@microsoft/msgraph-sdk 1.0.0-preview.73 → 1.0.0-preview.74

package/models/security/index.d.ts

@@ -76,6 +76,10 @@ export interface Alert extends Entity, Parsable {
      * URL for the incident page in the Microsoft 365 Defender portal.
      */
     incidentWebUrl?: string | null;
+    /**
+     * Information on the current status of the investigation. Possible values are: unknown, terminated, successfullyRemediated, benign, failed, partiallyRemediated, running, pendingApproval, pendingResource, queued, innerFailure, preexistingAlert, unsupportedOs, unsupportedAlertType, suppressedAlert, partiallyInvestigated, terminatedByUser, terminatedBySystem, unknownFutureValue.
+     */
+    investigationState?: InvestigationState | null;
     /**
      * The oldest activity associated with the alert.
      */
@@ -4994,6 +4998,7 @@ export interface IntelligenceProfileIndicatorCollectionResponse extends BaseColl
     value?: IntelligenceProfileIndicator[] | null;
 }
 export type IntelligenceProfileKind = (typeof IntelligenceProfileKindObject)[keyof typeof IntelligenceProfileKindObject];
+export type InvestigationState = (typeof InvestigationStateObject)[keyof typeof InvestigationStateObject];
 export interface IoTDeviceEvidence extends AlertEvidence, Parsable {
     /**
      * The device ID.
@@ -8881,6 +8886,27 @@ export declare const IntelligenceProfileKindObject: {
     readonly Tool: "tool";
     readonly UnknownFutureValue: "unknownFutureValue";
 };
+export declare const InvestigationStateObject: {
+    readonly Unknown: "unknown";
+    readonly Terminated: "terminated";
+    readonly SuccessfullyRemediated: "successfullyRemediated";
+    readonly Benign: "benign";
+    readonly Failed: "failed";
+    readonly PartiallyRemediated: "partiallyRemediated";
+    readonly Running: "running";
+    readonly PendingApproval: "pendingApproval";
+    readonly PendingResource: "pendingResource";
+    readonly Queued: "queued";
+    readonly InnerFailure: "innerFailure";
+    readonly PreexistingAlert: "preexistingAlert";
+    readonly UnsupportedOs: "unsupportedOs";
+    readonly UnsupportedAlertType: "unsupportedAlertType";
+    readonly SuppressedAlert: "suppressedAlert";
+    readonly PartiallyInvestigated: "partiallyInvestigated";
+    readonly TerminatedByUser: "terminatedByUser";
+    readonly TerminatedBySystem: "terminatedBySystem";
+    readonly UnknownFutureValue: "unknownFutureValue";
+};
 export declare const IoTDeviceImportanceTypeObject: {
     readonly Unknown: "unknown";
     readonly Low: "low";