors, AcquisitionLibraryDeviceV2ApiControllerGetData, AcquisitionLibraryDeviceV2ApiControllerGetResponses, AcquisitionLibraryDeviceV2ApiControllerGetErrors, AcquisitionLibraryDeviceV2ApiControllerUpdateData, AcquisitionLibraryDeviceV2ApiControllerUpdateResponses, AcquisitionLibraryDeviceV2ApiControllerUpdateErrors, GitRepositoriesGetManyData, GitRepositoriesGetManyResponses, GitRepositoriesCreateData, GitRepositoriesCreateResponses, GitRepositoriesDeleteData, GitRepositoriesDeleteResponses, GitRepositoriesGetOneData, GitRepositoriesGetOneResponses, GitRepositoriesUpdateData, GitRepositoriesUpdateResponses, GitRepositoriesBulkDeleteData, GitRepositoriesBulkDeleteResponses, GitRepositoriesTriggerSyncData, GitRepositoriesTriggerSyncResponses, GitRepositoriesCancelSyncData, GitRepositoriesCancelSyncResponses, GitRepositoriesGetSyncLogsData, GitRepositoriesGetSyncLogsResponses, GitRepositoriesBrowseTreeData, GitRepositoriesBrowseTreeResponses, GitRepositoriesTestConnectionData, GitRepositoriesTestConnectionResponses, GitRepositoriesGetRepositoryBranchesData, GitRepositoriesGetRepositoryBranchesResponses, TaxiiFeedsGetManyData, TaxiiFeedsGetManyResponses, TaxiiFeedsCreateData, TaxiiFeedsCreateResponses, TaxiiFeedsGetIndicatorsData, TaxiiFeedsGetIndicatorsResponses, TaxiiFeedsGetIndicatorSummaryData, TaxiiFeedsGetIndicatorSummaryResponses, TaxiiFeedsDeleteData, TaxiiFeedsDeleteResponses, TaxiiFeedsGetOneData, TaxiiFeedsGetOneResponses, TaxiiFeedsUpdateData, TaxiiFeedsUpdateResponses, TaxiiFeedsGetSyncLogsData, TaxiiFeedsGetSyncLogsResponses, TaxiiFeedsDiscoverCollectionsData, TaxiiFeedsDiscoverCollectionsResponses, TaxiiFeedsTriggerSyncData, TaxiiFeedsTriggerSyncResponses, TaxiiFeedsCancelSyncData, TaxiiFeedsCancelSyncResponses, TaxiiFeedsUpdateStatusData, TaxiiFeedsUpdateStatusResponses, TaxiiFeedsBulkDeleteData, TaxiiFeedsBulkDeleteResponses, GetManyTriageRulesData, GetManyTriageRulesResponses, CreateTriageRuleData, CreateTriageRuleResponses, DeleteTriageRuleData, DeleteTriageRuleResponses, GetTriageRuleData, GetTriageRuleResponses, UpdateTriageRuleData, UpdateTriageRuleResponses, DeleteBulkTriageRulesData, DeleteBulkTriageRulesResponses, ValidateTriageRuleData, ValidateTriageRuleResponses, AssignTriageTaskData, AssignTriageTaskResponses, UpdateScheduledTriageTaskData, UpdateScheduledTriageTaskResponses, CreateOffNetworkTriageTaskFileData, CreateOffNetworkTriageTaskFileResponses, FilterTriageRuleTagsData, FilterTriageRuleTagsResponses, CreateTriageRuleTagData, CreateTriageRuleTagResponses, DeleteTriageRuleTagData, DeleteTriageRuleTagResponses, TriageLibraryV2ApiControllerListData, TriageLibraryV2ApiControllerListResponses, TriageLibraryV2ApiControllerListErrors, TriageLibraryV2ApiControllerCreateData, TriageLibraryV2ApiControllerCreateResponses, TriageLibraryV2ApiControllerCreateErrors, TriageLibraryV2ApiControllerBulkDeleteData, TriageLibraryV2ApiControllerBulkDeleteResponses, TriageLibraryV2ApiControllerBulkDeleteErrors, TriageLibraryV2ApiControllerValidateData, TriageLibraryV2ApiControllerValidateResponses, TriageLibraryV2ApiControllerValidateErrors, TriageLibraryV2ApiControllerDeleteData, TriageLibraryV2ApiControllerDeleteResponses, TriageLibraryV2ApiControllerDeleteErrors, TriageLibraryV2ApiControllerGetData, TriageLibraryV2ApiControllerGetResponses, TriageLibraryV2ApiControllerGetErrors, TriageLibraryV2ApiControllerUpdateData, TriageLibraryV2ApiControllerUpdateResponses, TriageLibraryV2ApiControllerUpdateErrors, TriageLibraryExportV2ApiControllerExportData, TriageLibraryExportV2ApiControllerExportResponses, TriageLibraryExportV2ApiControllerExportErrors, TriageLibraryExportV2ApiControllerDownloadData, TriageLibraryExportV2ApiControllerDownloadResponses, TriageLibraryExportV2ApiControllerDownloadErrors, EvidenceGetCaseReport0Data, EvidenceGetCaseReport0Responses, EvidenceGetCaseReport1Data, EvidenceGetCaseReport1Responses, EvidenceDownloadExternalEvidenceData, EvidenceDownloadExternalEvidenceResponses, EvidenceGetCaseReportFileInfoData, EvidenceGetCaseReportFileInfoResponses, EvidenceGetCasePpcFileData, EvidenceGetCasePpcFileResponses, EvidenceRepositoryCreateSmbData, EvidenceRepositoryCreateSmbResponses, EvidenceRepositoryUpdateSmbData, EvidenceRepositoryUpdateSmbResponses, EvidenceRepositoryCreateSftpData, EvidenceRepositoryCreateSftpResponses, EvidenceRepositoryUpdateSftpData, EvidenceRepositoryUpdateSftpResponses, EvidenceRepositoryCreateFtpsData, EvidenceRepositoryCreateFtpsResponses, EvidenceRepositoryUpdateFtpsData, EvidenceRepositoryUpdateFtpsResponses, EvidenceRepositoryCreateAzureStorageData, EvidenceRepositoryCreateAzureStorageResponses, EvidenceRepositoryUpdateAzureStorageData, EvidenceRepositoryUpdateAzureStorageResponses, EvidenceRepositoryCreateAmazonS3Data, EvidenceRepositoryCreateAmazonS3Responses, EvidenceRepositoryUpdateAmazonS3Data, EvidenceRepositoryUpdateAmazonS3Responses, EvidenceRepositoryCreateS3CompatibleData, EvidenceRepositoryCreateS3CompatibleResponses, EvidenceRepositoryUpdateS3CompatibleData, EvidenceRepositoryUpdateS3CompatibleResponses, EvidenceRepositoryDeleteData, EvidenceRepositoryDeleteResponses, EvidenceRepositoriesGetData, EvidenceRepositoriesGetResponses, EvidenceRepositoriesGetManyData, EvidenceRepositoriesGetManyResponses, EvidenceRepositoryValidateByIdData, EvidenceRepositoryValidateByIdResponses, EvidenceRepositoryValidateAmazonS3Data, EvidenceRepositoryValidateAmazonS3Responses, EvidenceRepositoryValidateS3CompatibleData, EvidenceRepositoryValidateS3CompatibleResponses, EvidenceRepositoryValidateAzureStorageData, EvidenceRepositoryValidateAzureStorageResponses, EvidenceRepositoryValidateFtpsRepositoryData, EvidenceRepositoryValidateFtpsRepositoryResponses, EvidenceRepositoryValidateSftpRepositoryData, EvidenceRepositoryValidateSftpRepositoryResponses, EvidenceRepositoryValidateGoogleCloudStorageData, EvidenceRepositoryValidateGoogleCloudStorageResponses, EvidenceRepositoryCreateGoogleCloudStorageData, EvidenceRepositoryCreateGoogleCloudStorageResponses, EvidenceRepositoryUpdateGoogleCloudStorageData, EvidenceRepositoryUpdateGoogleCloudStorageResponses, EvidenceRepositoryValidateBoxData, EvidenceRepositoryValidateBoxResponses, EvidenceRepositoryCreateBoxData, EvidenceRepositoryCreateBoxResponses, EvidenceRepositoryUpdateBoxData, EvidenceRepositoryUpdateBoxResponses, NotificationDeleteAllData, NotificationDeleteAllResponses, NotificationFilterData, NotificationFilterResponses, NotificationMarkAllAsReadData, NotificationMarkAllAsReadResponses, NotificationMarkAsReadData, NotificationMarkAsReadResponses, AuditLogsGetManyData, AuditLogsGetManyResponses, AuditLogExportData, AuditLogExportResponses, AuditLogsGetEventTypesData, AuditLogsGetEventTypesResponses, AuditLogsGetEventFilterData, AuditLogsGetEventFilterResponses, AuditLogsUpdateEventFilterData, AuditLogsUpdateEventFilterResponses, PolicyGetMatchStatsData, PolicyGetMatchStatsResponses, PolicyFilterData, PolicyFilterResponses, PolicyCreateData, PolicyCreateResponses, PolicyUpdatePrioritiesData, PolicyUpdatePrioritiesResponses, PolicyDeleteData, PolicyDeleteResponses, PolicyGetData, PolicyGetResponses, PolicyUpdateData, PolicyUpdateResponses, PolicyUpdateStatusData, PolicyUpdateStatusResponses, PolicyCheckNameExistsData, PolicyCheckNameExistsResponses, OrganizationsGetManyData, OrganizationsGetManyResponses, OrganizationCreateData, OrganizationCreateResponses, OrganizationCheckNameExistsData, OrganizationCheckNameExistsResponses, OrganizationDeleteData, OrganizationDeleteResponses, OrganizationGetData, OrganizationGetResponses, OrganizationUpdateData, OrganizationUpdateResponses, OrganizationRemoveUsersData, OrganizationRemoveUsersResponses, OrganizationAssignUsersData, OrganizationAssignUsersResponses, OrganizationRemoveGroupsData, OrganizationRemoveGroupsResponses, OrganizationAssignGroupsData, OrganizationAssignGroupsResponses, OrganizationGetOrganizationIdByTokenData, OrganizationGetOrganizationIdByTokenResponses, OrganizationUpdateShareableDeploymentStatusData, OrganizationUpdateShareableDeploymentStatusResponses, OrganizationUpdateDeploymentTokenData, OrganizationUpdateDeploymentTokenResponses, OrganizationRemoveTagsData, OrganizationRemoveTagsResponses, OrganizationAddTagsData, OrganizationAddTagsResponses, OrganizationGetUsersData, OrganizationGetUsersResponses, AutoAssetTagFilterData, AutoAssetTagFilterResponses, AutoAssetTagSaveAutoAssetTagData, AutoAssetTagSaveAutoAssetTagResponses, AutoAssetTagDeleteData, AutoAssetTagDeleteResponses, AutoAssetTagGetByIdData, AutoAssetTagGetByIdResponses, AutoAssetTagUpdateAutoAssetTagData, AutoAssetTagUpdateAutoAssetTagResponses, AutoAssetTagUpdateStatusData, AutoAssetTagUpdateStatusResponses, AutoAssetTagDeleteBulkData, AutoAssetTagDeleteBulkResponses, AutoAssetTagAssignAutoAssetTaggingTaskData, AutoAssetTagAssignAutoAssetTaggingTaskResponses, AutoAssetTagUpdateScheduledAatTaskData, AutoAssetTagUpdateScheduledAatTaskResponses, CaseActivityV2ApiControllerFilterGlobalActivitiesData, CaseActivityV2ApiControllerFilterGlobalActivitiesResponses, CaseActivityV2ApiControllerFilterGlobalActivitiesErrors, CaseActivityV2ApiControllerFilterCaseActivitiesData, CaseActivityV2ApiControllerFilterCaseActivitiesResponses, CaseActivityV2ApiControllerFilterCaseActivitiesErrors, CaseExportV2ApiControllerExportCasesData, CaseExportV2ApiControllerExportCasesResponses, CaseExportV2ApiControllerExportCasesErrors, CaseBulkActionV2ApiControllerCloseData, CaseBulkActionV2ApiControllerCloseResponses, CaseBulkActionV2ApiControllerCloseErrors, CaseBulkActionV2ApiControllerArchiveData, CaseBulkActionV2ApiControllerArchiveResponses, CaseBulkActionV2ApiControllerArchiveErrors, CaseAssetV2ApiControllerFilterAssetsData, CaseAssetV2ApiControllerFilterAssetsResponses, CaseAssetV2ApiControllerFilterAssetsErrors, CaseUserV2ApiControllerFilterUsersData, CaseUserV2ApiControllerFilterUsersResponses, CaseUserV2ApiControllerFilterUsersErrors, CaseTaskV2ApiControllerFilterTasksData, CaseTaskV2ApiControllerFilterTasksResponses, CaseTaskV2ApiControllerFilterTasksErrors, CaseNoteV2ApiControllerFilterNotesData, CaseNoteV2ApiControllerFilterNotesResponses, CaseNoteV2ApiControllerFilterNotesErrors, CaseNoteV2ApiControllerCreateNoteData, CaseNoteV2ApiControllerCreateNoteResponses, CaseNoteV2ApiControllerCreateNoteErrors, CaseNoteV2ApiControllerDeleteNoteData, CaseNoteV2ApiControllerDeleteNoteResponses, CaseNoteV2ApiControllerDeleteNoteErrors, CaseNoteV2ApiControllerUpdateNoteData, CaseNoteV2ApiControllerUpdateNoteResponses, CaseNoteV2ApiControllerUpdateNoteErrors, CaseTaskAssignmentV2ApiControllerFilterTaskAssignmentsData, CaseTaskAssignmentV2ApiControllerFilterTaskAssignmentsResponses, CaseTaskAssignmentV2ApiControllerFilterTaskAssignmentsErrors, CaseTaskAssignmentV2ApiControllerImportTaskAssignmentsData, CaseTaskAssignmentV2ApiControllerImportTaskAssignmentsResponses, CaseTaskAssignmentV2ApiControllerImportTaskAssignmentsErrors, CaseTaskAssignmentV2ApiControllerRemoveTaskAssignmentData, CaseTaskAssignmentV2ApiControllerRemoveTaskAssignmentResponses, CaseTaskAssignmentV2ApiControllerRemoveTaskAssignmentErrors, CaseActionV2ApiControllerCloseData, CaseActionV2ApiControllerCloseResponses, CaseActionV2ApiControllerCloseErrors, CaseActionV2ApiControllerReopenData, CaseActionV2ApiControllerReopenResponses, CaseActionV2ApiControllerReopenErrors, CaseActionV2ApiControllerArchiveData, CaseActionV2ApiControllerArchiveResponses, CaseActionV2ApiControllerArchiveErrors, CaseActionV2ApiControllerRemoveAssetsData, CaseActionV2ApiControllerRemoveAssetsResponses, CaseActionV2ApiControllerRemoveAssetsErrors, CaseV2ApiControllerFilterCasesData, CaseV2ApiControllerFilterCasesResponses, CaseV2ApiControllerFilterCasesErrors, CaseV2ApiControllerCreateCaseData, CaseV2ApiControllerCreateCaseResponses, CaseV2ApiControllerCreateCaseErrors, CaseV2ApiControllerGetCaseByIdOrNameData, CaseV2ApiControllerGetCaseByIdOrNameResponses, CaseV2ApiControllerGetCaseByIdOrNameErrors, CaseV2ApiControllerUpdateCaseData, CaseV2ApiControllerUpdateCaseResponses, CaseV2ApiControllerUpdateCaseErrors, CasesCheckNameData, CasesCheckNameResponses, CaseExportCasesData, CaseExportCasesResponses, CaseExportCaseNotesData, CaseExportCaseNotesResponses, CaseExportCaseEndpoints0Data, CaseExportCaseEndpoints0Responses, CaseExportCaseEndpoints1Data, CaseExportCaseEndpoints1Responses, CasesDownloadAssetsExpressionExportData, CasesDownloadAssetsExpressionExportResponses, CasesCreateAssetsExpressionExportData, CasesCreateAssetsExpressionExportResponses, CasesDownloadAssetsExpressionExport2Data, CasesDownloadAssetsExpressionExport2Responses, CasesCreateAssetsExpressionExport2Data, CasesCreateAssetsExpressionExport2Responses, CasesGetData, CasesGetResponses, CaseUpdateCaseData, CaseUpdateCaseResponses, CasesGetManyData, CasesGetManyResponses, CasesCreateData, CasesCreateResponses, CasesCloseData, CasesCloseResponses, CaseReopenCaseData, CaseReopenCaseResponses, CaseArchiveCaseData, CaseArchiveCaseResponses, CasesCloseByFilterData, CasesCloseByFilterResponses, CasesArchiveByFilterData, CasesArchiveByFilterResponses, CasesChangeOwnerData, CasesChangeOwnerResponses, CasesGetTasksData, CasesGetTasksResponses, CaseFilterTaskAssignmentsData, CaseFilterTaskAssignmentsResponses, CasesGetEndpointsData, CasesGetEndpointsResponses, CasesGetEndpoints2Data, CasesGetEndpoints2Responses, CasesGetAssetsByFilterExpressionData, CasesGetAssetsByFilterExpressionResponses, CasesGetAssetsByFilterExpression2Data, CasesGetAssetsByFilterExpression2Responses, CasesGetActivitiesData, CasesGetActivitiesResponses, CaseExportActivitiesData, CaseExportActivitiesResponses, CaseAddCaseNoteData, CaseAddCaseNoteResponses, CaseDeleteCaseNoteData, CaseDeleteCaseNoteResponses, CaseEditCaseNoteData, CaseEditCaseNoteResponses, CaseImportTaskAssignmentData, CaseImportTaskAssignmentResponses, CasesGetUsersData, CasesGetUsersResponses, CaseRemoveEndpointsFromCaseByFilter0Data, CaseRemoveEndpointsFromCaseByFilter0Responses, CaseRemoveEndpointsFromCaseByFilter1Data, CaseRemoveEndpointsFromCaseByFilter1Responses, CaseRemoveTaskAssignmentFromCaseData, CaseRemoveTaskAssignmentFromCaseResponses, CaseTagsFilterData, CaseTagsFilterResponses, CaseTagsCreateData, CaseTagsCreateResponses, CaseTagsDeleteData, CaseTagsDeleteResponses, CaseCategoriesFilterData, CaseCategoriesFilterResponses, CaseCategoriesCreateData, CaseCategoriesCreateResponses, CaseCategoriesDeleteData, CaseCategoriesDeleteResponses, GetCaseCloseReportHistoryData, GetCaseCloseReportHistoryResponses, GetCaseCloseReportData, GetCaseCloseReportResponses, UpdateCaseCloseReportData, UpdateCaseCloseReportResponses, GetCaseCloseReport2Data, GetCaseCloseReport2Responses, UpdateCaseCloseReport2Data, UpdateCaseCloseReport2Responses, ExportClosureReportFindingsData, ExportClosureReportFindingsResponses, ExportClosureReportFlagsData, ExportClosureReportFlagsResponses, ExportClosureReportAssetsData, ExportClosureReportAssetsResponses, InteractCommandsGetManyData, InteractCommandsGetManyResponses, InteractCommandsDownloadResultFileData, InteractCommandsDownloadResultFileResponses, InteractShellAssignTaskData, InteractShellAssignTaskResponses, InteractGetInterActShellReportData, InteractGetInterActShellReportResponses, InteractSessionExecuteCommandData, InteractSessionExecuteCommandResponses, InteractSessionExecuteAsyncCommandData, InteractSessionExecuteAsyncCommandResponses, InteractSessionInterruptCommandData, InteractSessionInterruptCommandResponses, InteractSessionCloseData, InteractSessionCloseResponses, InteractSessionGetCommandMessageData, InteractSessionGetCommandMessageResponses, InteractLibraryFilterData, InteractLibraryFilterResponses, InteractLibraryCheckLibraryFileExistsData, InteractLibraryCheckLibraryFileExistsResponses, InteractLibraryUploadData, InteractLibraryUploadResponses, InteractLibraryDownloadData, InteractLibraryDownloadResponses, InteractLibraryDeleteBulkData, InteractLibraryDeleteBulkResponses, InteractLibraryDeleteData, InteractLibraryDeleteResponses, InteractCommandSnippetsGetManyData, InteractCommandSnippetsGetManyResponses, InteractCommandSnippetsCreateData, InteractCommandSnippetsCreateResponses, InteractCommandSnippetsDeleteData, InteractCommandSnippetsDeleteResponses, InteractCommandSnippetsGetOneData, InteractCommandSnippetsGetOneResponses, InteractCommandSnippetsUpdateData, InteractCommandSnippetsUpdateResponses, InteractCommandSnippetsBulkDeleteData, InteractCommandSnippetsBulkDeleteResponses, InteractCommandSnippetTagsGetManyData, InteractCommandSnippetTagsGetManyResponses, InteractCommandSnippetTagsCreateData, InteractCommandSnippetTagsCreateResponses, InteractCommandSnippetTagsDeleteData, InteractCommandSnippetTagsDeleteResponses, InteractCommandSnippetTagsUpdateData, InteractCommandSnippetTagsUpdateResponses, InteractLibrarySnippetV2ApiControllerListData, InteractLibrarySnippetV2ApiControllerListResponses, InteractLibrarySnippetV2ApiControllerListErrors, InteractLibrarySnippetV2ApiControllerCreateData, InteractLibrarySnippetV2ApiControllerCreateResponses, InteractLibrarySnippetV2ApiControllerCreateErrors, InteractLibrarySnippetV2ApiControllerBulkDeleteData, InteractLibrarySnippetV2ApiControllerBulkDeleteResponses, InteractLibrarySnippetV2ApiControllerBulkDeleteErrors, InteractLibrarySnippetV2ApiControllerDeleteData, InteractLibrarySnippetV2ApiControllerDeleteResponses, InteractLibrarySnippetV2ApiControllerDeleteErrors, InteractLibrarySnippetV2ApiControllerGetData, InteractLibrarySnippetV2ApiControllerGetResponses, InteractLibrarySnippetV2ApiControllerGetErrors, InteractLibrarySnippetV2ApiControllerUpdateData, InteractLibrarySnippetV2ApiControllerUpdateResponses, InteractLibrarySnippetV2ApiControllerUpdateErrors, InteractLibraryTagV2ApiControllerListData, InteractLibraryTagV2ApiControllerListResponses, InteractLibraryTagV2ApiControllerListErrors, InteractLibraryTagV2ApiControllerCreateData, InteractLibraryTagV2ApiControllerCreateResponses, InteractLibraryTagV2ApiControllerCreateErrors, InteractLibraryTagV2ApiControllerBulkDeleteData, InteractLibraryTagV2ApiControllerBulkDeleteResponses, InteractLibraryTagV2ApiControllerBulkDeleteErrors, InteractLibraryTagV2ApiControllerDeleteData, InteractLibraryTagV2ApiControllerDeleteResponses, InteractLibraryTagV2ApiControllerDeleteErrors, InteractLibraryTagV2ApiControllerGetData, InteractLibraryTagV2ApiControllerGetResponses, InteractLibraryTagV2ApiControllerGetErrors, InteractLibraryTagV2ApiControllerUpdateData, InteractLibraryTagV2ApiControllerUpdateResponses, InteractLibraryTagV2ApiControllerUpdateErrors, InteractLibraryFileV2ApiControllerListData, InteractLibraryFileV2ApiControllerListResponses, InteractLibraryFileV2ApiControllerListErrors, InteractLibraryFileV2ApiControllerUploadData, InteractLibraryFileV2ApiControllerUploadResponses, InteractLibraryFileV2ApiControllerUploadErrors, InteractLibraryFileV2ApiControllerBulkDeleteData, InteractLibraryFileV2ApiControllerBulkDeleteResponses, InteractLibraryFileV2ApiControllerBulkDeleteErrors, InteractLibraryFileV2ApiControllerDeleteData, InteractLibraryFileV2ApiControllerDeleteResponses, InteractLibraryFileV2ApiControllerDeleteErrors, InteractLibraryFileV2ApiControllerDownloadData, InteractLibraryFileV2ApiControllerDownloadResponses, InteractLibraryFileV2ApiControllerDownloadErrors, InteractCommandV2ApiControllerListData, InteractCommandV2ApiControllerListResponses, InteractCommandV2ApiControllerListErrors, MultipartUploadInitializeHeadData, MultipartUploadInitializeHeadResponses, MultipartUploadInitializeData, MultipartUploadInitializeResponses, MultipartUploadFinalizeData, MultipartUploadFinalizeResponses, MultipartUploadIsReadyData, MultipartUploadIsReadyResponses, MultipartUploadDeleteFilePartsData, MultipartUploadDeleteFilePartsResponses, MultipartUploadUploadPartData, MultipartUploadUploadPartResponses, BaselineCompareData, BaselineCompareResponses, BaselineAcquireData, BaselineAcquireResponses, BaselineGetComparisonReportData, BaselineGetComparisonReportResponses, BaselineGetComparisonReportByVendorDeviceIdData, BaselineGetComparisonReportByVendorDeviceIdResponses, ApiTokensGetManyData, ApiTokensGetManyResponses, ApiTokensCreateData, ApiTokensCreateResponses, ApiTokensGetCurrentData, ApiTokensGetCurrentResponses, ApiTokensDeleteData, ApiTokensDeleteResponses, ApiTokensGetOneData, ApiTokensGetOneResponses, ApiTokensUpdateData, ApiTokensUpdateResponses, ApiTokensBulkDeleteData, ApiTokensBulkDeleteResponses, SystemApiTokensGetManyData, SystemApiTokensGetManyResponses, SystemApiTokensCreateData, SystemApiTokensCreateResponses, SystemApiTokensDeleteData, SystemApiTokensDeleteResponses, SystemApiTokensGetOneData, SystemApiTokensGetOneResponses, SystemApiTokensUpdateData, SystemApiTokensUpdateResponses, CloudAccountsFilterData, CloudAccountsFilterResponses, CloudAccountsCreateCloudAccountData, CloudAccountsCreateCloudAccountResponses, CloudAccountsGetConfigData, CloudAccountsGetConfigResponses, CloudAccountsExportData, CloudAccountsExportResponses, CloudAccountsDeleteData, CloudAccountsDeleteResponses, CloudAccountsGetCloudAccountByIdData, CloudAccountsGetCloudAccountByIdResponses, CloudAccountsUpdateCloudAccountData, CloudAccountsUpdateCloudAccountResponses, CloudAccountsSyncCloudAccountData, CloudAccountsSyncCloudAccountResponses, CloudAccountsSyncAllCloudAccountData, CloudAccountsSyncAllCloudAccountResponses, FlagsLibraryV2ApiControllerListData, FlagsLibraryV2ApiControllerListResponses, FlagsLibraryV2ApiControllerListErrors, FlagsLibraryV2ApiControllerCreateData, FlagsLibraryV2ApiControllerCreateResponses, FlagsLibraryV2ApiControllerCreateErrors, FlagsLibraryV2ApiControllerDeleteData, FlagsLibraryV2ApiControllerDeleteResponses, FlagsLibraryV2ApiControllerDeleteErrors, FlagsLibraryV2ApiControllerGetData, FlagsLibraryV2ApiControllerGetResponses, FlagsLibraryV2ApiControllerGetErrors, FlagsLibraryV2ApiControllerUpdateData, FlagsLibraryV2ApiControllerUpdateResponses, FlagsLibraryV2ApiControllerUpdateErrors, InvestigationEvidenceFlagV2ApiControllerFlagEvidenceData, InvestigationEvidenceFlagV2ApiControllerFlagEvidenceResponses, InvestigationEvidenceFlagV2ApiControllerFlagEvidenceErrors, InvestigationEvidenceFlagV2ApiControllerUnflagEvidenceData, InvestigationEvidenceFlagV2ApiControllerUnflagEvidenceResponses, InvestigationEvidenceFlagV2ApiControllerUnflagEvidenceErrors, InvestigationSqlV2ApiControllerGetSchemaData, InvestigationSqlV2ApiControllerGetSchemaResponses, InvestigationSqlV2ApiControllerGetSchemaErrors, InvestigationSqlV2ApiControllerExecuteSqlQueryData, InvestigationSqlV2ApiControllerExecuteSqlQueryResponses, InvestigationSqlV2ApiControllerExecuteSqlQueryErrors, InvestigationGetInvestigationByIdData, InvestigationGetInvestigationByIdResponses, InvestigationUpdateInvestigationData, InvestigationUpdateInvestigationResponses, InvestigationGetInvestigationMigrationsSummaryData, InvestigationGetInvestigationMigrationsSummaryResponses, InvestigationGetEvidenceDataStructureData, InvestigationGetEvidenceDataStructureResponses, InvestigationGetEvidenceDataData, InvestigationGetEvidenceDataResponses, InvestigationGetEvidenceRelationDataData, InvestigationGetEvidenceRelationDataResponses, InvestigationExportFlagsData, InvestigationExportFlagsResponses, InvestigationCreateExportRequestForFlagsData, InvestigationCreateExportRequestForFlagsResponses, InvestigationExportEvidenceDataData, InvestigationExportEvidenceDataResponses, InvestigationCreateExportRequestForSectionDataData, InvestigationCreateExportRequestForSectionDataResponses, InvestigationGetAssetsByInvestigationIdData, InvestigationGetAssetsByInvestigationIdResponses, InvestigationGetSectionsByEndpointsData, InvestigationGetSectionsByEndpointsResponses, InvestigationGetSummaryData, InvestigationGetSummaryResponses, InvestigationGetFindingDataStructureData, InvestigationGetFindingDataStructureResponses, InvestigationFilterEndpointFindingsData, InvestigationFilterEndpointFindingsResponses, InvestigationGetFindingsSummaryData, InvestigationGetFindingsSummaryResponses, InvestigationGetMitreMatchesData, InvestigationGetMitreMatchesResponses, InvestigationGlobalSearchData, InvestigationGlobalSearchResponses, InvestigationEvidenceCountsData, InvestigationEvidenceCountsResponses, InvestigationRemoveEvidenceFlagData, InvestigationRemoveEvidenceFlagResponses, InvestigationFlagEvidenceData, InvestigationFlagEvidenceResponses, InvestigationUpdateEvidenceNoteData, InvestigationUpdateEvidenceNoteResponses, InvestigationCreateInvestigationEvidenceData, InvestigationCreateInvestigationEvidenceResponses, InvestigationUpdateInvestigationEvidenceData, InvestigationUpdateInvestigationEvidenceResponses, InvestigationImportDataToInvestigationEvidenceData, InvestigationImportDataToInvestigationEvidenceResponses, InvestigationGetAllImportsData, InvestigationGetAllImportsResponses, InvestigationDeleteImportData, InvestigationDeleteImportResponses, InvestigationGetImportErrorsData, InvestigationGetImportErrorsResponses, InvestigationImportPstEvidencesToInvestigationData, InvestigationImportPstEvidencesToInvestigationResponses, InvestigationRetryImportTaskAssignmentData, InvestigationRetryImportTaskAssignmentResponses, InvestigationMarkInvestigationEvidenceAsFindingData, InvestigationMarkInvestigationEvidenceAsFindingResponses, InvestigationUpdateInvestigationFindingData, InvestigationUpdateInvestigationFindingResponses, InvestigationGetInvestigationTaskAssignmentForImportedEvidenceData, InvestigationGetInvestigationTaskAssignmentForImportedEvidenceResponses, InvestigationGetInvestigationTaskAssignmentDataImportProgressData, InvestigationGetInvestigationTaskAssignmentDataImportProgressResponses, InvestigationGetInvestigationHubDataImportProgressData, InvestigationGetInvestigationHubDataImportProgressResponses, InvestigationExportFindingsDataData, InvestigationExportFindingsDataResponses, InvestigationCreateExportRequestForFindingsData, InvestigationCreateExportRequestForFindingsResponses, InvestigationImportTornadoEvidenceToInvestigation0Data, InvestigationImportTornadoEvidenceToInvestigation0Responses, InvestigationImportTornadoEvidenceToInvestigation1Data, InvestigationImportTornadoEvidenceToInvestigation1Responses, InvestigationExclusionAddFindingExclusionRuleData, InvestigationExclusionAddFindingExclusionRuleResponses, InvestigationExclusionBulkAddFindingExclusionRulesData, InvestigationExclusionBulkAddFindingExclusionRulesResponses, InvestigationExclusionGetFindingExclusionRulesMatchesData, InvestigationExclusionGetFindingExclusionRulesMatchesResponses, InvestigationExclusionDeleteFindingExclusionRuleData, InvestigationExclusionDeleteFindingExclusionRuleResponses, InvestigationExclusionFilterFindingExclusionRulesData, InvestigationExclusionFilterFindingExclusionRulesResponses, InvestigationExclusionGetExclusionReasonsData, InvestigationExclusionGetExclusionReasonsResponses, InvestigationExclusionApplyFindingExclusionRuleForOrganizationData, InvestigationExclusionApplyFindingExclusionRuleForOrganizationResponses, InvestigationExclusionApplyFindingExclusionRuleForAllAssetsData, InvestigationExclusionApplyFindingExclusionRuleForAllAssetsResponses, InvestigationExclusionDeleteIndividualFindingExclusionRuleData, InvestigationExclusionDeleteIndividualFindingExclusionRuleResponses, InvestigationReportExportReportsData, InvestigationReportExportReportsResponses, InvestigationReportFilterReportsData, InvestigationReportFilterReportsResponses, InvestigationReportCreateReportData, InvestigationReportCreateReportResponses, InvestigationReportDeleteReportData, InvestigationReportDeleteReportResponses, InvestigationReportGetReportData, InvestigationReportGetReportResponses, InvestigationReportUpdateReportData, InvestigationReportUpdateReportResponses, InvestigationReportGeneratePdfReportData, InvestigationReportGeneratePdfReportResponses, InvestigationReportDownloadPdfReportData, InvestigationReportDownloadPdfReportResponses, InvestigationFlagFilterFlagsData, InvestigationFlagFilterFlagsResponses, InvestigationFlagCreateFlagData, InvestigationFlagCreateFlagResponses, InvestigationFlagDeleteFlagData, InvestigationFlagDeleteFlagResponses, InvestigationFlagUpdateFlagData, InvestigationFlagUpdateFlagResponses, InvestigationActivityFilterData, InvestigationActivityFilterResponses, InvestigationActivityMarkAsReadData, InvestigationActivityMarkAsReadResponses, InvestigationCommentFilterCommentsData, InvestigationCommentFilterCommentsResponses, InvestigationCommentCommentEvidenceData, InvestigationCommentCommentEvidenceResponses, InvestigationCommentDeleteCommentData, InvestigationCommentDeleteCommentResponses, InvestigationAdvancedFilterGetFiltersData, InvestigationAdvancedFilterGetFiltersResponses, InvestigationAdvancedFilterCreateFilterData, InvestigationAdvancedFilterCreateFilterResponses, InvestigationAdvancedFilterDeleteFilterData, InvestigationAdvancedFilterDeleteFilterResponses, InvestigationAdvancedFilterUpdateFilterData, InvestigationAdvancedFilterUpdateFilterResponses, InvestigationTimelineGetTimelineEventCountByAdvancedFilterData, InvestigationTimelineGetTimelineEventCountByAdvancedFilterResponses, InvestigationTimelineFilterTimelineEventsData, InvestigationTimelineFilterTimelineEventsResponses, InvestigationTimelineGetTimelineStructureData, InvestigationTimelineGetTimelineStructureResponses, InvestigationTimelineGetTotalTimelineCountData, InvestigationTimelineGetTotalTimelineCountResponses, InvestigationTimelineExportTimelineDataData, InvestigationTimelineExportTimelineDataResponses, InvestigationTimelineCreateExportRequestForTimelineData, InvestigationTimelineCreateExportRequestForTimelineResponses, InvestigationTaskExecutionLogGetTaskExecutionLogsData, InvestigationTaskExecutionLogGetTaskExecutionLogsResponses, InvestigationTaskExecutionLogFilterTaskExecutionLogsData, InvestigationTaskExecutionLogFilterTaskExecutionLogsResponses, RelayServerUpdateTagsData, RelayServerUpdateTagsResponses, RelayServerUpdateLabelData, RelayServerUpdateLabelResponses, RelayServerGetByIdData, RelayServerGetByIdResponses, RelayServerFilterData, RelayServerFilterResponses, RelayServerAssignRebootTaskData, RelayServerAssignRebootTaskResponses, RelayServerAssignRetrieveLogTaskData, RelayServerAssignRetrieveLogTaskResponses, RelayServerAssignFixUpdateRequiredIssueTaskData, RelayServerAssignFixUpdateRequiredIssueTaskResponses, RelayServerRemoveRelayServerData, RelayServerRemoveRelayServerResponses, RelayServerUpdateAddressData, RelayServerUpdateAddressResponses, RelayProRemoveData, RelayProRemoveResponses, RelayProUpdateRelayUrlData, RelayProUpdateRelayUrlResponses, RecentActivitiesGetManyData, RecentActivitiesGetManyResponses, RecentActivitiesCreateData, RecentActivitiesCreateResponses, ProcessorGetAllProcessorsData, ProcessorGetAllProcessorsResponses, ProcessorGetProcessorsByAssetTypeData, ProcessorGetProcessorsByAssetTypeResponses, ProcessorGetProcessorTypeByAssetTypeData, ProcessorGetProcessorTypeByAssetTypeResponses, AssetActionV2ApiControllerRebootData, AssetActionV2ApiControllerRebootResponses, AssetActionV2ApiControllerRebootErrors, AssetActionV2ApiControllerShutdownData, AssetActionV2ApiControllerShutdownResponses, AssetActionV2ApiControllerShutdownErrors, AssetActionV2ApiControllerIsolateData, AssetActionV2ApiControllerIsolateResponses, AssetActionV2ApiControllerIsolateErrors, AssetActionV2ApiControllerUnisolateData, AssetActionV2ApiControllerUnisolateResponses, AssetActionV2ApiControllerUnisolateErrors, AssetActionV2ApiControllerRetrieveLogsData, AssetActionV2ApiControllerRetrieveLogsResponses, AssetActionV2ApiControllerRetrieveLogsErrors, AssetActionV2ApiControllerVersionUpdateData, AssetActionV2ApiControllerVersionUpdateResponses, AssetActionV2ApiControllerVersionUpdateErrors, AssetActionV2ApiControllerEnableMaintenanceData, AssetActionV2ApiControllerEnableMaintenanceResponses, AssetActionV2ApiControllerEnableMaintenanceErrors, AssetActionV2ApiControllerDisableMaintenanceData, AssetActionV2ApiControllerDisableMaintenanceResponses, AssetActionV2ApiControllerDisableMaintenanceErrors, AssetActionV2ApiControllerImportPpcToExistingAssetData, AssetActionV2ApiControllerImportPpcToExistingAssetResponses, AssetActionV2ApiControllerImportPpcToExistingAssetErrors, AssetBulkActionV2ApiControllerRebootData, AssetBulkActionV2ApiControllerRebootResponses, AssetBulkActionV2ApiControllerRebootErrors, AssetBulkActionV2ApiControllerShutdownData, AssetBulkActionV2ApiControllerShutdownResponses, AssetBulkActionV2ApiControllerShutdownErrors, AssetBulkActionV2ApiControllerIsolateData, AssetBulkActionV2ApiControllerIsolateResponses, AssetBulkActionV2ApiControllerIsolateErrors, AssetBulkActionV2ApiControllerUnisolateData, AssetBulkActionV2ApiControllerUnisolateResponses, AssetBulkActionV2ApiControllerUnisolateErrors, AssetBulkActionV2ApiControllerRetrieveLogsData, AssetBulkActionV2ApiControllerRetrieveLogsResponses, AssetBulkActionV2ApiControllerRetrieveLogsErrors, AssetBulkActionV2ApiControllerVersionUpdateData, AssetBulkActionV2ApiControllerVersionUpdateResponses, AssetBulkActionV2ApiControllerVersionUpdateErrors, AssetBulkActionV2ApiControllerEnableMaintenanceData, AssetBulkActionV2ApiControllerEnableMaintenanceResponses, AssetBulkActionV2ApiControllerEnableMaintenanceErrors, AssetBulkActionV2ApiControllerDisableMaintenanceData, AssetBulkActionV2ApiControllerDisableMaintenanceResponses, AssetBulkActionV2ApiControllerDisableMaintenanceErrors, AssetBulkMetadataV2ApiControllerAddTagsData, AssetBulkMetadataV2ApiControllerAddTagsResponses, AssetBulkMetadataV2ApiControllerAddTagsErrors, AssetBulkMetadataV2ApiControllerRemoveTagsData, AssetBulkMetadataV2ApiControllerRemoveTagsResponses, AssetBulkMetadataV2ApiControllerRemoveTagsErrors, AssetBulkMetadataV2ApiControllerSetUpdateExclusionData, AssetBulkMetadataV2ApiControllerSetUpdateExclusionResponses, AssetBulkMetadataV2ApiControllerSetUpdateExclusionErrors, AssetBulkMetadataV2ApiControllerSetConnectionRouteData, AssetBulkMetadataV2ApiControllerSetConnectionRouteResponses, AssetBulkMetadataV2ApiControllerSetConnectionRouteErrors, AssetBulkMetadataV2ApiControllerSetMitreDatabaseVersionData, AssetBulkMetadataV2ApiControllerSetMitreDatabaseVersionResponses, AssetBulkMetadataV2ApiControllerSetMitreDatabaseVersionErrors, AssetBulkMetadataV2ApiControllerDeleteAssetsData, AssetBulkMetadataV2ApiControllerDeleteAssetsResponses, AssetBulkMetadataV2ApiControllerDeleteAssetsErrors, AssetBulkMetadataV2ApiControllerImportOffNetworkPpcData, AssetBulkMetadataV2ApiControllerImportOffNetworkPpcResponses, AssetBulkMetadataV2ApiControllerImportOffNetworkPpcErrors, AssetBulkTriageV2ApiControllerRunTriageData, AssetBulkTriageV2ApiControllerRunTriageResponses, AssetBulkTriageV2ApiControllerRunTriageErrors, AssetInteractMessageV2ApiControllerListForAssetData, AssetInteractMessageV2ApiControllerListForAssetResponses, AssetInteractMessageV2ApiControllerListForAssetErrors, AssetInteractV2ApiControllerRunCommandData, AssetInteractV2ApiControllerRunCommandResponses, AssetInteractV2ApiControllerRunCommandErrors, AssetInteractV2ApiControllerCancelCommandData, AssetInteractV2ApiControllerCancelCommandResponses, AssetInteractV2ApiControllerCancelCommandErrors, AssetInteractV2ApiControllerCloseSessionData, AssetInteractV2ApiControllerCloseSessionResponses, AssetInteractV2ApiControllerCloseSessionErrors, AssetV2ApiControllerGetStatsData, AssetV2ApiControllerGetStatsResponses, AssetV2ApiControllerGetStatsErrors, AssetV2ApiControllerExportAssetsData, AssetV2ApiControllerExportAssetsResponses, AssetV2ApiControllerExportAssetsErrors, AssetV2ApiControllerFilterAssetsData, AssetV2ApiControllerFilterAssetsResponses, AssetV2ApiControllerFilterAssetsErrors, AssetV2ApiControllerDeleteAssetData, AssetV2ApiControllerDeleteAssetResponses, AssetV2ApiControllerDeleteAssetErrors, AssetV2ApiControllerGetAssetData, AssetV2ApiControllerGetAssetResponses, AssetV2ApiControllerGetAssetErrors, AssetV2ApiControllerReplaceTagsData, AssetV2ApiControllerReplaceTagsResponses, AssetV2ApiControllerReplaceTagsErrors, AssetV2ApiControllerUpdateLabelData, AssetV2ApiControllerUpdateLabelResponses, AssetV2ApiControllerUpdateLabelErrors, AssetTriageV2ApiControllerFilterTriageTasksData, AssetTriageV2ApiControllerFilterTriageTasksResponses, AssetTriageV2ApiControllerFilterTriageTasksErrors, AssetTriageV2ApiControllerRunTriageData, AssetTriageV2ApiControllerRunTriageResponses, AssetTriageV2ApiControllerRunTriageErrors, AssetTriageV2ApiControllerCancelTriageData, AssetTriageV2ApiControllerCancelTriageResponses, AssetTriageV2ApiControllerCancelTriageErrors, AssetTriageV2ApiControllerDeleteTriageAssignmentData, AssetTriageV2ApiControllerDeleteTriageAssignmentResponses, AssetTriageV2ApiControllerDeleteTriageAssignmentErrors, AssetAcquisitionV2ApiControllerAcquireData, AssetAcquisitionV2ApiControllerAcquireResponses, AssetAcquisitionV2ApiControllerAcquireErrors, AssetAcquisitionV2ApiControllerCancelAcquisitionData, AssetAcquisitionV2ApiControllerCancelAcquisitionResponses, AssetAcquisitionV2ApiControllerCancelAcquisitionErrors, AssetAcquisitionV2ApiControllerDeleteAcquisitionAssignmentData, AssetAcquisitionV2ApiControllerDeleteAcquisitionAssignmentResponses, AssetAcquisitionV2ApiControllerDeleteAcquisitionAssignmentErrors, AssetAcquisitionV2ApiControllerFilterAcquisitionTasksData, AssetAcquisitionV2ApiControllerFilterAcquisitionTasksResponses, AssetAcquisitionV2ApiControllerFilterAcquisitionTasksErrors, AssetInteractMessageV2ApiControllerListSessionsForAssetData, AssetInteractMessageV2ApiControllerListSessionsForAssetResponses, AssetInteractMessageV2ApiControllerListSessionsForAssetErrors, AssetInteractMessageV2ApiControllerGetMessageData, AssetInteractMessageV2ApiControllerGetMessageResponses, AssetInteractMessageV2ApiControllerGetMessageErrors, AssetInteractMessageV2ApiControllerDownloadMessageOutputData, AssetInteractMessageV2ApiControllerDownloadMessageOutputResponses, AssetInteractMessageV2ApiControllerDownloadMessageOutputErrors, AssetInteractMessageV2ApiControllerGetSessionReportData, AssetInteractMessageV2ApiControllerGetSessionReportResponses, AssetInteractMessageV2ApiControllerGetSessionReportErrors, WebhookFilterParsersData, WebhookFilterParsersResponses, WebhookFilterData, WebhookFilterResponses, WebhookCreateData, WebhookCreateResponses, WebhookDeleteData, WebhookDeleteResponses, WebhookGetData, WebhookGetResponses, WebhookUpdateData, WebhookUpdateResponses, WebhookDeleteBulkData, WebhookDeleteBulkResponses, EventSubscriptionFilterEventSubscriptionsData, EventSubscriptionFilterEventSubscriptionsResponses, EventSubscriptionCreateEventSubscriptionData, EventSubscriptionCreateEventSubscriptionResponses, EventSubscriptionDeleteEventSubscriptionData, EventSubscriptionDeleteEventSubscriptionResponses, EventSubscriptionGetEventSubscriptionData, EventSubscriptionGetEventSubscriptionResponses, EventSubscriptionUpdateEventSubscriptionData, EventSubscriptionUpdateEventSubscriptionResponses, EventSubscriptionSubscriptionEventNamesData, EventSubscriptionSubscriptionEventNamesResponses, EventSubscriptionDeleteBulkEventSubscriptionsData, EventSubscriptionDeleteBulkEventSubscriptionsResponses, EventSubscriptionTestEventSubscriptionData, EventSubscriptionTestEventSubscriptionResponses, InvestigationDataUsageGetActualDataUsagesData, InvestigationDataUsageGetActualDataUsagesResponses, InvestigationDataUsageExportActualDataUsagesData, InvestigationDataUsageExportActualDataUsagesResponses, InvestigationDataUsageCreateExportRequestForActualDataUsagesData, InvestigationDataUsageCreateExportRequestForActualDataUsagesResponses, InvestigationDataUsageGetActualDataUsageStatisticsData, InvestigationDataUsageGetActualDataUsageStatisticsResponses, InvestigationDataUsageGetHistoricalDataUsageStatisticsData, InvestigationDataUsageGetHistoricalDataUsageStatisticsResponses, InvestigationDataUsageGetDataUsageFiltersData, InvestigationDataUsageGetDataUsageFiltersResponses, InvestigationDataUsageGetFiltersData, InvestigationDataUsageGetFiltersResponses, InvestigationDataUsageDeleteFilterData, InvestigationDataUsageDeleteFilterResponses, InvestigationDataUsageGetFilterData, InvestigationDataUsageGetFilterResponses, InvestigationDataUsageUpdateFilterData, InvestigationDataUsageUpdateFilterResponses, InvestigationDataUsageCreateFilterData, InvestigationDataUsageCreateFilterResponses, PresetFiltersGetManyData, PresetFiltersGetManyResponses, PresetFiltersCreateData, PresetFiltersCreateResponses, PresetFiltersDeleteData, PresetFiltersDeleteResponses, PresetFiltersUpdateData, PresetFiltersUpdateResponses, AutomationHubGetExecutionHistoryData, AutomationHubGetExecutionHistoryResponses, AutomationHubFilterAutomationsData, AutomationHubFilterAutomationsResponses, AutomationHubCreateAutomationData, AutomationHubCreateAutomationResponses, AutomationHubGetActionTypesData, AutomationHubGetActionTypesResponses, AutomationHubTestActionData, AutomationHubTestActionResponses, AutomationHubGetTriggerTypesData, AutomationHubGetTriggerTypesResponses, AutomationHubGetTagsData, AutomationHubGetTagsResponses, AutomationHubExecuteIntegrationData, AutomationHubExecuteIntegrationResponses, AutomationHubDeleteAutomationData, AutomationHubDeleteAutomationResponses, AutomationHubGetAutomationData, AutomationHubGetAutomationResponses, AutomationHubUpdateAutomationData, AutomationHubUpdateAutomationResponses, AutomationHubGetAutomationExecutionsData, AutomationHubGetAutomationExecutionsResponses, AutomationHubGetAutomationChangeHistoryData, AutomationHubGetAutomationChangeHistoryResponses, AutomationHubGenerateTriggerSecretData, AutomationHubGenerateTriggerSecretResponses, AutomationHubEnableAutomationData, AutomationHubEnableAutomationResponses, AutomationHubDisableAutomationData, AutomationHubDisableAutomationResponses, FullTextSearchProfilesGetManyData, FullTextSearchProfilesGetManyResponses, FullTextSearchProfilesCreateData, FullTextSearchProfilesCreateResponses, FullTextSearchProfilesDeleteData, FullTextSearchProfilesDeleteResponses, FullTextSearchProfilesGetOneData, FullTextSearchProfilesGetOneResponses, FullTextSearchProfilesUpdateData, FullTextSearchProfilesUpdateResponses, FullTextSearchProfilesDeleteBulkData, FullTextSearchProfilesDeleteBulkResponses, FullTextSearchTaskAssignData, FullTextSearchTaskAssignResponses, FullTextSearchTaskUpdateScheduledFullTextSearchTaskData, FullTextSearchTaskUpdateScheduledFullTextSearchTaskResponses, CloudAcquisitionProfilesGetManyData, CloudAcquisitionProfilesGetManyResponses, CloudAcquisitionProfilesCreateData, CloudAcquisitionProfilesCreateResponses, CloudAcquisitionProfilesDeleteData, CloudAcquisitionProfilesDeleteResponses, CloudAcquisitionProfilesGetOneData, CloudAcquisitionProfilesGetOneResponses, CloudAcquisitionProfilesUpdateData, CloudAcquisitionProfilesUpdateResponses, CloudAcquisitionLibraryApiControllerListData, CloudAcquisitionLibraryApiControllerListResponses, CloudAcquisitionLibraryApiControllerListErrors, CloudAcquisitionLibraryApiControllerCreateData, CloudAcquisitionLibraryApiControllerCreateResponses, CloudAcquisitionLibraryApiControllerCreateErrors, CloudAcquisitionLibraryApiControllerBulkDeleteData, CloudAcquisitionLibraryApiControllerBulkDeleteResponses, CloudAcquisitionLibraryApiControllerBulkDeleteErrors, CloudAcquisitionLibraryApiControllerDeleteData, CloudAcquisitionLibraryApiControllerDeleteResponses, CloudAcquisitionLibraryApiControllerDeleteErrors, CloudAcquisitionLibraryApiControllerGetData, CloudAcquisitionLibraryApiControllerGetResponses, CloudAcquisitionLibraryApiControllerGetErrors, CloudAcquisitionLibraryApiControllerUpdateData, CloudAcquisitionLibraryApiControllerUpdateResponses, CloudAcquisitionLibraryApiControllerUpdateErrors, ImageEvidenceAcquisitionProfilesGetManyData, ImageEvidenceAcquisitionProfilesGetManyResponses, ImageEvidenceAcquisitionProfilesCreateData, ImageEvidenceAcquisitionProfilesCreateResponses, ImageEvidenceAcquisitionProfilesDeleteData, ImageEvidenceAcquisitionProfilesDeleteResponses, ImageEvidenceAcquisitionProfilesGetOneData, ImageEvidenceAcquisitionProfilesGetOneResponses, ImageEvidenceAcquisitionProfilesUpdateData, ImageEvidenceAcquisitionProfilesUpdateResponses, ImageEvidenceAcquisitionProfilesDeleteBulkData, ImageEvidenceAcquisitionProfilesDeleteBulkResponses, DiskImageAcquisitionLibraryApiControllerListData, DiskImageAcquisitionLibraryApiControllerListResponses, DiskImageAcquisitionLibraryApiControllerListErrors, DiskImageAcquisitionLibraryApiControllerCreateData, DiskImageAcquisitionLibraryApiControllerCreateResponses, DiskImageAcquisitionLibraryApiControllerCreateErrors, DiskImageAcquisitionLibraryApiControllerBulkDeleteData, DiskImageAcquisitionLibraryApiControllerBulkDeleteResponses, DiskImageAcquisitionLibraryApiControllerBulkDeleteErrors, DiskImageAcquisitionLibraryApiControllerDeleteData, DiskImageAcquisitionLibraryApiControllerDeleteResponses, DiskImageAcquisitionLibraryApiControllerDeleteErrors, DiskImageAcquisitionLibraryApiControllerGetData, DiskImageAcquisitionLibraryApiControllerGetResponses, DiskImageAcquisitionLibraryApiControllerGetErrors, DiskImageAcquisitionLibraryApiControllerUpdateData, DiskImageAcquisitionLibraryApiControllerUpdateResponses, DiskImageAcquisitionLibraryApiControllerUpdateErrors, DiskImageAcquisitionTasksCreateData, DiskImageAcquisitionTasksCreateResponses, DiskImageAcquisitionTasksDownloadData, DiskImageAcquisitionTasksDownloadResponses } from './types.gen';
 export type Options<TData extends TDataShape = TDataShape, ThrowOnError extends boolean = boolean> = ClientOptions<TData, ThrowOnError> & {
     /**
      * You can provide a client instance returned by `createClient()` instead of
@@ -20,6 +20,16 @@ export declare const paramsEDiscoveryPatterns: <ThrowOnError extends boolean = f
 export declare const paramsEventLogRecordTypes: <ThrowOnError extends boolean = false>(options?: Options<ParamsEventLogRecordTypesData, ThrowOnError>) => import("./client").RequestResult<ParamsEventLogRecordTypesResponses, unknown, ThrowOnError>;
 export declare const paramsEvidenceList: <ThrowOnError extends boolean = false>(options?: Options<ParamsEvidenceListData, ThrowOnError>) => import("./client").RequestResult<ParamsEvidenceListResponses, unknown, ThrowOnError>;
 export declare const paramsGetMitreAttackTactics: <ThrowOnError extends boolean = false>(options?: Options<ParamsGetMitreAttackTacticsData, ThrowOnError>) => import("./client").RequestResult<ParamsGetMitreAttackTacticsResponses, unknown, ThrowOnError>;
+/**
+ * Get caller capabilities
+ * Returns the authenticated caller (type user|apiToken, id, name), the canonical resource:action privileges granted by its roles, the boolean feature flags, the v2 apiVersion and the stable/beta stability tiers, inside the standard envelope. Requires authentication but no specific privilege; every caller may inspect its own capabilities. Takes no parameters.
+ */
+export declare const capabilitiesV2ApiControllerGet: <ThrowOnError extends boolean = false>(options?: Options<CapabilitiesV2ApiControllerGetData, ThrowOnError>) => import("./client").RequestResult<CapabilitiesV2ApiControllerGetResponses, CapabilitiesV2ApiControllerGetErrors, ThrowOnError>;
+/**
+ * Get the OpenAPI document
+ * Returns the published OpenAPI 3.x document (the same content as /swagger.json) as raw application/json, deliberately WITHOUT the standard v2 envelope so SDK/CLI generators and LLM clients can consume the spec directly. Answers 503 until the document has been generated at startup. Takes no parameters.
+ */
+export declare const openApiAliasV2ApiControllerGet: <ThrowOnError extends boolean = false>(options?: Options<OpenApiAliasV2ApiControllerGetData, ThrowOnError>) => import("./client").RequestResult<OpenApiAliasV2ApiControllerGetResponses, OpenApiAliasV2ApiControllerGetErrors, ThrowOnError>;
 export declare const endpointExportEndpoints0: <ThrowOnError extends boolean = false>(options: Options<EndpointExportEndpoints0Data, ThrowOnError>) => import("./client").RequestResult<EndpointExportEndpoints0Responses, unknown, ThrowOnError>;
 export declare const endpointExportEndpoints1: <ThrowOnError extends boolean = false>(options: Options<EndpointExportEndpoints1Data, ThrowOnError>) => import("./client").RequestResult<EndpointExportEndpoints1Responses, unknown, ThrowOnError>;
 /**
@@ -62,9 +72,17 @@ export declare const assetsGetManyByFilter: <ThrowOnError extends boolean = fals
  * Retrieve a paginated list of assets by filter
  */
 export declare const assetsGetManyByFilter2: <ThrowOnError extends boolean = false>(options: Options<AssetsGetManyByFilter2Data, ThrowOnError>) => import("./client").RequestResult<AssetsGetManyByFilter2Responses, unknown, ThrowOnError>;
+/**
+ * Retrieve many assets by expression filter
+ * Retrieve a paginated list of assets by a flexible filter expression
+ */
+export declare const assetsGetManyByFilterExpression: <ThrowOnError extends boolean = false>(options: Options<AssetsGetManyByFilterExpressionData, ThrowOnError>) => import("./client").RequestResult<AssetsGetManyByFilterExpressionResponses, unknown, ThrowOnError>;
+/**
+ * Retrieve many assets by expression filter
+ * Retrieve a paginated list of assets by a flexible filter expression
+ */
+export declare const assetsGetManyByFilterExpression2: <ThrowOnError extends boolean = false>(options: Options<AssetsGetManyByFilterExpression2Data, ThrowOnError>) => import("./client").RequestResult<AssetsGetManyByFilterExpression2Responses, unknown, ThrowOnError>;
 export declare const endpointGetEndpointsWithTaskCount: <ThrowOnError extends boolean = false>(options: Options<EndpointGetEndpointsWithTaskCountData, ThrowOnError>) => import("./client").RequestResult<EndpointGetEndpointsWithTaskCountResponses, unknown, ThrowOnError>;
-export declare const endpointGetEndpointsStats0: <ThrowOnError extends boolean = false>(options: Options<EndpointGetEndpointsStats0Data, ThrowOnError>) => import("./client").RequestResult<EndpointGetEndpointsStats0Responses, unknown, ThrowOnError>;
-export declare const endpointGetEndpointsStats1: <ThrowOnError extends boolean = false>(options: Options<EndpointGetEndpointsStats1Data, ThrowOnError>) => import("./client").RequestResult<EndpointGetEndpointsStats1Responses, unknown, ThrowOnError>;
 export declare const endpointGetDeviceNameConflicts0: <ThrowOnError extends boolean = false>(options: Options<EndpointGetDeviceNameConflicts0Data, ThrowOnError>) => import("./client").RequestResult<EndpointGetDeviceNameConflicts0Responses, unknown, ThrowOnError>;
 export declare const endpointGetDeviceNameConflicts1: <ThrowOnError extends boolean = false>(options: Options<EndpointGetDeviceNameConflicts1Data, ThrowOnError>) => import("./client").RequestResult<EndpointGetDeviceNameConflicts1Responses, unknown, ThrowOnError>;
 /**
@@ -142,9 +160,11 @@ export declare const endpointUpdateEndpointConnectionRoute0: <ThrowOnError exten
 export declare const endpointUpdateEndpointConnectionRoute1: <ThrowOnError extends boolean = false>(options: Options<EndpointUpdateEndpointConnectionRoute1Data, ThrowOnError>) => import("./client").RequestResult<EndpointUpdateEndpointConnectionRoute1Responses, unknown, ThrowOnError>;
 export declare const endpointSetMaintenanceMode0: <ThrowOnError extends boolean = false>(options: Options<EndpointSetMaintenanceMode0Data, ThrowOnError>) => import("./client").RequestResult<EndpointSetMaintenanceMode0Responses, unknown, ThrowOnError>;
 export declare const endpointSetMaintenanceMode1: <ThrowOnError extends boolean = false>(options: Options<EndpointSetMaintenanceMode1Data, ThrowOnError>) => import("./client").RequestResult<EndpointSetMaintenanceMode1Responses, unknown, ThrowOnError>;
-export declare const endpointTagFilterTags: <ThrowOnError extends boolean = false>(options: Options<EndpointTagFilterTagsData, ThrowOnError>) => import("./client").RequestResult<EndpointTagFilterTagsResponses, unknown, ThrowOnError>;
-export declare const endpointTagDeleteAllTags: <ThrowOnError extends boolean = false>(options?: Options<EndpointTagDeleteAllTagsData, ThrowOnError>) => import("./client").RequestResult<EndpointTagDeleteAllTagsResponses, unknown, ThrowOnError>;
-export declare const endpointTagDeleteTag: <ThrowOnError extends boolean = false>(options?: Options<EndpointTagDeleteTagData, ThrowOnError>) => import("./client").RequestResult<EndpointTagDeleteTagResponses, unknown, ThrowOnError>;
+export declare const endpointTagFilterAssetTags: <ThrowOnError extends boolean = false>(options: Options<EndpointTagFilterAssetTagsData, ThrowOnError>) => import("./client").RequestResult<EndpointTagFilterAssetTagsResponses, unknown, ThrowOnError>;
+export declare const endpointTagCreateAssetTag: <ThrowOnError extends boolean = false>(options: Options<EndpointTagCreateAssetTagData, ThrowOnError>) => import("./client").RequestResult<EndpointTagCreateAssetTagResponses, unknown, ThrowOnError>;
+export declare const endpointTagDeleteAllAssetTags: <ThrowOnError extends boolean = false>(options?: Options<EndpointTagDeleteAllAssetTagsData, ThrowOnError>) => import("./client").RequestResult<EndpointTagDeleteAllAssetTagsResponses, unknown, ThrowOnError>;
+export declare const endpointTagDeleteAssetTag: <ThrowOnError extends boolean = false>(options?: Options<EndpointTagDeleteAssetTagData, ThrowOnError>) => import("./client").RequestResult<EndpointTagDeleteAssetTagResponses, unknown, ThrowOnError>;
+export declare const endpointTagRenameAssetTag: <ThrowOnError extends boolean = false>(options: Options<EndpointTagRenameAssetTagData, ThrowOnError>) => import("./client").RequestResult<EndpointTagRenameAssetTagResponses, unknown, ThrowOnError>;
 export declare const endpointGroupGetChildGroupsOfGroup: <ThrowOnError extends boolean = false>(options?: Options<EndpointGroupGetChildGroupsOfGroupData, ThrowOnError>) => import("./client").RequestResult<EndpointGroupGetChildGroupsOfGroupResponses, unknown, ThrowOnError>;
 export declare const endpointGroupGetRootGroups: <ThrowOnError extends boolean = false>(options?: Options<EndpointGroupGetRootGroupsData, ThrowOnError>) => import("./client").RequestResult<EndpointGroupGetRootGroupsResponses, unknown, ThrowOnError>;
 /**
@@ -245,42 +265,47 @@ export declare const taskAssignmentGet: <ThrowOnError extends boolean = false>(o
 export declare const taskAssignmentGenerateTaskAssignmentReport: <ThrowOnError extends boolean = false>(options: Options<TaskAssignmentGenerateTaskAssignmentReportData, ThrowOnError>) => import("./client").RequestResult<TaskAssignmentGenerateTaskAssignmentReportResponses, unknown, ThrowOnError>;
 /**
  * Get task by id
- * Returns a single task wrapped in entities[0], type-discriminated. 404 leak-safe.
+ * Fetch one Binalyze AIR task by UUID using GET /api/v2/tasks/{taskId}. Type-independent: works for triage, acquisition, interactShell and other task types. The response wraps the single task in result.entities[0] and is polymorphic: it carries a type/subtype discriminator plus only the matching domain block (triage{} / acquisition{} / interactShell{}); other blocks are absent, not null. It also returns counts{assigned,completed,failed,cancelled}, organizations[{id,name}], cases[], schedule (null when not scheduled) and taskAssignments{taskAssignmentCount,taskAssignmentsUrl}. Use air-tasks-assignments for the full per-endpoint assignment list and air-tasks-assets for the targeted assets. Only a task UUID is accepted; names and hostnames are rejected. A 404 'Task not found' also covers tasks outside the caller's organizations (leak-safe), so do not infer the task does not exist.
  */
 export declare const tasksV2ApiControllerGetTaskById: <ThrowOnError extends boolean = false>(options: Options<TasksV2ApiControllerGetTaskByIdData, ThrowOnError>) => import("./client").RequestResult<TasksV2ApiControllerGetTaskByIdResponses, TasksV2ApiControllerGetTaskByIdErrors, ThrowOnError>;
 /**
  * Update a task (rename + schedule; dryRun query preview)
+ * Update one Binalyze AIR task via PATCH /api/v2/tasks/{taskId}. MUTATING. Send only the fields the user wants to change. Scheduled tasks (status=scheduled) accept all fields: taskName, caseIdOrName, schedule, ruleIds (triage), assets, profileIdOrName (acquisition), mitreEnabled, droneEnabled, eventLogRecordsConfig, cpuLimit, imageOptions (image acquisition). Tasks in any other status (processing, assigned, completed, cancelled, failed) accept only taskName and caseIdOrName; every other field is NOT applied -- the call still returns 200 but the field comes back in skippedFields (e.g. 'cpuLimit cannot be updated for processing task; skipped'). This is by design, not an error: a running task cannot change its execution config. When skippedFields is non-empty, tell the user which fields were skipped and why, and that scheduled-only fields require the task to be in status=scheduled (check with air-tasks-get first if unsure). Unschedule is forbidden: never send schedule=null; to stop a task use the hunt cancel/delete tools instead. Renaming to the same name fails 400. An empty body returns errors[0] NOTHING_CHANGED. 404 'Task not found' also covers tasks outside the caller's organizations (leak-safe). The success response returns the updated task in result.entities[0], same shape as air-tasks-get.
  */
 export declare const tasksV2ApiControllerUpdateTask: <ThrowOnError extends boolean = false>(options: Options<TasksV2ApiControllerUpdateTaskData, ThrowOnError>) => import("./client").RequestResult<TasksV2ApiControllerUpdateTaskResponses, TasksV2ApiControllerUpdateTaskErrors, ThrowOnError>;
 /**
  * List a task assets
- * Paginated assets targeted by the task, in the shared GET /v2/assets shape.
+ * List the assets targeted by one Binalyze AIR task using GET /api/v2/tasks/{taskId}/assets. Paginated; entities use the same shape as GET /api/v2/assets (endpoint block with platform, onlineStatus, lastSeen, etc.). Use this when the user asks which hosts/assets a task ran on or targets; this is the resolver for the assetsUrl field seen in task and hunt list responses. It does NOT include per-asset assignment status or progress; for that use air-tasks-assignments. 404 'Task not found' also covers tasks outside the caller's organizations (leak-safe). Placeholder defaults such as pageNumber=1 or pageSize=20 are ignored.
  */
 export declare const tasksV2ApiControllerListTaskAssets: <ThrowOnError extends boolean = false>(options: Options<TasksV2ApiControllerListTaskAssetsData, ThrowOnError>) => import("./client").RequestResult<TasksV2ApiControllerListTaskAssetsResponses, TasksV2ApiControllerListTaskAssetsErrors, ThrowOnError>;
 /**
  * List a task assignments
- * Paginated task assignments for the task, with resolved organization and cases.
+ * List the per-endpoint task assignments of one Binalyze AIR task using GET /api/v2/tasks/{taskId}/task-assignments. Paginated; this is the resolver for the taskAssignmentsUrl field in task detail responses. Each entity carries id, taskId, name, type, endpointId, endpointName, status, progress, hasDroneData, durations, metadata, organizations[{id,name}], response and cases[]. Use this when the user wants per-host progress, per-host status, or which endpoints completed/failed for a task; use air-tasks-assets for asset details instead. 404 'Task not found' also covers tasks outside the caller's organizations (leak-safe). Placeholder defaults such as pageNumber=1 are ignored.
  */
 export declare const tasksV2ApiControllerListTaskAssignments: <ThrowOnError extends boolean = false>(options: Options<TasksV2ApiControllerListTaskAssignmentsData, ThrowOnError>) => import("./client").RequestResult<TasksV2ApiControllerListTaskAssignmentsResponses, TasksV2ApiControllerListTaskAssignmentsErrors, ThrowOnError>;
 /**
  * List hunt (triage) tasks
- * Paginated task-centric hunt (triage) list. Also served at /api/v2/triage.
+ * List Binalyze AIR hunt (triage) tasks using GET /api/v2/hunt. Hunt is the public v2 alias for triage tasks; the list is task-centric and paginated. Each entity carries id, taskName, status, rules[] enriched as {id,name,engine}, totalMatched, assignment counters, assets{assetCount,assetsUrl}, schedule, createdBy and timestamps. Use this when the user asks to list hunts, triage tasks, IOC/YARA scans, or wants to find a hunt task id before cancelling or deleting it. The taskId values returned here feed air-tasks-get, air-hunt-cancel, air-hunt-delete and the bulk variants. Placeholder defaults such as pageNumber=1 are ignored; sortBy accepts only createdAt, taskName, status, assignmentCount.
  */
 export declare const tasksTriageV2ApiControllerListHuntTasks: <ThrowOnError extends boolean = false>(options?: Options<TasksTriageV2ApiControllerListHuntTasksData, ThrowOnError>) => import("./client").RequestResult<TasksTriageV2ApiControllerListHuntTasksResponses, TasksTriageV2ApiControllerListHuntTasksErrors, ThrowOnError>;
 /**
  * Bulk cancel hunt (triage) tasks (body dryRun preview)
+ * Cancel one or more Binalyze AIR hunt (triage) tasks via POST /api/v2/hunt/cancel. MUTATING: cancels ALL active assignments of each task across all its assets; cancellation is queued asynchronously and an abort signal is sent to the agents. Task records and downloaded data are kept (use air-hunt-bulk-delete to remove them). taskIds takes task UUIDs from air-hunt-list. Setting all=true sends taskIds='all' and cancels EVERY active (scheduled/assigned/processing) hunt task in the required organizations scope -- body organizations (ids/names or "all") is REQUIRED for taskIds='all' and optional for explicit id lists; confirm with the user before using it. dryRun is opt-in at the API level (defaults to false); the OpenCode tools send dryRun=true by default. The preview (200) returns result.entities[] = {taskId, taskName, willCancelAssignmentCount, status} without cancelling anything. ALWAYS run the preview first and show the user what would be cancelled; pass dryRun=false only after the user explicitly confirms the exact task list. The real cancel returns cancelledAssignmentCount and status 'cancelling' instead. Both forms include warnings[] for skipped tasks (e.g. already in a terminal state). 400 'No matching tasks found' means no given id resolved to an accessible hunt task. For a single task prefer air-hunt-cancel, which returns a leak-safe 404 for unknown ids.
  */
 export declare const tasksTriageV2ApiControllerCancel: <ThrowOnError extends boolean = false>(options: Options<TasksTriageV2ApiControllerCancelData, ThrowOnError>) => import("./client").RequestResult<TasksTriageV2ApiControllerCancelResponses, TasksTriageV2ApiControllerCancelErrors, ThrowOnError>;
 /**
  * Bulk delete hunt (triage) tasks (body dryRun preview)
+ * Delete one or more Binalyze AIR hunt (triage) tasks via POST /api/v2/hunt/delete. DESTRUCTIVE and irreversible: removes the task records, ALL assignments, and downloaded files/artifacts; nothing remains in history. Active tasks additionally get an agent cancel signal. Use air-hunt-bulk-cancel to merely stop tasks while keeping records. taskIds takes task UUIDs from air-hunt-list. Setting all=true sends taskIds='all' and deletes EVERY hunt task (active and finished) in the required organizations scope -- body organizations (ids/names or "all") is REQUIRED for taskIds='all' and optional for explicit id lists. dryRun is opt-in at the API level (defaults to false); the OpenCode tools send dryRun=true by default. The preview (200) returns result.entities[] = {taskId, taskName, willDeleteAssignmentCount, affectedAssets[], status, createdAt} without deleting anything. ALWAYS run the preview first and show the user what would be deleted; pass dryRun=false only after the user explicitly confirms the exact task list. The real delete returns deletedAssignmentCount instead of willDeleteAssignmentCount. 400 'No matching tasks found' means no given id resolved to an accessible hunt task. For a single task prefer air-hunt-delete (leak-safe 404).
  */
 export declare const tasksTriageV2ApiControllerDelete: <ThrowOnError extends boolean = false>(options: Options<TasksTriageV2ApiControllerDeleteData, ThrowOnError>) => import("./client").RequestResult<TasksTriageV2ApiControllerDeleteResponses, TasksTriageV2ApiControllerDeleteErrors, ThrowOnError>;
 /**
  * Cancel a single hunt (triage) task (dryRun query preview)
+ * Cancel a single Binalyze AIR hunt (triage) task via POST /api/v2/hunt/{taskId}/cancel. MUTATING: cancels ALL active assignments of this task across all its assets; cancellation is queued asynchronously and an abort signal is sent to the agents. The task record and downloaded data are kept (use air-hunt-delete to remove them). Use this when the user wants to stop exactly one hunt/triage task; use air-hunt-bulk-cancel for several tasks at once. The taskId comes from air-hunt-list or air-tasks-get. Success (200) returns result.entities[] = {taskId, taskName, cancelledAssignmentCount, status} plus warnings[] (e.g. skipped when nothing is active). 404 'Task not found' also covers hunt tasks outside the caller's organizations (leak-safe); it does not necessarily mean the id is wrong.
  */
 export declare const tasksTriageV2ApiControllerCancelOne: <ThrowOnError extends boolean = false>(options: Options<TasksTriageV2ApiControllerCancelOneData, ThrowOnError>) => import("./client").RequestResult<TasksTriageV2ApiControllerCancelOneResponses, TasksTriageV2ApiControllerCancelOneErrors, ThrowOnError>;
 /**
  * Delete a single hunt (triage) task (dryRun query preview)
+ * Delete a single Binalyze AIR hunt (triage) task via POST /api/v2/hunt/{taskId}/delete. DESTRUCTIVE and irreversible: removes the task record, ALL its assignments, and downloaded files/artifacts; nothing remains in history. An active task additionally gets an agent cancel signal. Use air-hunt-cancel to merely stop the task while keeping records. Use this for exactly one task; use air-hunt-bulk-delete for several tasks at once. The taskId comes from air-hunt-list or air-tasks-get. dryRun is opt-in at the API level (defaults to false) and is sent as the ?dryRun=true query parameter; the OpenCode tools send it by default. The preview (200) returns result.entities[] = {taskId, taskName, willDeleteAssignmentCount, affectedAssets[], status, createdAt} without deleting anything. ALWAYS preview first and show the user; pass dryRun=false only after the user explicitly confirms this exact task. The real delete returns deletedAssignmentCount instead of willDeleteAssignmentCount. 404 'Task not found' also covers tasks outside the caller's organizations (leak-safe).
  */
 export declare const tasksTriageV2ApiControllerDeleteOne: <ThrowOnError extends boolean = false>(options: Options<TasksTriageV2ApiControllerDeleteOneData, ThrowOnError>) => import("./client").RequestResult<TasksTriageV2ApiControllerDeleteOneResponses, TasksTriageV2ApiControllerDeleteOneErrors, ThrowOnError>;
 export declare const settingsGetSettings: <ThrowOnError extends boolean = false>(options?: Options<SettingsGetSettingsData, ThrowOnError>) => import("./client").RequestResult<SettingsGetSettingsResponses, unknown, ThrowOnError>;
@@ -428,26 +453,32 @@ export declare const acquisitionUpdateScheduledImageAcquisition: <ThrowOnError e
 export declare const acquisitionValidateOsQueries: <ThrowOnError extends boolean = false>(options: Options<AcquisitionValidateOsQueriesData, ThrowOnError>) => import("./client").RequestResult<AcquisitionValidateOsQueriesResponses, unknown, ThrowOnError>;
 /**
  * List device acquisition profiles
+ * List Binalyze AIR device (evidence) acquisition profiles via GET /api/v2/libraries/acquisition/device. Read-only and paginated. Each entity is a profile summary: id, name, organizations[{id,name}], averageTime, createdAt/createdBy, lastUsedAt/lastUsedBy, deletable, and a detailsUrl. Per-OS configs (windows/linux/macos/aix/eDiscovery) are NOT included; use air-acquisition-device-get for one profile's full config. Use this when the user asks to list or search evidence acquisition profiles, or needs a profile id or exact name before get, update, delete, or bulk delete. sortBy accepts only name, createdBy, createdAt, lastUsedAt, lastUsedBy (default createdAt). Profiles with an empty organizations array are global.
  */
 export declare const acquisitionLibraryDeviceV2ApiControllerList: <ThrowOnError extends boolean = false>(options?: Options<AcquisitionLibraryDeviceV2ApiControllerListData, ThrowOnError>) => import("./client").RequestResult<AcquisitionLibraryDeviceV2ApiControllerListResponses, AcquisitionLibraryDeviceV2ApiControllerListErrors, ThrowOnError>;
 /**
  * Create device acquisition profile
+ * Create a Binalyze AIR device (evidence) acquisition profile via POST /api/v2/libraries/acquisition/device. MUTATING: persists a new profile in the acquisition library. Returns 200 with entities[0] = the created profile detail. `name` is required (alphanumeric) plus at least one config block: windows, linux, macos, aix (each with evidenceList/artifactList/customContentProfiles/networkCapture) or eDiscovery ({patterns:[{pattern,category}]}). Any subset of OS blocks is accepted. Body `organizationIds` controls which organizations own the profile; common query `organizations`, `orgs`, and `org` parameters are rejected. dryRun DEFAULTS TO TRUE: the first call validates and returns the would-be entity without persisting anything; pass dryRun=false only to actually create after the user confirms. Get the exact evidence/artifact keys from an existing profile (air-acquisition-device-get) when cloning or when unsure of valid values.
  */
 export declare const acquisitionLibraryDeviceV2ApiControllerCreate: <ThrowOnError extends boolean = false>(options: Options<AcquisitionLibraryDeviceV2ApiControllerCreateData, ThrowOnError>) => import("./client").RequestResult<AcquisitionLibraryDeviceV2ApiControllerCreateResponses, AcquisitionLibraryDeviceV2ApiControllerCreateErrors, ThrowOnError>;
 /**
  * Bulk delete device acquisition profiles
+ * Bulk delete Binalyze AIR device (evidence) acquisition profiles via POST /api/v2/libraries/acquisition/device/delete. MUTATING and irreversible. Resolution is tolerant: unknown or ambiguous items are skipped and reported in warnings[] (action: 'skipped') instead of failing the whole request. Profiles referenced by running/scheduled tasks or system profiles are also skipped with a warning. dryRun DEFAULTS TO TRUE: the first call returns entities[] of what would be deleted; pass dryRun=false only to actually delete after the user confirms. A real delete returns deletedCount plus warnings[]. Use this for several profiles at once; use air-acquisition-device-delete for exactly one. Ids and exact names come from air-acquisition-device-list.
  */
 export declare const acquisitionLibraryDeviceV2ApiControllerBulkDelete: <ThrowOnError extends boolean = false>(options: Options<AcquisitionLibraryDeviceV2ApiControllerBulkDeleteData, ThrowOnError>) => import("./client").RequestResult<AcquisitionLibraryDeviceV2ApiControllerBulkDeleteResponses, AcquisitionLibraryDeviceV2ApiControllerBulkDeleteErrors, ThrowOnError>;
 /**
  * Delete device acquisition profile
+ * Delete ONE Binalyze AIR device (evidence) acquisition profile via DELETE /api/v2/libraries/acquisition/device/{idOrName}. MUTATING and irreversible. A profile referenced by a still-running or scheduled acquisition task is protected: the API returns 400 PROFILE_IN_USE with the blocking task ids (completed/cancelled/failed tasks do not block). System (predefined) profiles return 406 SYSTEM_PROFILE_IMMUTABLE. dryRun DEFAULTS TO TRUE: the first call returns what would be deleted without removing anything; pass dryRun=false only to actually delete after the user confirms. Use air-acquisition-device-bulk-delete for several profiles at once. The idOrName comes from air-acquisition-device-list or air-acquisition-device-get. An unknown idOrName returns 404 NOT_FOUND with suggestions; an ambiguous name returns 400 AMBIGUOUS_NAME.
  */
 export declare const acquisitionLibraryDeviceV2ApiControllerDelete: <ThrowOnError extends boolean = false>(options: Options<AcquisitionLibraryDeviceV2ApiControllerDeleteData, ThrowOnError>) => import("./client").RequestResult<AcquisitionLibraryDeviceV2ApiControllerDeleteResponses, AcquisitionLibraryDeviceV2ApiControllerDeleteErrors, ThrowOnError>;
 /**
  * Get device acquisition profile by id or name
+ * Get ONE Binalyze AIR device (evidence) acquisition profile by UUID or exact name via GET /api/v2/libraries/acquisition/device/{idOrName}. Read-only. Returns the full profile detail in entities[0]: id, name, organizations[{id,name}], the per-OS configs (windows/linux/macos/aix with evidence and artifact lists), eDiscovery patterns, deletable, and timestamps. Use this when the user asks to show or inspect an evidence acquisition profile's contents, or to clone one. Ids and exact names come from air-acquisition-device-list. An unknown idOrName returns 404 NOT_FOUND with did-you-mean suggestions in errors[0].details.suggestions[]; an ambiguous name returns 400 AMBIGUOUS_NAME with candidates in errors[0].details.matches[].
  */
 export declare const acquisitionLibraryDeviceV2ApiControllerGet: <ThrowOnError extends boolean = false>(options: Options<AcquisitionLibraryDeviceV2ApiControllerGetData, ThrowOnError>) => import("./client").RequestResult<AcquisitionLibraryDeviceV2ApiControllerGetResponses, AcquisitionLibraryDeviceV2ApiControllerGetErrors, ThrowOnError>;
 /**
  * Update device acquisition profile
+ * Update ONE Binalyze AIR device (evidence) acquisition profile via PATCH /api/v2/libraries/acquisition/device/{idOrName}. MUTATING partial update: only the fields you pass change; omitted fields keep their current value. Updatable fields: name, organizationIds, windows, linux, macos, aix, eDiscovery. Passing null for an OS block removes it; the merged profile must still keep at least one config block. Sending no updatable field returns NOTHING_CHANGED with result null. System (predefined) profiles cannot be updated: the API returns 406 SYSTEM_PROFILE_IMMUTABLE. dryRun DEFAULTS TO TRUE: the first call previews the merged profile without persisting; pass dryRun=false only to actually update after the user confirms. The idOrName comes from air-acquisition-device-list or air-acquisition-device-get. An unknown idOrName returns 404 NOT_FOUND with suggestions; an ambiguous name returns 400 AMBIGUOUS_NAME.
  */
 export declare const acquisitionLibraryDeviceV2ApiControllerUpdate: <ThrowOnError extends boolean = false>(options: Options<AcquisitionLibraryDeviceV2ApiControllerUpdateData, ThrowOnError>) => import("./client").RequestResult<AcquisitionLibraryDeviceV2ApiControllerUpdateResponses, AcquisitionLibraryDeviceV2ApiControllerUpdateErrors, ThrowOnError>;
 /**
@@ -485,6 +516,11 @@ export declare const gitRepositoriesBulkDelete: <ThrowOnError extends boolean =
  * Manually trigger a synchronization for the specified repository connection
  */
 export declare const gitRepositoriesTriggerSync: <ThrowOnError extends boolean = false>(options: Options<GitRepositoriesTriggerSyncData, ThrowOnError>) => import("./client").RequestResult<GitRepositoriesTriggerSyncResponses, unknown, ThrowOnError>;
+/**
+ * Cancel repository sync
+ * Cancel an in-progress synchronization for the specified repository connection
+ */
+export declare const gitRepositoriesCancelSync: <ThrowOnError extends boolean = false>(options: Options<GitRepositoriesCancelSyncData, ThrowOnError>) => import("./client").RequestResult<GitRepositoriesCancelSyncResponses, unknown, ThrowOnError>;
 /**
  * Get sync logs for a repository connection
  * Retrieve the synchronization history for a specific repository connection
@@ -505,6 +541,71 @@ export declare const gitRepositoriesTestConnection: <ThrowOnError extends boolea
  * Retrieve the list of branches for a repository
  */
 export declare const gitRepositoriesGetRepositoryBranches: <ThrowOnError extends boolean = false>(options: Options<GitRepositoriesGetRepositoryBranchesData, ThrowOnError>) => import("./client").RequestResult<GitRepositoriesGetRepositoryBranchesResponses, unknown, ThrowOnError>;
+/**
+ * Filter TAXII feeds
+ * Retrieve all TAXII feeds with optional filters
+ */
+export declare const taxiiFeedsGetMany: <ThrowOnError extends boolean = false>(options: Options<TaxiiFeedsGetManyData, ThrowOnError>) => import("./client").RequestResult<TaxiiFeedsGetManyResponses, unknown, ThrowOnError>;
+/**
+ * Create a new TAXII feed
+ * Create a new TAXII feed for syncing threat intelligence indicators
+ */
+export declare const taxiiFeedsCreate: <ThrowOnError extends boolean = false>(options: Options<TaxiiFeedsCreateData, ThrowOnError>) => import("./client").RequestResult<TaxiiFeedsCreateResponses, unknown, ThrowOnError>;
+/**
+ * Filter TAXII indicators
+ * Retrieve all indicators across TAXII feeds with optional filters
+ */
+export declare const taxiiFeedsGetIndicators: <ThrowOnError extends boolean = false>(options: Options<TaxiiFeedsGetIndicatorsData, ThrowOnError>) => import("./client").RequestResult<TaxiiFeedsGetIndicatorsResponses, unknown, ThrowOnError>;
+/**
+ * Get TAXII indicator summary
+ * Retrieve aggregated statistics for indicators across TAXII feeds
+ */
+export declare const taxiiFeedsGetIndicatorSummary: <ThrowOnError extends boolean = false>(options: Options<TaxiiFeedsGetIndicatorSummaryData, ThrowOnError>) => import("./client").RequestResult<TaxiiFeedsGetIndicatorSummaryResponses, unknown, ThrowOnError>;
+/**
+ * Delete a TAXII feed
+ * Delete an existing TAXII feed by ID
+ */
+export declare const taxiiFeedsDelete: <ThrowOnError extends boolean = false>(options: Options<TaxiiFeedsDeleteData, ThrowOnError>) => import("./client").RequestResult<TaxiiFeedsDeleteResponses, unknown, ThrowOnError>;
+/**
+ * Get TAXII feed by ID
+ * Retrieve a specific TAXII feed
+ */
+export declare const taxiiFeedsGetOne: <ThrowOnError extends boolean = false>(options: Options<TaxiiFeedsGetOneData, ThrowOnError>) => import("./client").RequestResult<TaxiiFeedsGetOneResponses, unknown, ThrowOnError>;
+/**
+ * Update a TAXII feed
+ * Update an existing TAXII feed configuration
+ */
+export declare const taxiiFeedsUpdate: <ThrowOnError extends boolean = false>(options: Options<TaxiiFeedsUpdateData, ThrowOnError>) => import("./client").RequestResult<TaxiiFeedsUpdateResponses, unknown, ThrowOnError>;
+/**
+ * Get sync logs for a TAXII feed
+ * Retrieve the synchronization history for a specific TAXII feed
+ */
+export declare const taxiiFeedsGetSyncLogs: <ThrowOnError extends boolean = false>(options: Options<TaxiiFeedsGetSyncLogsData, ThrowOnError>) => import("./client").RequestResult<TaxiiFeedsGetSyncLogsResponses, unknown, ThrowOnError>;
+/**
+ * Discover TAXII collections
+ * Connect to a TAXII server and list the collections available for subscription
+ */
+export declare const taxiiFeedsDiscoverCollections: <ThrowOnError extends boolean = false>(options: Options<TaxiiFeedsDiscoverCollectionsData, ThrowOnError>) => import("./client").RequestResult<TaxiiFeedsDiscoverCollectionsResponses, unknown, ThrowOnError>;
+/**
+ * Trigger TAXII feed sync
+ * Manually trigger a synchronization for the specified TAXII feed
+ */
+export declare const taxiiFeedsTriggerSync: <ThrowOnError extends boolean = false>(options: Options<TaxiiFeedsTriggerSyncData, ThrowOnError>) => import("./client").RequestResult<TaxiiFeedsTriggerSyncResponses, unknown, ThrowOnError>;
+/**
+ * Cancel TAXII feed sync
+ * Cancel an in-progress synchronization for the specified TAXII feed
+ */
+export declare const taxiiFeedsCancelSync: <ThrowOnError extends boolean = false>(options: Options<TaxiiFeedsCancelSyncData, ThrowOnError>) => import("./client").RequestResult<TaxiiFeedsCancelSyncResponses, unknown, ThrowOnError>;
+/**
+ * Enable or disable a TAXII feed
+ * Toggle the active state of a TAXII feed
+ */
+export declare const taxiiFeedsUpdateStatus: <ThrowOnError extends boolean = false>(options: Options<TaxiiFeedsUpdateStatusData, ThrowOnError>) => import("./client").RequestResult<TaxiiFeedsUpdateStatusResponses, unknown, ThrowOnError>;
+/**
+ * Delete multiple TAXII feeds
+ * Delete multiple TAXII feeds by their IDs
+ */
+export declare const taxiiFeedsBulkDelete: <ThrowOnError extends boolean = false>(options: Options<TaxiiFeedsBulkDeleteData, ThrowOnError>) => import("./client").RequestResult<TaxiiFeedsBulkDeleteResponses, unknown, ThrowOnError>;
 /**
  * Get Many
  * Retrieve a paginated list of triage rules
@@ -572,38 +673,47 @@ export declare const createTriageRuleTag: <ThrowOnError extends boolean = false>
 export declare const deleteTriageRuleTag: <ThrowOnError extends boolean = false>(options: Options<DeleteTriageRuleTagData, ThrowOnError>) => import("./client").RequestResult<DeleteTriageRuleTagResponses, unknown, ThrowOnError>;
 /**
  * List triage rules
+ * List Binalyze AIR triage rules (the triage library: YARA, Sigma, osquery IOC-scan rules) using GET /api/v2/libraries/triage. Read-only and paginated. Each entity is a rule summary: id, name, description, engine, searchIn flags, organizations [{id,name}], tags, author, createdAt/updatedAt/lastUsedAt. Rule content is NOT included; use air-triage-rules-get for one rule's body. Use this when the user asks to list triage/IOC rules, search the rule library, or needs a rule id or exact name before get, update, delete, or export. sortBy accepts only name, createdAt, updatedAt, lastUsedAt, author (default createdAt). Rules with an empty organizations list are global (visible to every org).
  */
 export declare const triageLibraryV2ApiControllerList: <ThrowOnError extends boolean = false>(options?: Options<TriageLibraryV2ApiControllerListData, ThrowOnError>) => import("./client").RequestResult<TriageLibraryV2ApiControllerListResponses, TriageLibraryV2ApiControllerListErrors, ThrowOnError>;
 /**
  * Create triage rule
+ * Create a Binalyze AIR triage rule (YARA, Sigma, or osquery IOC-scan rule) via POST /api/v2/libraries/triage. MUTATING: persists a new rule in the triage library; the rule content is validated by the engine before saving and an invalid rule fails with 400. Only `rule` (the content) is required; name and engine are auto-detected from the content when omitted, and a name collision is resolved by suffixing (a warning reports the adjusted name). dryRun DEFAULTS TO TRUE: the first call returns the would-be entity without persisting anything; pass dryRun=false only to actually create after the user confirms. Success returns entities[0] with the created rule detail plus warnings[] (e.g. name adjustments). Use air-triage-rules-validate to only check a rule without creating it.
  */
 export declare const triageLibraryV2ApiControllerCreate: <ThrowOnError extends boolean = false>(options: Options<TriageLibraryV2ApiControllerCreateData, ThrowOnError>) => import("./client").RequestResult<TriageLibraryV2ApiControllerCreateResponses, TriageLibraryV2ApiControllerCreateErrors, ThrowOnError>;
 /**
  * Bulk delete triage rules
+ * Bulk delete Binalyze AIR triage rules via POST /api/v2/libraries/triage/delete. MUTATING and irreversible: removes every resolved rule and its stored content from the triage library. Resolution is tolerant: rules that cannot be found are skipped and reported in warnings[] instead of failing the whole request. dryRun DEFAULTS TO TRUE: the first call previews what would be deleted; pass dryRun=false only to actually delete after the user confirms. Use this for several rules at once; use air-triage-rules-delete for exactly one. Rule ids and exact names come from air-triage-rules-list. Success returns deletedCount plus warnings[] (skipped or unresolved rules).
  */
 export declare const triageLibraryV2ApiControllerBulkDelete: <ThrowOnError extends boolean = false>(options: Options<TriageLibraryV2ApiControllerBulkDeleteData, ThrowOnError>) => import("./client").RequestResult<TriageLibraryV2ApiControllerBulkDeleteResponses, TriageLibraryV2ApiControllerBulkDeleteErrors, ThrowOnError>;
 /**
  * Validate triage rule
+ * Validate a Binalyze AIR triage rule (YARA, Sigma, or osquery) via POST /api/v2/libraries/triage/validate. Read-only: nothing is persisted, so there is no dryRun flag. The engine is auto-detected from the rule content when omitted; passing a wrong engine returns a 400 INVALID_ENGINE with the detected engine under errors[0].details.suggestions. osquery rules must be read-only SELECT statements against known tables. Use this before air-triage-rules-create or air-triage-rules-update when the user wants to check a rule, or to identify which engine a rule belongs to. Success returns entities[0] = {valid: true, engine} plus warnings[]; an invalid rule fails with a 400 envelope describing the syntax problem.
  */
 export declare const triageLibraryV2ApiControllerValidate: <ThrowOnError extends boolean = false>(options: Options<TriageLibraryV2ApiControllerValidateData, ThrowOnError>) => import("./client").RequestResult<TriageLibraryV2ApiControllerValidateResponses, TriageLibraryV2ApiControllerValidateErrors, ThrowOnError>;
 /**
  * Delete triage rule
+ * Delete ONE Binalyze AIR triage rule via DELETE /api/v2/libraries/triage/{idOrName}. MUTATING and irreversible: removes the rule and its stored content from the triage library. dryRun DEFAULTS TO TRUE: the first call returns what would be deleted without removing anything; pass dryRun=false only to actually delete after the user confirms. Use air-triage-rules-bulk-delete for several rules at once. The idOrName comes from air-triage-rules-list or air-triage-rules-get. Success returns entities[0] = {id, name} of the deleted rule. 404 also covers rules outside the caller's organization scope (leak-safe); it does not necessarily mean the id is wrong.
  */
 export declare const triageLibraryV2ApiControllerDelete: <ThrowOnError extends boolean = false>(options: Options<TriageLibraryV2ApiControllerDeleteData, ThrowOnError>) => import("./client").RequestResult<TriageLibraryV2ApiControllerDeleteResponses, TriageLibraryV2ApiControllerDeleteErrors, ThrowOnError>;
 /**
  * Get triage rule by id or name
+ * Get ONE Binalyze AIR triage rule (YARA/Sigma/osquery IOC-scan rule) by UUID or exact name via GET /api/v2/libraries/triage/{idOrName}. Read-only. Returns the full rule detail in entities[0]: id, name, description, engine, searchIn flags, the rule content (body), organizations [{id,name}], tags, author and timestamps. Use this when the user asks to show, inspect, or read a triage rule's content. Rule ids and exact names come from air-triage-rules-list. 404 also covers rules outside the caller's organization scope (leak-safe); the response may include a did-you-mean suggestion when the name is close to an existing rule.
  */
 export declare const triageLibraryV2ApiControllerGet: <ThrowOnError extends boolean = false>(options: Options<TriageLibraryV2ApiControllerGetData, ThrowOnError>) => import("./client").RequestResult<TriageLibraryV2ApiControllerGetResponses, TriageLibraryV2ApiControllerGetErrors, ThrowOnError>;
 /**
  * Update triage rule
+ * Update ONE Binalyze AIR triage rule via PATCH /api/v2/libraries/triage/{idOrName}. MUTATING partial update: only the fields you pass change; omitted fields keep their current value. The engine cannot be changed (create a new rule instead). A changed rule body is re-validated by its engine before saving; an invalid rule fails with 400. `tags` REPLACES the whole tag set. Sending no updatable field returns a NOTHING_CHANGED error. dryRun DEFAULTS TO TRUE: the first call previews the resulting rule without persisting; pass dryRun=false only to actually update after the user confirms. The idOrName comes from air-triage-rules-list or air-triage-rules-get. Success returns entities[0] with the updated rule detail plus warnings[]. 404 also covers rules outside the caller's organization scope (leak-safe).
  */
 export declare const triageLibraryV2ApiControllerUpdate: <ThrowOnError extends boolean = false>(options: Options<TriageLibraryV2ApiControllerUpdateData, ThrowOnError>) => import("./client").RequestResult<TriageLibraryV2ApiControllerUpdateResponses, TriageLibraryV2ApiControllerUpdateErrors, ThrowOnError>;
 /**
  * Export triage rules to an off-network package
+ * Export Binalyze AIR triage rules into an off-network triage package via POST /api/v2/libraries/triage/export. MUTATING: generates a package file on the Console that bundles the selected rules for offline (off-network) triage of air-gapped endpoints. Resolution is STRICT: any rule that cannot be found fails the whole request with 400 plus name suggestions (unlike bulk delete, which skips). dryRun DEFAULTS TO TRUE: the first call lists what would be exported without generating a package; pass dryRun=false only to actually export after the user confirms. Success returns entities[0] = {fileName, downloadUrl, binaryOptions[]}; feed fileName into air-triage-rules-export-download to fetch the package. Use this when the user wants an offline/off-network triage package of specific rules. Rule ids and exact names come from air-triage-rules-list.
  */
 export declare const triageLibraryExportV2ApiControllerExport: <ThrowOnError extends boolean = false>(options: Options<TriageLibraryExportV2ApiControllerExportData, ThrowOnError>) => import("./client").RequestResult<TriageLibraryExportV2ApiControllerExportResponses, TriageLibraryExportV2ApiControllerExportErrors, ThrowOnError>;
 /**
  * Download an exported off-network package
+ * Download a previously exported off-network triage package via GET /api/v2/libraries/triage/export/download and save it inside the current worktree. Read-only on the server side. The fileName comes from air-triage-rules-export (its downloadUrl carries the same value); this tool streams the archive to disk and returns {fileName, outputPath, byteLength}. Optionally embed agent binaries for specific platforms (binaries[]) and MITRE ATT&CK rules (mitre=true) into the package. Use this right after air-triage-rules-export when the user wants the actual package file. Packages can expire; a 404 may mean the export must be re-run.
  */
 export declare const triageLibraryExportV2ApiControllerDownload: <ThrowOnError extends boolean = false>(options: Options<TriageLibraryExportV2ApiControllerDownloadData, ThrowOnError>) => import("./client").RequestResult<TriageLibraryExportV2ApiControllerDownloadResponses, TriageLibraryExportV2ApiControllerDownloadErrors, ThrowOnError>;
 export declare const evidenceGetCaseReport0: <ThrowOnError extends boolean = false>(options?: Options<EvidenceGetCaseReport0Data, ThrowOnError>) => import("./client").RequestResult<EvidenceGetCaseReport0Responses, unknown, ThrowOnError>;
@@ -643,6 +753,9 @@ export declare const evidenceRepositoryValidateSftpRepository: <ThrowOnError ext
 export declare const evidenceRepositoryValidateGoogleCloudStorage: <ThrowOnError extends boolean = false>(options: Options<EvidenceRepositoryValidateGoogleCloudStorageData, ThrowOnError>) => import("./client").RequestResult<EvidenceRepositoryValidateGoogleCloudStorageResponses, unknown, ThrowOnError>;
 export declare const evidenceRepositoryCreateGoogleCloudStorage: <ThrowOnError extends boolean = false>(options: Options<EvidenceRepositoryCreateGoogleCloudStorageData, ThrowOnError>) => import("./client").RequestResult<EvidenceRepositoryCreateGoogleCloudStorageResponses, unknown, ThrowOnError>;
 export declare const evidenceRepositoryUpdateGoogleCloudStorage: <ThrowOnError extends boolean = false>(options: Options<EvidenceRepositoryUpdateGoogleCloudStorageData, ThrowOnError>) => import("./client").RequestResult<EvidenceRepositoryUpdateGoogleCloudStorageResponses, unknown, ThrowOnError>;
+export declare const evidenceRepositoryValidateBox: <ThrowOnError extends boolean = false>(options: Options<EvidenceRepositoryValidateBoxData, ThrowOnError>) => import("./client").RequestResult<EvidenceRepositoryValidateBoxResponses, unknown, ThrowOnError>;
+export declare const evidenceRepositoryCreateBox: <ThrowOnError extends boolean = false>(options: Options<EvidenceRepositoryCreateBoxData, ThrowOnError>) => import("./client").RequestResult<EvidenceRepositoryCreateBoxResponses, unknown, ThrowOnError>;
+export declare const evidenceRepositoryUpdateBox: <ThrowOnError extends boolean = false>(options: Options<EvidenceRepositoryUpdateBoxData, ThrowOnError>) => import("./client").RequestResult<EvidenceRepositoryUpdateBoxResponses, unknown, ThrowOnError>;
 export declare const notificationDeleteAll: <ThrowOnError extends boolean = false>(options?: Options<NotificationDeleteAllData, ThrowOnError>) => import("./client").RequestResult<NotificationDeleteAllResponses, unknown, ThrowOnError>;
 export declare const notificationFilter: <ThrowOnError extends boolean = false>(options: Options<NotificationFilterData, ThrowOnError>) => import("./client").RequestResult<NotificationFilterResponses, unknown, ThrowOnError>;
 export declare const notificationMarkAllAsRead: <ThrowOnError extends boolean = false>(options?: Options<NotificationMarkAllAsReadData, ThrowOnError>) => import("./client").RequestResult<NotificationMarkAllAsReadResponses, unknown, ThrowOnError>;
@@ -750,6 +863,121 @@ export declare const autoAssetTagUpdateStatus: <ThrowOnError extends boolean = f
 export declare const autoAssetTagDeleteBulk: <ThrowOnError extends boolean = false>(options: Options<AutoAssetTagDeleteBulkData, ThrowOnError>) => import("./client").RequestResult<AutoAssetTagDeleteBulkResponses, unknown, ThrowOnError>;
 export declare const autoAssetTagAssignAutoAssetTaggingTask: <ThrowOnError extends boolean = false>(options: Options<AutoAssetTagAssignAutoAssetTaggingTaskData, ThrowOnError>) => import("./client").RequestResult<AutoAssetTagAssignAutoAssetTaggingTaskResponses, unknown, ThrowOnError>;
 export declare const autoAssetTagUpdateScheduledAatTask: <ThrowOnError extends boolean = false>(options: Options<AutoAssetTagUpdateScheduledAatTaskData, ThrowOnError>) => import("./client").RequestResult<AutoAssetTagUpdateScheduledAatTaskResponses, unknown, ThrowOnError>;
+/**
+ * List case activities across visible cases
+ * List the GLOBAL Binalyze AIR case audit feed across all visible cases using GET /api/v2/cases/activities. Read-only, paginated. Each row carries id, caseId, type (event class name like CaseNoteAddedEvent), performedBy, raw data{} payload, a computed description and timestamps. caseIds filter accepts case UUIDs or names (inclusive match). For the activities of ONE known case prefer air-cases-case-activities. Use this to audit who did what across cases, e.g. all activity by a user or all case closures in a time window.
+ */
+export declare const caseActivityV2ApiControllerFilterGlobalActivities: <ThrowOnError extends boolean = false>(options?: Options<CaseActivityV2ApiControllerFilterGlobalActivitiesData, ThrowOnError>) => import("./client").RequestResult<CaseActivityV2ApiControllerFilterGlobalActivitiesResponses, CaseActivityV2ApiControllerFilterGlobalActivitiesErrors, ThrowOnError>;
+/**
+ * List activities for case
+ * List the audit activity feed of ONE Binalyze AIR case using GET /api/v2/cases/{idOrName}/activities. Read-only, paginated. Each row carries id, type (event class name like CaseNoteAddedEvent), performedBy, raw data{} payload, a computed description and timestamps. The path accepts a case UUID or exact case name. For a feed across multiple cases use air-cases-activities (the global feed) instead. Use this to reconstruct the timeline of a case: who closed it, which notes and assets were added, and when.
+ */
+export declare const caseActivityV2ApiControllerFilterCaseActivities: <ThrowOnError extends boolean = false>(options: Options<CaseActivityV2ApiControllerFilterCaseActivitiesData, ThrowOnError>) => import("./client").RequestResult<CaseActivityV2ApiControllerFilterCaseActivitiesResponses, CaseActivityV2ApiControllerFilterCaseActivitiesErrors, ThrowOnError>;
+/**
+ * Export cases
+ * Export Binalyze AIR cases to a file via GET /api/v2/cases/export and save it inside the current worktree. Read-only on the server side; no dryRun needed. format=csv (default) saves a text/csv file; format=json saves an application/zip archive containing cases.json (the newest 10000 matching cases, with a TRUNCATED warning when more matched). The filter model mirrors air-cases-list (name substring, status, searchTerm). Returns {format, outputPath, byteLength}. Use air-cases-list instead when the user just wants to read cases in the chat.
+ */
+export declare const caseExportV2ApiControllerExportCases: <ThrowOnError extends boolean = false>(options?: Options<CaseExportV2ApiControllerExportCasesData, ThrowOnError>) => import("./client").RequestResult<CaseExportV2ApiControllerExportCasesResponses, CaseExportV2ApiControllerExportCasesErrors, ThrowOnError>;
+/**
+ * Close cases in bulk
+ * Close MULTIPLE Binalyze AIR cases in one call via POST /api/v2/cases/close. MUTATING, partial success: eligible cases close, ineligible ones (already closed/archived, not found) surface as warnings[] instead of failing the request. dryRun DEFAULTS TO TRUE: the first call returns a would-close preview plus skip warnings; pass dryRun=false only after the user confirms the case list. Target cases by id or name in cases[], or set cases="all" to close every open case in the required organizations scope (deliberate action; organizations must be provided — ids/names or "all"; confirm with the user first). For exactly one case prefer air-cases-close, which also accepts closure report summaries.
+ */
+export declare const caseBulkActionV2ApiControllerClose: <ThrowOnError extends boolean = false>(options: Options<CaseBulkActionV2ApiControllerCloseData, ThrowOnError>) => import("./client").RequestResult<CaseBulkActionV2ApiControllerCloseResponses, CaseBulkActionV2ApiControllerCloseErrors, ThrowOnError>;
+/**
+ * Archive cases in bulk
+ * Archive MULTIPLE Binalyze AIR cases in one call via POST /api/v2/cases/archive. MUTATING and effectively FINAL: lifecycle is open -> closed -> archived and there is NO unarchive. Only closed cases are eligible; open or already-archived cases surface as warnings[] (partial success). dryRun DEFAULTS TO TRUE: the first call returns a would-archive preview plus skip warnings; pass dryRun=false only after the user confirms the case list. Target cases by id or name in cases[], or set cases="all" to archive every closed case in the required organizations scope (deliberate action; organizations must be provided — ids/names or "all"; confirm with the user first). For exactly one case prefer air-cases-archive.
+ */
+export declare const caseBulkActionV2ApiControllerArchive: <ThrowOnError extends boolean = false>(options: Options<CaseBulkActionV2ApiControllerArchiveData, ThrowOnError>) => import("./client").RequestResult<CaseBulkActionV2ApiControllerArchiveResponses, CaseBulkActionV2ApiControllerArchiveErrors, ThrowOnError>;
+/**
+ * List assets linked to case
+ * List the assets linked to a Binalyze AIR case using GET /api/v2/cases/{idOrName}/assets. Read-only, paginated; returns full canonical v2 asset entities (nested endpoint{} block) for every asset attached to the case. Use this to see which endpoints belong to a case, to pick asset ids for air-cases-remove-assets, or before acting on the case's machines with the asset tools. The path accepts a case UUID or exact case name. Use format=json (default) for a paginated response or format=csv to stream the linked assets as text/csv.
+ */
+export declare const caseAssetV2ApiControllerFilterAssets: <ThrowOnError extends boolean = false>(options: Options<CaseAssetV2ApiControllerFilterAssetsData, ThrowOnError>) => import("./client").RequestResult<CaseAssetV2ApiControllerFilterAssetsResponses, CaseAssetV2ApiControllerFilterAssetsErrors, ThrowOnError>;
+/**
+ * List users for case
+ * List the users who can participate in a Binalyze AIR case using GET /api/v2/cases/{idOrName}/users. Read-only, paginated; the organization scope derives from the case itself. Each entity carries id, username, email, roles[] with privileges, organizations[] as {id,name} refs, admin flags (isGlobalAdmin, isOrganizationAdmin), tfaEnabled, lastLogin and onlineStatus. Use this to find valid usernames or user UUIDs before setting a case owner or assignedUsers via air-cases-create / air-cases-update. The path accepts a case UUID or exact case name.
+ */
+export declare const caseUserV2ApiControllerFilterUsers: <ThrowOnError extends boolean = false>(options: Options<CaseUserV2ApiControllerFilterUsersData, ThrowOnError>) => import("./client").RequestResult<CaseUserV2ApiControllerFilterUsersResponses, CaseUserV2ApiControllerFilterUsersErrors, ThrowOnError>;
+/**
+ * List task assignments for case
+ * List the tasks of a Binalyze AIR case using GET /api/v2/cases/{idOrName}/tasks. Read-only, paginated and ASSIGNMENT-CENTRIC: one task assigned to N assets yields N rows, each with taskId, taskName, taskType, per-asset status and endpoint fields. result.metadata.creators summarizes the unique task creators across the case. The taskId values feed air-tasks-get; assignment rows relate to air-cases-task-assignments-list. The path accepts a case UUID or exact case name. Use this to see what work (triage, acquisition, interact) ran under a case and its per-asset outcome.
+ */
+export declare const caseTaskV2ApiControllerFilterTasks: <ThrowOnError extends boolean = false>(options: Options<CaseTaskV2ApiControllerFilterTasksData, ThrowOnError>) => import("./client").RequestResult<CaseTaskV2ApiControllerFilterTasksResponses, CaseTaskV2ApiControllerFilterTasksErrors, ThrowOnError>;
+/**
+ * List case notes
+ * List the notes of a Binalyze AIR case using GET /api/v2/cases/{idOrName}/notes. Read-only, paginated. Each entity carries id, note (the text), writtenBy{id,username,email,profile}, writtenAt and timestamps. The path accepts a case UUID or exact case name. The note id values feed air-cases-notes-update and air-cases-notes-delete. Use this to read the investigation notes of a case or to find a note before editing or deleting it.
+ */
+export declare const caseNoteV2ApiControllerFilterNotes: <ThrowOnError extends boolean = false>(options: Options<CaseNoteV2ApiControllerFilterNotesData, ThrowOnError>) => import("./client").RequestResult<CaseNoteV2ApiControllerFilterNotesResponses, CaseNoteV2ApiControllerFilterNotesErrors, ThrowOnError>;
+/**
+ * Create case note
+ * Add a note to a Binalyze AIR case via POST /api/v2/cases/{idOrName}/notes. MUTATING. The case must be OPEN; notes cannot be added to closed or archived cases. dryRun DEFAULTS TO TRUE: the first call returns a would-create preview without persisting; pass dryRun=false only after the user confirms. The created note comes back in result.entities[0] with id, note, writtenBy{} and timestamps. The path accepts a case UUID or exact case name; the note text is limited to 10000 characters.
+ */
+export declare const caseNoteV2ApiControllerCreateNote: <ThrowOnError extends boolean = false>(options: Options<CaseNoteV2ApiControllerCreateNoteData, ThrowOnError>) => import("./client").RequestResult<CaseNoteV2ApiControllerCreateNoteResponses, CaseNoteV2ApiControllerCreateNoteErrors, ThrowOnError>;
+/**
+ * Delete case note
+ * Delete one note of a Binalyze AIR case via DELETE /api/v2/cases/{idOrName}/notes/{noteId}. MUTATING and IRREVERSIBLE once executed. The case must be OPEN and deletion is restricted to the note's author or an authorized manager. dryRun DEFAULTS TO TRUE: the first call returns a would-delete preview without removing anything; pass dryRun=false only after the user explicitly confirms. The path accepts a case UUID or exact case name plus the note UUID from air-cases-notes-list.
+ */
+export declare const caseNoteV2ApiControllerDeleteNote: <ThrowOnError extends boolean = false>(options: Options<CaseNoteV2ApiControllerDeleteNoteData, ThrowOnError>) => import("./client").RequestResult<CaseNoteV2ApiControllerDeleteNoteResponses, CaseNoteV2ApiControllerDeleteNoteErrors, ThrowOnError>;
+/**
+ * Update case note
+ * Edit one note of a Binalyze AIR case via PATCH /api/v2/cases/{idOrName}/notes/{noteId}. MUTATING; the note text is fully replaced. The case must be OPEN and only the note's author (or an authorized manager) may edit it. dryRun DEFAULTS TO TRUE: the first call returns a would-update preview without persisting; pass dryRun=false only after the user confirms. The path accepts a case UUID or exact case name plus the note UUID from air-cases-notes-list. The updated note comes back in result.entities[0].
+ */
+export declare const caseNoteV2ApiControllerUpdateNote: <ThrowOnError extends boolean = false>(options: Options<CaseNoteV2ApiControllerUpdateNoteData, ThrowOnError>) => import("./client").RequestResult<CaseNoteV2ApiControllerUpdateNoteResponses, CaseNoteV2ApiControllerUpdateNoteErrors, ThrowOnError>;
+/**
+ * List task assignments for case
+ * List the task assignments attached to a Binalyze AIR case using GET /api/v2/cases/{idOrName}/task-assignments. Read-only, paginated. Each entity carries id, taskId, taskName, taskType, per-asset status, asset{id,name}, hasDroneData, dataImportStatus, progress and timestamps. The id values feed air-cases-task-assignments-delete (detach) and are what air-cases-task-assignments-import adds. The path accepts a case UUID or exact case name. Use this to see which task results are part of the case evidence set.
+ */
+export declare const caseTaskAssignmentV2ApiControllerFilterTaskAssignments: <ThrowOnError extends boolean = false>(options: Options<CaseTaskAssignmentV2ApiControllerFilterTaskAssignmentsData, ThrowOnError>) => import("./client").RequestResult<CaseTaskAssignmentV2ApiControllerFilterTaskAssignmentsResponses, CaseTaskAssignmentV2ApiControllerFilterTaskAssignmentsErrors, ThrowOnError>;
+/**
+ * Import task assignments into case
+ * Import task assignments into a Binalyze AIR case via POST /api/v2/cases/{idOrName}/task-assignments/import. MUTATING with PARTIAL SUCCESS: eligible assignments are attached to the case, ineligible ones surface as skipped warnings[]. The case must be OPEN. dryRun DEFAULTS TO TRUE: the first call previews what would be imported plus warnings; pass dryRun=false only after the user confirms. Provide EXACTLY ONE source: taskId (imports that task's eligible assignments) or taskAssignmentIds (explicit assignment UUIDs). Optionally restrict to specific assets via assets[]. Get taskId from air-tasks-get / air-cases-tasks and assignment ids from air-tasks-assignments.
+ */
+export declare const caseTaskAssignmentV2ApiControllerImportTaskAssignments: <ThrowOnError extends boolean = false>(options: Options<CaseTaskAssignmentV2ApiControllerImportTaskAssignmentsData, ThrowOnError>) => import("./client").RequestResult<CaseTaskAssignmentV2ApiControllerImportTaskAssignmentsResponses, CaseTaskAssignmentV2ApiControllerImportTaskAssignmentsErrors, ThrowOnError>;
+/**
+ * Detach a task assignment from case
+ * Detach ONE task assignment from a Binalyze AIR case via DELETE /api/v2/cases/{idOrName}/task-assignments/{taskAssignmentId}. MUTATING but non-destructive: it removes ONLY the case relation; the assignment and its task data are NOT deleted. The case must be OPEN. dryRun DEFAULTS TO TRUE: the first call returns a would-remove-from-case preview; pass dryRun=false only after the user confirms. Idempotent: deleting an assignment that is not attached returns deletedCount 0 with a skipped warning instead of failing. Get the assignment UUID from air-cases-task-assignments-list.
+ */
+export declare const caseTaskAssignmentV2ApiControllerRemoveTaskAssignment: <ThrowOnError extends boolean = false>(options: Options<CaseTaskAssignmentV2ApiControllerRemoveTaskAssignmentData, ThrowOnError>) => import("./client").RequestResult<CaseTaskAssignmentV2ApiControllerRemoveTaskAssignmentResponses, CaseTaskAssignmentV2ApiControllerRemoveTaskAssignmentErrors, ThrowOnError>;
+/**
+ * Close a case
+ * Close ONE Binalyze AIR case via POST /api/v2/cases/{idOrName}/close. MUTATING. Only an open case can be closed; closed/archived cases are rejected with a lifecycle error. dryRun DEFAULTS TO TRUE: the first call returns a would-close preview without closing; pass dryRun=false only after the user confirms. reason is required (resolved, false-positive, duplicate, other) and the optional summary fields feed the closure report; the closed case comes back in result.entities[0] with a closure report URL. For two or more cases use air-cases-bulk-close instead.
+ */
+export declare const caseActionV2ApiControllerClose: <ThrowOnError extends boolean = false>(options: Options<CaseActionV2ApiControllerCloseData, ThrowOnError>) => import("./client").RequestResult<CaseActionV2ApiControllerCloseResponses, CaseActionV2ApiControllerCloseErrors, ThrowOnError>;
+/**
+ * Reopen a case
+ * Reopen ONE closed Binalyze AIR case via POST /api/v2/cases/{idOrName}/open. MUTATING. Only a CLOSED case can be reopened; open and archived cases are rejected with a lifecycle error (archiving is final, there is no unarchive). dryRun DEFAULTS TO TRUE: the first call returns a would-open preview without reopening; pass dryRun=false only after the user confirms. The reopened case comes back in result.entities[0].
+ */
+export declare const caseActionV2ApiControllerReopen: <ThrowOnError extends boolean = false>(options: Options<CaseActionV2ApiControllerReopenData, ThrowOnError>) => import("./client").RequestResult<CaseActionV2ApiControllerReopenResponses, CaseActionV2ApiControllerReopenErrors, ThrowOnError>;
+/**
+ * Archive a case
+ * Archive ONE closed Binalyze AIR case via POST /api/v2/cases/{idOrName}/archive. MUTATING and FINAL: lifecycle is open -> closed -> archived and there is NO unarchive endpoint. Only a CLOSED case can be archived; open or already-archived cases are rejected with a lifecycle error. dryRun DEFAULTS TO TRUE: the first call returns a would-archive preview without archiving; pass dryRun=false only after the user explicitly confirms. The archived case comes back in result.entities[0]. For two or more cases use air-cases-bulk-archive instead.
+ */
+export declare const caseActionV2ApiControllerArchive: <ThrowOnError extends boolean = false>(options: Options<CaseActionV2ApiControllerArchiveData, ThrowOnError>) => import("./client").RequestResult<CaseActionV2ApiControllerArchiveResponses, CaseActionV2ApiControllerArchiveErrors, ThrowOnError>;
+/**
+ * Unlink assets from a case
+ * Unlink assets from a Binalyze AIR case via POST /api/v2/cases/{idOrName}/remove-assets. MUTATING but non-destructive: it removes ONLY the case<->asset relation; the assets themselves are NOT deleted, purged or uninstalled. dryRun DEFAULTS TO TRUE: the first call previews which assets would be unlinked plus skip warnings; pass dryRun=false only after the user confirms. Target assets by id or name in assets[] (wins over filter), or with a filter JSON object matched against the assets linked to the case. Assets not attached to the case are skipped with a warning; the real run returns deletedCount.
+ */
+export declare const caseActionV2ApiControllerRemoveAssets: <ThrowOnError extends boolean = false>(options: Options<CaseActionV2ApiControllerRemoveAssetsData, ThrowOnError>) => import("./client").RequestResult<CaseActionV2ApiControllerRemoveAssetsResponses, CaseActionV2ApiControllerRemoveAssetsErrors, ThrowOnError>;
+/**
+ * List cases
+ * List Binalyze AIR cases using GET /api/v2/cases. Read-only, paginated. Each entity uses object refs: owner{id,name}, organizations[{id,name}], category{id,name}, tags[], assignedUsers[], plus taskCounts{} and assets/taskAssignments {count,url} summaries. Lifecycle is open -> closed -> archived (no unarchive). Reference filters (owner, assignedUser, category, tags) accept a UUID or an exact name/username; name is a case-insensitive substring match. Use this to find a case id or name before calling air-cases-get, air-cases-update, air-cases-close or the case sub-resource tools. organizations defaults to all accessible organizations.
+ */
+export declare const caseV2ApiControllerFilterCases: <ThrowOnError extends boolean = false>(options?: Options<CaseV2ApiControllerFilterCasesData, ThrowOnError>) => import("./client").RequestResult<CaseV2ApiControllerFilterCasesResponses, CaseV2ApiControllerFilterCasesErrors, ThrowOnError>;
+/**
+ * Create a case
+ * Create a single Binalyze AIR case via POST /api/v2/cases. MUTATING. dryRun DEFAULTS TO TRUE: the first call returns a would-create preview (resolved unique name, organization, warnings) without persisting; pass dryRun=false only after the user confirms. Reference fields (owner, organization, category, tags, assignedUsers) accept a UUID or an exact name/username and are resolved before creation. The case name cannot be UUID-shaped and is auto-suffixed on a name conflict. owner defaults to the caller and organization is defaulted for single-organization callers. The created case is returned in result.entities[0].
+ */
+export declare const caseV2ApiControllerCreateCase: <ThrowOnError extends boolean = false>(options: Options<CaseV2ApiControllerCreateCaseData, ThrowOnError>) => import("./client").RequestResult<CaseV2ApiControllerCreateCaseResponses, CaseV2ApiControllerCreateCaseErrors, ThrowOnError>;
+/**
+ * Get case by id or name
+ * Fetch one Binalyze AIR case by UUID or case name using GET /api/v2/cases/{idOrName}. Read-only; the case is wrapped in result.entities[0]. The entity uses object refs (owner{}, organizations[{id,name}], category{}, tags[], assignedUsers[]), taskCounts{}, and assets/taskAssignments {count,url} summaries. Lifecycle status is open, closed or archived. A 404 also covers cases outside the caller's organizations (leak-safe), so do not infer the case does not exist. Use air-cases-list to discover ids and names first.
+ */
+export declare const caseV2ApiControllerGetCaseByIdOrName: <ThrowOnError extends boolean = false>(options: Options<CaseV2ApiControllerGetCaseByIdOrNameData, ThrowOnError>) => import("./client").RequestResult<CaseV2ApiControllerGetCaseByIdOrNameResponses, CaseV2ApiControllerGetCaseByIdOrNameErrors, ThrowOnError>;
+/**
+ * Update a case
+ * Partially update a Binalyze AIR case via PATCH /api/v2/cases/{idOrName}. MUTATING. dryRun DEFAULTS TO TRUE: the first call returns a would-update preview without persisting; pass dryRun=false only after the user confirms. Only supplied fields change. Owner change is folded into this endpoint (there is no separate change-owner endpoint). tags and metadata are a FULL REPLACE, not a merge; removeCategory=true clears the category. Reference fields (owner, assignedUsers, category, tags) accept a UUID or an exact name/username. If nothing effectively changes the API answers with a NOTHING_CHANGED error envelope.
+ */
+export declare const caseV2ApiControllerUpdateCase: <ThrowOnError extends boolean = false>(options: Options<CaseV2ApiControllerUpdateCaseData, ThrowOnError>) => import("./client").RequestResult<CaseV2ApiControllerUpdateCaseResponses, CaseV2ApiControllerUpdateCaseErrors, ThrowOnError>;
 /**
  * Check if a case name is available
  * Validates whether a given case name is exists
@@ -759,6 +987,26 @@ export declare const caseExportCases: <ThrowOnError extends boolean = false>(opt
 export declare const caseExportCaseNotes: <ThrowOnError extends boolean = false>(options: Options<CaseExportCaseNotesData, ThrowOnError>) => import("./client").RequestResult<CaseExportCaseNotesResponses, unknown, ThrowOnError>;
 export declare const caseExportCaseEndpoints0: <ThrowOnError extends boolean = false>(options: Options<CaseExportCaseEndpoints0Data, ThrowOnError>) => import("./client").RequestResult<CaseExportCaseEndpoints0Responses, unknown, ThrowOnError>;
 export declare const caseExportCaseEndpoints1: <ThrowOnError extends boolean = false>(options: Options<CaseExportCaseEndpoints1Data, ThrowOnError>) => import("./client").RequestResult<CaseExportCaseEndpoints1Responses, unknown, ThrowOnError>;
+/**
+ * Download a case assets expression export
+ * Downloads CSV for a previously created case assets expression export
+ */
+export declare const casesDownloadAssetsExpressionExport: <ThrowOnError extends boolean = false>(options: Options<CasesDownloadAssetsExpressionExportData, ThrowOnError>) => import("./client").RequestResult<CasesDownloadAssetsExpressionExportResponses, unknown, ThrowOnError>;
+/**
+ * Create a case assets expression export
+ * Caches an expression filter for downloading case-linked assets as CSV. Use the returned exportUrl within 60 seconds.
+ */
+export declare const casesCreateAssetsExpressionExport: <ThrowOnError extends boolean = false>(options: Options<CasesCreateAssetsExpressionExportData, ThrowOnError>) => import("./client").RequestResult<CasesCreateAssetsExpressionExportResponses, unknown, ThrowOnError>;
+/**
+ * Download a case assets expression export
+ * Downloads CSV for a previously created case assets expression export
+ */
+export declare const casesDownloadAssetsExpressionExport2: <ThrowOnError extends boolean = false>(options: Options<CasesDownloadAssetsExpressionExport2Data, ThrowOnError>) => import("./client").RequestResult<CasesDownloadAssetsExpressionExport2Responses, unknown, ThrowOnError>;
+/**
+ * Create a case assets expression export
+ * Caches an expression filter for downloading case-linked assets as CSV. Use the returned exportUrl within 60 seconds.
+ */
+export declare const casesCreateAssetsExpressionExport2: <ThrowOnError extends boolean = false>(options: Options<CasesCreateAssetsExpressionExport2Data, ThrowOnError>) => import("./client").RequestResult<CasesCreateAssetsExpressionExport2Responses, unknown, ThrowOnError>;
 /**
  * Retrieve a specific case
  * Fetches detailed information about a specific case
@@ -813,6 +1061,16 @@ export declare const casesGetEndpoints: <ThrowOnError extends boolean = false>(o
  * Retrieves a paginated list of endpoints/assets linked to the specified case
  */
 export declare const casesGetEndpoints2: <ThrowOnError extends boolean = false>(options: Options<CasesGetEndpoints2Data, ThrowOnError>) => import("./client").RequestResult<CasesGetEndpoints2Responses, unknown, ThrowOnError>;
+/**
+ * Get case assets by expression filter
+ * Retrieves a paginated list of endpoints/assets linked to the specified case using a filter expression
+ */
+export declare const casesGetAssetsByFilterExpression: <ThrowOnError extends boolean = false>(options: Options<CasesGetAssetsByFilterExpressionData, ThrowOnError>) => import("./client").RequestResult<CasesGetAssetsByFilterExpressionResponses, unknown, ThrowOnError>;
+/**
+ * Get case assets by expression filter
+ * Retrieves a paginated list of endpoints/assets linked to the specified case using a filter expression
+ */
+export declare const casesGetAssetsByFilterExpression2: <ThrowOnError extends boolean = false>(options: Options<CasesGetAssetsByFilterExpression2Data, ThrowOnError>) => import("./client").RequestResult<CasesGetAssetsByFilterExpression2Responses, unknown, ThrowOnError>;
 /**
  * Get activities for a specific case
  * Retrieves a paginated list of activities for a case
@@ -976,73 +1234,94 @@ export declare const interactCommandSnippetTagsDelete: <ThrowOnError extends boo
 export declare const interactCommandSnippetTagsUpdate: <ThrowOnError extends boolean = false>(options: Options<InteractCommandSnippetTagsUpdateData, ThrowOnError>) => import("./client").RequestResult<InteractCommandSnippetTagsUpdateResponses, unknown, ThrowOnError>;
 /**
  * List InterAct command snippets
+ * List Binalyze AIR InterAct command snippets (reusable shell scripts in the InterAct library) using GET /api/v2/libraries/interact/snippets. Read-only and paginated. Each entity is a snippet summary: id, name, description, script, platforms, tags [{id,name}], organizations [{id,name}], origin (user or predefined), createdBy, createdAt/updatedAt. Use this when the user asks to list or search InterAct snippets/scripts, or needs a snippet id or exact name before get, update, or delete. sortBy accepts only name, createdAt, updatedAt (default name ASC). Predefined (system) snippets have origin=predefined and cannot be modified or deleted.
  */
 export declare const interactLibrarySnippetV2ApiControllerList: <ThrowOnError extends boolean = false>(options?: Options<InteractLibrarySnippetV2ApiControllerListData, ThrowOnError>) => import("./client").RequestResult<InteractLibrarySnippetV2ApiControllerListResponses, InteractLibrarySnippetV2ApiControllerListErrors, ThrowOnError>;
 /**
  * Create InterAct command snippet
+ * Create a Binalyze AIR InterAct command snippet (a reusable shell script in the InterAct library) via POST /api/v2/libraries/interact/snippets. MUTATING: persists a new snippet. `name` (max 255 alphanumeric chars, not UUID-shaped) and `script` (max 5000 chars) are required. Omitted platforms means all platforms. Omitted organizations auto-selects the caller's single accessible organization; multi-org and all-orgs callers must pass organizations explicitly (400 ORGANIZATION_REQUIRED). Unknown tag names are created in the shared InterAct tag store. A name collision within the target organizations is resolved by auto-suffixing; a warning reports the adjusted name. dryRun DEFAULTS TO TRUE: the first call previews the would-create entity (action='would-create', final name after suffixing) without persisting anything; pass dryRun=false only to actually create after the user confirms. Success returns entities[0] with the created snippet detail plus warnings[] (e.g. name adjustments).
  */
 export declare const interactLibrarySnippetV2ApiControllerCreate: <ThrowOnError extends boolean = false>(options: Options<InteractLibrarySnippetV2ApiControllerCreateData, ThrowOnError>) => import("./client").RequestResult<InteractLibrarySnippetV2ApiControllerCreateResponses, InteractLibrarySnippetV2ApiControllerCreateErrors, ThrowOnError>;
 /**
  * Bulk delete InterAct command snippets
+ * Bulk delete Binalyze AIR InterAct command snippets by id or name via POST /api/v2/libraries/interact/snippets/delete. MUTATING and irreversible. Targets that are unknown or predefined (system) are skipped and reported in warnings[]; the delete itself is all-or-nothing over the resolved targets (if one vanishes mid-delete, nothing is deleted and a warning explains it). dryRun DEFAULTS TO TRUE: the first call returns entities[] previews (action:'would-delete' per resolved snippet) plus warnings for skipped targets, without deleting anything; pass dryRun=false only to actually delete after the user confirms. Success returns { deletedCount, warnings }. For a single snippet prefer air-interact-snippets-delete.
  */
 export declare const interactLibrarySnippetV2ApiControllerBulkDelete: <ThrowOnError extends boolean = false>(options: Options<InteractLibrarySnippetV2ApiControllerBulkDeleteData, ThrowOnError>) => import("./client").RequestResult<InteractLibrarySnippetV2ApiControllerBulkDeleteResponses, InteractLibrarySnippetV2ApiControllerBulkDeleteErrors, ThrowOnError>;
 /**
  * Delete InterAct command snippet
+ * Delete ONE Binalyze AIR InterAct command snippet by UUID or exact name via DELETE /api/v2/libraries/interact/snippets/{idOrName}. MUTATING and irreversible: removes the snippet record and its tag relations. Predefined (system, origin=predefined) snippets cannot be deleted and return an error. An unknown id or name returns 404. dryRun DEFAULTS TO TRUE: the first call returns entities[0] = { id, name, action:'would-delete', effects } without deleting anything; pass dryRun=false only to actually delete after the user confirms. Success returns entities[0] = { id, name } of the deleted snippet. For deleting several snippets at once use air-interact-snippets-bulk-delete.
  */
 export declare const interactLibrarySnippetV2ApiControllerDelete: <ThrowOnError extends boolean = false>(options: Options<InteractLibrarySnippetV2ApiControllerDeleteData, ThrowOnError>) => import("./client").RequestResult<InteractLibrarySnippetV2ApiControllerDeleteResponses, InteractLibrarySnippetV2ApiControllerDeleteErrors, ThrowOnError>;
 /**
  * Get InterAct command snippet by id or name
+ * Get ONE Binalyze AIR InterAct command snippet by UUID or exact name using GET /api/v2/libraries/interact/snippets/{idOrName}. Read-only. Returns entities[0] with the full snippet detail: id, name, description, script, platforms, tags [{id,name}], organizations [{id,name}], origin (user or predefined), createdBy, createdAt/updatedAt. Use this when the user asks for a specific snippet's script or metadata. An unknown id or name returns 404. If the name is not exact, use air-interact-snippets-list with a name filter first.
  */
 export declare const interactLibrarySnippetV2ApiControllerGet: <ThrowOnError extends boolean = false>(options: Options<InteractLibrarySnippetV2ApiControllerGetData, ThrowOnError>) => import("./client").RequestResult<InteractLibrarySnippetV2ApiControllerGetResponses, InteractLibrarySnippetV2ApiControllerGetErrors, ThrowOnError>;
 /**
  * Update InterAct command snippet
+ * Update ONE Binalyze AIR InterAct command snippet by UUID or exact name via PATCH /api/v2/libraries/interact/snippets/{idOrName}. MUTATING, partial update: only the fields you pass are changed. Updatable fields: name, script, description, platforms, tags, organizations. Passing tags=[] clears all tags; passing organizations replaces the organization scope (requires authority over the current scope). Predefined (system, origin=predefined) snippets cannot be modified and return an error. Sending no updatable field returns HTTP 200 with success:false and a NOTHING_CHANGED error entry. dryRun DEFAULTS TO TRUE: the first call previews the would-update entity with changedFields without persisting; pass dryRun=false only to actually update after the user confirms. Success returns entities[0] with the updated snippet detail plus warnings[] (e.g. name auto-suffix on collision).
  */
 export declare const interactLibrarySnippetV2ApiControllerUpdate: <ThrowOnError extends boolean = false>(options: Options<InteractLibrarySnippetV2ApiControllerUpdateData, ThrowOnError>) => import("./client").RequestResult<InteractLibrarySnippetV2ApiControllerUpdateResponses, InteractLibrarySnippetV2ApiControllerUpdateErrors, ThrowOnError>;
 /**
  * List InterAct command snippet tags
+ * List Binalyze AIR InterAct snippet tags (the shared tag store of the InterAct library) using GET /api/v2/libraries/interact/tags. Read-only and paginated. Each entity is a tag: id, name, organizations [{id,name}], createdAt/updatedAt, and (with withCount=true) the number of snippets using it. Use this when the user asks to list or search InterAct tags, or needs a tag id or exact name before get, update, delete, or before tagging snippets. sortBy accepts only name, createdAt, updatedAt (default name ASC).
  */
 export declare const interactLibraryTagV2ApiControllerList: <ThrowOnError extends boolean = false>(options?: Options<InteractLibraryTagV2ApiControllerListData, ThrowOnError>) => import("./client").RequestResult<InteractLibraryTagV2ApiControllerListResponses, InteractLibraryTagV2ApiControllerListErrors, ThrowOnError>;
 /**
  * Create InterAct command snippet tag
+ * Create a Binalyze AIR InterAct snippet tag (in the shared tag store of the InterAct library) via POST /api/v2/libraries/interact/tags. MUTATING: persists a new tag. `name` (max 100 alphanumeric chars, not UUID-shaped) is required. Omitted organizations auto-selects the caller's single accessible organization; multi-org and all-orgs callers must pass organizations explicitly (400 ORGANIZATION_REQUIRED). A name collision within the target organizations is resolved by auto-suffixing; a warning reports the adjusted name. dryRun DEFAULTS TO TRUE: the first call previews the would-create entity (action='would-create', final name after suffixing) without persisting anything; pass dryRun=false only to actually create after the user confirms. Success returns entities[0] with the created tag plus warnings[]. Note: air-interact-snippets-create and -update also auto-create unknown tag names, so an explicit tag create is only needed when the user wants the tag itself.
  */
 export declare const interactLibraryTagV2ApiControllerCreate: <ThrowOnError extends boolean = false>(options: Options<InteractLibraryTagV2ApiControllerCreateData, ThrowOnError>) => import("./client").RequestResult<InteractLibraryTagV2ApiControllerCreateResponses, InteractLibraryTagV2ApiControllerCreateErrors, ThrowOnError>;
 /**
  * Bulk delete InterAct command snippet tags
+ * Bulk delete Binalyze AIR InterAct snippet tags by id or name via POST /api/v2/libraries/interact/tags/delete. MUTATING and irreversible: removes the tag records and their snippet-tag relations (snippets themselves are kept). Targets that are unknown or system tags are skipped and reported in warnings[]; deletion is per-tag, so a tag already deleted concurrently counts as gone. dryRun DEFAULTS TO TRUE: the first call returns entities[] previews (action:'would-delete' per resolved tag) plus warnings for skipped targets, without deleting anything; pass dryRun=false only to actually delete after the user confirms. Success returns { deletedCount, warnings }. For a single tag prefer air-interact-tags-delete.
  */
 export declare const interactLibraryTagV2ApiControllerBulkDelete: <ThrowOnError extends boolean = false>(options: Options<InteractLibraryTagV2ApiControllerBulkDeleteData, ThrowOnError>) => import("./client").RequestResult<InteractLibraryTagV2ApiControllerBulkDeleteResponses, InteractLibraryTagV2ApiControllerBulkDeleteErrors, ThrowOnError>;
 /**
  * Delete InterAct command snippet tag
+ * Delete ONE Binalyze AIR InterAct snippet tag by UUID or exact name via DELETE /api/v2/libraries/interact/tags/{idOrName}. MUTATING and irreversible: removes the tag record and its snippet-tag relations (snippets themselves are kept). System tags cannot be deleted and return an error. An unknown id or name returns 404. dryRun DEFAULTS TO TRUE: the first call returns entities[0] = { id, name, action:'would-delete', effects } without deleting anything; pass dryRun=false only to actually delete after the user confirms. Success returns entities[0] = { id, name } of the deleted tag. For deleting several tags at once use air-interact-tags-bulk-delete.
  */
 export declare const interactLibraryTagV2ApiControllerDelete: <ThrowOnError extends boolean = false>(options: Options<InteractLibraryTagV2ApiControllerDeleteData, ThrowOnError>) => import("./client").RequestResult<InteractLibraryTagV2ApiControllerDeleteResponses, InteractLibraryTagV2ApiControllerDeleteErrors, ThrowOnError>;
 /**
  * Get InterAct command snippet tag by id or name
- * v2-only endpoint. Returns a single tag wrapped in entities[0].
+ * Get ONE Binalyze AIR InterAct snippet tag by UUID or exact name using GET /api/v2/libraries/interact/tags/{idOrName}. Read-only. Returns entities[0] with the tag detail: id, name, organizations [{id,name}], snippet usage count, createdAt/updatedAt. Use this when the user asks about a specific InterAct tag. An unknown id or name returns 404. If the name is not exact, use air-interact-tags-list with a name filter first.
  */
 export declare const interactLibraryTagV2ApiControllerGet: <ThrowOnError extends boolean = false>(options: Options<InteractLibraryTagV2ApiControllerGetData, ThrowOnError>) => import("./client").RequestResult<InteractLibraryTagV2ApiControllerGetResponses, InteractLibraryTagV2ApiControllerGetErrors, ThrowOnError>;
 /**
  * Update InterAct command snippet tag
+ * Update ONE Binalyze AIR InterAct snippet tag by UUID or exact name via PATCH /api/v2/libraries/interact/tags/{idOrName}. MUTATING, partial update: only the fields you pass are changed. Updatable fields: name and organizations (replaces the current organization scope; requires authority over the current scope). System tags cannot be updated and return an error. Sending no updatable field returns HTTP 200 with success:false and a NOTHING_CHANGED error entry. dryRun DEFAULTS TO TRUE: the first call previews the would-update entity with changedFields without persisting; pass dryRun=false only to actually update after the user confirms. Success returns entities[0] with the updated tag plus warnings[] (e.g. name auto-suffix on collision).
  */
 export declare const interactLibraryTagV2ApiControllerUpdate: <ThrowOnError extends boolean = false>(options: Options<InteractLibraryTagV2ApiControllerUpdateData, ThrowOnError>) => import("./client").RequestResult<InteractLibraryTagV2ApiControllerUpdateResponses, InteractLibraryTagV2ApiControllerUpdateErrors, ThrowOnError>;
 /**
  * List InterAct library files
+ * List Binalyze AIR InterAct library files (binaries/scripts responders can download during a shell session) using GET /api/v2/libraries/interact/files. Read-only and paginated. Each entity is a file record: id, name, size, sha256, organizations [{id,name}], uploadedBy/uploadedAt, lastUsedBy/lastUsedAt. File CONTENT is not included; use air-interact-files-download for the bytes. Use this when the user asks to list or search InterAct library files, verify a file by sha256, or needs a file id or exact name before download or delete. searchTerm matches name or sha256 (contains, case-insensitive); sha256 is an exact full-hash lookup. sortBy accepts only name, size, uploadedAt, uploadedBy, lastUsedAt, lastUsedBy (default uploadedAt DESC).
  */
 export declare const interactLibraryFileV2ApiControllerList: <ThrowOnError extends boolean = false>(options?: Options<InteractLibraryFileV2ApiControllerListData, ThrowOnError>) => import("./client").RequestResult<InteractLibraryFileV2ApiControllerListResponses, InteractLibraryFileV2ApiControllerListErrors, ThrowOnError>;
 /**
  * Upload InterAct library file
+ * Upload a file into the Binalyze AIR InterAct library via POST /api/v2/libraries/interact/files (multipart field 'file'). MUTATING: persists the file so responders can download it during InterAct shell sessions. Limits: max 4 GB per upload and 20 GB total library size. A name collision within the target organizations is resolved by auto-suffixing; a warning reports the adjusted name. dryRun DEFAULTS TO TRUE: the first call previews the would-create entity (name, size, sha256) without persisting anything; pass dryRun=false only to actually upload after the user confirms. Success returns entities[0] with the file record (id, name, size, sha256, organizations) plus warnings[], and a Location header pointing at the new resource.
  */
 export declare const interactLibraryFileV2ApiControllerUpload: <ThrowOnError extends boolean = false>(options: Options<InteractLibraryFileV2ApiControllerUploadData, ThrowOnError>) => import("./client").RequestResult<InteractLibraryFileV2ApiControllerUploadResponses, InteractLibraryFileV2ApiControllerUploadErrors, ThrowOnError>;
 /**
  * Bulk delete InterAct library files
+ * Bulk delete Binalyze AIR InterAct library files by id or name via POST /api/v2/libraries/interact/files/delete. MUTATING and irreversible: removes the file records and their stored content. Unknown targets are skipped and reported in warnings[]; the delete itself is all-or-nothing over the resolved targets (if one vanishes mid-delete, nothing is deleted and a warning explains it). dryRun DEFAULTS TO TRUE: the first call returns entities[] previews (action:'would-delete' per resolved file) plus warnings for skipped targets, without deleting anything; pass dryRun=false only to actually delete after the user confirms. Success returns { deletedCount, warnings }. For a single file prefer air-interact-files-delete.
  */
 export declare const interactLibraryFileV2ApiControllerBulkDelete: <ThrowOnError extends boolean = false>(options: Options<InteractLibraryFileV2ApiControllerBulkDeleteData, ThrowOnError>) => import("./client").RequestResult<InteractLibraryFileV2ApiControllerBulkDeleteResponses, InteractLibraryFileV2ApiControllerBulkDeleteErrors, ThrowOnError>;
 /**
  * Delete InterAct library file
+ * Delete ONE Binalyze AIR InterAct library file by UUID or exact name via DELETE /api/v2/libraries/interact/files/{idOrName}. MUTATING and irreversible: removes the library-file record, its file-info record, and the stored file content. An unknown id or name returns 404. dryRun DEFAULTS TO TRUE: the first call returns entities[0] = { id, name, action:'would-delete', effects } without deleting anything; pass dryRun=false only to actually delete after the user confirms. Success returns entities[0] = { id, name } of the deleted file. For deleting several files at once use air-interact-files-bulk-delete.
  */
 export declare const interactLibraryFileV2ApiControllerDelete: <ThrowOnError extends boolean = false>(options: Options<InteractLibraryFileV2ApiControllerDeleteData, ThrowOnError>) => import("./client").RequestResult<InteractLibraryFileV2ApiControllerDeleteResponses, InteractLibraryFileV2ApiControllerDeleteErrors, ThrowOnError>;
 /**
  * Download InterAct library file by id or name
+ * Download ONE Binalyze AIR InterAct library file by UUID or exact name via GET /api/v2/libraries/interact/files/{idOrName}. Read-only; the endpoint streams the file content as an attachment (it bypasses the JSON envelope). This tool saves the bytes to a file inside the current worktree (outputPath, default artifacts/interact-library-file.bin) and returns { outputPath, byteLength }; read the saved file for the content. Use air-interact-files-list first if you only need the file's size/sha256 metadata without downloading content. An unknown id or name returns 404. Library files can be forensic tooling or scripts; treat downloaded content carefully and do not execute it.
  */
 export declare const interactLibraryFileV2ApiControllerDownload: <ThrowOnError extends boolean = false>(options: Options<InteractLibraryFileV2ApiControllerDownloadData, ThrowOnError>) => import("./client").RequestResult<InteractLibraryFileV2ApiControllerDownloadResponses, InteractLibraryFileV2ApiControllerDownloadErrors, ThrowOnError>;
+/**
+ * List native InterAct shell commands
+ * List the AIR native InterAct shell commands (and their aliases, descriptions, usage) via GET /api/v2/interact/commands. Use this to GROUND command handling instead of guessing: before telling the user a command looks like a typo, call this tool (optionally with searchTerm) and suggest the closest real command name from `commandNames`. Note: a command that is NOT in this list is not necessarily invalid -- air-assets-interact-run also runs arbitrary shell commands. So only offer a "did you mean" when a close native match exists. Read-only.
+ */
+export declare const interactCommandV2ApiControllerList: <ThrowOnError extends boolean = false>(options?: Options<InteractCommandV2ApiControllerListData, ThrowOnError>) => import("./client").RequestResult<InteractCommandV2ApiControllerListResponses, InteractCommandV2ApiControllerListErrors, ThrowOnError>;
 export declare const multipartUploadInitializeHead: <ThrowOnError extends boolean = false>(options?: Options<MultipartUploadInitializeHeadData, ThrowOnError>) => import("./client").RequestResult<MultipartUploadInitializeHeadResponses, unknown, ThrowOnError>;
 export declare const multipartUploadInitialize: <ThrowOnError extends boolean = false>(options?: Options<MultipartUploadInitializeData, ThrowOnError>) => import("./client").RequestResult<MultipartUploadInitializeResponses, unknown, ThrowOnError>;
 export declare const multipartUploadFinalize: <ThrowOnError extends boolean = false>(options?: Options<MultipartUploadFinalizeData, ThrowOnError>) => import("./client").RequestResult<MultipartUploadFinalizeResponses, unknown, ThrowOnError>;
@@ -1134,6 +1413,51 @@ export declare const cloudAccountsGetCloudAccountById: <ThrowOnError extends boo
 export declare const cloudAccountsUpdateCloudAccount: <ThrowOnError extends boolean = false>(options: Options<CloudAccountsUpdateCloudAccountData, ThrowOnError>) => import("./client").RequestResult<CloudAccountsUpdateCloudAccountResponses, unknown, ThrowOnError>;
 export declare const cloudAccountsSyncCloudAccount: <ThrowOnError extends boolean = false>(options: Options<CloudAccountsSyncCloudAccountData, ThrowOnError>) => import("./client").RequestResult<CloudAccountsSyncCloudAccountResponses, unknown, ThrowOnError>;
 export declare const cloudAccountsSyncAllCloudAccount: <ThrowOnError extends boolean = false>(options: Options<CloudAccountsSyncAllCloudAccountData, ThrowOnError>) => import("./client").RequestResult<CloudAccountsSyncAllCloudAccountResponses, unknown, ThrowOnError>;
+/**
+ * List investigation flags
+ * List Binalyze AIR investigation flags (the shared evidence-flag library) using GET /api/v2/libraries/flags. Read-only and paginated. Each entity: numeric id, name, description, color, organizations [{ id, name }], createdBy, createdAt/updatedAt. filter[name] is a case-insensitive contains match; sortBy accepts name, createdAt, updatedAt (default name ASC). Use this to find a flag id or exact name before update/delete or before flagging evidence in an investigation.
+ */
+export declare const flagsLibraryV2ApiControllerList: <ThrowOnError extends boolean = false>(options?: Options<FlagsLibraryV2ApiControllerListData, ThrowOnError>) => import("./client").RequestResult<FlagsLibraryV2ApiControllerListResponses, FlagsLibraryV2ApiControllerListErrors, ThrowOnError>;
+/**
+ * Create investigation flag
+ * Create a Binalyze AIR investigation flag via POST /api/v2/libraries/flags. MUTATING: persists a new flag. Required: name (max 50 chars, not purely numeric). Optional: color (CSS color, defaults to #4A4D55), description, and organization (id or exact name; defaults to the caller organization when the caller has exactly one; multi-organization and all-organization callers must pass it explicitly or receive 400 ORGANIZATION_REQUIRED). A name collision within the organization is resolved by auto-suffixing with a NAME_ADJUSTED warning; if a unique name cannot be allocated, returns 409 NAME_CONFLICT. dryRun DEFAULTS TO TRUE in the tool layer: the first call previews the would-create entity (action='would-create', final name) without persisting; pass dryRun=false only after the user confirms. Success returns entities[0] with the created flag.
+ */
+export declare const flagsLibraryV2ApiControllerCreate: <ThrowOnError extends boolean = false>(options: Options<FlagsLibraryV2ApiControllerCreateData, ThrowOnError>) => import("./client").RequestResult<FlagsLibraryV2ApiControllerCreateResponses, FlagsLibraryV2ApiControllerCreateErrors, ThrowOnError>;
+/**
+ * Delete investigation flag
+ * Delete ONE Binalyze AIR investigation flag by numeric id or exact name via DELETE /api/v2/libraries/flags/{idOrName}. MUTATING and irreversible: removes the flag record. System-created flags cannot be deleted (406). dryRun DEFAULTS TO TRUE in the tool layer: the first call returns entities[0] = { id, name, action:'would-delete' } without deleting; pass dryRun=false only after the user confirms. Success returns entities[0] = { id, name } of the deleted flag.
+ */
+export declare const flagsLibraryV2ApiControllerDelete: <ThrowOnError extends boolean = false>(options: Options<FlagsLibraryV2ApiControllerDeleteData, ThrowOnError>) => import("./client").RequestResult<FlagsLibraryV2ApiControllerDeleteResponses, FlagsLibraryV2ApiControllerDeleteErrors, ThrowOnError>;
+/**
+ * Get investigation flag by id or name
+ * Get ONE Binalyze AIR investigation flag by numeric id or exact name using GET /api/v2/libraries/flags/{idOrName}. Read-only. Returns entities[0] with the flag detail. An unknown name returns 404 with ranked did-you-mean candidates under errors[0].details.suggestions; a name shared across organizations returns 400 AMBIGUOUS_NAME with errors[0].details.matches.
+ */
+export declare const flagsLibraryV2ApiControllerGet: <ThrowOnError extends boolean = false>(options: Options<FlagsLibraryV2ApiControllerGetData, ThrowOnError>) => import("./client").RequestResult<FlagsLibraryV2ApiControllerGetResponses, FlagsLibraryV2ApiControllerGetErrors, ThrowOnError>;
+/**
+ * Update investigation flag
+ * Update ONE Binalyze AIR investigation flag by numeric id or exact name via PATCH /api/v2/libraries/flags/{idOrName}. MUTATING, partial: only the fields you pass (name, color, description) change; null is treated as not provided. Sending no updatable field returns HTTP 200 with success:false and a NOTHING_CHANGED error entry. A rename collision is resolved by auto-suffixing with a NAME_ADJUSTED warning. dryRun DEFAULTS TO TRUE in the tool layer: preview first, then pass dryRun=false to persist. Success returns entities[0] with the updated flag (fresh timestamps).
+ */
+export declare const flagsLibraryV2ApiControllerUpdate: <ThrowOnError extends boolean = false>(options: Options<FlagsLibraryV2ApiControllerUpdateData, ThrowOnError>) => import("./client").RequestResult<FlagsLibraryV2ApiControllerUpdateResponses, FlagsLibraryV2ApiControllerUpdateErrors, ThrowOnError>;
+/**
+ * Flag evidence rows in an investigation
+ * Mark rows of one investigation with a flag via POST /api/v2/investigations/{idOrName}/flag. MUTATING. body.flag accepts a numeric flag id or exact flag name from the /api/v2/libraries/flags library (the flag must belong to the investigation's organization). A flag NAME that does not exist yet is auto-created in the investigation's organization and reported under warnings[] code=FLAG_CREATED (dryRun previews it as FLAG_WILL_BE_CREATED with flag.id=null); a numeric flag id must already exist (404 otherwise). Auto-creating a flag requires the case-container manage privilege (the same write the /api/v2/libraries/flags create endpoint needs); without it an unknown flag name is rejected with 403. If every items[] row is skipped, the missing flag is NOT created (warnings[] code=FLAG_NOT_CREATED, in the dryRun preview as well) so bad coordinates never mutate the flag library. COORDINATES (critical): each items[] row is identified by evidence + objectId + taskAssignmentId. evidence accepts the evidence TABLE name exactly as air-investigations-schema/sql-query show it (e.g. linux_shell_history) or its bare section name (e.g. shell_history); the endpoint normalizes to the bare section the UI joins on, so just pass the table name you queried. objectId MUST be the row's air_object_id column -- NOT air_id and NOT the full-text-search id/primary key. SOURCE selects the surface (and where the flag shows): EVIDENCE (default) = raw evidence rows, FINDING = the Findings view (what users usually mean by "findings"/"bulgular"), TIMELINE = timeline rows. Take items[] from that SAME surface: for EVIDENCE, evidence=<table name> and objectId=<that table>.air_object_id; for FINDING, evidence=air_findings_view.section and objectId=air_findings_view.air_evidence_object_id (its air_evidence_object_id, NOT its air_object_id); for TIMELINE, evidence=evidence_category and objectId=air_evidence_object_id of the timeline row. EXAMPLE (flag two evidence rows): source omitted (EVIDENCE), items=[{"evidence":"windows_processes","objectId":48,"taskAssignmentId":"604df464-...","}, {"evidence":"windows_user_folders","objectId":1,"taskAssignmentId":"2eb56bc4-..."}] where 48 and 1 are air_object_id values discovered with air-investigations-sql-query (e.g. SELECT air_object_id, air_task_assignment_id FROM windows_processes ...). Rows with an unknown evidence name or coordinates matching no real row are SKIPPED (not written) and reported under warnings[] code=ROWS_SKIPPED with a per-item reason (UNKNOWN_EVIDENCE / ROW_NOT_FOUND); itemCount reflects only the rows actually flagged. dryRun DEFAULTS TO TRUE in the tool layer: the first call previews (action='would-flag', resolved flag, itemCount, any ROWS_SKIPPED warnings) without changing anything; pass dryRun=false only after the user confirms.
+ */
+export declare const investigationEvidenceFlagV2ApiControllerFlagEvidence: <ThrowOnError extends boolean = false>(options: Options<InvestigationEvidenceFlagV2ApiControllerFlagEvidenceData, ThrowOnError>) => import("./client").RequestResult<InvestigationEvidenceFlagV2ApiControllerFlagEvidenceResponses, InvestigationEvidenceFlagV2ApiControllerFlagEvidenceErrors, ThrowOnError>;
+/**
+ * Remove a flag from evidence rows in an investigation
+ * Remove one flag from rows of one investigation via POST /api/v2/investigations/{idOrName}/unflag. MUTATING. Same body/coordinate contract as the flag endpoint: body.flag is a numeric flag id or exact flag name (must already exist -- unlike the flag endpoint, unflag never auto-creates), items[] identifies rows by evidence (table name like linux_shell_history or its bare section shell_history -- normalized server-side) + objectId (the row air_object_id, NOT air_id) + taskAssignmentId, and source (EVIDENCE default, FINDING, TIMELINE) must match the surface the flag was applied to, with coordinates from that same surface (see the flag endpoint). Rows that do not carry the flag are ignored. Unknown evidence names or coordinates matching no real row are skipped and reported under warnings[] code=ROWS_SKIPPED with a per-item reason. itemCount reflects the rows actually processed; it is not the number of rows that actually changed. dryRun DEFAULTS TO TRUE in the tool layer: the first call previews (action='would-unflag') without changing anything; pass dryRun=false only after the user confirms.
+ */
+export declare const investigationEvidenceFlagV2ApiControllerUnflagEvidence: <ThrowOnError extends boolean = false>(options: Options<InvestigationEvidenceFlagV2ApiControllerUnflagEvidenceData, ThrowOnError>) => import("./client").RequestResult<InvestigationEvidenceFlagV2ApiControllerUnflagEvidenceResponses, InvestigationEvidenceFlagV2ApiControllerUnflagEvidenceErrors, ThrowOnError>;
+/**
+ * Discover investigation tables and columns
+ * Two-stage schema discovery for one investigation via POST /api/v2/investigations/{idOrName}/schema. Read-only. Empty body {} lists populated tables/materialized views using catalog row estimates and available regular views with rowCount=null. Body { "table": "<name>" } returns an exact, timeout-bounded row count and that table or view's columns (name, type, nullable). idOrName accepts an investigation UUID, a case UUID or an exact case name. Fixed tables: air_investigation_activities, air_investigation_activity_user_reads, air_investigation_comments, air_investigation_evidence_metadata, air_investigation_evidence_relations, air_investigation_evidence_transformer_versions, air_investigation_external_section_import_error, air_investigation_external_section_import_status, air_investigation_finding_timeline, air_investigation_flags, air_investigation_full_text_search, air_investigation_metadata, air_investigation_notes, air_investigation_reports, air_investigation_report_history, air_investigation_task_assignments, air_investigation_task_execution_logs, air_investigation_timeline, air_investigation_timeline_event_range, air_investigation_timeline_hourly, air_investigation_user_findings, drone_findings. Views: air_all_findings_view, air_excluded_findings_view, air_findings_view, air_timeline_findings_view. Evidence tables are named <platform>_<section> (e.g. windows_triage_file, linux_triage_file, windows_event_records) and vary per investigation. POST the schema endpoint with an empty body to list the populated tables of this investigation with row counts; POST { "table": "<name>" } for column details.
+ */
+export declare const investigationSqlV2ApiControllerGetSchema: <ThrowOnError extends boolean = false>(options: Options<InvestigationSqlV2ApiControllerGetSchemaData, ThrowOnError>) => import("./client").RequestResult<InvestigationSqlV2ApiControllerGetSchemaResponses, InvestigationSqlV2ApiControllerGetSchemaErrors, ThrowOnError>;
+/**
+ * Run a read-only SQL query on an investigation
+ * Execute one read-only SELECT statement inside the investigation schema via POST /api/v2/investigations/{idOrName}/sql-query. Returns a paginated result (pageNumber/pageSize in the body; totalEntityCount, totalPageCount, nextPage/previousPage in the envelope). Trailing semicolons, end-of-query -- comments, and trailing LIMIT/OFFSET in sqlQuery are stripped so request paging owns the page slice. Write statements, multiple statements and cross-schema references are rejected. Every result-producing branch must be anchored to at least one relation in the selected investigation. Functions are admitted through PostgreSQL catalog capability checks; volatile, dangerous, user-schema and object-reference functions are rejected. Use the schema endpoint to discover the selected investigation tables and columns; PostgreSQL catalog, object-reference, and cross-schema introspection are rejected. Fixed tables: air_investigation_activities, air_investigation_activity_user_reads, air_investigation_comments, air_investigation_evidence_metadata, air_investigation_evidence_relations, air_investigation_evidence_transformer_versions, air_investigation_external_section_import_error, air_investigation_external_section_import_status, air_investigation_finding_timeline, air_investigation_flags, air_investigation_full_text_search, air_investigation_metadata, air_investigation_notes, air_investigation_reports, air_investigation_report_history, air_investigation_task_assignments, air_investigation_task_execution_logs, air_investigation_timeline, air_investigation_timeline_event_range, air_investigation_timeline_hourly, air_investigation_user_findings, drone_findings. Views: air_all_findings_view, air_excluded_findings_view, air_findings_view, air_timeline_findings_view. Evidence tables are named <platform>_<section> (e.g. windows_triage_file, linux_triage_file, windows_event_records) and vary per investigation. POST the schema endpoint with an empty body to list the populated tables of this investigation with row counts; POST { "table": "<name>" } for column details. Documented row-analysis functions (94): abs, age, array_agg, array_cat, array_length, array_position, array_remove, array_to_string, ascii, avg, bit_length, bool_and, bool_or, btrim, cardinality, ceil, ceiling, char_length, chr, concat, concat_ws, corr, count, date_part, date_trunc, dense_rank, div, first_value, floor, initcap, json_array_length, json_typeof, jsonb_array_elements, jsonb_array_elements_text, jsonb_array_length, jsonb_path_exists, jsonb_typeof, lag, last_value, lead, left, length, lower, lpad, ltrim, max, md5, min, mod, mode, now, nth_value, ntile, octet_length, percentile_cont, percentile_disc, plainto_tsquery, position, power, rank, regexp_matches, regexp_replace, regexp_split_to_array, repeat, replace, reverse, right, round, row_number, rpad, rtrim, split_part, sqrt, starts_with, stddev, stddev_pop, string_agg, string_to_array, strpos, substr, substring, sum, to_char, to_date, to_timestamp, to_tsquery, to_tsvector, translate, trim, trunc, unnest, upper, var_pop, variance. Allowed cast types: bigint, boolean, character, character varying, date, double precision, integer, interval, json, jsonb, numeric, real, smallint, text, time, time with time zone, time without time zone, timestamp with time zone, timestamp without time zone, uuid (plus the usual aliases such as int, varchar, timestamptz). Additional functions are admitted only when PostgreSQL catalog metadata proves they are safe, non-volatile built-ins; unknown, extension, user-schema and dangerous functions are rejected. Object-reference (regclass/oid), catalog, session, filesystem, network and *_to_xml* capabilities are rejected. Safe set-returning functions may expand rows in SELECT, FROM or LATERAL. GROUP BY accepts ROLLUP and GROUPING SETS; CUBE is not supported because the name doubles as an extension function. Execution-context expressions (current_user, current_schema, current_catalog) are rejected.
+ */
+export declare const investigationSqlV2ApiControllerExecuteSqlQuery: <ThrowOnError extends boolean = false>(options: Options<InvestigationSqlV2ApiControllerExecuteSqlQueryData, ThrowOnError>) => import("./client").RequestResult<InvestigationSqlV2ApiControllerExecuteSqlQueryResponses, InvestigationSqlV2ApiControllerExecuteSqlQueryErrors, ThrowOnError>;
 export declare const investigationGetInvestigationById: <ThrowOnError extends boolean = false>(options: Options<InvestigationGetInvestigationByIdData, ThrowOnError>) => import("./client").RequestResult<InvestigationGetInvestigationByIdResponses, unknown, ThrowOnError>;
 export declare const investigationUpdateInvestigation: <ThrowOnError extends boolean = false>(options: Options<InvestigationUpdateInvestigationData, ThrowOnError>) => import("./client").RequestResult<InvestigationUpdateInvestigationResponses, unknown, ThrowOnError>;
 export declare const investigationGetInvestigationMigrationsSummary: <ThrowOnError extends boolean = false>(options: Options<InvestigationGetInvestigationMigrationsSummaryData, ThrowOnError>) => import("./client").RequestResult<InvestigationGetInvestigationMigrationsSummaryResponses, unknown, ThrowOnError>;
@@ -1235,213 +1559,244 @@ export declare const recentActivitiesCreate: <ThrowOnError extends boolean = fal
 export declare const processorGetAllProcessors: <ThrowOnError extends boolean = false>(options?: Options<ProcessorGetAllProcessorsData, ThrowOnError>) => import("./client").RequestResult<ProcessorGetAllProcessorsResponses, unknown, ThrowOnError>;
 export declare const processorGetProcessorsByAssetType: <ThrowOnError extends boolean = false>(options?: Options<ProcessorGetProcessorsByAssetTypeData, ThrowOnError>) => import("./client").RequestResult<ProcessorGetProcessorsByAssetTypeResponses, unknown, ThrowOnError>;
 export declare const processorGetProcessorTypeByAssetType: <ThrowOnError extends boolean = false>(options?: Options<ProcessorGetProcessorTypeByAssetTypeData, ThrowOnError>) => import("./client").RequestResult<ProcessorGetProcessorTypeByAssetTypeResponses, unknown, ThrowOnError>;
-/**
- * Get asset issue/actionability stats
- * Aggregated counts (version/connectivity/deployment/assignment/isolation) for assets matching the same filter set as GET /api/v2/assets. organizations defaults to allAccessible when omitted.
- */
-export declare const assetV2ApiControllerGetStats: <ThrowOnError extends boolean = false>(options?: Options<AssetV2ApiControllerGetStatsData, ThrowOnError>) => import("./client").RequestResult<AssetV2ApiControllerGetStatsResponses, AssetV2ApiControllerGetStatsErrors, ThrowOnError>;
-/**
- * Export assets as CSV
- * Streams assets matching the GET /api/v2/assets filter/sort model as text/csv. Successful response bypasses the JSON envelope. Note: tag filtering (tagIds) is not applied on export.
- */
-export declare const assetV2ApiControllerExportAssets: <ThrowOnError extends boolean = false>(options: Options<AssetV2ApiControllerExportAssetsData, ThrowOnError>) => import("./client").RequestResult<AssetV2ApiControllerExportAssetsResponses, AssetV2ApiControllerExportAssetsErrors, ThrowOnError>;
-/**
- * List assets
- * Paginated (offset) list of assets visible to the caller. Supports pageNumber/pageSize/sortBy/sortType, filter[*] params, and organizations (defaults to allAccessible when omitted).
- */
-export declare const assetV2ApiControllerFilterAssets: <ThrowOnError extends boolean = false>(options?: Options<AssetV2ApiControllerFilterAssetsData, ThrowOnError>) => import("./client").RequestResult<AssetV2ApiControllerFilterAssetsResponses, AssetV2ApiControllerFilterAssetsErrors, ThrowOnError>;
-/**
- * Delete an asset by id or name
- * Deletes the asset. `mode` selects purge / uninstall / purge-and-uninstall. `dryRun=true` returns a would-delete preview and executes nothing.
- */
-export declare const assetV2ApiControllerDeleteAsset: <ThrowOnError extends boolean = false>(options: Options<AssetV2ApiControllerDeleteAssetData, ThrowOnError>) => import("./client").RequestResult<AssetV2ApiControllerDeleteAssetResponses, AssetV2ApiControllerDeleteAssetErrors, ThrowOnError>;
-/**
- * Get asset by id or name
- * Looks up a single asset by canonical UUID `_id` or by name. UUID lookup ignores `organizations`; name lookup searches every accessible org and returns one entry per match.
- */
-export declare const assetV2ApiControllerGetAsset: <ThrowOnError extends boolean = false>(options: Options<AssetV2ApiControllerGetAssetData, ThrowOnError>) => import("./client").RequestResult<AssetV2ApiControllerGetAssetResponses, AssetV2ApiControllerGetAssetErrors, ThrowOnError>;
-/**
- * Replace asset tags
- * Full replace: the asset tag set becomes exactly `tags`. Empty array clears all.
- */
-export declare const assetV2ApiControllerReplaceTags: <ThrowOnError extends boolean = false>(options: Options<AssetV2ApiControllerReplaceTagsData, ThrowOnError>) => import("./client").RequestResult<AssetV2ApiControllerReplaceTagsResponses, AssetV2ApiControllerReplaceTagsErrors, ThrowOnError>;
-/**
- * Update asset label
- * Sets the user-friendly label. Sending null clears it.
- */
-export declare const assetV2ApiControllerUpdateLabel: <ThrowOnError extends boolean = false>(options: Options<AssetV2ApiControllerUpdateLabelData, ThrowOnError>) => import("./client").RequestResult<AssetV2ApiControllerUpdateLabelResponses, AssetV2ApiControllerUpdateLabelErrors, ThrowOnError>;
 /**
  * Reboot a single asset
+ * Reboot EXACTLY ONE Binalyze AIR asset, identified by a single id or name in the path, via POST /api/v2/assets/{idOrName}/reboot. Use this ONLY for one specific asset. If the user gives two or more assets, a list, a group, or 'all matching' assets, use air-assets-bulk-reboot instead. ALWAYS send dryRun=true on every call (would-run preview); pass dryRun=false only to send the real reboot signal after the user confirms the exact asset. Prefer UUID; names can be ambiguous across organizations. On HTTP 404 with errors[0].details.suggestions, the asset name was not found -- show those suggestions to the user and confirm before retrying, never guess; on HTTP 400 AMBIGUOUS_NAME with errors[0].details.matches, ask which asset by id.
  */
 export declare const assetActionV2ApiControllerReboot: <ThrowOnError extends boolean = false>(options: Options<AssetActionV2ApiControllerRebootData, ThrowOnError>) => import("./client").RequestResult<AssetActionV2ApiControllerRebootResponses, AssetActionV2ApiControllerRebootErrors, ThrowOnError>;
 /**
  * Shut down a single asset
+ * Shut down EXACTLY ONE Binalyze AIR asset, identified by a single id or name in the path, via POST /api/v2/assets/{idOrName}/shutdown. Use this ONLY for one specific asset. If the user gives two or more assets, a list, a group, or 'all matching' assets, use air-assets-bulk-shutdown instead. ALWAYS send dryRun=true on every call (would-run preview); pass dryRun=false only to send the real shutdown signal after the user confirms the exact asset. Prefer UUID; names can be ambiguous across organizations. On HTTP 404 with errors[0].details.suggestions, the asset name was not found -- show those suggestions to the user and confirm before retrying, never guess; on HTTP 400 AMBIGUOUS_NAME with errors[0].details.matches, ask which asset by id.
  */
 export declare const assetActionV2ApiControllerShutdown: <ThrowOnError extends boolean = false>(options: Options<AssetActionV2ApiControllerShutdownData, ThrowOnError>) => import("./client").RequestResult<AssetActionV2ApiControllerShutdownResponses, AssetActionV2ApiControllerShutdownErrors, ThrowOnError>;
 /**
  * Isolate a single asset
+ * Network-isolate EXACTLY ONE Binalyze AIR asset, identified by a single id or name in the path, via POST /api/v2/assets/{idOrName}/isolate. Use this ONLY for one specific asset. If the user gives two or more assets, a list, a group, or 'all matching' assets, use air-assets-bulk-isolate instead. ALWAYS send dryRun=true on every call (would-run preview); pass dryRun=false only to send the real isolation signal after the user confirms the exact asset. Requires the Isolation feature to be enabled. Prefer UUID; names can be ambiguous across organizations. On HTTP 404 with errors[0].details.suggestions, the asset name was not found -- show those suggestions to the user and confirm before retrying, never guess; on HTTP 400 AMBIGUOUS_NAME with errors[0].details.matches, ask which asset by id.
  */
 export declare const assetActionV2ApiControllerIsolate: <ThrowOnError extends boolean = false>(options: Options<AssetActionV2ApiControllerIsolateData, ThrowOnError>) => import("./client").RequestResult<AssetActionV2ApiControllerIsolateResponses, AssetActionV2ApiControllerIsolateErrors, ThrowOnError>;
 /**
  * Unisolate a single asset
+ * Remove network isolation from EXACTLY ONE Binalyze AIR asset, identified by a single id or name in the path, via POST /api/v2/assets/{idOrName}/unisolate. Use this ONLY for one specific asset. If the user gives two or more assets, a list, a group, or 'all matching' assets, use air-assets-bulk-unisolate instead. ALWAYS send dryRun=true on every call (would-run preview); pass dryRun=false only to send the real unisolation signal after the user confirms the exact asset. Requires the Isolation feature to be enabled. Prefer UUID; names can be ambiguous across organizations. On HTTP 404 with errors[0].details.suggestions, the asset name was not found -- show those suggestions to the user and confirm before retrying, never guess; on HTTP 400 AMBIGUOUS_NAME with errors[0].details.matches, ask which asset by id.
  */
 export declare const assetActionV2ApiControllerUnisolate: <ThrowOnError extends boolean = false>(options: Options<AssetActionV2ApiControllerUnisolateData, ThrowOnError>) => import("./client").RequestResult<AssetActionV2ApiControllerUnisolateResponses, AssetActionV2ApiControllerUnisolateErrors, ThrowOnError>;
 /**
  * Retrieve the agent logs of a single asset
+ * Retrieve agent logs for a task on EXACTLY ONE Binalyze AIR asset, identified by a single id or name in the path, via POST /api/v2/assets/{idOrName}/log-retrieval. Use this ONLY for one specific asset; it also requires the taskId whose logs should be collected. If the user gives two or more assets, a list, or a group, use air-assets-bulk-log-retrieval instead. ALWAYS send dryRun=true on every call (would-run preview); pass dryRun=false only to assign the real log-retrieval task after the user confirms the asset and task. Prefer UUID; names can be ambiguous across organizations. On HTTP 404 with errors[0].details.suggestions, the asset name was not found -- show those suggestions to the user and confirm before retrying, never guess; on HTTP 400 AMBIGUOUS_NAME with errors[0].details.matches, ask which asset by id.
  */
 export declare const assetActionV2ApiControllerRetrieveLogs: <ThrowOnError extends boolean = false>(options: Options<AssetActionV2ApiControllerRetrieveLogsData, ThrowOnError>) => import("./client").RequestResult<AssetActionV2ApiControllerRetrieveLogsResponses, AssetActionV2ApiControllerRetrieveLogsErrors, ThrowOnError>;
 /**
  * Update the agent version on a single asset
+ * Update the agent version on EXACTLY ONE Binalyze AIR asset, identified by a single id or name in the path, via POST /api/v2/assets/{idOrName}/update. Use this ONLY for one specific asset. If the user gives two or more assets, a list, a group, or 'all matching' assets, use air-assets-bulk-version-update instead. There is no version targeting: the agent always updates to the console's current supported version. ALWAYS send dryRun=true on every call (would-update preview); pass dryRun=false only to assign the real immediate one-time update task after the user confirms the exact asset. Prefer UUID; names can be ambiguous across organizations. On HTTP 404 with errors[0].details.suggestions, the asset name was not found -- show those suggestions to the user and confirm before retrying, never guess; on HTTP 400 AMBIGUOUS_NAME with errors[0].details.matches, ask which asset by id.
  */
 export declare const assetActionV2ApiControllerVersionUpdate: <ThrowOnError extends boolean = false>(options: Options<AssetActionV2ApiControllerVersionUpdateData, ThrowOnError>) => import("./client").RequestResult<AssetActionV2ApiControllerVersionUpdateResponses, AssetActionV2ApiControllerVersionUpdateErrors, ThrowOnError>;
 /**
  * Enable maintenance mode on a single asset
+ * Enable maintenance mode on EXACTLY ONE Binalyze AIR asset, identified by a single id or name in the path, via POST /api/v2/assets/{idOrName}/enable-maintenance. Use this ONLY for one specific asset. If the user gives two or more assets, a list, a group, or 'all matching' assets, use air-assets-bulk-enable-maintenance instead. ALWAYS send dryRun=true on every call (would-change preview); pass dryRun=false only to apply the real change after the user confirms the exact asset. Updates the asset synchronously (no task is created). A no-op (already in maintenance mode) returns HTTP 200 with a NO_OP entry in errors[]. Prefer UUID; names can be ambiguous across organizations. On HTTP 404 with errors[0].details.suggestions, the asset name was not found -- show those suggestions to the user and confirm before retrying, never guess; on HTTP 400 AMBIGUOUS_NAME with errors[0].details.matches, ask which asset by id.
  */
 export declare const assetActionV2ApiControllerEnableMaintenance: <ThrowOnError extends boolean = false>(options: Options<AssetActionV2ApiControllerEnableMaintenanceData, ThrowOnError>) => import("./client").RequestResult<AssetActionV2ApiControllerEnableMaintenanceResponses, AssetActionV2ApiControllerEnableMaintenanceErrors, ThrowOnError>;
 /**
  * Disable maintenance mode on a single asset
+ * Disable maintenance mode on EXACTLY ONE Binalyze AIR asset, identified by a single id or name in the path, via POST /api/v2/assets/{idOrName}/disable-maintenance. Use this ONLY for one specific asset. If the user gives two or more assets, a list, a group, or 'all matching' assets, use air-assets-bulk-disable-maintenance instead. ALWAYS send dryRun=true on every call (would-change preview); pass dryRun=false only to apply the real change after the user confirms the exact asset. Updates the asset synchronously (no task is created). A no-op (not in maintenance mode) returns HTTP 200 with a NO_OP entry in errors[]. Prefer UUID; names can be ambiguous across organizations. On HTTP 404 with errors[0].details.suggestions, the asset name was not found -- show those suggestions to the user and confirm before retrying, never guess; on HTTP 400 AMBIGUOUS_NAME with errors[0].details.matches, ask which asset by id.
  */
 export declare const assetActionV2ApiControllerDisableMaintenance: <ThrowOnError extends boolean = false>(options: Options<AssetActionV2ApiControllerDisableMaintenanceData, ThrowOnError>) => import("./client").RequestResult<AssetActionV2ApiControllerDisableMaintenanceResponses, AssetActionV2ApiControllerDisableMaintenanceErrors, ThrowOnError>;
 /**
  * Import a PPC file into an existing asset
+ * Import a case PPC evidence file into an EXISTING Binalyze AIR asset via POST /api/v2/assets/{idOrName}/import (multipart upload). Use this when the asset already exists in AIR and you want to attach/import a .ppc captured from it (a real PPC zip containing Case.db). Optionally attach the import to a case via caseIdOrName (resolved as uuid or name). Success response (200): result.entities[0] = { id (asset id), name (asset name), ppcFileName, importedAt }. Unknown asset -> 404. KNOWN ISSUE: a corrupt or non-zip file currently returns 500 INTERNAL_ERROR (not a clean 400) -- treat that 500 as 'invalid PPC file', do not retry blindly and do not report it as a server outage. ALWAYS send dryRun=true first (generic preview; does not validate the file); pass dryRun=false only to perform the real import after the user confirms the asset and file. For an off-network Task.dat that should create an offline task, use air-assets-off-network-import instead. On HTTP 404 with errors[0].details.suggestions, the asset name was not found -- show those suggestions to the user and confirm before retrying, never guess; on HTTP 400 AMBIGUOUS_NAME with errors[0].details.matches, ask which asset by id.
  */
 export declare const assetActionV2ApiControllerImportPpcToExistingAsset: <ThrowOnError extends boolean = false>(options: Options<AssetActionV2ApiControllerImportPpcToExistingAssetData, ThrowOnError>) => import("./client").RequestResult<AssetActionV2ApiControllerImportPpcToExistingAssetResponses, AssetActionV2ApiControllerImportPpcToExistingAssetErrors, ThrowOnError>;
 /**
  * Reboot multiple assets
+ * Reboot MULTIPLE Binalyze AIR assets in one call, listed by id or name in assets[], via POST /api/v2/reboot. Use this ONLY when the user targets two or more assets, a list, or a group. For exactly ONE asset, use air-assets-reboot (the single-asset tool) instead. ALWAYS send dryRun=true on every call (preview of eligible assets and warnings); pass dryRun=false only to send the real reboot signals after the user confirms the asset list. Use failIfNumberOfAssetsGreaterThan as a safety cap.
  */
 export declare const assetBulkActionV2ApiControllerReboot: <ThrowOnError extends boolean = false>(options: Options<AssetBulkActionV2ApiControllerRebootData, ThrowOnError>) => import("./client").RequestResult<AssetBulkActionV2ApiControllerRebootResponses, AssetBulkActionV2ApiControllerRebootErrors, ThrowOnError>;
 /**
  * Shut down multiple assets
+ * Shut down MULTIPLE Binalyze AIR assets in one call, listed by id or name in assets[], via POST /api/v2/shutdown. Use this ONLY when the user targets two or more assets, a list, or a group. For exactly ONE asset, use air-assets-shutdown (the single-asset tool) instead. ALWAYS send dryRun=true on every call (preview of eligible assets and warnings); pass dryRun=false only to send the real shutdown signals after the user confirms the asset list. Use failIfNumberOfAssetsGreaterThan as a safety cap.
  */
 export declare const assetBulkActionV2ApiControllerShutdown: <ThrowOnError extends boolean = false>(options: Options<AssetBulkActionV2ApiControllerShutdownData, ThrowOnError>) => import("./client").RequestResult<AssetBulkActionV2ApiControllerShutdownResponses, AssetBulkActionV2ApiControllerShutdownErrors, ThrowOnError>;
 /**
  * Isolate multiple assets
+ * Network-isolate MULTIPLE Binalyze AIR assets in one call, listed by id or name in assets[], via POST /api/v2/isolate. Use this ONLY when the user targets two or more assets, a list, or a group. For exactly ONE asset, use air-assets-isolate (the single-asset tool) instead. ALWAYS send dryRun=true on every call (preview of eligible assets and warnings); pass dryRun=false only to send the real isolation signals after the user confirms the asset list. Requires the Isolation feature to be enabled. Use failIfNumberOfAssetsGreaterThan as a safety cap.
  */
 export declare const assetBulkActionV2ApiControllerIsolate: <ThrowOnError extends boolean = false>(options: Options<AssetBulkActionV2ApiControllerIsolateData, ThrowOnError>) => import("./client").RequestResult<AssetBulkActionV2ApiControllerIsolateResponses, AssetBulkActionV2ApiControllerIsolateErrors, ThrowOnError>;
 /**
  * Unisolate multiple assets
+ * Remove network isolation from MULTIPLE Binalyze AIR assets in one call, listed by id or name in assets[], via POST /api/v2/unisolate. Use this ONLY when the user targets two or more assets, a list, or a group. For exactly ONE asset, use air-assets-unisolate (the single-asset tool) instead. ALWAYS send dryRun=true on every call (preview of eligible assets and warnings); pass dryRun=false only to send the real unisolation signals after the user confirms the asset list. Requires the Isolation feature to be enabled. Use failIfNumberOfAssetsGreaterThan as a safety cap.
  */
 export declare const assetBulkActionV2ApiControllerUnisolate: <ThrowOnError extends boolean = false>(options: Options<AssetBulkActionV2ApiControllerUnisolateData, ThrowOnError>) => import("./client").RequestResult<AssetBulkActionV2ApiControllerUnisolateResponses, AssetBulkActionV2ApiControllerUnisolateErrors, ThrowOnError>;
 /**
  * Retrieve the agent logs of multiple assets
+ * Retrieve agent logs from MULTIPLE Binalyze AIR assets in one call, listed by id or name in assets[], via POST /api/v2/log-retrieval. Use this ONLY when the user targets two or more assets, a list, or a group. For exactly ONE asset (and a specific taskId), use air-assets-log-retrieval (the single-asset tool) instead. ALWAYS send dryRun=true on every call (preview of eligible assets and warnings); pass dryRun=false only to assign the real log-retrieval task after the user confirms the asset list. Use failIfNumberOfAssetsGreaterThan as a safety cap.
  */
 export declare const assetBulkActionV2ApiControllerRetrieveLogs: <ThrowOnError extends boolean = false>(options: Options<AssetBulkActionV2ApiControllerRetrieveLogsData, ThrowOnError>) => import("./client").RequestResult<AssetBulkActionV2ApiControllerRetrieveLogsResponses, AssetBulkActionV2ApiControllerRetrieveLogsErrors, ThrowOnError>;
 /**
  * Update the agent version on multiple assets
+ * Update the agent version on MULTIPLE Binalyze AIR assets in one call, listed by id or name in assets[], via POST /api/v2/version-update. Use this ONLY when the user targets two or more assets, a list, or a group. For exactly ONE asset, use air-assets-version-update (the single-asset tool) instead. There is no version targeting: agents always update to the console's current supported version. ALWAYS send dryRun=true on every call (preview of eligible assets and warnings); pass dryRun=false only to assign the real immediate one-time update task after the user confirms the asset list. Provide organizations when names are ambiguous across orgs. Use failIfNumberOfAssetsGreaterThan as a safety cap.
  */
 export declare const assetBulkActionV2ApiControllerVersionUpdate: <ThrowOnError extends boolean = false>(options: Options<AssetBulkActionV2ApiControllerVersionUpdateData, ThrowOnError>) => import("./client").RequestResult<AssetBulkActionV2ApiControllerVersionUpdateResponses, AssetBulkActionV2ApiControllerVersionUpdateErrors, ThrowOnError>;
 /**
  * Enable maintenance mode on multiple assets
+ * Enable maintenance mode on MULTIPLE Binalyze AIR assets in one call, listed by id or name in assets[], via POST /api/v2/enable-maintenance. Use this ONLY when the user targets two or more assets, a list, or a group. For exactly ONE asset, use air-assets-enable-maintenance (the single-asset tool) instead. ALWAYS send dryRun=true on every call (preview of eligible assets and warnings); pass dryRun=false only to apply the real change after the user confirms the asset list. These endpoints update assets synchronously and do not create tasks. Provide organizations when names are ambiguous across orgs.
  */
 export declare const assetBulkActionV2ApiControllerEnableMaintenance: <ThrowOnError extends boolean = false>(options: Options<AssetBulkActionV2ApiControllerEnableMaintenanceData, ThrowOnError>) => import("./client").RequestResult<AssetBulkActionV2ApiControllerEnableMaintenanceResponses, AssetBulkActionV2ApiControllerEnableMaintenanceErrors, ThrowOnError>;
 /**
  * Disable maintenance mode on multiple assets
+ * Disable maintenance mode on MULTIPLE Binalyze AIR assets in one call, listed by id or name in assets[], via POST /api/v2/disable-maintenance. Use this ONLY when the user targets two or more assets, a list, or a group. For exactly ONE asset, use air-assets-disable-maintenance (the single-asset tool) instead. ALWAYS send dryRun=true on every call (preview of eligible assets and warnings); pass dryRun=false only to apply the real change after the user confirms the asset list. These endpoints update assets synchronously and do not create tasks. Provide organizations when names are ambiguous across orgs.
  */
 export declare const assetBulkActionV2ApiControllerDisableMaintenance: <ThrowOnError extends boolean = false>(options: Options<AssetBulkActionV2ApiControllerDisableMaintenanceData, ThrowOnError>) => import("./client").RequestResult<AssetBulkActionV2ApiControllerDisableMaintenanceResponses, AssetBulkActionV2ApiControllerDisableMaintenanceErrors, ThrowOnError>;
 /**
  * Add tag(s) to multiple assets
+ * Add tags to one or more Binalyze AIR assets in one call via POST /api/v2/assets/tags. This APPENDS the given tags to the assets in assets[]; it is not a full replacement (use air-assets-tags to replace one asset's whole tag set). Idempotent: assets that already carry a tag are not re-updated but still report 'tags-added'. Success response (200): result.entities[] = {asset{id,name}, action 'tags-added', addedTags[]}; unresolved/skipped inputs land in result.warnings[] = {asset, action 'skipped', reason}. Zero resolved assets -> 404 'No assets matched'. ALWAYS send dryRun=true first (preview); pass dryRun=false only to apply the real tag add after the user confirms the asset list. UUID entries carry their own org; ambiguous names may need organizations.
  */
 export declare const assetBulkMetadataV2ApiControllerAddTags: <ThrowOnError extends boolean = false>(options: Options<AssetBulkMetadataV2ApiControllerAddTagsData, ThrowOnError>) => import("./client").RequestResult<AssetBulkMetadataV2ApiControllerAddTagsResponses, AssetBulkMetadataV2ApiControllerAddTagsErrors, ThrowOnError>;
 /**
  * Remove tag(s) from multiple assets
+ * Remove tags from one or more Binalyze AIR assets in one call via POST /api/v2/assets/tags/delete. This DELETES the given tags from the assets in assets[] (only the listed tags are removed; other tags stay; the tag catalog row itself is not deleted). Responses (200): real removal returns result.entities[] = {asset{id,name}, action 'tags-removed', removedTags[]}; with ?dryRun=true the action is 'would-remove-tags' and nothing changes. Zero resolved assets -> 404 'No assets matched'. ALWAYS send dryRun=true first (schema-specific would-remove preview); pass dryRun=false only to apply the real tag removal after the user confirms the asset list. UUID entries carry their own org; ambiguous names may need organizations.
  */
 export declare const assetBulkMetadataV2ApiControllerRemoveTags: <ThrowOnError extends boolean = false>(options: Options<AssetBulkMetadataV2ApiControllerRemoveTagsData, ThrowOnError>) => import("./client").RequestResult<AssetBulkMetadataV2ApiControllerRemoveTagsResponses, AssetBulkMetadataV2ApiControllerRemoveTagsErrors, ThrowOnError>;
 /**
  * Set the update-exclusion flag on multiple assets
+ * Set or clear the 'excluded from automatic agent updates' flag on one or more Binalyze AIR assets via PATCH /api/v2/assets/update-exclusion. excludedFromUpdates=true excludes the assets from auto-updates; false re-includes them. Success response (200): result.entities[] only contains assets that were actually updated ({asset{id,name}, action 'update-exclusion-set', excludedFromUpdates, updatedAt}); assets with an unsupported OS are NOT updated and land in result.warnings[] with action 'skipped' and reason 'Asset has unsupported OS for update'. entities may be empty when every asset was skipped -- report that honestly, do not claim an update. Zero resolved assets -> 404 'No assets matched'. ALWAYS send dryRun=true first (generic preview); pass dryRun=false only to apply the real change after the user confirms the asset list. UUID entries carry their own org; ambiguous names may need organizations.
  */
 export declare const assetBulkMetadataV2ApiControllerSetUpdateExclusion: <ThrowOnError extends boolean = false>(options: Options<AssetBulkMetadataV2ApiControllerSetUpdateExclusionData, ThrowOnError>) => import("./client").RequestResult<AssetBulkMetadataV2ApiControllerSetUpdateExclusionResponses, AssetBulkMetadataV2ApiControllerSetUpdateExclusionErrors, ThrowOnError>;
 /**
  * Set or clear the relay connection route on multiple assets
+ * Set or clear the relay-server connection route of one or more Binalyze AIR assets via PATCH /api/v2/assets/connection-route. relayServerId is the numeric relay server id to route through; pass null to CLEAR the route (direct connection). The relay server's organization must match the assets' organization. ALWAYS send dryRun=true on every call (would-change preview of resolved assets and warnings); pass dryRun=false only to apply the real change after the user confirms the asset list. UUID entries carry their own org; ambiguous names may need organizations.
  */
 export declare const assetBulkMetadataV2ApiControllerSetConnectionRoute: <ThrowOnError extends boolean = false>(options: Options<AssetBulkMetadataV2ApiControllerSetConnectionRouteData, ThrowOnError>) => import("./client").RequestResult<AssetBulkMetadataV2ApiControllerSetConnectionRouteResponses, AssetBulkMetadataV2ApiControllerSetConnectionRouteErrors, ThrowOnError>;
 /**
  * Set the demanded MITRE ATT&CK Database version on multiple assets
+ * Set the demanded MITRE ATT&CK database version on one or more Binalyze AIR assets via PATCH /api/v2/assets/mitre-attack-database/version. This is the MITRE ATT&CK DATABASE version, not the agent version (use air-assets-bulk-version-update for the agent). PRECONDITIONS: (1) MITRE auto-update must be OFF, otherwise the call fails 400 with code MITRE_AUTO_UPDATE_ENABLED and a message telling how to disable it (PUT /api/public/settings/mitre-attack-database with autoUpdateEnabled=false). (2) version must be one that EXISTS in the system -- versions look like '13.5.2' (no 'v' prefix); list them via GET /api/public/settings/mitre-attack-database/versions; an unknown version fails 400 'is not available in the system'. Success response (200): result.entities[] only contains assets that were actually updated ({asset{id,name}, action 'mitre-database-updated', version, assignedAt}); INELIGIBLE assets are NOT updated and land in result.warnings[] with action 'skipped' and a reason ('Asset subtype is not endpoint', 'Asset is not managed', or 'Agent build does not support MITRE database updates'). entities may be empty when every asset was skipped -- report that honestly, do not claim an update. ALWAYS send dryRun=true first (generic preview; it does NOT check auto-update or version validity); pass dryRun=false only to apply the real change after the user confirms. UUID entries carry their own org; ambiguous names may need organizations.
  */
 export declare const assetBulkMetadataV2ApiControllerSetMitreDatabaseVersion: <ThrowOnError extends boolean = false>(options: Options<AssetBulkMetadataV2ApiControllerSetMitreDatabaseVersionData, ThrowOnError>) => import("./client").RequestResult<AssetBulkMetadataV2ApiControllerSetMitreDatabaseVersionResponses, AssetBulkMetadataV2ApiControllerSetMitreDatabaseVersionErrors, ThrowOnError>;
 /**
  * Bulk delete assets (purge / uninstall / purge-and-uninstall)
+ * Delete / decommission one or more Binalyze AIR assets via POST /api/v2/assets/delete. DESTRUCTIVE and largely irreversible (uninstall signals a real agent). mode selects the action: 'purge' (remove console records + evidence files; agent stays), 'uninstall' (uninstall the agent; records stay), or 'purge-and-uninstall' (both). mode 'purge' additionally requires the PurgeWithoutUninstall feature flag; when disabled the call fails 403 Forbidden. Invalid mode -> 400. Zero resolved assets -> 404 'No assets matched'. Responses: dryRun preview (200) returns result.entities[] = {asset{id,name}, mode, action 'would-delete', effects[] (e.g. 'agent-uninstall','console-records','evidence-files')}; the REAL delete (200) returns result = { deletedCount, warnings[] }. ALWAYS send dryRun=true first and show the user the per-asset effects; pass dryRun=false only after the user explicitly confirms the exact asset list and mode. UUID entries carry their own org; ambiguous names may need organizations. Use failIfNumberOfAssetsGreaterThan as a safety cap.
  */
 export declare const assetBulkMetadataV2ApiControllerDeleteAssets: <ThrowOnError extends boolean = false>(options: Options<AssetBulkMetadataV2ApiControllerDeleteAssetsData, ThrowOnError>) => import("./client").RequestResult<AssetBulkMetadataV2ApiControllerDeleteAssetsResponses, AssetBulkMetadataV2ApiControllerDeleteAssetsErrors, ThrowOnError>;
 /**
  * Import an off-network PPC (find-or-create asset + offline task)
+ * Import an OFF-NETWORK Task.dat via POST /api/v2/assets/import (multipart upload) and create an OFFLINE TASK (offline-triage or offline-acquisition). IMPORTANT semantics: this endpoint does NOT create or find an asset -- it only creates a task from the uploaded Task.dat (the asset is resolved later, when the evidence collection zip is imported into the task). The file must be a valid RC4-encrypted Task.dat; anything else (e.g. a regular case .ppc) is rejected 400 'Missing or invalid Task.dat format!'. Requires the Off-Network Responder feature. Success response (200): result.entities[0] = { taskId, taskName, organizations: [{ id, name }], taskDetailsViewUrl, ppcFileName, importedAt } -- a task summary, no asset id/name. organizations must resolve to EXACTLY ONE organization id (the task is single-org). Optionally attach to a case via caseIdOrName (unknown case -> 400 'Case not found'). ALWAYS send dryRun=true first (generic preview; does not validate the file); pass dryRun=false only to perform the real import after the user confirms. To import a case PPC into an asset that already exists in AIR, use air-assets-import instead.
  */
 export declare const assetBulkMetadataV2ApiControllerImportOffNetworkPpc: <ThrowOnError extends boolean = false>(options: Options<AssetBulkMetadataV2ApiControllerImportOffNetworkPpcData, ThrowOnError>) => import("./client").RequestResult<AssetBulkMetadataV2ApiControllerImportOffNetworkPpcResponses, AssetBulkMetadataV2ApiControllerImportOffNetworkPpcErrors, ThrowOnError>;
 /**
  * Run triage rule(s) on multiple assets
+ * Run triage rule(s) IMMEDIATELY on one or more Binalyze AIR assets via POST /api/v2/triage. Creates ONE triage task (status 'assigned') covering every runnable asset. This tool is for IMMEDIATE runs only -- it deliberately has NO schedule and NO cpuLimit parameter. To create a recurring/scheduled triage (or set a CPU cap), use air-assets-bulk-triage-scheduled instead; do NOT try to pass schedule fields here. ruleIds accept a rule UUID OR an exact rule name (names are resolved within the assets' authorized org scope; an ambiguous or unknown name becomes a per-input error in result.errors[]). NEVER invent or guess a rule id/name -- if the user did not give one, ask or look it up first. OMIT every optional argument the user did not ask for; never fill placeholders (no empty strings). Use assertions.failIfNumberOfAssetsGreaterThan as a safety cap: the task is rejected (406) if more assets match than the cap allows; omitted, it defaults to the resolved asset count. Success response (200): result.entities[0] = { id (task id), name, assets { assetCount, assetsUrl }, assignedAssetCount, organizations [{id,name}], rules [{id,name,engine}], status 'assigned', source, createdBy, createdAt, taskDetailsViewUrl }; result.errors[] lists per-input skips (e.g. 'Asset not found: X'). Zero matching assets -> 404 'No matching assets found'; zero matching rules -> 404 'No matching triage rules found'. ALWAYS send dryRun=true first (generic preview; it does NOT validate rules); pass dryRun=false only to create the real task after the user confirms. A preview is NOT a created task; only dryRun=false with ok=true and a returned task id means it was created -- treat ok=false / non-2xx / the error field as failure. Supports Idempotency-Key so a retried call replays the first response instead of creating duplicate tasks.
  */
 export declare const assetBulkTriageV2ApiControllerRunTriage: <ThrowOnError extends boolean = false>(options: Options<AssetBulkTriageV2ApiControllerRunTriageData, ThrowOnError>) => import("./client").RequestResult<AssetBulkTriageV2ApiControllerRunTriageResponses, AssetBulkTriageV2ApiControllerRunTriageErrors, ThrowOnError>;
 /**
- * List the triage task history of a single asset
- * List the triage task history of a single asset
+ * List InterAct messages for an asset
+ * List the InterAct shell messages of EXACTLY ONE Binalyze AIR asset across all its sessions via GET /api/v2/assets/{idOrName}/interact. Read-only; returns a paginated envelope of messages (command + latest response, status, detectedType, output/outputUrl). Supports filtering by session and creation date range. Use this when the user asks for an asset's shell command history. Prefer UUID; names can be ambiguous across organizations. Omit any filter the user did not ask for. On HTTP 404 with errors[0].details.suggestions, the asset name was not found -- show those suggestions to the user and confirm before retrying, never guess; on HTTP 400 AMBIGUOUS_NAME with errors[0].details.matches, ask which asset by id.
+ */
+export declare const assetInteractMessageV2ApiControllerListForAsset: <ThrowOnError extends boolean = false>(options: Options<AssetInteractMessageV2ApiControllerListForAssetData, ThrowOnError>) => import("./client").RequestResult<AssetInteractMessageV2ApiControllerListForAssetResponses, AssetInteractMessageV2ApiControllerListForAssetErrors, ThrowOnError>;
+/**
+ * Run an InterAct command on an asset
+ * Run an InterAct shell command on EXACTLY ONE Binalyze AIR asset via POST /api/v2/assets/{idOrName}/interact. WARNING: this endpoint has NO dry-run preview -- a successful call EXECUTES the command on the live endpoint IMMEDIATELY. Confirm the exact asset and command with the user before calling; never run a destructive command without explicit confirmation. Sync mode (default) waits for the result up to the server timeout and returns 200 with the message (output inlined when small, else outputUrl); a timeout or async=true returns 202 with status 'running' and a messageId to poll. COMMAND ROUTING: when the first word matches an AIR native command (ls/dir, cd, ...; list via air-interact-commands), the NATIVE implementation runs -- it has its own option set and does NOT accept POSIX/shell flags (e.g. 'ls -la' fails; the native form is 'ls ext'). For a real shell command, prefix it with exec (e.g. 'exec ls -la /etc'); anything that matches no native command is auto-run as exec. When a native command fails on its flag parser, the response's `hint` field explains this and gives the exec form -- relay it to the user. Use the returned sessionId/messageId with air-assets-interact-message, air-assets-interact-cancel, or air-assets-interact-close. Prefer UUID; names can be ambiguous across organizations. If the asset name looks partial or you are not certain it is the EXACT name (e.g. user says 'mrv'), do not ask the user to clarify blindly -- either call this tool with that name (a non-matching name is safe: it executes nothing and returns HTTP 404 with suggestions) or first resolve it with air-assets-filtered-list using searchTerm=<the name>, then confirm with the user. Likewise, if the COMMAND looks like a typo of an AIR native command (e.g. 'pslt'), do not guess from memory -- call air-interact-commands (optionally searchTerm) and suggest the closest real command name from its `commandNames`; note a non-native command may still be a valid shell command, so only offer 'did you mean' when a close native match exists. Also: when a run COMPLETES with a failed command (non-zero exit) that was an unrecognized native command, the response body (not the error envelope) surfaces `suggestions` as native-command NAME strings (e.g. ['pslist']) -- distinct from the asset-name suggestion objects on a 404 -- tell the user 'the command failed; did you mean <name>?' and offer to re-run the corrected command. On HTTP 404 with errors[0].details.suggestions, the asset name was not found -- show those suggestions to the user and confirm before retrying, never guess; on HTTP 400 AMBIGUOUS_NAME with errors[0].details.matches, ask which asset by id. Omit optional arguments the user did not ask for.
+ */
+export declare const assetInteractV2ApiControllerRunCommand: <ThrowOnError extends boolean = false>(options: Options<AssetInteractV2ApiControllerRunCommandData, ThrowOnError>) => import("./client").RequestResult<AssetInteractV2ApiControllerRunCommandResponses, AssetInteractV2ApiControllerRunCommandErrors, ThrowOnError>;
+/**
+ * Cancel the running InterAct command on an asset
+ * Cancel the running InterAct shell command on EXACTLY ONE Binalyze AIR asset via POST /api/v2/assets/{idOrName}/interact/cancel. WARNING: this endpoint has NO dry-run preview -- it sends a real interrupt to the running command; the session stays open. With no body it cancels the caller's active session's running command. Pass messageId to target a specific running message, or sessionId to target a specific session. Cancellation is best-effort (the agent confirms asynchronously); the returned message may still read as running. 404 'No active session' / 'Message not found' when nothing matches; 400 'No running command to cancel' / 'Message is not running' when there is nothing to interrupt. Prefer UUID for the asset. On HTTP 404 with errors[0].details.suggestions, the asset name was not found -- show those suggestions to the user and confirm before retrying, never guess; on HTTP 400 AMBIGUOUS_NAME with errors[0].details.matches, ask which asset by id.
+ */
+export declare const assetInteractV2ApiControllerCancelCommand: <ThrowOnError extends boolean = false>(options: Options<AssetInteractV2ApiControllerCancelCommandData, ThrowOnError>) => import("./client").RequestResult<AssetInteractV2ApiControllerCancelCommandResponses, AssetInteractV2ApiControllerCancelCommandErrors, ThrowOnError>;
+/**
+ * Close the InterAct session on an asset
+ * Close the InterAct shell session on EXACTLY ONE Binalyze AIR asset via POST /api/v2/assets/{idOrName}/interact/close. WARNING: this endpoint has NO dry-run preview -- it really closes the session. With no body it closes the caller's active session; pass sessionId to target a specific session. If the session has running commands and force is omitted/false, the API returns 400 with errors[0].details.runningMessageIds; set force=true to cancel those commands first and then close. Success returns { sessionId, closedAt, cancelledMessageIds[] }. 404 'No active session' when nothing matches. Prefer UUID for the asset. On HTTP 404 with errors[0].details.suggestions, the asset name was not found -- show those suggestions to the user and confirm before retrying, never guess; on HTTP 400 AMBIGUOUS_NAME with errors[0].details.matches, ask which asset by id.
+ */
+export declare const assetInteractV2ApiControllerCloseSession: <ThrowOnError extends boolean = false>(options: Options<AssetInteractV2ApiControllerCloseSessionData, ThrowOnError>) => import("./client").RequestResult<AssetInteractV2ApiControllerCloseSessionResponses, AssetInteractV2ApiControllerCloseSessionErrors, ThrowOnError>;
+/**
+ * Get asset issue/actionability stats
+ * Get aggregate Binalyze AIR asset statistics from GET /api/v2/assets/stats. Use this for fleet summaries, counts, and breakdowns, not for listing individual assets. Only include filters when the user explicitly asks for scoped stats.
+ */
+export declare const assetV2ApiControllerGetStats: <ThrowOnError extends boolean = false>(options?: Options<AssetV2ApiControllerGetStatsData, ThrowOnError>) => import("./client").RequestResult<AssetV2ApiControllerGetStatsResponses, AssetV2ApiControllerGetStatsErrors, ThrowOnError>;
+/**
+ * Export assets as CSV
+ * Export Binalyze AIR assets as a CSV file via GET /api/v2/assets/export and save it inside the current worktree. Read-only on the server side; no dryRun needed. The filter model mirrors air-assets-filtered-list (searchTerm, subtype, status, platform, isolation), but tag filtering (tagIds) is NOT applied on export. organizations defaults to all accessible organizations when omitted. Returns {outputPath, byteLength}; default output is artifacts/assets.csv. Use air-assets-list or air-assets-filtered-list instead when the user just wants to read assets in the chat.
+ */
+export declare const assetV2ApiControllerExportAssets: <ThrowOnError extends boolean = false>(options?: Options<AssetV2ApiControllerExportAssetsData, ThrowOnError>) => import("./client").RequestResult<AssetV2ApiControllerExportAssetsResponses, AssetV2ApiControllerExportAssetsErrors, ThrowOnError>;
+/**
+ * List assets
+ * List Binalyze AIR assets with explicit filters, organization scope, pagination, sorting, or output format. Use this only when the user asks for a constrained asset list, such as offline Windows endpoints, page 2, assets with no agent, or markdown output. For subtype-only prompts like 'filter by disk image', prefer air-assets-by-subtype. If a small model sends searchTerm=diskImage here, this tool normalizes it to subtype=['diskImage']. Placeholder defaults such as organizations=all, pageNumber=1, pageSize=20, sortType without sortBy, and false booleans are ignored.
+ */
+export declare const assetV2ApiControllerFilterAssets: <ThrowOnError extends boolean = false>(options?: Options<AssetV2ApiControllerFilterAssetsData, ThrowOnError>) => import("./client").RequestResult<AssetV2ApiControllerFilterAssetsResponses, AssetV2ApiControllerFilterAssetsErrors, ThrowOnError>;
+/**
+ * Delete an asset by id or name
+ * Delete or uninstall EXACTLY ONE Binalyze AIR asset, identified by a single id or name in the path, using DELETE /api/v2/assets/{idOrName}. This is destructive. ALWAYS send dryRun=true on every call (would-delete preview); pass dryRun=false only for the final real delete after the user confirms the exact asset id and mode. Use mode='purge' for console record deletion only, 'uninstall' for agent uninstall signal, and 'purge-and-uninstall' for both. Prefer UUID; names can be ambiguous. On HTTP 404 with errors[0].details.suggestions, the asset name was not found -- show those suggestions to the user and confirm before retrying, never guess; on HTTP 400 AMBIGUOUS_NAME with errors[0].details.matches, ask which asset by id.
+ */
+export declare const assetV2ApiControllerDeleteAsset: <ThrowOnError extends boolean = false>(options: Options<AssetV2ApiControllerDeleteAssetData, ThrowOnError>) => import("./client").RequestResult<AssetV2ApiControllerDeleteAssetResponses, AssetV2ApiControllerDeleteAssetErrors, ThrowOnError>;
+/**
+ * Get asset by id or name
+ * Fetch one Binalyze AIR asset by UUID or name using GET /api/v2/assets/{idOrName}. Use this when the user wants details for a specific host/asset. Prefer UUID because names can be duplicated. If the API returns AMBIGUOUS_NAME, show the candidates and retry only with the selected id. On HTTP 404 with errors[0].details.suggestions, the asset name was not found -- show those suggestions to the user and confirm before retrying, never guess; on HTTP 400 AMBIGUOUS_NAME with errors[0].details.matches, ask which asset by id.
+ */
+export declare const assetV2ApiControllerGetAsset: <ThrowOnError extends boolean = false>(options: Options<AssetV2ApiControllerGetAssetData, ThrowOnError>) => import("./client").RequestResult<AssetV2ApiControllerGetAssetResponses, AssetV2ApiControllerGetAssetErrors, ThrowOnError>;
+/**
+ * Replace asset tags
+ * Replace the complete tag set of one Binalyze AIR asset using PATCH /api/v2/assets/{idOrName}/tags. Use this only when the user asks to set, replace, update, or clear tags. This is a full replacement, not an append operation. ALWAYS send dryRun=true on every call (would-change preview); pass dryRun=false only to apply the real tag change after the user confirms the exact asset. Prefer UUID because asset names can be ambiguous; retry by id if AMBIGUOUS_NAME is returned. On HTTP 404 with errors[0].details.suggestions, the asset name was not found -- show those suggestions to the user and confirm before retrying, never guess; on HTTP 400 AMBIGUOUS_NAME with errors[0].details.matches, ask which asset by id.
+ */
+export declare const assetV2ApiControllerReplaceTags: <ThrowOnError extends boolean = false>(options: Options<AssetV2ApiControllerReplaceTagsData, ThrowOnError>) => import("./client").RequestResult<AssetV2ApiControllerReplaceTagsResponses, AssetV2ApiControllerReplaceTagsErrors, ThrowOnError>;
+/**
+ * Update asset label
+ * Set or clear the label of one Binalyze AIR asset using PATCH /api/v2/assets/{idOrName}/label. Use this only for asset label changes, not tags. Pass a string to set the label or null to clear it. ALWAYS send dryRun=true on every call (would-change preview); pass dryRun=false only to apply the real label change after the user confirms the exact asset. Prefer UUID because asset names can be ambiguous; retry by id if AMBIGUOUS_NAME is returned. On HTTP 404 with errors[0].details.suggestions, the asset name was not found -- show those suggestions to the user and confirm before retrying, never guess; on HTTP 400 AMBIGUOUS_NAME with errors[0].details.matches, ask which asset by id.
+ */
+export declare const assetV2ApiControllerUpdateLabel: <ThrowOnError extends boolean = false>(options: Options<AssetV2ApiControllerUpdateLabelData, ThrowOnError>) => import("./client").RequestResult<AssetV2ApiControllerUpdateLabelResponses, AssetV2ApiControllerUpdateLabelErrors, ThrowOnError>;
+/**
+ * List the hunt task history of a single asset
+ * List the hunt (triage) task history of EXACTLY ONE Binalyze AIR asset via GET /api/v2/assets/{idOrName}/hunt (formerly /triage). Read-only; returns a paginated envelope of the triage tasks previously run on that asset. Use this when the user asks for an asset's past/ongoing triage tasks. Prefer UUID; names can be ambiguous across organizations. On HTTP 404 with errors[0].details.suggestions, the asset name was not found -- show those suggestions to the user and confirm before retrying, never guess; on HTTP 400 AMBIGUOUS_NAME with errors[0].details.matches, ask which asset by id.
  */
 export declare const assetTriageV2ApiControllerFilterTriageTasks: <ThrowOnError extends boolean = false>(options: Options<AssetTriageV2ApiControllerFilterTriageTasksData, ThrowOnError>) => import("./client").RequestResult<AssetTriageV2ApiControllerFilterTriageTasksResponses, AssetTriageV2ApiControllerFilterTriageTasksErrors, ThrowOnError>;
 /**
  * Run triage rule(s) on a single asset
+ * Run hunt (triage) rule(s) on EXACTLY ONE Binalyze AIR asset via POST /api/v2/assets/{idOrName}/hunt (formerly /triage). Use this ONLY for one specific asset; for two or more assets, a list, a group, or 'all matching', use air-assets-bulk-triage instead. WARNING: this endpoint has NO dry-run preview -- a successful call creates a REAL triage task IMMEDIATELY (or a scheduled one when `schedule` is set). Confirm the exact asset and rules with the user before calling. ruleIds accept a rule UUID OR an exact rule name (names are resolved within the asset's authorized org scope; unknown/ambiguous names become per-input errors). NEVER invent or guess a rule id/name. Omit every optional argument the user did not ask for; never fill placeholders. Only a 2xx response with a returned task id means the task was created -- treat ok=false / non-2xx / the error field as failure. Supports Idempotency-Key so a retried call replays the first response instead of creating duplicate tasks. On HTTP 404 with errors[0].details.suggestions, the asset name was not found -- show those suggestions to the user and confirm before retrying, never guess; on HTTP 400 AMBIGUOUS_NAME with errors[0].details.matches, ask which asset by id.
  */
 export declare const assetTriageV2ApiControllerRunTriage: <ThrowOnError extends boolean = false>(options: Options<AssetTriageV2ApiControllerRunTriageData, ThrowOnError>) => import("./client").RequestResult<AssetTriageV2ApiControllerRunTriageResponses, AssetTriageV2ApiControllerRunTriageErrors, ThrowOnError>;
 /**
  * Cancel triage tasks on a single asset
+ * Cancel triage (hunt) tasks on EXACTLY ONE Binalyze AIR asset via POST /api/v2/assets/{idOrName}/triage/cancel. Use this ONLY for one specific asset's triage tasks. For cancelling a whole hunt task across all its assets, use air-hunt-cancel instead. `tasks` is ALWAYS required: an array of parent task UUIDs, or the literal string 'all' to cancel every cancellable triage task of this asset. ALWAYS send dryRun=true on every call (would-run preview); pass dryRun=false only to send the real cancellation after the user confirms the exact asset and tasks. Prefer UUID for the asset; names can be ambiguous across organizations. On HTTP 404 with errors[0].details.suggestions, the asset name was not found -- show those suggestions to the user and confirm before retrying, never guess; on HTTP 400 AMBIGUOUS_NAME with errors[0].details.matches, ask which asset by id.
  */
 export declare const assetTriageV2ApiControllerCancelTriage: <ThrowOnError extends boolean = false>(options: Options<AssetTriageV2ApiControllerCancelTriageData, ThrowOnError>) => import("./client").RequestResult<AssetTriageV2ApiControllerCancelTriageResponses, AssetTriageV2ApiControllerCancelTriageErrors, ThrowOnError>;
 /**
  * Delete one asset's triage task assignment
+ * Delete ONE asset's triage (hunt) task assignment via DELETE /api/v2/assets/{idOrName}/triage/{taskId}. DESTRUCTIVE and irreversible once executed: removes this asset's assignment of the given parent triage task, including its collected results for this asset. Other assets' assignments of the same task are NOT touched; to delete the whole task everywhere, use air-hunt-delete instead. ALWAYS send dryRun=true on every call (would-delete preview); pass dryRun=false only after the user confirms the exact asset and task. taskId must be the parent task UUID (see air-assets-triage-history). Prefer UUID for the asset; names can be ambiguous across organizations. On HTTP 404 with errors[0].details.suggestions, the asset name was not found -- show those suggestions to the user and confirm before retrying, never guess; on HTTP 400 AMBIGUOUS_NAME with errors[0].details.matches, ask which asset by id.
  */
 export declare const assetTriageV2ApiControllerDeleteTriageAssignment: <ThrowOnError extends boolean = false>(options: Options<AssetTriageV2ApiControllerDeleteTriageAssignmentData, ThrowOnError>) => import("./client").RequestResult<AssetTriageV2ApiControllerDeleteTriageAssignmentResponses, AssetTriageV2ApiControllerDeleteTriageAssignmentErrors, ThrowOnError>;
 /**
  * Start an evidence or image acquisition on a single asset
+ * Start an evidence or disk-image acquisition on EXACTLY ONE Binalyze AIR asset via POST /api/v2/assets/{idOrName}/acquire. WARNING: this endpoint has NO dry-run preview -- a successful call starts a REAL acquisition task IMMEDIATELY (or a scheduled one when `schedule` is set). Confirm the exact asset, type, and profile/image options with the user before calling. type='evidence' (default) REQUIRES profileIdOrName and accepts NO image-specific field. type='image' REQUIRES imageType + at least one volume, accepts NO profileIdOrName, and description/examinerName are EWF2-only. The server rejects cross-type field combinations with 400. profileIdOrName / caseIdOrName accept a UUID or an exact name resolved within the asset's org scope. NEVER invent or guess a profile/case id. Omit every optional argument the user did not ask for; never fill placeholders. Only a 2xx response with a returned task id means the task was started -- treat ok=false / non-2xx / the error field as failure. Supports Idempotency-Key so a retried call replays the first response instead of starting duplicate tasks. On HTTP 404 with errors[0].details.suggestions, the asset name was not found -- show those suggestions to the user and confirm before retrying, never guess; on HTTP 400 AMBIGUOUS_NAME with errors[0].details.matches, ask which asset by id.
  */
 export declare const assetAcquisitionV2ApiControllerAcquire: <ThrowOnError extends boolean = false>(options: Options<AssetAcquisitionV2ApiControllerAcquireData, ThrowOnError>) => import("./client").RequestResult<AssetAcquisitionV2ApiControllerAcquireResponses, AssetAcquisitionV2ApiControllerAcquireErrors, ThrowOnError>;
 /**
  * Cancel acquisition tasks on a single asset
+ * Cancel evidence/image acquisition tasks on EXACTLY ONE Binalyze AIR asset via POST /api/v2/assets/{idOrName}/acquisition/cancel. Use this ONLY for one specific asset's acquisition tasks (started with air-assets-acquire). `tasks` is ALWAYS required: an array of parent task UUIDs, or the literal string 'all' to cancel every cancellable acquisition task of this asset. ALWAYS send dryRun=true on every call (would-run preview); pass dryRun=false only to send the real cancellation after the user confirms the exact asset and tasks. Prefer UUID for the asset; names can be ambiguous across organizations. On HTTP 404 with errors[0].details.suggestions, the asset name was not found -- show those suggestions to the user and confirm before retrying, never guess; on HTTP 400 AMBIGUOUS_NAME with errors[0].details.matches, ask which asset by id.
  */
 export declare const assetAcquisitionV2ApiControllerCancelAcquisition: <ThrowOnError extends boolean = false>(options: Options<AssetAcquisitionV2ApiControllerCancelAcquisitionData, ThrowOnError>) => import("./client").RequestResult<AssetAcquisitionV2ApiControllerCancelAcquisitionResponses, AssetAcquisitionV2ApiControllerCancelAcquisitionErrors, ThrowOnError>;
 /**
  * Delete one asset's acquisition task assignment
+ * Delete ONE asset's acquisition task assignment via DELETE /api/v2/assets/{idOrName}/acquisition/{taskId}. DESTRUCTIVE and irreversible once executed: removes this asset's assignment of the given parent acquisition task, including its collected evidence for this asset. Other assets' assignments of the same task are NOT touched. ALWAYS send dryRun=true on every call (would-delete preview); pass dryRun=false only after the user confirms the exact asset and task. taskId must be the parent task UUID (see air-assets-acquisition-history). Prefer UUID for the asset; names can be ambiguous across organizations. On HTTP 404 with errors[0].details.suggestions, the asset name was not found -- show those suggestions to the user and confirm before retrying, never guess; on HTTP 400 AMBIGUOUS_NAME with errors[0].details.matches, ask which asset by id.
  */
 export declare const assetAcquisitionV2ApiControllerDeleteAcquisitionAssignment: <ThrowOnError extends boolean = false>(options: Options<AssetAcquisitionV2ApiControllerDeleteAcquisitionAssignmentData, ThrowOnError>) => import("./client").RequestResult<AssetAcquisitionV2ApiControllerDeleteAcquisitionAssignmentResponses, AssetAcquisitionV2ApiControllerDeleteAcquisitionAssignmentErrors, ThrowOnError>;
 /**
  * List the acquisition task history of a single asset
- * List the acquisition task history of a single asset
+ * List the acquisition (evidence/image) task history of EXACTLY ONE Binalyze AIR asset via GET /api/v2/assets/{idOrName}/acquisition. Read-only; returns a paginated envelope of the acquisition tasks previously started on that asset. Use this when the user asks for an asset's past/ongoing acquisition tasks. Prefer UUID; names can be ambiguous across organizations. On HTTP 404 with errors[0].details.suggestions, the asset name was not found -- show those suggestions to the user and confirm before retrying, never guess; on HTTP 400 AMBIGUOUS_NAME with errors[0].details.matches, ask which asset by id.
  */
 export declare const assetAcquisitionV2ApiControllerFilterAcquisitionTasks: <ThrowOnError extends boolean = false>(options: Options<AssetAcquisitionV2ApiControllerFilterAcquisitionTasksData, ThrowOnError>) => import("./client").RequestResult<AssetAcquisitionV2ApiControllerFilterAcquisitionTasksResponses, AssetAcquisitionV2ApiControllerFilterAcquisitionTasksErrors, ThrowOnError>;
-/**
- * List InterAct messages for an asset
- * Paginated InterAct command messages for the asset across all of its sessions.
- */
-export declare const assetInteractMessageV2ApiControllerListForAsset: <ThrowOnError extends boolean = false>(options: Options<AssetInteractMessageV2ApiControllerListForAssetData, ThrowOnError>) => import("./client").RequestResult<AssetInteractMessageV2ApiControllerListForAssetResponses, AssetInteractMessageV2ApiControllerListForAssetErrors, ThrowOnError>;
-/**
- * Run an InterAct command on an asset
- * Runs a command; sync returns the message (200), async/timeout returns 202.
- */
-export declare const assetInteractV2ApiControllerRunCommand: <ThrowOnError extends boolean = false>(options: Options<AssetInteractV2ApiControllerRunCommandData, ThrowOnError>) => import("./client").RequestResult<AssetInteractV2ApiControllerRunCommandResponses, AssetInteractV2ApiControllerRunCommandErrors, ThrowOnError>;
-/**
- * Cancel the running InterAct command on an asset
- * Cancels the target/active running command; the session stays open.
- */
-export declare const assetInteractV2ApiControllerCancelCommand: <ThrowOnError extends boolean = false>(options: Options<AssetInteractV2ApiControllerCancelCommandData, ThrowOnError>) => import("./client").RequestResult<AssetInteractV2ApiControllerCancelCommandResponses, AssetInteractV2ApiControllerCancelCommandErrors, ThrowOnError>;
-/**
- * Close the InterAct session on an asset
- * Closes the active/target session; force=true cancels running commands first.
- */
-export declare const assetInteractV2ApiControllerCloseSession: <ThrowOnError extends boolean = false>(options: Options<AssetInteractV2ApiControllerCloseSessionData, ThrowOnError>) => import("./client").RequestResult<AssetInteractV2ApiControllerCloseSessionResponses, AssetInteractV2ApiControllerCloseSessionErrors, ThrowOnError>;
 /**
  * List InterAct sessions for an asset
- * Paginated InterAct sessions for the asset with derived activity state.
+ * List the InterAct shell sessions of EXACTLY ONE Binalyze AIR asset via GET /api/v2/assets/{idOrName}/interact/sessions. Read-only; returns a paginated envelope of sessions (activityState active/idle, createdBy, task, case, messageCount, timestamps). Supports filtering by session, creator, and creation date; sortable by createdAt. Use this when the user asks for an asset's shell sessions. Prefer UUID; names can be ambiguous across organizations. Omit any filter the user did not ask for. On HTTP 404 with errors[0].details.suggestions, the asset name was not found -- show those suggestions to the user and confirm before retrying, never guess; on HTTP 400 AMBIGUOUS_NAME with errors[0].details.matches, ask which asset by id.
  */
 export declare const assetInteractMessageV2ApiControllerListSessionsForAsset: <ThrowOnError extends boolean = false>(options: Options<AssetInteractMessageV2ApiControllerListSessionsForAssetData, ThrowOnError>) => import("./client").RequestResult<AssetInteractMessageV2ApiControllerListSessionsForAssetResponses, AssetInteractMessageV2ApiControllerListSessionsForAssetErrors, ThrowOnError>;
 /**
  * Get an InterAct message scoped to an asset
- * Single InterAct message wrapped in entities[0]; cross-asset mismatch returns 404.
+ * Fetch ONE InterAct shell message of a Binalyze AIR asset by message UUID via GET /api/v2/assets/{idOrName}/interact/{messageId}. Read-only; returns the unified message entity (command, status, output/outputUrl, exitCode, timestamps). Use this to poll a 'running' message returned by air-assets-interact-run, or to inspect one specific message. The message must belong to the asset, otherwise the API returns 404. On HTTP 404 with errors[0].details.suggestions, the asset name was not found -- show those suggestions to the user and confirm before retrying, never guess; on HTTP 400 AMBIGUOUS_NAME with errors[0].details.matches, ask which asset by id.
  */
 export declare const assetInteractMessageV2ApiControllerGetMessage: <ThrowOnError extends boolean = false>(options: Options<AssetInteractMessageV2ApiControllerGetMessageData, ThrowOnError>) => import("./client").RequestResult<AssetInteractMessageV2ApiControllerGetMessageResponses, AssetInteractMessageV2ApiControllerGetMessageErrors, ThrowOnError>;
 /**
  * Download an InterAct message output
- * Streams the message output as an attachment; bypasses the JSON envelope.
+ * Download the output of ONE InterAct shell message of a Binalyze AIR asset via GET /api/v2/assets/{idOrName}/interact/{messageId}/download. Read-only; the endpoint streams the message output as an attachment (it bypasses the JSON envelope). This tool saves the bytes to a file inside the current worktree (outputPath, default artifacts/interact-message-output.bin) and returns { outputPath, byteLength }; read the saved file for the content. Use this for a message whose output is too large to inline (outputUrl is set). The message must be terminal -- a still-running message returns 400. On HTTP 404 the asset name or message id was not found; verify the asset with air-assets-get and the message with air-assets-interact-messages before retrying.
  */
 export declare const assetInteractMessageV2ApiControllerDownloadMessageOutput: <ThrowOnError extends boolean = false>(options: Options<AssetInteractMessageV2ApiControllerDownloadMessageOutputData, ThrowOnError>) => import("./client").RequestResult<AssetInteractMessageV2ApiControllerDownloadMessageOutputResponses, AssetInteractMessageV2ApiControllerDownloadMessageOutputErrors, ThrowOnError>;
 /**
  * Get an InterAct session report scoped to an asset
- * Self-contained session report; JSON by default, HTML when format=html.
+ * Get the InterAct shell session report of a Binalyze AIR asset via GET /api/v2/assets/{idOrName}/interact/sessions/{sessionId}/report. Read-only; returns a self-contained session report. format='json' (default) returns the structured report envelope (session, asset, messages, messageCount, lastActivityAt); format='html' returns the rendered HTML report (this tool returns a preview of the HTML plus its byte length). Use a sessionId from air-assets-interact-sessions. The session must belong to the asset, otherwise the API returns 404. Prefer UUID for the asset. On HTTP 404 with errors[0].details.suggestions, the asset name was not found -- show those suggestions to the user and confirm before retrying, never guess; on HTTP 400 AMBIGUOUS_NAME with errors[0].details.matches, ask which asset by id.
  */
 export declare const assetInteractMessageV2ApiControllerGetSessionReport: <ThrowOnError extends boolean = false>(options: Options<AssetInteractMessageV2ApiControllerGetSessionReportData, ThrowOnError>) => import("./client").RequestResult<AssetInteractMessageV2ApiControllerGetSessionReportResponses, AssetInteractMessageV2ApiControllerGetSessionReportErrors, ThrowOnError>;
 export declare const webhookFilterParsers: <ThrowOnError extends boolean = false>(options?: Options<WebhookFilterParsersData, ThrowOnError>) => import("./client").RequestResult<WebhookFilterParsersResponses, unknown, ThrowOnError>;
@@ -1503,6 +1858,7 @@ export declare const automationHubGetAutomation: <ThrowOnError extends boolean =
 export declare const automationHubUpdateAutomation: <ThrowOnError extends boolean = false>(options: Options<AutomationHubUpdateAutomationData, ThrowOnError>) => import("./client").RequestResult<AutomationHubUpdateAutomationResponses, unknown, ThrowOnError>;
 export declare const automationHubGetAutomationExecutions: <ThrowOnError extends boolean = false>(options: Options<AutomationHubGetAutomationExecutionsData, ThrowOnError>) => import("./client").RequestResult<AutomationHubGetAutomationExecutionsResponses, unknown, ThrowOnError>;
 export declare const automationHubGetAutomationChangeHistory: <ThrowOnError extends boolean = false>(options: Options<AutomationHubGetAutomationChangeHistoryData, ThrowOnError>) => import("./client").RequestResult<AutomationHubGetAutomationChangeHistoryResponses, unknown, ThrowOnError>;
+export declare const automationHubGenerateTriggerSecret: <ThrowOnError extends boolean = false>(options: Options<AutomationHubGenerateTriggerSecretData, ThrowOnError>) => import("./client").RequestResult<AutomationHubGenerateTriggerSecretResponses, unknown, ThrowOnError>;
 export declare const automationHubEnableAutomation: <ThrowOnError extends boolean = false>(options: Options<AutomationHubEnableAutomationData, ThrowOnError>) => import("./client").RequestResult<AutomationHubEnableAutomationResponses, unknown, ThrowOnError>;
 export declare const automationHubDisableAutomation: <ThrowOnError extends boolean = false>(options: Options<AutomationHubDisableAutomationData, ThrowOnError>) => import("./client").RequestResult<AutomationHubDisableAutomationResponses, unknown, ThrowOnError>;
 /**
@@ -1564,26 +1920,32 @@ export declare const cloudAcquisitionProfilesGetOne: <ThrowOnError extends boole
 export declare const cloudAcquisitionProfilesUpdate: <ThrowOnError extends boolean = false>(options: Options<CloudAcquisitionProfilesUpdateData, ThrowOnError>) => import("./client").RequestResult<CloudAcquisitionProfilesUpdateResponses, unknown, ThrowOnError>;
 /**
  * List cloud acquisition profiles
+ * List Binalyze AIR cloud (M365) acquisition profiles via GET /api/v2/libraries/acquisition/cloud. Read-only and paginated. Each entity is a profile summary: id, name, organizations[{id,name}], averageTime, createdAt/createdBy, lastUsedAt/lastUsedBy, deletable, and a detailsUrl. The m365UserBased/m365TenantWide evidence lists are NOT included; use air-acquisition-cloud-get for one profile's full config. Use this when the user asks to list or search cloud acquisition profiles, or needs a profile id or exact name before get, update, delete, or bulk delete. sortBy accepts only name, createdBy, createdAt, lastUsedAt, lastUsedBy (default createdAt). Profiles with an empty organizations array are global.
  */
 export declare const cloudAcquisitionLibraryApiControllerList: <ThrowOnError extends boolean = false>(options?: Options<CloudAcquisitionLibraryApiControllerListData, ThrowOnError>) => import("./client").RequestResult<CloudAcquisitionLibraryApiControllerListResponses, CloudAcquisitionLibraryApiControllerListErrors, ThrowOnError>;
 /**
  * Create cloud acquisition profile
+ * Create a Binalyze AIR cloud (M365) acquisition profile via POST /api/v2/libraries/acquisition/cloud. MUTATING: persists a new profile. Returns 200 with entities[0] = the created profile detail. `name` (alphanumeric) plus BOTH m365UserBased and m365TenantWide blocks are required; each block is {evidenceList: string[]} and at least one evidence must be selected across the two blocks. Body `organizationIds` controls which organizations own the profile; common query `organizations`, `orgs`, and `org` parameters are rejected. Evidence keys are lowercase M365 collector names, e.g. user-based: outlookmails, onedrive, teams, teamschat, calendar, mfa, user; tenant-wide: ual, adminauditlog, azureadaccountlogon, sharepoint, exchangeadmin, riskyusers. dryRun DEFAULTS TO TRUE: the first call validates and returns the would-be entity without persisting anything; pass dryRun=false only to actually create after the user confirms. Inspect an existing profile with air-acquisition-cloud-get for the full list of valid evidence keys.
  */
 export declare const cloudAcquisitionLibraryApiControllerCreate: <ThrowOnError extends boolean = false>(options: Options<CloudAcquisitionLibraryApiControllerCreateData, ThrowOnError>) => import("./client").RequestResult<CloudAcquisitionLibraryApiControllerCreateResponses, CloudAcquisitionLibraryApiControllerCreateErrors, ThrowOnError>;
 /**
  * Bulk delete cloud acquisition profiles
+ * Bulk delete Binalyze AIR cloud (M365) acquisition profiles via POST /api/v2/libraries/acquisition/cloud/delete. MUTATING and irreversible. Resolution is tolerant: unknown or ambiguous items are skipped and reported in warnings[] (action: 'skipped') instead of failing the whole request. System profiles are also skipped with a warning. dryRun DEFAULTS TO TRUE: the first call returns entities[] of what would be deleted; pass dryRun=false only to actually delete after the user confirms. A real delete returns deletedCount plus warnings[]. Use this for several profiles at once; use air-acquisition-cloud-delete for exactly one. Ids and exact names come from air-acquisition-cloud-list.
  */
 export declare const cloudAcquisitionLibraryApiControllerBulkDelete: <ThrowOnError extends boolean = false>(options: Options<CloudAcquisitionLibraryApiControllerBulkDeleteData, ThrowOnError>) => import("./client").RequestResult<CloudAcquisitionLibraryApiControllerBulkDeleteResponses, CloudAcquisitionLibraryApiControllerBulkDeleteErrors, ThrowOnError>;
 /**
  * Delete cloud acquisition profile
+ * Delete ONE Binalyze AIR cloud (M365) acquisition profile via DELETE /api/v2/libraries/acquisition/cloud/{idOrName}. MUTATING and irreversible. System (predefined) profiles cannot be deleted: the API returns 406 SYSTEM_PROFILE_IMMUTABLE. dryRun DEFAULTS TO TRUE: the first call returns what would be deleted without removing anything; pass dryRun=false only to actually delete after the user confirms. Use air-acquisition-cloud-bulk-delete for several profiles at once. The idOrName comes from air-acquisition-cloud-list or air-acquisition-cloud-get. An unknown idOrName returns 404 NOT_FOUND with suggestions; an ambiguous name returns 400 AMBIGUOUS_NAME.
  */
 export declare const cloudAcquisitionLibraryApiControllerDelete: <ThrowOnError extends boolean = false>(options: Options<CloudAcquisitionLibraryApiControllerDeleteData, ThrowOnError>) => import("./client").RequestResult<CloudAcquisitionLibraryApiControllerDeleteResponses, CloudAcquisitionLibraryApiControllerDeleteErrors, ThrowOnError>;
 /**
  * Get cloud acquisition profile by id or name
+ * Get ONE Binalyze AIR cloud (M365) acquisition profile by UUID or exact name via GET /api/v2/libraries/acquisition/cloud/{idOrName}. Read-only. Returns the full profile detail in entities[0]: id, name, organizations[{id,name}], m365UserBased.evidenceList, m365TenantWide.evidenceList, deletable, and timestamps. Use this when the user asks to show or inspect a cloud acquisition profile's evidence selection, to clone one, or to discover valid M365 evidence keys. Ids and exact names come from air-acquisition-cloud-list. An unknown idOrName returns 404 NOT_FOUND with did-you-mean suggestions in errors[0].details.suggestions[]; an ambiguous name returns 400 AMBIGUOUS_NAME with candidates in errors[0].details.matches[].
  */
 export declare const cloudAcquisitionLibraryApiControllerGet: <ThrowOnError extends boolean = false>(options: Options<CloudAcquisitionLibraryApiControllerGetData, ThrowOnError>) => import("./client").RequestResult<CloudAcquisitionLibraryApiControllerGetResponses, CloudAcquisitionLibraryApiControllerGetErrors, ThrowOnError>;
 /**
  * Update cloud acquisition profile
+ * Update ONE Binalyze AIR cloud (M365) acquisition profile via PATCH /api/v2/libraries/acquisition/cloud/{idOrName}. MUTATING partial update: only the fields you pass change; omitted fields keep their current value. Updatable fields: name, organizationIds, m365UserBased, m365TenantWide. A passed evidence block REPLACES that whole block. The merged profile must keep at least one M365 evidence selected across the two blocks (a name-only patch is fine). Sending no updatable field returns NOTHING_CHANGED with result null. System (predefined) profiles cannot be updated: the API returns 406 SYSTEM_PROFILE_IMMUTABLE. dryRun DEFAULTS TO TRUE: the first call previews the merged profile without persisting; pass dryRun=false only to actually update after the user confirms. The idOrName comes from air-acquisition-cloud-list or air-acquisition-cloud-get. An unknown idOrName returns 404 NOT_FOUND with suggestions; an ambiguous name returns 400 AMBIGUOUS_NAME.
  */
 export declare const cloudAcquisitionLibraryApiControllerUpdate: <ThrowOnError extends boolean = false>(options: Options<CloudAcquisitionLibraryApiControllerUpdateData, ThrowOnError>) => import("./client").RequestResult<CloudAcquisitionLibraryApiControllerUpdateResponses, CloudAcquisitionLibraryApiControllerUpdateErrors, ThrowOnError>;
 /**
@@ -1618,26 +1980,32 @@ export declare const imageEvidenceAcquisitionProfilesUpdate: <ThrowOnError exten
 export declare const imageEvidenceAcquisitionProfilesDeleteBulk: <ThrowOnError extends boolean = false>(options: Options<ImageEvidenceAcquisitionProfilesDeleteBulkData, ThrowOnError>) => import("./client").RequestResult<ImageEvidenceAcquisitionProfilesDeleteBulkResponses, unknown, ThrowOnError>;
 /**
  * List disk image acquisition profiles
+ * List Binalyze AIR disk-image acquisition profiles via GET /api/v2/libraries/acquisition/disk-image. Read-only and paginated. Requires the image-evidence-acquisition feature to be enabled on the Console. Each entity is a profile summary: id, name, organizations[{id,name}], averageTime, createdAt/updatedAt, createdBy, lastUsedAt/lastUsedBy, deletable, and a detailsUrl. allFiles/paths/evidence config is NOT included; use air-acquisition-disk-image-get for one profile's full config. Use this when the user asks to list or search disk-image (forensic imaging) profiles, or needs a profile id or exact name before get, update, delete, or bulk delete. sortBy accepts only name, createdAt, updatedAt, lastUsedAt, createdBy, lastUsedBy (default createdAt). Profiles with an empty organizations array are global.
  */
 export declare const diskImageAcquisitionLibraryApiControllerList: <ThrowOnError extends boolean = false>(options?: Options<DiskImageAcquisitionLibraryApiControllerListData, ThrowOnError>) => import("./client").RequestResult<DiskImageAcquisitionLibraryApiControllerListResponses, DiskImageAcquisitionLibraryApiControllerListErrors, ThrowOnError>;
 /**
  * Create disk image acquisition profile
+ * Create a Binalyze AIR disk-image acquisition profile via POST /api/v2/libraries/acquisition/disk-image. MUTATING: persists a new profile. Returns 200 with entities[0] = the created profile detail. Requires the image-evidence-acquisition feature to be enabled on the Console. `name` is required (alphanumeric). Scope is either allFiles=true (full image) OR a `paths` list of directories/files to image; the allFiles/paths combination must be consistent (a profile cannot have both allFiles=true and paths). `imageAcquisitionEvidences` optionally selects extra evidence to collect alongside the image. Body `organizationIds` controls which organizations own the profile; common query `organizations`, `orgs`, and `org` parameters are rejected. dryRun DEFAULTS TO TRUE: the first call validates and returns the would-be entity without persisting anything; pass dryRun=false only to actually create after the user confirms. Inspect an existing profile with air-acquisition-disk-image-get when cloning or when unsure of valid evidence keys.
  */
 export declare const diskImageAcquisitionLibraryApiControllerCreate: <ThrowOnError extends boolean = false>(options: Options<DiskImageAcquisitionLibraryApiControllerCreateData, ThrowOnError>) => import("./client").RequestResult<DiskImageAcquisitionLibraryApiControllerCreateResponses, DiskImageAcquisitionLibraryApiControllerCreateErrors, ThrowOnError>;
 /**
  * Bulk delete disk image acquisition profiles
+ * Bulk delete Binalyze AIR disk-image acquisition profiles via POST /api/v2/libraries/acquisition/disk-image/delete. MUTATING and irreversible. Requires the image-evidence-acquisition feature to be enabled on the Console. Resolution is tolerant: unknown or ambiguous items are skipped and reported in warnings[] (action: 'skipped') instead of failing the whole request. System profiles are also skipped with a warning. dryRun DEFAULTS TO TRUE: the first call returns entities[] of what would be deleted; pass dryRun=false only to actually delete after the user confirms. A real delete returns deletedCount plus warnings[]. Use this for several profiles at once; use air-acquisition-disk-image-delete for exactly one. Ids and exact names come from air-acquisition-disk-image-list.
  */
 export declare const diskImageAcquisitionLibraryApiControllerBulkDelete: <ThrowOnError extends boolean = false>(options: Options<DiskImageAcquisitionLibraryApiControllerBulkDeleteData, ThrowOnError>) => import("./client").RequestResult<DiskImageAcquisitionLibraryApiControllerBulkDeleteResponses, DiskImageAcquisitionLibraryApiControllerBulkDeleteErrors, ThrowOnError>;
 /**
  * Delete disk image acquisition profile
+ * Delete ONE Binalyze AIR disk-image acquisition profile via DELETE /api/v2/libraries/acquisition/disk-image/{idOrName}. MUTATING and irreversible. Requires the image-evidence-acquisition feature to be enabled on the Console. System (predefined) profiles cannot be deleted: the API returns 406 SYSTEM_PROFILE_IMMUTABLE. dryRun DEFAULTS TO TRUE: the first call returns what would be deleted without removing anything; pass dryRun=false only to actually delete after the user confirms. Use air-acquisition-disk-image-bulk-delete for several profiles at once. The idOrName comes from air-acquisition-disk-image-list or air-acquisition-disk-image-get. An unknown idOrName returns 404 NOT_FOUND with suggestions; an ambiguous name returns 400 AMBIGUOUS_NAME.
  */
 export declare const diskImageAcquisitionLibraryApiControllerDelete: <ThrowOnError extends boolean = false>(options: Options<DiskImageAcquisitionLibraryApiControllerDeleteData, ThrowOnError>) => import("./client").RequestResult<DiskImageAcquisitionLibraryApiControllerDeleteResponses, DiskImageAcquisitionLibraryApiControllerDeleteErrors, ThrowOnError>;
 /**
  * Get disk image acquisition profile by id or name
+ * Get ONE Binalyze AIR disk-image acquisition profile by UUID or exact name via GET /api/v2/libraries/acquisition/disk-image/{idOrName}. Read-only. Requires the image-evidence-acquisition feature to be enabled on the Console. Returns the full profile detail in entities[0]: id, name, organizations[{id,name}], allFiles, paths[] ({path, description}), imageAcquisitionEvidences, deletable, and timestamps. Use this when the user asks to show or inspect a disk-image profile's scope, or to clone one. Ids and exact names come from air-acquisition-disk-image-list. An unknown idOrName returns 404 NOT_FOUND with did-you-mean suggestions in errors[0].details.suggestions[]; an ambiguous name returns 400 AMBIGUOUS_NAME with candidates in errors[0].details.matches[].
  */
 export declare const diskImageAcquisitionLibraryApiControllerGet: <ThrowOnError extends boolean = false>(options: Options<DiskImageAcquisitionLibraryApiControllerGetData, ThrowOnError>) => import("./client").RequestResult<DiskImageAcquisitionLibraryApiControllerGetResponses, DiskImageAcquisitionLibraryApiControllerGetErrors, ThrowOnError>;
 /**
  * Update disk image acquisition profile
+ * Update ONE Binalyze AIR disk-image acquisition profile via PATCH /api/v2/libraries/acquisition/disk-image/{idOrName}. MUTATING partial update: only the fields you pass change; omitted fields keep their current value. Requires the image-evidence-acquisition feature. Updatable fields: name, organizationIds, allFiles, paths, imageAcquisitionEvidences. The merged profile must stay consistent: allFiles=true cannot coexist with a non-empty paths list. Sending no updatable field returns NOTHING_CHANGED with result null. System (predefined) profiles cannot be updated: the API returns 406 SYSTEM_PROFILE_IMMUTABLE. dryRun DEFAULTS TO TRUE: the first call previews the merged profile without persisting; pass dryRun=false only to actually update after the user confirms. The idOrName comes from air-acquisition-disk-image-list or air-acquisition-disk-image-get. An unknown idOrName returns 404 NOT_FOUND with suggestions; an ambiguous name returns 400 AMBIGUOUS_NAME.
  */
 export declare const diskImageAcquisitionLibraryApiControllerUpdate: <ThrowOnError extends boolean = false>(options: Options<DiskImageAcquisitionLibraryApiControllerUpdateData, ThrowOnError>) => import("./client").RequestResult<DiskImageAcquisitionLibraryApiControllerUpdateResponses, DiskImageAcquisitionLibraryApiControllerUpdateErrors, ThrowOnError>;
 /**