@microsoft/msgraph-sdk 1.0.0-preview.72 → 1.0.0-preview.74

package/models/security/index.d.ts

@@ -76,6 +76,10 @@ export interface Alert extends Entity, Parsable {
      * URL for the incident page in the Microsoft 365 Defender portal.
      */
     incidentWebUrl?: string | null;
+    /**
+     * Information on the current status of the investigation. Possible values are: unknown, terminated, successfullyRemediated, benign, failed, partiallyRemediated, running, pendingApproval, pendingResource, queued, innerFailure, preexistingAlert, unsupportedOs, unsupportedAlertType, suppressedAlert, partiallyInvestigated, terminatedByUser, terminatedBySystem, unknownFutureValue.
+     */
+    investigationState?: InvestigationState | null;
     /**
      * The oldest activity associated with the alert.
      */
@@ -468,7 +472,7 @@ export interface CaseEscaped extends Entity, Parsable {
 }
 export interface CaseOperation extends Entity, Parsable {
     /**
-     * The type of action the operation represents. Possible values are: contentExport,  applyTags, convertToPdf, index, estimateStatistics, addToReviewSet, holdUpdate, unknownFutureValue, purgeData, exportReport, exportResult. Use the Prefer: include-unknown-enum-members request header to get the following values from this evolvable enum: purgeData, exportReport, exportResult.
+     * The type of action the operation represents. Possible values are: contentExport,  applyTags, convertToPdf, index, estimateStatistics, addToReviewSet, holdUpdate, unknownFutureValue, purgeData, exportReport, exportResult, holdPolicySync. Use the Prefer: include-unknown-enum-members request header to get the following values from this evolvable enum: purgeData, exportReport, exportResult, holdPolicySync.
      */
     action?: CaseAction | null;
     /**
@@ -492,7 +496,7 @@ export interface CaseOperation extends Entity, Parsable {
      */
     resultInfo?: ResultInfo | null;
     /**
-     * The status of the case operation. Possible values are: notStarted, submissionFailed, running, succeeded, partiallySucceeded, failed.
+     * The status of the case operation. Possible values are: notStarted, submissionFailed, running, succeeded, partiallySucceeded, failed, unknownFutureValue.
      */
     status?: CaseOperationStatus | null;
 }
@@ -981,6 +985,12 @@ export declare function createEdiscoveryExportOperationFromDiscriminatorValue(pa
  * @returns {EdiscoveryHoldOperation}
  */
 export declare function createEdiscoveryHoldOperationFromDiscriminatorValue(parseNode: ParseNode | undefined): ((instance?: Parsable) => Record<string, (node: ParseNode) => void>);
+/**
+ * Creates a new instance of the appropriate class based on discriminator value
+ * @param parseNode The parse node to use to read the discriminator value and create the object
+ * @returns {EdiscoveryHoldPolicySyncOperation}
+ */
+export declare function createEdiscoveryHoldPolicySyncOperationFromDiscriminatorValue(parseNode: ParseNode | undefined): ((instance?: Parsable) => Record<string, (node: ParseNode) => void>);
 /**
  * Creates a new instance of the appropriate class based on discriminator value
  * @param parseNode The parse node to use to read the discriminator value and create the object
@@ -2377,6 +2387,12 @@ export declare function deserializeIntoEdiscoveryExportOperation(ediscoveryExpor
  * @returns {Record<string, (node: ParseNode) => void>}
  */
 export declare function deserializeIntoEdiscoveryHoldOperation(ediscoveryHoldOperation?: Partial<EdiscoveryHoldOperation> | undefined): Record<string, (node: ParseNode) => void>;
+/**
+ * The deserialization information for the current model
+ * @param EdiscoveryHoldPolicySyncOperation The instance to deserialize into.
+ * @returns {Record<string, (node: ParseNode) => void>}
+ */
+export declare function deserializeIntoEdiscoveryHoldPolicySyncOperation(ediscoveryHoldPolicySyncOperation?: Partial<EdiscoveryHoldPolicySyncOperation> | undefined): Record<string, (node: ParseNode) => void>;
 /**
  * The deserialization information for the current model
  * @param EdiscoveryIndexOperation The instance to deserialize into.
@@ -3678,6 +3694,12 @@ export interface EdiscoveryExportOperation extends CaseOperation, Parsable {
 }
 export interface EdiscoveryHoldOperation extends CaseOperation, Parsable {
 }
+export interface EdiscoveryHoldPolicySyncOperation extends CaseOperation, Parsable {
+    /**
+     * Contains the properties for report file metadata, including downloadUrl, fileName, and size.
+     */
+    reportFileMetadata?: ReportFileMetadata[] | null;
+}
 export interface EdiscoveryIndexOperation extends CaseOperation, Parsable {
 }
 export interface EdiscoveryNoncustodialDataSource extends DataSourceContainer, Parsable {
@@ -4976,6 +4998,7 @@ export interface IntelligenceProfileIndicatorCollectionResponse extends BaseColl
     value?: IntelligenceProfileIndicator[] | null;
 }
 export type IntelligenceProfileKind = (typeof IntelligenceProfileKindObject)[keyof typeof IntelligenceProfileKindObject];
+export type InvestigationState = (typeof InvestigationStateObject)[keyof typeof InvestigationStateObject];
 export interface IoTDeviceEvidence extends AlertEvidence, Parsable {
     /**
      * The device ID.
@@ -6479,6 +6502,13 @@ export declare function serializeEdiscoveryExportOperation(writer: Serialization
  * @param writer Serialization writer to use to serialize this model
  */
 export declare function serializeEdiscoveryHoldOperation(writer: SerializationWriter, ediscoveryHoldOperation?: Partial<EdiscoveryHoldOperation> | undefined | null, isSerializingDerivedType?: boolean): void;
+/**
+ * Serializes information the current object
+ * @param EdiscoveryHoldPolicySyncOperation The instance to serialize from.
+ * @param isSerializingDerivedType A boolean indicating whether the serialization is for a derived type.
+ * @param writer Serialization writer to use to serialize this model
+ */
+export declare function serializeEdiscoveryHoldPolicySyncOperation(writer: SerializationWriter, ediscoveryHoldPolicySyncOperation?: Partial<EdiscoveryHoldPolicySyncOperation> | undefined | null, isSerializingDerivedType?: boolean): void;
 /**
  * Serializes information the current object
  * @param EdiscoveryIndexOperation The instance to serialize from.
@@ -8526,6 +8556,7 @@ export declare const CaseActionObject: {
     readonly PurgeData: "purgeData";
     readonly ExportReport: "exportReport";
     readonly ExportResult: "exportResult";
+    readonly HoldPolicySync: "holdPolicySync";
 };
 export declare const CaseOperationStatusObject: {
     readonly NotStarted: "notStarted";
@@ -8658,6 +8689,8 @@ export declare const DetectionSourceObject: {
     readonly BuiltInMl: "builtInMl";
     readonly MicrosoftInsiderRiskManagement: "microsoftInsiderRiskManagement";
     readonly MicrosoftThreatIntelligence: "microsoftThreatIntelligence";
+    readonly MicrosoftDefenderForAIServices: "microsoftDefenderForAIServices";
+    readonly SecurityCopilot: "securityCopilot";
     readonly MicrosoftSentinel: "microsoftSentinel";
 };
 export declare const DetectionStatusObject: {
@@ -8853,6 +8886,27 @@ export declare const IntelligenceProfileKindObject: {
     readonly Tool: "tool";
     readonly UnknownFutureValue: "unknownFutureValue";
 };
+export declare const InvestigationStateObject: {
+    readonly Unknown: "unknown";
+    readonly Terminated: "terminated";
+    readonly SuccessfullyRemediated: "successfullyRemediated";
+    readonly Benign: "benign";
+    readonly Failed: "failed";
+    readonly PartiallyRemediated: "partiallyRemediated";
+    readonly Running: "running";
+    readonly PendingApproval: "pendingApproval";
+    readonly PendingResource: "pendingResource";
+    readonly Queued: "queued";
+    readonly InnerFailure: "innerFailure";
+    readonly PreexistingAlert: "preexistingAlert";
+    readonly UnsupportedOs: "unsupportedOs";
+    readonly UnsupportedAlertType: "unsupportedAlertType";
+    readonly SuppressedAlert: "suppressedAlert";
+    readonly PartiallyInvestigated: "partiallyInvestigated";
+    readonly TerminatedByUser: "terminatedByUser";
+    readonly TerminatedBySystem: "terminatedBySystem";
+    readonly UnknownFutureValue: "unknownFutureValue";
+};
 export declare const IoTDeviceImportanceTypeObject: {
     readonly Unknown: "unknown";
     readonly Low: "low";