@microsoft/msgraph-sdk 1.0.0-preview.74 → 1.0.0-preview.77

package/models/security/index.d.ts

@@ -1,8 +1,60 @@
 import { type BaseCollectionPaginationCountResponse, type Entity, type Group, type IdentitySet, type PhysicalAddress, type PublicError, type ResultInfo, type Site } from '../index.js';
 import { type AdditionalDataHolder, type BackedModel, type Duration, type Guid, type Parsable, type ParseNode, type SerializationWriter } from '@microsoft/kiota-abstractions';
+export interface Account extends AdditionalDataHolder, BackedModel, Parsable {
+    /**
+     * List of the type of action. The possible values are: disable, enable, forcePasswordReset, revokeAllSessions, requireUserToSignInAgain, markUserAsCompromised, unknownFutureValue.
+     */
+    actions?: Action[] | null;
+    /**
+     * Stores model information.
+     */
+    backingStoreEnabled?: boolean | null;
+    /**
+     * The account ID.
+     */
+    identifier?: string | null;
+    /**
+     * The identityProvider property
+     */
+    identityProvider?: IdentityProvider | null;
+    /**
+     * The OdataType property
+     */
+    odataType?: string | null;
+}
+export type Action = (typeof ActionObject)[keyof typeof ActionObject];
 export type ActionAfterRetentionPeriod = (typeof ActionAfterRetentionPeriodObject)[keyof typeof ActionAfterRetentionPeriodObject];
+export interface ActiveDirectoryDomainEvidence extends AlertEvidence, Parsable {
+    /**
+     * The activeDirectoryDomainName property
+     */
+    activeDirectoryDomainName?: string | null;
+    /**
+     * The trustedDomains property
+     */
+    trustedDomains?: ActiveDirectoryDomainEvidence[] | null;
+}
 export type AdditionalDataOptions = (typeof AdditionalDataOptionsObject)[keyof typeof AdditionalDataOptionsObject];
 export type AdditionalOptions = (typeof AdditionalOptionsObject)[keyof typeof AdditionalOptionsObject];
+export interface AiAgentEvidence extends AlertEvidence, Parsable {
+    /**
+     * The unique identifier for the AI agent.
+     */
+    agentId?: string | null;
+    /**
+     * The display name for the AI agent.
+     */
+    agentName?: string | null;
+    /**
+     * Type of the platform the agent runs on. The possible values are: unknown, azureAIFoundry, copilotStudio, copilot, unknownFutureValue.
+     */
+    hostingPlatformType?: AiAgentPlatform | null;
+    /**
+     * The instructions of the agent.
+     */
+    instructions?: string | null;
+}
+export type AiAgentPlatform = (typeof AiAgentPlatformObject)[keyof typeof AiAgentPlatformObject];
 export interface Alert extends Entity, Parsable {
     /**
      * The adversary or activity group that is associated with this alert.
@@ -29,7 +81,7 @@ export interface Alert extends Entity, Parsable {
      */
     category?: string | null;
     /**
-     * Specifies whether the alert represents a true threat. Possible values are: unknown, falsePositive, truePositive, informationalExpectedActivity, unknownFutureValue.
+     * Specifies whether the alert represents a true threat. The possible values are: unknown, falsePositive, truePositive, informationalExpectedActivity, unknownFutureValue.
      */
     classification?: AlertClassification | null;
     /**
@@ -49,7 +101,7 @@ export interface Alert extends Entity, Parsable {
      */
     description?: string | null;
     /**
-     * Detection technology or sensor that identified the notable component or activity. Possible values are: unknown, microsoftDefenderForEndpoint, antivirus, smartScreen, customTi, microsoftDefenderForOffice365, automatedInvestigation, microsoftThreatExperts, customDetection, microsoftDefenderForIdentity, cloudAppSecurity, microsoft365Defender, azureAdIdentityProtection, manual, microsoftDataLossPrevention, appGovernancePolicy, appGovernanceDetection, unknownFutureValue, microsoftDefenderForCloud, microsoftDefenderForIoT, microsoftDefenderForServers, microsoftDefenderForStorage, microsoftDefenderForDNS, microsoftDefenderForDatabases, microsoftDefenderForContainers, microsoftDefenderForNetwork, microsoftDefenderForAppService, microsoftDefenderForKeyVault, microsoftDefenderForResourceManager, microsoftDefenderForApiManagement, microsoftSentinel, nrtAlerts, scheduledAlerts, microsoftDefenderThreatIntelligenceAnalytics, builtInMl, microsoftThreatIntelligence, microsoftDefenderForAIServices, securityCopilot. Use the Prefer: include-unknown-enum-members request header to get the following values in this evolvable enum: microsoftDefenderForCloud, microsoftDefenderForIoT, microsoftDefenderForServers, microsoftDefenderForStorage, microsoftDefenderForDNS, microsoftDefenderForDatabases, microsoftDefenderForContainers, microsoftDefenderForNetwork, microsoftDefenderForAppService, microsoftDefenderForKeyVault, microsoftDefenderForResourceManager, microsoftDefenderForApiManagement, microsoftSentinel, nrtAlerts, scheduledAlerts, microsoftDefenderThreatIntelligenceAnalytics, builtInMl, microsoftThreatIntelligence, microsoftDefenderForAIServices, securityCopilot.
+     * Detection technology or sensor that identified the notable component or activity. The possible values are: unknown, microsoftDefenderForEndpoint, antivirus, smartScreen, customTi, microsoftDefenderForOffice365, automatedInvestigation, microsoftThreatExperts, customDetection, microsoftDefenderForIdentity, cloudAppSecurity, microsoft365Defender, azureAdIdentityProtection, manual, microsoftDataLossPrevention, appGovernancePolicy, appGovernanceDetection, unknownFutureValue, microsoftDefenderForCloud, microsoftDefenderForIoT, microsoftDefenderForServers, microsoftDefenderForStorage, microsoftDefenderForDNS, microsoftDefenderForDatabases, microsoftDefenderForContainers, microsoftDefenderForNetwork, microsoftDefenderForAppService, microsoftDefenderForKeyVault, microsoftDefenderForResourceManager, microsoftDefenderForApiManagement, microsoftSentinel, nrtAlerts, scheduledAlerts, microsoftDefenderThreatIntelligenceAnalytics, builtInMl, microsoftThreatIntelligence, microsoftDefenderForAIServices, securityCopilot. Use the Prefer: include-unknown-enum-members request header to get the following values in this evolvable enum: microsoftDefenderForCloud, microsoftDefenderForIoT, microsoftDefenderForServers, microsoftDefenderForStorage, microsoftDefenderForDNS, microsoftDefenderForDatabases, microsoftDefenderForContainers, microsoftDefenderForNetwork, microsoftDefenderForAppService, microsoftDefenderForKeyVault, microsoftDefenderForResourceManager, microsoftDefenderForApiManagement, microsoftSentinel, nrtAlerts, scheduledAlerts, microsoftDefenderThreatIntelligenceAnalytics, builtInMl, microsoftThreatIntelligence, microsoftDefenderForAIServices, securityCopilot.
      */
     detectionSource?: DetectionSource | null;
     /**
@@ -57,7 +109,7 @@ export interface Alert extends Entity, Parsable {
      */
     detectorId?: string | null;
     /**
-     * Specifies the result of the investigation, whether the alert represents a true attack and if so, the nature of the attack. Possible values are: unknown, apt, malware, securityPersonnel, securityTesting, unwantedSoftware, other, multiStagedAttack, compromisedAccount, phishing, maliciousUserActivity, notMalicious, notEnoughDataToValidate, confirmedUserActivity, lineOfBusinessApplication, unknownFutureValue.
+     * Specifies the result of the investigation, whether the alert represents a true attack and if so, the nature of the attack. The possible values are: unknown, apt, malware, securityPersonnel, securityTesting, unwantedSoftware, other, multiStagedAttack, compromisedAccount, phishing, maliciousUserActivity, notMalicious, notEnoughDataToValidate, confirmedUserActivity, lineOfBusinessApplication, unknownFutureValue.
      */
     determination?: AlertDetermination | null;
     /**
@@ -77,7 +129,7 @@ export interface Alert extends Entity, Parsable {
      */
     incidentWebUrl?: string | null;
     /**
-     * Information on the current status of the investigation. Possible values are: unknown, terminated, successfullyRemediated, benign, failed, partiallyRemediated, running, pendingApproval, pendingResource, queued, innerFailure, preexistingAlert, unsupportedOs, unsupportedAlertType, suppressedAlert, partiallyInvestigated, terminatedByUser, terminatedBySystem, unknownFutureValue.
+     * Information on the current status of the investigation. The possible values are: unknown, terminated, successfullyRemediated, benign, failed, partiallyRemediated, running, pendingApproval, pendingResource, queued, innerFailure, preexistingAlert, unsupportedOs, unsupportedAlertType, suppressedAlert, partiallyInvestigated, terminatedByUser, terminatedBySystem, unknownFutureValue.
      */
     investigationState?: InvestigationState | null;
     /**
@@ -472,7 +524,7 @@ export interface CaseEscaped extends Entity, Parsable {
 }
 export interface CaseOperation extends Entity, Parsable {
     /**
-     * The type of action the operation represents. Possible values are: contentExport,  applyTags, convertToPdf, index, estimateStatistics, addToReviewSet, holdUpdate, unknownFutureValue, purgeData, exportReport, exportResult, holdPolicySync. Use the Prefer: include-unknown-enum-members request header to get the following values from this evolvable enum: purgeData, exportReport, exportResult, holdPolicySync.
+     * The type of action the operation represents. The possible values are: contentExport,  applyTags, convertToPdf, index, estimateStatistics, addToReviewSet, holdUpdate, unknownFutureValue, purgeData, exportReport, exportResult, holdPolicySync. Use the Prefer: include-unknown-enum-members request header to get the following values from this evolvable enum: purgeData, exportReport, exportResult, holdPolicySync.
      */
     action?: CaseAction | null;
     /**
@@ -496,7 +548,7 @@ export interface CaseOperation extends Entity, Parsable {
      */
     resultInfo?: ResultInfo | null;
     /**
-     * The status of the case operation. Possible values are: notStarted, submissionFailed, running, succeeded, partiallySucceeded, failed, unknownFutureValue.
+     * The status of the case operation. The possible values are: notStarted, submissionFailed, running, succeeded, partiallySucceeded, failed, unknownFutureValue.
      */
     status?: CaseOperationStatus | null;
 }
@@ -667,6 +719,24 @@ export interface ContainerRegistryEvidence extends AlertEvidence, Parsable {
     registry?: string | null;
 }
 export type ContentFormat = (typeof ContentFormatObject)[keyof typeof ContentFormatObject];
+/**
+ * Creates a new instance of the appropriate class based on discriminator value
+ * @param parseNode The parse node to use to read the discriminator value and create the object
+ * @returns {Account}
+ */
+export declare function createAccountFromDiscriminatorValue(parseNode: ParseNode | undefined): ((instance?: Parsable) => Record<string, (node: ParseNode) => void>);
+/**
+ * Creates a new instance of the appropriate class based on discriminator value
+ * @param parseNode The parse node to use to read the discriminator value and create the object
+ * @returns {ActiveDirectoryDomainEvidence}
+ */
+export declare function createActiveDirectoryDomainEvidenceFromDiscriminatorValue(parseNode: ParseNode | undefined): ((instance?: Parsable) => Record<string, (node: ParseNode) => void>);
+/**
+ * Creates a new instance of the appropriate class based on discriminator value
+ * @param parseNode The parse node to use to read the discriminator value and create the object
+ * @returns {AiAgentEvidence}
+ */
+export declare function createAiAgentEvidenceFromDiscriminatorValue(parseNode: ParseNode | undefined): ((instance?: Parsable) => Record<string, (node: ParseNode) => void>);
 /**
  * Creates a new instance of the appropriate class based on discriminator value
  * @param parseNode The parse node to use to read the discriminator value and create the object
@@ -949,6 +1019,18 @@ export declare function createEdiscoveryCaseCollectionResponseFromDiscriminatorV
  * @returns {EdiscoveryCase}
  */
 export declare function createEdiscoveryCaseFromDiscriminatorValue(parseNode: ParseNode | undefined): ((instance?: Parsable) => Record<string, (node: ParseNode) => void>);
+/**
+ * Creates a new instance of the appropriate class based on discriminator value
+ * @param parseNode The parse node to use to read the discriminator value and create the object
+ * @returns {EdiscoveryCaseMemberCollectionResponse}
+ */
+export declare function createEdiscoveryCaseMemberCollectionResponseFromDiscriminatorValue(parseNode: ParseNode | undefined): ((instance?: Parsable) => Record<string, (node: ParseNode) => void>);
+/**
+ * Creates a new instance of the appropriate class based on discriminator value
+ * @param parseNode The parse node to use to read the discriminator value and create the object
+ * @returns {EdiscoveryCaseMember}
+ */
+export declare function createEdiscoveryCaseMemberFromDiscriminatorValue(parseNode: ParseNode | undefined): ((instance?: Parsable) => Record<string, (node: ParseNode) => void>);
 /**
  * Creates a new instance of the appropriate class based on discriminator value
  * @param parseNode The parse node to use to read the discriminator value and create the object
@@ -1381,6 +1463,18 @@ export declare function createHuntingRowResultFromDiscriminatorValue(parseNode:
  * @returns {Hyperlink}
  */
 export declare function createHyperlinkFromDiscriminatorValue(parseNode: ParseNode | undefined): ((instance?: Parsable) => Record<string, (node: ParseNode) => void>);
+/**
+ * Creates a new instance of the appropriate class based on discriminator value
+ * @param parseNode The parse node to use to read the discriminator value and create the object
+ * @returns {IdentityAccountsCollectionResponse}
+ */
+export declare function createIdentityAccountsCollectionResponseFromDiscriminatorValue(parseNode: ParseNode | undefined): ((instance?: Parsable) => Record<string, (node: ParseNode) => void>);
+/**
+ * Creates a new instance of the appropriate class based on discriminator value
+ * @param parseNode The parse node to use to read the discriminator value and create the object
+ * @returns {IdentityAccounts}
+ */
+export declare function createIdentityAccountsFromDiscriminatorValue(parseNode: ParseNode | undefined): ((instance?: Parsable) => Record<string, (node: ParseNode) => void>);
 /**
  * Creates a new instance of the appropriate class based on discriminator value
  * @param parseNode The parse node to use to read the discriminator value and create the object
@@ -1435,6 +1529,12 @@ export declare function createIntelligenceProfileIndicatorCollectionResponseFrom
  * @returns {IntelligenceProfileIndicator}
  */
 export declare function createIntelligenceProfileIndicatorFromDiscriminatorValue(parseNode: ParseNode | undefined): ((instance?: Parsable) => Record<string, (node: ParseNode) => void>);
+/**
+ * Creates a new instance of the appropriate class based on discriminator value
+ * @param parseNode The parse node to use to read the discriminator value and create the object
+ * @returns {InvokeActionResult}
+ */
+export declare function createInvokeActionResultFromDiscriminatorValue(parseNode: ParseNode | undefined): ((instance?: Parsable) => Record<string, (node: ParseNode) => void>);
 /**
  * Creates a new instance of the appropriate class based on discriminator value
  * @param parseNode The parse node to use to read the discriminator value and create the object
@@ -1693,6 +1793,24 @@ export declare function createSearchFromDiscriminatorValue(parseNode: ParseNode
  * @returns {SecurityGroupEvidence}
  */
 export declare function createSecurityGroupEvidenceFromDiscriminatorValue(parseNode: ParseNode | undefined): ((instance?: Parsable) => Record<string, (node: ParseNode) => void>);
+/**
+ * Creates a new instance of the appropriate class based on discriminator value
+ * @param parseNode The parse node to use to read the discriminator value and create the object
+ * @returns {SensorCandidateActivationConfiguration}
+ */
+export declare function createSensorCandidateActivationConfigurationFromDiscriminatorValue(parseNode: ParseNode | undefined): ((instance?: Parsable) => Record<string, (node: ParseNode) => void>);
+/**
+ * Creates a new instance of the appropriate class based on discriminator value
+ * @param parseNode The parse node to use to read the discriminator value and create the object
+ * @returns {SensorCandidateCollectionResponse}
+ */
+export declare function createSensorCandidateCollectionResponseFromDiscriminatorValue(parseNode: ParseNode | undefined): ((instance?: Parsable) => Record<string, (node: ParseNode) => void>);
+/**
+ * Creates a new instance of the appropriate class based on discriminator value
+ * @param parseNode The parse node to use to read the discriminator value and create the object
+ * @returns {SensorCandidate}
+ */
+export declare function createSensorCandidateFromDiscriminatorValue(parseNode: ParseNode | undefined): ((instance?: Parsable) => Record<string, (node: ParseNode) => void>);
 /**
  * Creates a new instance of the appropriate class based on discriminator value
  * @param parseNode The parse node to use to read the discriminator value and create the object
@@ -1867,6 +1985,12 @@ export declare function createUserAccountFromDiscriminatorValue(parseNode: Parse
  * @returns {UserEvidence}
  */
 export declare function createUserEvidenceFromDiscriminatorValue(parseNode: ParseNode | undefined): ((instance?: Parsable) => Record<string, (node: ParseNode) => void>);
+/**
+ * Creates a new instance of the appropriate class based on discriminator value
+ * @param parseNode The parse node to use to read the discriminator value and create the object
+ * @returns {User}
+ */
+export declare function createUserFromDiscriminatorValue(parseNode: ParseNode | undefined): ((instance?: Parsable) => Record<string, (node: ParseNode) => void>);
 /**
  * Creates a new instance of the appropriate class based on discriminator value
  * @param parseNode The parse node to use to read the discriminator value and create the object
@@ -2037,7 +2161,7 @@ export interface DataSourceContainer extends Entity, Parsable {
      */
     releasedDateTime?: Date | null;
     /**
-     * Latest status of the dataSourceContainer. Possible values are: Active, Released.
+     * Latest status of the dataSourceContainer. The possible values are: Active, Released.
      */
     status?: DataSourceContainerStatus | null;
 }
@@ -2069,6 +2193,24 @@ export interface DeploymentAccessKeyType extends AdditionalDataHolder, BackedMod
     odataType?: string | null;
 }
 export type DeploymentStatus = (typeof DeploymentStatusObject)[keyof typeof DeploymentStatusObject];
+/**
+ * The deserialization information for the current model
+ * @param Account The instance to deserialize into.
+ * @returns {Record<string, (node: ParseNode) => void>}
+ */
+export declare function deserializeIntoAccount(account?: Partial<Account> | undefined): Record<string, (node: ParseNode) => void>;
+/**
+ * The deserialization information for the current model
+ * @param ActiveDirectoryDomainEvidence The instance to deserialize into.
+ * @returns {Record<string, (node: ParseNode) => void>}
+ */
+export declare function deserializeIntoActiveDirectoryDomainEvidence(activeDirectoryDomainEvidence?: Partial<ActiveDirectoryDomainEvidence> | undefined): Record<string, (node: ParseNode) => void>;
+/**
+ * The deserialization information for the current model
+ * @param AiAgentEvidence The instance to deserialize into.
+ * @returns {Record<string, (node: ParseNode) => void>}
+ */
+export declare function deserializeIntoAiAgentEvidence(aiAgentEvidence?: Partial<AiAgentEvidence> | undefined): Record<string, (node: ParseNode) => void>;
 /**
  * The deserialization information for the current model
  * @param Alert The instance to deserialize into.
@@ -2351,6 +2493,18 @@ export declare function deserializeIntoEdiscoveryCase(ediscoveryCase?: Partial<E
  * @returns {Record<string, (node: ParseNode) => void>}
  */
 export declare function deserializeIntoEdiscoveryCaseCollectionResponse(ediscoveryCaseCollectionResponse?: Partial<EdiscoveryCaseCollectionResponse> | undefined): Record<string, (node: ParseNode) => void>;
+/**
+ * The deserialization information for the current model
+ * @param EdiscoveryCaseMember The instance to deserialize into.
+ * @returns {Record<string, (node: ParseNode) => void>}
+ */
+export declare function deserializeIntoEdiscoveryCaseMember(ediscoveryCaseMember?: Partial<EdiscoveryCaseMember> | undefined): Record<string, (node: ParseNode) => void>;
+/**
+ * The deserialization information for the current model
+ * @param EdiscoveryCaseMemberCollectionResponse The instance to deserialize into.
+ * @returns {Record<string, (node: ParseNode) => void>}
+ */
+export declare function deserializeIntoEdiscoveryCaseMemberCollectionResponse(ediscoveryCaseMemberCollectionResponse?: Partial<EdiscoveryCaseMemberCollectionResponse> | undefined): Record<string, (node: ParseNode) => void>;
 /**
  * The deserialization information for the current model
  * @param EdiscoveryCaseSettings The instance to deserialize into.
@@ -2783,6 +2937,18 @@ export declare function deserializeIntoHuntingRowResult(huntingRowResult?: Parti
  * @returns {Record<string, (node: ParseNode) => void>}
  */
 export declare function deserializeIntoHyperlink(hyperlink?: Partial<Hyperlink> | undefined): Record<string, (node: ParseNode) => void>;
+/**
+ * The deserialization information for the current model
+ * @param IdentityAccounts The instance to deserialize into.
+ * @returns {Record<string, (node: ParseNode) => void>}
+ */
+export declare function deserializeIntoIdentityAccounts(identityAccounts?: Partial<IdentityAccounts> | undefined): Record<string, (node: ParseNode) => void>;
+/**
+ * The deserialization information for the current model
+ * @param IdentityAccountsCollectionResponse The instance to deserialize into.
+ * @returns {Record<string, (node: ParseNode) => void>}
+ */
+export declare function deserializeIntoIdentityAccountsCollectionResponse(identityAccountsCollectionResponse?: Partial<IdentityAccountsCollectionResponse> | undefined): Record<string, (node: ParseNode) => void>;
 /**
  * The deserialization information for the current model
  * @param IdentityContainer The instance to deserialize into.
@@ -2837,6 +3003,12 @@ export declare function deserializeIntoIntelligenceProfileIndicator(intelligence
  * @returns {Record<string, (node: ParseNode) => void>}
  */
 export declare function deserializeIntoIntelligenceProfileIndicatorCollectionResponse(intelligenceProfileIndicatorCollectionResponse?: Partial<IntelligenceProfileIndicatorCollectionResponse> | undefined): Record<string, (node: ParseNode) => void>;
+/**
+ * The deserialization information for the current model
+ * @param InvokeActionResult The instance to deserialize into.
+ * @returns {Record<string, (node: ParseNode) => void>}
+ */
+export declare function deserializeIntoInvokeActionResult(invokeActionResult?: Partial<InvokeActionResult> | undefined): Record<string, (node: ParseNode) => void>;
 /**
  * The deserialization information for the current model
  * @param IoTDeviceEvidence The instance to deserialize into.
@@ -3101,6 +3273,24 @@ export declare function deserializeIntoSecurityGroupEvidence(securityGroupEviden
  * @returns {Record<string, (node: ParseNode) => void>}
  */
 export declare function deserializeIntoSensor(sensor?: Partial<Sensor> | undefined): Record<string, (node: ParseNode) => void>;
+/**
+ * The deserialization information for the current model
+ * @param SensorCandidate The instance to deserialize into.
+ * @returns {Record<string, (node: ParseNode) => void>}
+ */
+export declare function deserializeIntoSensorCandidate(sensorCandidate?: Partial<SensorCandidate> | undefined): Record<string, (node: ParseNode) => void>;
+/**
+ * The deserialization information for the current model
+ * @param SensorCandidateActivationConfiguration The instance to deserialize into.
+ * @returns {Record<string, (node: ParseNode) => void>}
+ */
+export declare function deserializeIntoSensorCandidateActivationConfiguration(sensorCandidateActivationConfiguration?: Partial<SensorCandidateActivationConfiguration> | undefined): Record<string, (node: ParseNode) => void>;
+/**
+ * The deserialization information for the current model
+ * @param SensorCandidateCollectionResponse The instance to deserialize into.
+ * @returns {Record<string, (node: ParseNode) => void>}
+ */
+export declare function deserializeIntoSensorCandidateCollectionResponse(sensorCandidateCollectionResponse?: Partial<SensorCandidateCollectionResponse> | undefined): Record<string, (node: ParseNode) => void>;
 /**
  * The deserialization information for the current model
  * @param SensorCollectionResponse The instance to deserialize into.
@@ -3257,6 +3447,12 @@ export declare function deserializeIntoUnifiedGroupSourceCollectionResponse(unif
  * @returns {Record<string, (node: ParseNode) => void>}
  */
 export declare function deserializeIntoUrlEvidence(urlEvidence?: Partial<UrlEvidence> | undefined): Record<string, (node: ParseNode) => void>;
+/**
+ * The deserialization information for the current model
+ * @param User The instance to deserialize into.
+ * @returns {Record<string, (node: ParseNode) => void>}
+ */
+export declare function deserializeIntoUser(user?: Partial<User> | undefined): Record<string, (node: ParseNode) => void>;
 /**
  * The deserialization information for the current model
  * @param UserAccount The instance to deserialize into.
@@ -3361,7 +3557,7 @@ export interface DeviceEvidence extends AlertEvidence, Parsable {
      */
     azureAdDeviceId?: string | null;
     /**
-     * State of the Defender AntiMalware engine. The possible values are: notReporting, disabled, notUpdated, updated, unknown, notSupported, unknownFutureValue.
+     * State of the Defender anti-malware engine. The possible values are: notReporting, disabled, notUpdated, updated, unknown, notSupported, unknownFutureValue.
      */
     defenderAvStatus?: DefenderAvStatus | null;
     /**
@@ -3428,6 +3624,10 @@ export interface DeviceEvidence extends AlertEvidence, Parsable {
      * The name of the RBAC device group.
      */
     rbacGroupName?: string | null;
+    /**
+     * Information on resource access attempts made by the user account.
+     */
+    resourceAccessEvents?: ResourceAccessEvent[] | null;
     /**
      * Risk score as evaluated by Microsoft Defender for Endpoint. The possible values are: none, informational, low, medium, high, unknownFutureValue.
      */
@@ -3494,19 +3694,19 @@ export interface DnsEvidence extends AlertEvidence, Parsable {
 export type DocumentVersion = (typeof DocumentVersionObject)[keyof typeof DocumentVersionObject];
 export interface EdiscoveryAddToReviewSetOperation extends CaseOperation, Parsable {
     /**
-     * The options to add items to the review set. Possible values are: allVersions, linkedFiles, unknownFutureValue, advancedIndexing, listAttachments, htmlTranscripts, messageConversationExpansion, locationsWithoutHits, allItemsInFolder. Use the Prefer: include-unknown-enum-members request header to get the following values from this evolvable enum: advancedIndexing, listAttachments, htmlTranscripts, messageConversationExpansion, locationsWithoutHits, allItemsInFolder.
+     * The options to add items to the review set. The possible values are: allVersions, linkedFiles, unknownFutureValue, advancedIndexing, listAttachments, htmlTranscripts, messageConversationExpansion, locationsWithoutHits, allItemsInFolder. Use the Prefer: include-unknown-enum-members request header to get the following values from this evolvable enum: advancedIndexing, listAttachments, htmlTranscripts, messageConversationExpansion, locationsWithoutHits, allItemsInFolder.
      */
     additionalDataOptions?: AdditionalDataOptions[] | null;
     /**
-     * Specifies the number of most recent versions of cloud attachments to collect. Possible values are: latest, recent10, recent100, all, unknownFutureValue.
+     * Specifies the number of most recent versions of cloud attachments to collect. The possible values are: latest, recent10, recent100, all, unknownFutureValue.
      */
     cloudAttachmentVersion?: CloudAttachmentVersion | null;
     /**
-     * Specifies the number of most recent versions of SharePoint documents to collect. Possible values are: latest, recent10, recent100, all, unknownFutureValue.
+     * Specifies the number of most recent versions of SharePoint documents to collect. The possible values are: latest, recent10, recent100, all, unknownFutureValue.
      */
     documentVersion?: DocumentVersion | null;
     /**
-     * The items to include in the review set. Possible values are: searchHits, partiallyIndexed, unknownFutureValue.
+     * The items to include in the review set. The possible values are: searchHits, partiallyIndexed, unknownFutureValue.
      */
     itemsToInclude?: ItemsToInclude[] | null;
     /**
@@ -3523,6 +3723,10 @@ export interface EdiscoveryAddToReviewSetOperation extends CaseOperation, Parsab
     search?: EdiscoverySearch | null;
 }
 export interface EdiscoveryCase extends CaseEscaped, Parsable {
+    /**
+     * Represents members of an eDiscovery case.
+     */
+    caseMembers?: EdiscoveryCaseMember[] | null;
     /**
      * The user who closed the case.
      */
@@ -3570,6 +3774,26 @@ export interface EdiscoveryCaseCollectionResponse extends BaseCollectionPaginati
      */
     value?: EdiscoveryCase[] | null;
 }
+export interface EdiscoveryCaseMember extends Entity, Parsable {
+    /**
+     * The display name of the eDiscovery case member. Allowed only for case members of type roleGroup.
+     */
+    displayName?: string | null;
+    /**
+     * Specifies the recipient type of the eDiscovery case member. The possible values are: user, roleGroup, unknownFutureValue.
+     */
+    recipientType?: RecipientType[] | null;
+    /**
+     * The smtp address of the eDiscovery case member. Allowed only for case members of type user.
+     */
+    smtpAddress?: string | null;
+}
+export interface EdiscoveryCaseMemberCollectionResponse extends BaseCollectionPaginationCountResponse, Parsable {
+    /**
+     * The value property
+     */
+    value?: EdiscoveryCaseMember[] | null;
+}
 export interface EdiscoveryCaseSettings extends Entity, Parsable {
     /**
      * The caseType property
@@ -3584,7 +3808,7 @@ export interface EdiscoveryCaseSettings extends Entity, Parsable {
      */
     redundancyDetection?: RedundancyDetectionSettings | null;
     /**
-     * The settings of the review set for the case. Possible values are: none, disableGrouping, unknownFutureValue.
+     * The settings of the review set for the case. The possible values are: none, disableGrouping, unknownFutureValue.
      */
     reviewSetSettings?: ReviewSetSettings[] | null;
     /**
@@ -3650,7 +3874,7 @@ export interface EdiscoveryEstimateOperation extends CaseOperation, Parsable {
      */
     siteCount?: number | null;
     /**
-     * The options to generate statistics. Possible values are: includeRefiners, includeQueryStats, includeUnindexedStats, advancedIndexing, locationsWithoutHits, unknownFutureValue.
+     * The options to generate statistics. The possible values are: includeRefiners, includeQueryStats, includeUnindexedStats, advancedIndexing, locationsWithoutHits, unknownFutureValue.
      */
     statisticsOptions?: StatisticsOptions[] | null;
     /**
@@ -3672,11 +3896,11 @@ export interface EdiscoveryExportOperation extends CaseOperation, Parsable {
      */
     exportFileMetadata?: ExportFileMetadata[] | null;
     /**
-     * The options provided for the export. For more information, see reviewSet: export. Possible values are: originalFiles, text, pdfReplacement, tags, unknownFutureValue, splitSource, includeFolderAndPath, friendlyName, condensePaths. Use the Prefer: include-unknown-enum-members request header to get the following values from this evolvable enum: splitSource, includeFolderAndPath, friendlyName, condensePaths.
+     * The options provided for the export. For more information, see reviewSet: export. The possible values are: originalFiles, text, pdfReplacement, tags, unknownFutureValue, splitSource, includeFolderAndPath, friendlyName, condensePaths. Use the Prefer: include-unknown-enum-members request header to get the following values from this evolvable enum: splitSource, includeFolderAndPath, friendlyName, condensePaths.
      */
     exportOptions?: ExportOptions[] | null;
     /**
-     * The options that specify the structure of the export. For more information, see reviewSet: export. Possible values are: none, directory (deprecated), pst, unknownFutureValue, msg. Use the Prefer: include-unknown-enum-members request header to get the following value from this evolvable enum: msg. The directory member is deprecated. It remains in v1.0 for backward compatibility. Going forward, use either pst or msg.
+     * The options that specify the structure of the export. For more information, see reviewSet: export. The possible values are: none, directory (deprecated), pst, unknownFutureValue, msg. Use the Prefer: include-unknown-enum-members request header to get the following members from this evolvable enum: msg. The directory member is deprecated. It remains in v1.0 for backward compatibility. Going forward, use either pst or msg.
      */
     exportStructure?: ExportFileStructure | null;
     /**
@@ -3742,7 +3966,7 @@ export interface EdiscoveryReviewSetQueryCollectionResponse extends BaseCollecti
 }
 export interface EdiscoveryReviewTag extends Parsable, Tag {
     /**
-     * Indicates whether a single or multiple child tags can be associated with a document. Possible values are: One, Many.  This value controls whether the UX presents the tags as checkboxes or a radio button group.
+     * Indicates whether a single or multiple child tags can be associated with a document. The possible values are: One, Many.  This value controls whether the UX presents the tags as checkboxes or a radio button group.
      */
     childSelectability?: ChildSelectability | null;
     /**
@@ -3774,7 +3998,7 @@ export interface EdiscoverySearch extends Parsable, Search {
      */
     custodianSources?: DataSource[] | null;
     /**
-     * When specified, the collection spans across a service for an entire workload. Possible values are: none, allTenantMailboxes, allTenantSites, allCaseCustodians, allCaseNoncustodialDataSources.
+     * When specified, the collection spans across a service for an entire workload. The possible values are: none, allTenantMailboxes, allTenantSites, allCaseCustodians, allCaseNoncustodialDataSources.
      */
     dataSourceScopes?: DataSourceScopes[] | null;
     /**
@@ -3798,7 +4022,7 @@ export interface EdiscoverySearchExportOperation extends CaseOperation, Parsable
      */
     additionalOptions?: AdditionalOptions[] | null;
     /**
-     * The versions of cloud attachments to include in messages. Possible values are: latest, recent10, recent100, all, unknownFutureValue.
+     * The versions of cloud attachments to include in messages. The possible values are: latest, recent10, recent100, all, unknownFutureValue.
      */
     cloudAttachmentVersion?: CloudAttachmentVersion | null;
     /**
@@ -3810,7 +4034,7 @@ export interface EdiscoverySearchExportOperation extends CaseOperation, Parsable
      */
     displayName?: string | null;
     /**
-     * The versions of files in SharePoint to include. Possible values are: latest, recent10, recent100, all, unknownFutureValue.
+     * The versions of files in SharePoint to include. The possible values are: latest, recent10, recent100, all, unknownFutureValue.
      */
     documentVersion?: DocumentVersion | null;
     /**
@@ -4262,7 +4486,7 @@ export interface GoogleCloudResourceEvidence extends AlertEvidence, Parsable {
      */
     location?: string | null;
     /**
-     * The type of location. Possible values are: unknown, regional, zonal, global, unknownFutureValue.
+     * The type of location. The possible values are: unknown, regional, zonal, global, unknownFutureValue.
      */
     locationType?: GoogleCloudLocationType | null;
     /**
@@ -4809,16 +5033,61 @@ export interface Hyperlink extends AdditionalDataHolder, BackedModel, Parsable {
      */
     url?: string | null;
 }
+export interface IdentityAccounts extends Entity, Parsable {
+    /**
+     * Collection of accounts of the identity in different identity providers.
+     */
+    accounts?: Account[] | null;
+    /**
+     * The cloud security identifier of the identityAccount.
+     */
+    cloudSecurityIdentifier?: string | null;
+    /**
+     * The  Active Directory display name of the identityAccount.
+     */
+    displayName?: string | null;
+    /**
+     * The Active Directory domain name of the identityAccount.
+     */
+    domain?: string | null;
+    /**
+     * Boolean indicating if the identityAccounts is enabled.
+     */
+    isEnabled?: boolean | null;
+    /**
+     * The on-premises security identifier of the identityAccount.
+     */
+    onPremisesSecurityIdentifier?: string | null;
+}
+export interface IdentityAccountsCollectionResponse extends BaseCollectionPaginationCountResponse, Parsable {
+    /**
+     * The value property
+     */
+    value?: IdentityAccounts[] | null;
+}
 export interface IdentityContainer extends Entity, Parsable {
     /**
      * Represents potential issues identified by Microsoft Defender for Identity within a customer's Microsoft Defender for Identity configuration.
      */
     healthIssues?: HealthIssue[] | null;
+    /**
+     * Represents an identity's details in the context of Microsoft Defender for Identity.
+     */
+    identityAccounts?: IdentityAccounts[] | null;
+    /**
+     * The sensorCandidateActivationConfiguration property
+     */
+    sensorCandidateActivationConfiguration?: SensorCandidateActivationConfiguration | null;
+    /**
+     * Represents Microsoft Defender for Identity sensors that are ready to be activated.
+     */
+    sensorCandidates?: SensorCandidate[] | null;
     /**
      * Represents a customer's Microsoft Defender for Identity sensors.
      */
     sensors?: Sensor[] | null;
 }
+export type IdentityProvider = (typeof IdentityProviderObject)[keyof typeof IdentityProviderObject];
 export interface Incident extends Entity, Parsable {
     /**
      * The list of related alerts. Supports $expand.
@@ -4829,7 +5098,7 @@ export interface Incident extends Entity, Parsable {
      */
     assignedTo?: string | null;
     /**
-     * The specification for the incident. Possible values are: unknown, falsePositive, truePositive, informationalExpectedActivity, unknownFutureValue.
+     * The specification for the incident. The possible values are: unknown, falsePositive, truePositive, informationalExpectedActivity, unknownFutureValue.
      */
     classification?: AlertClassification | null;
     /**
@@ -4849,7 +5118,7 @@ export interface Incident extends Entity, Parsable {
      */
     description?: string | null;
     /**
-     * Specifies the determination of the incident. Possible values are: unknown, apt, malware, securityPersonnel, securityTesting, unwantedSoftware, other, multiStagedAttack, compromisedUser, phishing, maliciousUserActivity, clean, insufficientData, confirmedUserActivity, lineOfBusinessApplication, unknownFutureValue.
+     * Specifies the determination of the incident. The possible values are: unknown, apt, malware, securityPersonnel, securityTesting, unwantedSoftware, other, multiStagedAttack, compromisedUser, phishing, maliciousUserActivity, clean, insufficientData, confirmedUserActivity, lineOfBusinessApplication, unknownFutureValue.
      */
     determination?: AlertDetermination | null;
     /**
@@ -4999,6 +5268,32 @@ export interface IntelligenceProfileIndicatorCollectionResponse extends BaseColl
 }
 export type IntelligenceProfileKind = (typeof IntelligenceProfileKindObject)[keyof typeof IntelligenceProfileKindObject];
 export type InvestigationState = (typeof InvestigationStateObject)[keyof typeof InvestigationStateObject];
+export interface InvokeActionResult extends AdditionalDataHolder, BackedModel, Parsable {
+    /**
+     * The account ID.
+     */
+    accountId?: string | null;
+    /**
+     * The action property
+     */
+    action?: Action | null;
+    /**
+     * Stores model information.
+     */
+    backingStoreEnabled?: boolean | null;
+    /**
+     * The unique identifier for tracking the request.
+     */
+    correlationId?: string | null;
+    /**
+     * The identityProvider property
+     */
+    identityProvider?: IdentityProvider | null;
+    /**
+     * The OdataType property
+     */
+    odataType?: string | null;
+}
 export interface IoTDeviceEvidence extends AlertEvidence, Parsable {
     /**
      * The device ID.
@@ -5157,7 +5452,7 @@ export interface KubernetesClusterEvidence extends AlertEvidence, Parsable {
      */
     name?: string | null;
     /**
-     * The platform the cluster runs on. Possible values are: unknown, aks, eks, gke, arc, unknownFutureValue.
+     * The platform the cluster runs on. The possible values are: unknown, aks, eks, gke, arc, unknownFutureValue.
      */
     platform?: KubernetesPlatform | null;
     /**
@@ -5320,7 +5615,7 @@ export interface KubernetesServicePort extends AdditionalDataHolder, BackedModel
      */
     port?: number | null;
     /**
-     * The protocol name. Possible values are: udp, tcp, sctp, unknownFutureValue.
+     * The protocol name. The possible values are: udp, tcp, sctp, unknownFutureValue.
      */
     protocol?: ContainerPortProtocol | null;
     /**
@@ -5375,27 +5670,27 @@ export interface LoggedOnUser extends AdditionalDataHolder, BackedModel, Parsabl
 }
 export interface MailboxConfigurationEvidence extends AlertEvidence, Parsable {
     /**
-     * The configurationId property
+     * The unique identifier of the mailbox configuration.
      */
     configurationId?: string | null;
     /**
-     * The configurationType property
+     * The type of mailbox configuration. The possible values are: mailForwardingRule, owaSettings, ewsSettings, mailDelegation, userInboxRule, unknownFutureValue.
      */
     configurationType?: MailboxConfigurationType | null;
     /**
-     * The displayName property
+     * The display name of the mailbox.
      */
     displayName?: string | null;
     /**
-     * The externalDirectoryObjectId property
+     * The external directory object identifier of the mailbox.
      */
     externalDirectoryObjectId?: Guid | null;
     /**
-     * The mailboxPrimaryAddress property
+     * The primary email address of the mailbox.
      */
     mailboxPrimaryAddress?: string | null;
     /**
-     * The upn property
+     * The user principal name (UPN) of the mailbox.
      */
     upn?: string | null;
 }
@@ -5627,6 +5922,7 @@ export type ProtocolType = (typeof ProtocolTypeObject)[keyof typeof ProtocolType
 export type PurgeAreas = (typeof PurgeAreasObject)[keyof typeof PurgeAreasObject];
 export type PurgeType = (typeof PurgeTypeObject)[keyof typeof PurgeTypeObject];
 export type QueryType = (typeof QueryTypeObject)[keyof typeof QueryTypeObject];
+export type RecipientType = (typeof RecipientTypeObject)[keyof typeof RecipientTypeObject];
 export interface RedundancyDetectionSettings extends AdditionalDataHolder, BackedModel, Parsable {
     /**
      * Stores model information.
@@ -6079,6 +6375,33 @@ export interface Sensor extends Entity, Parsable {
      */
     version?: string | null;
 }
+export interface SensorCandidate extends Entity, Parsable {
+    /**
+     * The DNS name of the computer associated with the sensor.
+     */
+    computerDnsName?: string | null;
+    /**
+     * The date and time when the sensor was last seen.
+     */
+    lastSeenDateTime?: Date | null;
+    /**
+     * The version of the Defender for Identity sensor client. Supports $filter (eq).
+     */
+    senseClientVersion?: string | null;
+}
+export interface SensorCandidateActivationConfiguration extends Entity, Parsable {
+    /**
+     * The activationMode property
+     */
+    activationMode?: SensorCandidateActivationMode | null;
+}
+export type SensorCandidateActivationMode = (typeof SensorCandidateActivationModeObject)[keyof typeof SensorCandidateActivationModeObject];
+export interface SensorCandidateCollectionResponse extends BaseCollectionPaginationCountResponse, Parsable {
+    /**
+     * The value property
+     */
+    value?: SensorCandidate[] | null;
+}
 export interface SensorCollectionResponse extends BaseCollectionPaginationCountResponse, Parsable {
     /**
      * The value property
@@ -6131,6 +6454,27 @@ export interface SensorSettings extends AdditionalDataHolder, BackedModel, Parsa
     odataType?: string | null;
 }
 export type SensorType = (typeof SensorTypeObject)[keyof typeof SensorTypeObject];
+/**
+ * Serializes information the current object
+ * @param Account The instance to serialize from.
+ * @param isSerializingDerivedType A boolean indicating whether the serialization is for a derived type.
+ * @param writer Serialization writer to use to serialize this model
+ */
+export declare function serializeAccount(writer: SerializationWriter, account?: Partial<Account> | undefined | null, isSerializingDerivedType?: boolean): void;
+/**
+ * Serializes information the current object
+ * @param ActiveDirectoryDomainEvidence The instance to serialize from.
+ * @param isSerializingDerivedType A boolean indicating whether the serialization is for a derived type.
+ * @param writer Serialization writer to use to serialize this model
+ */
+export declare function serializeActiveDirectoryDomainEvidence(writer: SerializationWriter, activeDirectoryDomainEvidence?: Partial<ActiveDirectoryDomainEvidence> | undefined | null, isSerializingDerivedType?: boolean): void;
+/**
+ * Serializes information the current object
+ * @param AiAgentEvidence The instance to serialize from.
+ * @param isSerializingDerivedType A boolean indicating whether the serialization is for a derived type.
+ * @param writer Serialization writer to use to serialize this model
+ */
+export declare function serializeAiAgentEvidence(writer: SerializationWriter, aiAgentEvidence?: Partial<AiAgentEvidence> | undefined | null, isSerializingDerivedType?: boolean): void;
 /**
  * Serializes information the current object
  * @param Alert The instance to serialize from.
@@ -6460,6 +6804,20 @@ export declare function serializeEdiscoveryCase(writer: SerializationWriter, edi
  * @param writer Serialization writer to use to serialize this model
  */
 export declare function serializeEdiscoveryCaseCollectionResponse(writer: SerializationWriter, ediscoveryCaseCollectionResponse?: Partial<EdiscoveryCaseCollectionResponse> | undefined | null, isSerializingDerivedType?: boolean): void;
+/**
+ * Serializes information the current object
+ * @param EdiscoveryCaseMember The instance to serialize from.
+ * @param isSerializingDerivedType A boolean indicating whether the serialization is for a derived type.
+ * @param writer Serialization writer to use to serialize this model
+ */
+export declare function serializeEdiscoveryCaseMember(writer: SerializationWriter, ediscoveryCaseMember?: Partial<EdiscoveryCaseMember> | undefined | null, isSerializingDerivedType?: boolean): void;
+/**
+ * Serializes information the current object
+ * @param EdiscoveryCaseMemberCollectionResponse The instance to serialize from.
+ * @param isSerializingDerivedType A boolean indicating whether the serialization is for a derived type.
+ * @param writer Serialization writer to use to serialize this model
+ */
+export declare function serializeEdiscoveryCaseMemberCollectionResponse(writer: SerializationWriter, ediscoveryCaseMemberCollectionResponse?: Partial<EdiscoveryCaseMemberCollectionResponse> | undefined | null, isSerializingDerivedType?: boolean): void;
 /**
  * Serializes information the current object
  * @param EdiscoveryCaseSettings The instance to serialize from.
@@ -6964,6 +7322,20 @@ export declare function serializeHuntingRowResult(writer: SerializationWriter, h
  * @param writer Serialization writer to use to serialize this model
  */
 export declare function serializeHyperlink(writer: SerializationWriter, hyperlink?: Partial<Hyperlink> | undefined | null, isSerializingDerivedType?: boolean): void;
+/**
+ * Serializes information the current object
+ * @param IdentityAccounts The instance to serialize from.
+ * @param isSerializingDerivedType A boolean indicating whether the serialization is for a derived type.
+ * @param writer Serialization writer to use to serialize this model
+ */
+export declare function serializeIdentityAccounts(writer: SerializationWriter, identityAccounts?: Partial<IdentityAccounts> | undefined | null, isSerializingDerivedType?: boolean): void;
+/**
+ * Serializes information the current object
+ * @param IdentityAccountsCollectionResponse The instance to serialize from.
+ * @param isSerializingDerivedType A boolean indicating whether the serialization is for a derived type.
+ * @param writer Serialization writer to use to serialize this model
+ */
+export declare function serializeIdentityAccountsCollectionResponse(writer: SerializationWriter, identityAccountsCollectionResponse?: Partial<IdentityAccountsCollectionResponse> | undefined | null, isSerializingDerivedType?: boolean): void;
 /**
  * Serializes information the current object
  * @param IdentityContainer The instance to serialize from.
@@ -7027,6 +7399,13 @@ export declare function serializeIntelligenceProfileIndicator(writer: Serializat
  * @param writer Serialization writer to use to serialize this model
  */
 export declare function serializeIntelligenceProfileIndicatorCollectionResponse(writer: SerializationWriter, intelligenceProfileIndicatorCollectionResponse?: Partial<IntelligenceProfileIndicatorCollectionResponse> | undefined | null, isSerializingDerivedType?: boolean): void;
+/**
+ * Serializes information the current object
+ * @param InvokeActionResult The instance to serialize from.
+ * @param isSerializingDerivedType A boolean indicating whether the serialization is for a derived type.
+ * @param writer Serialization writer to use to serialize this model
+ */
+export declare function serializeInvokeActionResult(writer: SerializationWriter, invokeActionResult?: Partial<InvokeActionResult> | undefined | null, isSerializingDerivedType?: boolean): void;
 /**
  * Serializes information the current object
  * @param IoTDeviceEvidence The instance to serialize from.
@@ -7335,6 +7714,27 @@ export declare function serializeSecurityGroupEvidence(writer: SerializationWrit
  * @param writer Serialization writer to use to serialize this model
  */
 export declare function serializeSensor(writer: SerializationWriter, sensor?: Partial<Sensor> | undefined | null, isSerializingDerivedType?: boolean): void;
+/**
+ * Serializes information the current object
+ * @param isSerializingDerivedType A boolean indicating whether the serialization is for a derived type.
+ * @param SensorCandidate The instance to serialize from.
+ * @param writer Serialization writer to use to serialize this model
+ */
+export declare function serializeSensorCandidate(writer: SerializationWriter, sensorCandidate?: Partial<SensorCandidate> | undefined | null, isSerializingDerivedType?: boolean): void;
+/**
+ * Serializes information the current object
+ * @param isSerializingDerivedType A boolean indicating whether the serialization is for a derived type.
+ * @param SensorCandidateActivationConfiguration The instance to serialize from.
+ * @param writer Serialization writer to use to serialize this model
+ */
+export declare function serializeSensorCandidateActivationConfiguration(writer: SerializationWriter, sensorCandidateActivationConfiguration?: Partial<SensorCandidateActivationConfiguration> | undefined | null, isSerializingDerivedType?: boolean): void;
+/**
+ * Serializes information the current object
+ * @param isSerializingDerivedType A boolean indicating whether the serialization is for a derived type.
+ * @param SensorCandidateCollectionResponse The instance to serialize from.
+ * @param writer Serialization writer to use to serialize this model
+ */
+export declare function serializeSensorCandidateCollectionResponse(writer: SerializationWriter, sensorCandidateCollectionResponse?: Partial<SensorCandidateCollectionResponse> | undefined | null, isSerializingDerivedType?: boolean): void;
 /**
  * Serializes information the current object
  * @param isSerializingDerivedType A boolean indicating whether the serialization is for a derived type.
@@ -7517,6 +7917,13 @@ export declare function serializeUnifiedGroupSourceCollectionResponse(writer: Se
  * @param writer Serialization writer to use to serialize this model
  */
 export declare function serializeUrlEvidence(writer: SerializationWriter, urlEvidence?: Partial<UrlEvidence> | undefined | null, isSerializingDerivedType?: boolean): void;
+/**
+ * Serializes information the current object
+ * @param isSerializingDerivedType A boolean indicating whether the serialization is for a derived type.
+ * @param User The instance to serialize from.
+ * @param writer Serialization writer to use to serialize this model
+ */
+export declare function serializeUser(writer: SerializationWriter, user?: Partial<User> | undefined | null, isSerializingDerivedType?: boolean): void;
 /**
  * Serializes information the current object
  * @param isSerializingDerivedType A boolean indicating whether the serialization is for a derived type.
@@ -7889,11 +8296,11 @@ export interface TeamsMessageEvidence extends AlertEvidence, Parsable {
      */
     channelId?: string | null;
     /**
-     * The delivery action of this Teams message. Possible values are: unknown, deliveredAsSpam, delivered, blocked, replaced, unknownFutureValue.
+     * The delivery action of this Teams message. The possible values are: unknown, deliveredAsSpam, delivered, blocked, replaced, unknownFutureValue.
      */
     deliveryAction?: TeamsMessageDeliveryAction | null;
     /**
-     * The delivery location of this Teams message. Possible values are: unknown, teams, quarantine, failed, unknownFutureValue.
+     * The delivery location of this Teams message. The possible values are: unknown, teams, quarantine, failed, unknownFutureValue.
      */
     deliveryLocation?: TeamsDeliveryLocation | null;
     /**
@@ -8101,7 +8508,7 @@ export interface UnifiedGroupSource extends DataSource, Parsable {
      */
     group?: Group | null;
     /**
-     * Specifies which sources are included in this group. Possible values are: mailbox, site.
+     * Specifies which sources are included in this group. The possible values are: mailbox, site.
      */
     includedSources?: SourceType[] | null;
 }
@@ -8117,6 +8524,16 @@ export interface UrlEvidence extends AlertEvidence, Parsable {
      */
     url?: string | null;
 }
+export interface User extends IdentityAccounts, Parsable {
+    /**
+     * Email address of the user.
+     */
+    emailAddress?: string | null;
+    /**
+     * The user principal name.
+     */
+    userPrincipalName?: string | null;
+}
 export interface UserAccount extends AdditionalDataHolder, BackedModel, Parsable {
     /**
      * The displayed name of the user account.
@@ -8175,7 +8592,7 @@ export interface UserSource extends DataSource, Parsable {
      */
     email?: string | null;
     /**
-     * Specifies which sources are included in this group. Possible values are: mailbox, site.
+     * Specifies which sources are included in this group. The possible values are: mailbox, site.
      */
     includedSources?: SourceType[] | null;
     /**
@@ -8462,6 +8879,15 @@ export declare const ActionAfterRetentionPeriodObject: {
     readonly Relabel: "relabel";
     readonly UnknownFutureValue: "unknownFutureValue";
 };
+export declare const ActionObject: {
+    readonly Disable: "disable";
+    readonly Enable: "enable";
+    readonly ForcePasswordReset: "forcePasswordReset";
+    readonly RevokeAllSessions: "revokeAllSessions";
+    readonly RequireUserToSignInAgain: "requireUserToSignInAgain";
+    readonly MarkUserAsCompromised: "markUserAsCompromised";
+    readonly UnknownFutureValue: "unknownFutureValue";
+};
 export declare const AdditionalDataOptionsObject: {
     readonly AllVersions: "allVersions";
     readonly LinkedFiles: "linkedFiles";
@@ -8490,6 +8916,13 @@ export declare const AdditionalOptionsObject: {
     readonly SplitSource: "splitSource";
     readonly IncludeReport: "includeReport";
 };
+export declare const AiAgentPlatformObject: {
+    readonly Unknown: "unknown";
+    readonly AzureAIFoundry: "azureAIFoundry";
+    readonly CopilotStudio: "copilotStudio";
+    readonly Copilot: "copilot";
+    readonly UnknownFutureValue: "unknownFutureValue";
+};
 export declare const AlertClassificationObject: {
     readonly Unknown: "unknown";
     readonly FalsePositive: "falsePositive";
@@ -8867,6 +9300,12 @@ export declare const HostReputationRuleSeverityObject: {
     readonly High: "high";
     readonly UnknownFutureValue: "unknownFutureValue";
 };
+export declare const IdentityProviderObject: {
+    readonly EntraID: "entraID";
+    readonly ActiveDirectory: "activeDirectory";
+    readonly Okta: "okta";
+    readonly UnknownFutureValue: "unknownFutureValue";
+};
 export declare const IncidentStatusObject: {
     readonly Active: "active";
     readonly Resolved: "resolved";
@@ -8970,6 +9409,11 @@ export declare const QueryTypeObject: {
     readonly Messages: "messages";
     readonly UnknownFutureValue: "unknownFutureValue";
 };
+export declare const RecipientTypeObject: {
+    readonly User: "user";
+    readonly RoleGroup: "roleGroup";
+    readonly UnknownFutureValue: "unknownFutureValue";
+};
 export declare const RetentionTriggerObject: {
     readonly DateLabeled: "dateLabeled";
     readonly DateCreated: "dateCreated";
@@ -8982,6 +9426,11 @@ export declare const ReviewSetSettingsObject: {
     readonly DisableGrouping: "disableGrouping";
     readonly UnknownFutureValue: "unknownFutureValue";
 };
+export declare const SensorCandidateActivationModeObject: {
+    readonly Manual: "manual";
+    readonly Automated: "automated";
+    readonly UnknownFutureValue: "unknownFutureValue";
+};
 export declare const SensorHealthStatusObject: {
     readonly Healthy: "healthy";
     readonly NotHealthyLow: "notHealthyLow";