@microsoft/typespec-msgraph-reference 1.0.5 → 1.0.6

package/lib/Prod/Beta/main.tsp

@@ -8,6 +8,7 @@ scalar binary; //TODO: Enables support for Edm.Binary
 
 
 @deprecatedDefinition("Deprecation", "<ChangeLogCategory>", "2024-04-10", "2026-04-10", "The legacy Graph Security API is deprecated and will stop returning data on January 31, 2025. Please use the new Graph Security API.")
+@deprecatedDefinition("beta:EnhancedRestore", "<ChangeLogCategory>", "2026-05-04", "2027-05-04", "Use structuredQueryExpression instead for structured query support.")
 @deprecatedDefinition("cloudPcConnectionSettings", "<ChangeLogCategory>", "2023-10-12", "2024-08-31", "Starting from August 31, 2024, CloudPcConnectionSettings property will no longer be supported and will be marked as deprecated. Please use CloudPcConnectionSetting instead.")
 @deprecatedDefinition("updatedDatetime", "<ChangeLogCategory>", "2023-10-12", "2024-08-31", "Starting from August 31, 2024, updatedDatetime property will no longer be supported and will be marked as deprecated. Please use lastModifiedDateTime instead.")
 @deprecatedDefinition("crossRegionDisasterRecoveryEnabled", "<ChangeLogCategory>", "2024-11-11", "2025-02-11", "Starting from February 11, 2025, this property will no longer be supported and will be marked as deprecated. If crossRegionDisasterRecoveryEnabled is true, use `disasterRecoveryType = crossRegion` instead, if crossRegionDisasterRecoveryEnabled is false, use `disasterRecoveryType = notconfigured` instead")
@@ -86,7 +87,6 @@ scalar binary; //TODO: Enables support for Edm.Binary
 @deprecatedDefinition("CreationDateTime", "<ChangeLogCategory>", "2020-11-06", "2020-12-31", "The creationDateTime property is deprecated and will stop returning data on December 31, 2020. Please use the createdDateTime property.")
 @deprecatedDefinition("PIM_Iteration2_Deprecation", "<ChangeLogCategory>", "2025-10-27", "2026-10-28", "The PIM Iteration 2 beta API is deprecated and will be removed on October 28, 2026. Please migrate to PIM Iteration 3 API.")
 @deprecatedDefinition("accountEnabledDeprecated", "<ChangeLogCategory>", "2023-02-23", "2023-07-12", "The accountEnabled field will soon be deprecated on 2023-07-12. Please use isEnabled instead.")
-@privatePreviewDefinition("microsoft.applicationAuthorization", "2025-01-01", "2025-12-01", "<theOwner>")
 @deprecatedDefinition("SignIn", "<ChangeLogCategory>", "2024-08-31", "2025-03-31", "SignInTokenProtectionStatus property is being deprecate in favor or more detailed tokenProtectionStatusDetails.  It will be removed from April 2025.")
 // Metadata item DeprecatedDefinition_SignIn was already defined with a different value.
 @deprecatedDefinition("shared", "<ChangeLogCategory>", "2024-03-31", "2027-04-30", "Starting from April 30, 2027, this property will no longer be supported and will be marked as deprecated. Please use sharedByUser instead.")
@@ -1790,7 +1790,10 @@ namespace reference.`microsoft.graph` {
 
   @complex model artifactQuery {
     artifactType: restorableArtifact | null;
+
+    @graphDeprecated("beta:EnhancedRestore")
     queryExpression: string | null;
+    structuredQueryExpression: restoreSearchArtifactQueryExpression | null;
   }
 
   @complex model assignedLabel {
@@ -4783,6 +4786,10 @@ namespace reference.`microsoft.graph` {
     position: int32 | null;
   }
 
+  @complex model contextMetadata {
+    metadataProperties: customMetadataDictionary;
+  }
+
   @complex model continuousAccessEvaluationSessionControl {
     mode: continuousAccessEvaluationMode | null;
   }
@@ -5218,6 +5225,10 @@ Each data source key can include a filter expression to narrow results and a lis
     totalBytesUploaded: int64;
   }
 
+  @open
+  @complex model customEmojiFromIdentitySet extends identitySet {
+  }
+
   @complex model customerVoiceSettings {
     isInOrgFormsPhishingScanEnabled: boolean | null;
     isRecordIdentityByDefaultEnabled: boolean | null;
@@ -8874,6 +8885,10 @@ Each data source key can include a filter expression to narrow results and a lis
     value: string | null;
   }
 
+  @complex model externalItemInformationProtectionLabel {
+    sensitivityLabelId: string | null;
+  }
+
   @complex model externalLink {
     href: string | null;
   }
@@ -12477,6 +12492,14 @@ Each data source key can include a filter expression to narrow results and a lis
     meetingTimeSuggestions: meetingTimeSuggestion[] | null;
   }
 
+  @complex model member {
+    contactId: string | null;
+    displayName: string | null;
+    key: string | null;
+    recipientType: recipientType;
+    routingType: string | null;
+  }
+
   @complex model membersAddedEventMessageDetail extends eventMessageDetail {
     initiator: identitySet | null;
     members: teamworkUserIdentity[] | null;
@@ -14907,6 +14930,7 @@ Each data source key can include a filter expression to narrow results and a lis
   @complex model processContentRequest {
     activityMetadata: activityMetadata;
     contentEntries: processContentMetadataBase[];
+    contextMetadata: contextMetadata | null;
     deviceMetadata: deviceMetadata;
     integratedAppMetadata: integratedApplicationMetadata;
     protectedAppMetadata: protectedApplicationMetadata | null;
@@ -15686,6 +15710,14 @@ Each data source key can include a filter expression to narrow results and a lis
     @references restorePoint: restorePoint | null;
   }
 
+  @complex model restoreSearchArtifactQueryExpression {
+    hasAttachment: boolean | null;
+    items: granularRestoreItems[] | null;
+    recipients: string[] | null;
+    senders: string[] | null;
+    subjects: string[] | null;
+  }
+
   @complex model restoreSessionArtifactCount {
     completed: int32 | null;
     failed: int32 | null;
@@ -16461,6 +16493,7 @@ This model is shared with the CCS retrieval API and search where it is already u
     allProperties: boolean | null;
     credentialsWithUsageSign: boolean | null;
     credentialsWithUsageVerify: boolean | null;
+    enforcementScope: servicePrincipalLockScope;
     isEnabled: boolean;
     tokenEncryptionKeyId: boolean | null;
   }
@@ -29274,6 +29307,7 @@ capabilities, skills, security, and other manifest-defined fields.
     isDeletable: boolean | null;
     isReorderable: boolean | null;
     isSealed: boolean | null;
+    isSearchable: boolean | null;
     lookup: lookupColumn | null;
     name: string | null;
     number: numberColumn | null;
@@ -33268,9 +33302,6 @@ typically alternating request/response, implicitly forming a turn.Represents a c
     status: appLogUploadState;
   }
 
-  /**
-   * Singleton that acts as container for a collection of Resource Access entities.
-   */
   @entity model deviceManagement extends entity {
     /**
      * The date & time when tenant data moved between scaleunits.
@@ -35925,6 +35956,22 @@ typically alternating request/response, implicitly forming a turn.Represents a c
     values: settingTemplateValue[];
   }
 
+  @entity model distributionList extends outlookItem {
+    displayName: string | null;
+    members: member[];
+    notes: string | null;
+    personIdentifier: string | null;
+    @contains distributionListMembers: distributionListMember[];
+    @contains singleValueExtendedProperties: singleValueLegacyExtendedProperty[];
+  }
+
+  @entity model distributionListMember extends entity {
+    contactId: string | null;
+    displayName: string | null;
+    recipientType: recipientType;
+    @references contact: contact | null;
+  }
+
   @entity model dlpEvaluatePoliciesJobResponse extends jobResponseBase {
     result: dlpPoliciesJobResult | null;
   }
@@ -36625,9 +36672,6 @@ typically alternating request/response, implicitly forming a turn.Represents a c
     @contains picture: picture[];
   }
 
-  /**
-   * Represents a container that exposes navigation properties for employee experience resources.
-   */
   @entity model employeeExperience extends MsGraph.SharedModels.entity {
     /**
      * A collection of communities in Viva Engage.
@@ -36646,9 +36690,6 @@ typically alternating request/response, implicitly forming a turn.Represents a c
     @contains roles: engagementRole[];
   }
 
-  /**
-   * Represents a container that exposes navigation properties for employee experience user resources.
-   */
   @entity model employeeExperienceUser extends entity {
     /**
      * Viva Engage roles assigned to the user.
@@ -37334,6 +37375,7 @@ within the time frame of their original request.
   @entity model externalItem extends entity {
     acl: acl[] | null;
     content: externalItemContent | null;
+    informationProtectionLabel: externalItemInformationProtectionLabel | null;
     properties: properties | null;
   }
 
@@ -37768,9 +37810,6 @@ within the time frame of their original request.
     siteId: string | null;
   }
 
-  /**
-   * Represents a Microsoft Entra group.
-   */
   @open
   @entity model group extends directoryObject {
     accessType: groupAccessType | null;
@@ -37859,6 +37898,43 @@ within the time frame of their original request.
     @references transitiveMembers: directoryObject[];
   }
 
+  @entity model groupAnalytics extends entity {
+    assignedRoleCount: int64 | null;
+    calculatedDateTime: offsetDateTime;
+    @computed createdDateTime: offsetDateTime | null;
+    directGroupMemberCount: int64 | null;
+    displayName: string | null;
+    dynamicMembershipType: string | null;
+    groupExpirationDateTime: offsetDateTime | null;
+    groupType: groupTypeEnum;
+    guestOwnerCount: int64 | null;
+    guestTransitiveUserCount: int64 | null;
+    isCloudDistributionListGroup: boolean;
+    isCloudM365Group: boolean;
+    isCloudMailEnabledSecurityGroup: boolean;
+    isCloudSecurityGroup: boolean;
+    isDynamicGroup: boolean;
+    isOnPremiseDistributionListGroup: boolean;
+    isOnPremiseMailEnabledSecurityGroup: boolean;
+    isOnPremiseSecurityGroup: boolean;
+    isValidGroup: boolean;
+    @computed lastRestorationDateTime: offsetDateTime | null;
+    memberOwnerCount: int64 | null;
+    membershipRuleContainsCount: int64 | null;
+    membershipRuleExpressionCount: int64 | null;
+    membershipRuleMatchCount: int64 | null;
+    membershipRuleMemberOfCount: int64 | null;
+    membershipRuleProcessingState: string | null;
+    memberTransitiveUserCount: int64 | null;
+    preferredDataLocation: string | null;
+    sensitivityLabelCount: int64 | null;
+    servicePrincipalOwnerCount: int64 | null;
+    softDeletionDateTime: offsetDateTime | null;
+    tenantId: string;
+    transitiveServicePrincipalCount: int64 | null;
+    transitiveUserCount: int64 | null;
+  }
+
   @entity model groupLifecyclePolicy extends entity {
     alternateNotificationEmails: string | null;
     groupLifetimeInDays: int32 | null;
@@ -38932,6 +39008,10 @@ within the time frame of their original request.
     serverToken: string;
   }
 
+  @entity model identityAnalyticsRoot extends entity {
+    @contains groups: groupAnalytics[];
+  }
+
   @entity model identityApiConnector extends entity {
     authenticationConfiguration: apiAuthenticationConfigurationBase | null;
     displayName: string | null;
@@ -46808,9 +46888,6 @@ within the time frame of their original request.
     handler: onInteractiveAuthFlowStartHandler | null;
   }
 
-  /**
-   * Represents a Microsoft online meeting.
-   */
   @open
   @entity model onlineMeeting extends onlineMeetingBase {
     alternativeRecording: stream | null;
@@ -49279,6 +49356,7 @@ within the time frame of their original request.
     @graphDeprecated("Tasks_And_Plans")
     @contains dailyPrintUsageSummariesByUser: printUsageByUser[];
     @contains healthMonitoring: reference.`microsoft.graph.healthMonitoring`.healthMonitoringRoot | null;
+    @contains identityAnalytics: identityAnalyticsRoot | null;
     @contains monthlyPrintUsageByPrinter: printUsageByPrinter[];
     @contains monthlyPrintUsageByUser: printUsageByUser[];
 
@@ -49618,7 +49696,6 @@ within the time frame of their original request.
     @contains roleAssignments: roleAssignment[];
   }
 
-  @privatePreview("microsoft.applicationAuthorization")
   @entity model roleManagement extends MsGraph.SharedModels.entity {
     @contains cloudPC: rbacApplicationMultiple | null;
     @contains defender: unifiedRbacApplicationMultiple | null;
@@ -51631,6 +51708,9 @@ within the time frame of their original request.
     notificationUrl: string;
     notificationUrlAppId: string | null;
     resource: string;
+    vapidPublicKey: string | null;
+    webPushEncryptionP256dhPublicKey: string | null;
+    webPushEncryptionSecret: string | null;
   }
 
   @entity model summarizedSignIn extends entity {
@@ -52010,6 +52090,7 @@ within the time frame of their original request.
     @contains deletedChats: deletedChat[];
     @contains deletedTeams: deletedTeam[];
     @contains devices: teamworkDevice[];
+    @contains messaging: teamworkMessaging | null;
     @contains teamsAppSettings: teamsAppSettings | null;
     @contains teamTemplates: teamTemplate[];
     @contains workforceIntegrations: workforceIntegration[];
@@ -52018,6 +52099,13 @@ within the time frame of their original request.
   @entity model teamworkBot extends entity {
   }
 
+  @entity model teamworkCustomEmoji extends MsGraph.SharedModels.entity {
+    contentBytes: string | null;
+    createdBy: customEmojiFromIdentitySet;
+    @computed createdDateTime: offsetDateTime;
+    @computed @key displayName: string;
+  }
+
   @entity model teamworkDevice extends entity {
     activityState: teamworkDeviceActivityState | null;
     companyAssetTag: string | null;
@@ -52088,6 +52176,10 @@ within the time frame of their original request.
     contentType: string | null;
   }
 
+  @entity model teamworkMessaging extends entity {
+    @contains customEmojis: teamworkCustomEmoji[];
+  }
+
   @entity model teamworkPeripheral extends entity {
     displayName: string | null;
     productId: string | null;
@@ -52336,9 +52428,6 @@ within the time frame of their original request.
     resultType: threatAssessmentResultType | null;
   }
 
-  /**
-   * The ThumbnailSet resource is a keyed collection of thumbnail resources.
-   */
   @open
   @entity model thumbnailSet extends entity {
     large: thumbnail | null;
@@ -53087,6 +53176,7 @@ within the time frame of their original request.
     @contains deviceManagementTroubleshootingEvents: deviceManagementTroubleshootingEvent[];
     @contains devices: device[];
     @references directReports: directoryObject[];
+    @contains distributionLists: distributionList[];
     @contains drive: drive | null;
     @contains drives: drive[];
     @contains employeeExperience: employeeExperienceUser | null;
@@ -55475,6 +55565,7 @@ within the time frame of their original request.
   }
 
   @entity model voiceAuthenticationMethodConfiguration extends authenticationMethodConfiguration {
+    callerIdNumber: string | null;
     isOfficePhoneAllowed: boolean | null;
     @contains includeTargets: voiceAuthenticationMethodTarget[];
   }
@@ -73900,6 +73991,15 @@ within the time frame of their original request.
     enabled: 2,
   }
 
+  enum granularRestoreItems {
+    email: 0,
+    note: 1,
+    contact: 2,
+    task: 3,
+    calendar: 4,
+    unknownFutureValue: 5,
+  }
+
   enum groundingEntityType {
     site: 0,
     list: 1,
@@ -74256,6 +74356,13 @@ within the time frame of their original request.
     unknownFutureValue: 2,
   }
 
+  #suppress "@microsoft/typespec-msgraph/use-evolvable-enum" "Matches shipped CSDL."
+  enum groupTypeEnum {
+    isCloudGroup: 0,
+    isOnPremiseGroup: 1,
+    isSoftDeletedGroup: 2,
+  }
+
   /**
    * Indicates the supported oems of hardware configuration
    */
@@ -80955,6 +81062,14 @@ within the time frame of their original request.
     externalNonPartner: 8,
   }
 
+  enum recipientType {
+    contact: 0,
+    oneOff: 1,
+    mailbox: 2,
+    privateDL: 3,
+    unknownFutureValue: 4,
+  }
+
   enum recommendationCategory {
     identityBestPractice: 0,
     identitySecureScore: 1,
@@ -82565,6 +82680,13 @@ within the time frame of their original request.
     unknownFutureValue: 2,
   }
 
+  enum servicePrincipalLockScope {
+    notConfigured: 0,
+    foreignTenantOnly: 1,
+    everywhere: 2,
+    unknownFutureValue: 3,
+  }
+
   /**
    * Possible values of xbox service start type
    */
@@ -88525,6 +88647,7 @@ namespace reference.`microsoft.graph.cloudLicensing` {
     allottedUnits: int32;
     assignableTo: assigneeTypes;
     consumedUnits: int32;
+    externalServiceIdentifier: string | null;
     services: service[];
     skuId: guid | null;
     skuPartNumber: string | null;
@@ -88549,6 +88672,7 @@ namespace reference.`microsoft.graph.cloudLicensing` {
   }
 
   @entity model usageRight extends reference.`microsoft.graph`.entity {
+    externalServiceIdentifier: string | null;
     services: service[];
     skuId: guid | null;
     skuPartNumber: string | null;
@@ -89269,6 +89393,10 @@ namespace reference.`microsoft.graph.externalConnectors` {
     value: string | null;
   }
 
+  @complex model externalItemInformationProtectionLabel {
+    sensitivityLabelId: string | null;
+  }
+
   @complex model itemIdResolver extends urlToItemResolverBase {
     itemId: string;
     urlMatchInfo: urlMatchInfo | null;
@@ -89380,6 +89508,7 @@ namespace reference.`microsoft.graph.externalConnectors` {
   @entity model externalItem extends reference.`microsoft.graph`.entity {
     acl: acl[] | null;
     content: externalItemContent | null;
+    informationProtectionLabel: externalItemInformationProtectionLabel | null;
     properties: properties | null;
     @contains activities: externalActivity[];
   }
@@ -89739,6 +89868,10 @@ namespace reference.`microsoft.graph.identityGovernance` {
   @complex model cancelScope {
   }
 
+  @complex model countBasedQuarantineCondition extends quarantineCondition {
+    threshold: int64;
+  }
+
   @complex model customTaskExtensionCallbackConfiguration extends reference.`microsoft.graph`.customExtensionCallbackConfiguration {
     @references authorizedApps: reference.`microsoft.graph`.application[];
   }
@@ -89778,6 +89911,10 @@ namespace reference.`microsoft.graph.identityGovernance` {
     valueType: valueType;
   }
 
+  @complex model percentageBasedQuarantineCondition extends quarantineCondition {
+    percentage: int32;
+  }
+
   @complex model previewFailedTask {
     definitionId: string;
     failureReason: string;
@@ -89793,6 +89930,21 @@ namespace reference.`microsoft.graph.identityGovernance` {
     id: string;
   }
 
+  @abstract
+  @complex model quarantineCondition {
+  }
+
+  @complex model quarantineConfiguration {
+    conditions: quarantineCondition[];
+    matchMode: matchMode;
+  }
+
+  @complex model quarantineDetails {
+    quarantinedDateTime: offsetDateTime | null;
+    quarantineReason: string | null;
+    quarantineType: quarantineType;
+  }
+
   @complex model ruleBasedSubjectSet extends reference.`microsoft.graph`.subjectSet {
     rule: string;
   }
@@ -89879,6 +90031,10 @@ namespace reference.`microsoft.graph.identityGovernance` {
   @complex model workflowExecutionTrigger {
   }
 
+  @complex model workflowSetting {
+    quarantineConfiguration: quarantineConfiguration | null;
+  }
+
   @complex model workflowsInsightsByCategory {
     failedJoinerRuns: int32;
     failedLeaverRuns: int32;
@@ -89921,6 +90077,7 @@ namespace reference.`microsoft.graph.identityGovernance` {
 
   @entity model lifecycleManagementSettings extends reference.`microsoft.graph`.entity {
     emailSettings: reference.`microsoft.graph`.emailSettings;
+    quarantineConfiguration: quarantineConfiguration | null;
     workflowScheduleIntervalInHours: int32;
   }
 
@@ -90036,6 +90193,8 @@ namespace reference.`microsoft.graph.identityGovernance` {
     deletedDateTime: offsetDateTime | null;
     @computed @key id: string;
     nextScheduleRunDateTime: offsetDateTime | null;
+    quarantineDetails: quarantineDetails;
+    settings: workflowSetting;
     version: int32 | null;
     @references executionScope: userProcessingResult[];
 
@@ -90073,6 +90232,7 @@ namespace reference.`microsoft.graph.identityGovernance` {
   }
 
   @entity model workflowVersion extends workflowBase {
+    settings: workflowSetting;
     @computed @key versionNumber: int32;
   }
 
@@ -90128,6 +90288,13 @@ namespace reference.`microsoft.graph.identityGovernance` {
     unknownFutureValue: 6,
     @privatePreview("cancelWorkflows")
     canceling: 7,
+    quarantined: 8,
+  }
+
+  enum matchMode {
+    any: 0,
+    all: 1,
+    unknownFutureValue: 2,
   }
 
   enum membershipChangeType {
@@ -90136,6 +90303,14 @@ namespace reference.`microsoft.graph.identityGovernance` {
     unknownFutureValue: 3,
   }
 
+  enum quarantineType {
+    notQuarantined: 0,
+    countBasedThresholdExceeded: 1,
+    percentageBasedThresholdExceeded: 2,
+    multipleConditionsExceeded: 3,
+    unknownFutureValue: 4,
+  }
+
   enum valueType {
     `enum`: 0,
     `string`: 1,
@@ -92513,7 +92688,8 @@ namespace reference.`microsoft.graph.networkaccess` {
   enum clientFallbackAction {
     bypass: 0,
     block: 1,
-    unknownFutureValue: 2,
+    default: 2,
+    unknownFutureValue: 3,
   }
 
   enum cloudFirewallAction {
@@ -93286,36 +93462,42 @@ namespace reference.`microsoft.graph.security` {
   /**
    * Audit data for A365 AI Execute Tool events.
    */
+  @open
   @complex model a365AiExecuteTool extends auditData {
   }
 
   /**
    * Audit data for A365 AI Inference Call events.
    */
+  @open
   @complex model a365AiInferenceCall extends auditData {
   }
 
   /**
    * Audit data for A365 AI Invoke Agent events.
    */
+  @open
   @complex model a365AiInvokeAgent extends auditData {
   }
 
   /**
    * Audit data for A365 AI Run Summary events.
    */
+  @open
   @complex model a365AiRunSummary extends auditData {
   }
 
   /**
    * Audit data for A365 Span Outputs events.
    */
+  @open
   @complex model a365SpanOutputs extends auditData {
   }
 
   /**
    * Audit data for AAD Risk Detection events.
    */
+  @open
   @complex model aadRiskDetectionAuditRecord extends auditData {
   }
 
@@ -93325,6 +93507,16 @@ namespace reference.`microsoft.graph.security` {
     identityProvider: identityProvider;
   }
 
+  @complex model accountEntityMapping extends entityMapping {
+    aadUserIdColumn: string | null;
+    dnsDomainColumn: string | null;
+    nameColumn: string | null;
+    ntDomainColumn: string | null;
+    sidColumn: string | null;
+    upnColumn: string | null;
+    upnSuffixColumn: string | null;
+  }
+
   @complex model accountObjectIdAction extends automatedAction {
     accountObjectIdColumn: string;
   }
@@ -93370,18 +93562,21 @@ namespace reference.`microsoft.graph.security` {
   /**
    * Audit data for Advanced eDiscovery events.
    */
+  @open
   @complex model aedAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Agent Admin Activity events.
    */
+  @open
   @complex model agentAdminActivityRecord extends auditData {
   }
 
   /**
    * Audit data for Agent Setting Admin Activity events.
    */
+  @open
   @complex model agentSettingAdminActivity extends auditData {
   }
 
@@ -93395,93 +93590,115 @@ namespace reference.`microsoft.graph.security` {
   /**
    * Audit data for AI App Interaction events.
    */
+  @open
   @complex model aiAppInteractionAuditRecord extends auditData {
   }
 
   /**
    * Audit data for AI Execute Tool events.
    */
+  @open
   @complex model aiExecuteToolAuditRecord extends auditData {
   }
 
   /**
    * Audit data for AI Interactions Change Notification events.
    */
+  @open
   @complex model aiInteractionsChangeNotificationAuditRecord extends auditData {
   }
 
   /**
    * Audit data for AI Interactions Export events.
    */
+  @open
   @complex model aiInteractionsExportAuditRecord extends auditData {
   }
 
   /**
    * Audit data for AI Interactions Subscription events.
    */
+  @open
   @complex model aiInteractionsSubscriptionAuditRecord extends auditData {
   }
 
   /**
    * Audit data for AI Invoke Agent events.
    */
+  @open
   @complex model aiInvokeAgentAuditRecord extends auditData {
   }
 
   /**
    * Audit data for AIP Discover events.
    */
+  @open
   @complex model aipDiscover extends auditData {
   }
 
   /**
    * Audit data for AIP File Deleted events.
    */
+  @open
   @complex model aipFileDeleted extends auditData {
   }
 
   /**
    * Audit data for AIP Heart Beat events.
    */
+  @open
   @complex model aipHeartBeat extends auditData {
   }
 
   /**
    * Audit data for AIP Protection Action log request events.
    */
+  @open
   @complex model aipProtectionActionLogRequest extends auditData {
   }
 
   /**
    * Audit data for AIP Scanner Discover Event events.
    */
+  @open
   @complex model aipScannerDiscoverEvent extends auditData {
   }
 
   /**
    * Audit data for AIP Sensitivity Label Action log request events.
    */
+  @open
   @complex model aipSensitivityLabelActionLogRequest extends auditData {
   }
 
   /**
    * Audit data for AIR Admin Action Investigation events.
    */
+  @open
   @complex model airAdminActionInvestigationData extends auditData {
   }
 
   /**
    * Audit data for AIR Investigation events.
    */
+  @open
   @complex model airInvestigationData extends auditData {
   }
 
   /**
    * Audit data for AIR Manual Investigation events.
    */
+  @open
   @complex model airManualInvestigationData extends auditData {
   }
 
+  /**
+   * Audit data for AI Span Outputs events.
+   */
+  @open
+  @complex model aISpanOutputsAuditRecord extends auditData {
+  }
+
   @complex model alertComment {
     comment: string | null;
     createdByDisplayName: string | null;
@@ -93502,6 +93719,39 @@ namespace reference.`microsoft.graph.security` {
     verdict: evidenceVerdict;
   }
 
+  /**
+   * Audit data for Alert Submission events.
+   */
+  @open
+  @complex model alertSubmissionAuditRecord extends auditData {
+  }
+
+  /**
+   * Audit data for Alert Submission Result Detail events.
+   */
+  @open
+  @complex model alertSubmissionResultDetailAuditRecord extends auditData {
+  }
+
+  @complex model alertTemplate {
+
+    // Warning: Malformed version string '2025-01' detected.
+    category: string | null;
+    customDetails: alertCustomDetails | null;
+    description: string;
+    entityMappings: entityMappingConfiguration;
+
+    // Warning: Malformed version string '2025-01' detected.
+    impactedAssets: impactedAsset[];
+
+    // Warning: Malformed version string '2025-01' detected.
+    mitreTechniques: string[] | null;
+    recommendedActions: string | null;
+    severity: alertSeverity;
+    tactics: mitreTactic[];
+    title: string;
+  }
+
   // Warning: Malformed version string '2025-01' detected.
   // Warning: Malformed version string '2025-01' detected.
   @complex model allowFileResponseAction extends responseAction {
@@ -93509,6 +93759,10 @@ namespace reference.`microsoft.graph.security` {
     identifier: fileEntityIdentifier;
   }
 
+  @complex model amazonResourceEntityMapping extends entityMapping {
+    amazonResourceIdColumn: string;
+  }
+
   @complex model amazonResourceEvidence extends alertEvidence {
     amazonAccountId: string | null;
     amazonResourceId: string | null;
@@ -93608,12 +93862,14 @@ namespace reference.`microsoft.graph.security` {
   /**
    * Audit data for Attack Sim Admin events.
    */
+  @open
   @complex model attackSimAdminAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Attack Sim events.
    */
+  @open
   @complex model attackSimAuditRecord extends auditData {
   }
 
@@ -93627,6 +93883,7 @@ namespace reference.`microsoft.graph.security` {
   /**
    * Audit data for Audit Config events.
    */
+  @open
   @complex model auditConfigAuditRecord extends auditData {
   }
 
@@ -93635,6 +93892,7 @@ namespace reference.`microsoft.graph.security` {
    */
   @abstract
   @complex model auditData {
+    dynamicProperties: auditRecordTypeDictionary | null;
   }
 
   @complex model auditInfo {
@@ -93642,9 +93900,17 @@ namespace reference.`microsoft.graph.security` {
     dateTime: offsetDateTime;
   }
 
+  /**
+   * A dictionary of name-value pairs for dynamic audit event properties.
+   */
+  @open
+  @complex model auditRecordTypeDictionary {
+  }
+
   /**
    * Audit data for Audit Search events.
    */
+  @open
   @complex model auditSearchAuditRecord extends auditData {
   }
 
@@ -93681,39 +93947,56 @@ namespace reference.`microsoft.graph.security` {
   /**
    * Audit data for Azfw Application Rule Aggregation Event events.
    */
+  @open
   @complex model azfwApplicationRuleAggregationEventRecord extends auditData {
   }
 
   /**
    * Audit data for Azfw Dns Query Event events.
    */
+  @open
   @complex model azfwDnsQueryEventRecord extends auditData {
   }
 
   /**
    * Audit data for Azfw Network Rule Event events.
    */
+  @open
   @complex model azfwNetworkRuleEventRecord extends auditData {
   }
 
   /**
    * Audit data for Azure Active Directory Account Logon events.
    */
+  @open
   @complex model azureActiveDirectoryAccountLogonAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Azure Active Directory events.
    */
+  @open
   @complex model azureActiveDirectoryAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Azure Active Directory STS Logon events.
    */
+  @open
   @complex model azureActiveDirectoryStsLogonAuditRecord extends auditData {
   }
 
+  /**
+   * Audit data for Azure AI Search Audit events.
+   */
+  @open
+  @complex model azureAISearchAuditRecord extends auditData {
+  }
+
+  @complex model azureResourceEntityMapping extends entityMapping {
+    resourceIdColumn: string;
+  }
+
   @complex model azureResourceEvidence extends alertEvidence {
     resourceId: string | null;
     resourceName: string | null;
@@ -93753,66 +94036,77 @@ namespace reference.`microsoft.graph.security` {
   /**
    * Audit data for threat campaign events.
    */
+  @open
   @complex model campaignAuditRecord extends auditData {
   }
 
   /**
    * Audit data for CCRAI Policy Violation events.
    */
+  @open
   @complex model ccraiPolicyViolationRecord extends auditData {
   }
 
   /**
    * Audit data for CDP Classifier Health events.
    */
+  @open
   @complex model cdpClassifierHealthRecord extends auditData {
   }
 
   /**
    * Audit data for CDP Cold Crawl Status events.
    */
+  @open
   @complex model cdpColdCrawlStatusRecord extends auditData {
   }
 
   /**
    * Audit data for CDP Consumption Resource events.
    */
+  @open
   @complex model cdpConsumptionResourceRecord extends auditData {
   }
 
   /**
    * Audit data for CDP Content Explorer Aggregate events.
    */
+  @open
   @complex model cdpContentExplorerAggregateRecord extends auditData {
   }
 
   /**
    * Audit data for Cdpdlmai Interaction Insights events.
    */
+  @open
   @complex model cdpdlmaiInteractionInsightsRecord extends auditData {
   }
 
   /**
    * Audit data for CDP DLP Sensitive Endpoint events.
    */
+  @open
   @complex model cdpDlpSensitiveEndpointAuditRecord extends auditData {
   }
 
   /**
    * Audit data for CDP Log events.
    */
+  @open
   @complex model cdpLogRecord extends auditData {
   }
 
   /**
    * Audit data for CDP OCR Billing events.
    */
+  @open
   @complex model cdpOcrBillingRecord extends auditData {
   }
 
   /**
    * Audit data for CDP Resource Scope Change Event events.
    */
+  @open
   @complex model cdpResourceScopeChangeEventRecord extends auditData {
   }
 
@@ -93822,6 +94116,11 @@ namespace reference.`microsoft.graph.security` {
     sensitiveTypeId: string;
   }
 
+  @complex model cloudApplicationEntityMapping extends entityMapping {
+    appIdColumn: string | null;
+    nameColumn: string | null;
+  }
+
   @complex model cloudApplicationEvidence extends alertEvidence {
     appId: int64 | null;
     displayName: string | null;
@@ -93850,18 +94149,21 @@ namespace reference.`microsoft.graph.security` {
   /**
    * Audit data for Cloud Update Device Config events.
    */
+  @open
   @complex model cloudUpdateDeviceConfigAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Cloud Update Profile Config events.
    */
+  @open
   @complex model cloudUpdateProfileConfigAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Cloud Update Tenant Config events.
    */
+  @open
   @complex model cloudUpdateTenantConfigAuditRecord extends auditData {
   }
 
@@ -93878,120 +94180,154 @@ namespace reference.`microsoft.graph.security` {
   /**
    * Audit data for Compliance Connector events.
    */
+  @open
   @complex model complianceConnectorAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Compliance DLM Exchange events.
    */
+  @open
   @complex model complianceDLMExchangeAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Compliance DLM SharePoint events.
    */
+  @open
   @complex model complianceDLMSharePointAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Compliance DLP Applications events.
    */
+  @open
   @complex model complianceDLPApplicationsAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Compliance DLP Applications Classification events.
    */
+  @open
   @complex model complianceDLPApplicationsClassificationAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Compliance DLP Endpoint events.
    */
+  @open
   @complex model complianceDLPEndpointAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Compliance DLP Endpoint Discovery events.
    */
+  @open
   @complex model complianceDLPEndpointDiscoveryAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Compliance DLP Enforcement events.
    */
+  @open
   @complex model complianceDLPEnforcementAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Compliance DLP Exchange events.
    */
+  @open
   @complex model complianceDLPExchangeAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Compliance DLP Exchange Classification events.
    */
+  @open
   @complex model complianceDLPExchangeClassificationAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Compliance DLP Exchange Classification CDP events.
    */
+  @open
   @complex model complianceDLPExchangeClassificationCdpRecord extends auditData {
   }
 
   /**
    * Audit data for Compliance DLP Exchange Discovery events.
    */
+  @open
   @complex model complianceDLPExchangeDiscoveryAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Compliance DLP SharePoint events.
    */
+  @open
   @complex model complianceDLPSharePointAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Compliance DLP SharePoint Classification events.
    */
+  @open
   @complex model complianceDLPSharePointClassificationAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Compliance DLP SharePoint Classification CDP events.
    */
+  @open
   @complex model complianceDLPSharePointClassificationCdpRecord extends auditData {
   }
 
   /**
    * Audit data for Compliance DLP SharePoint Classification Extended events.
    */
+  @open
   @complex model complianceDLPSharePointClassificationExtendedAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Compliance Exchange OCR events.
    */
+  @open
   @complex model complianceExchangeOcrAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Compliance Manager Action events.
    */
+  @open
   @complex model complianceManagerActionRecord extends auditData {
   }
 
+  /**
+   * Audit data for Compliance Policy Grading SharePoint events.
+   */
+  @open
+  @complex model compliancePolicyGradingSharePointAuditRecord extends auditData {
+  }
+
   /**
    * Audit data for Compliance Settings Change events.
    */
+  @open
   @complex model complianceSettingsChangeAuditRecord extends auditData {
   }
 
+  /**
+   * Audit data for Compliance SIT Grading SharePoint events.
+   */
+  @open
+  @complex model complianceSitGradingSharePointAuditRecord extends auditData {
+  }
+
   /**
    * Audit data for Compliance Supervision Exchange events.
    */
+  @open
   @complex model complianceSupervisionExchangeAuditRecord extends auditData {
   }
 
@@ -94003,12 +94339,14 @@ namespace reference.`microsoft.graph.security` {
   /**
    * Audit data for Connected AI App Interaction events.
    */
+  @open
   @complex model connectedAIAppInteractionAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Consumption Resource events.
    */
+  @open
   @complex model consumptionResourceAuditRecord extends auditData {
   }
 
@@ -94048,84 +94386,105 @@ namespace reference.`microsoft.graph.security` {
   /**
    * Audit data for Content Store Meta events.
    */
+  @open
   @complex model contentStoreMetadataRecord extends auditData {
   }
 
   /**
    * Audit data for Copilot Agent Management events.
    */
+  @open
   @complex model copilotAgentManagementAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Copilot for Security Logging events.
    */
+  @open
   @complex model copilotForSecurityLoggingAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Copilot for Security Trigger events.
    */
+  @open
   @complex model copilotForSecurityTriggerAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Copilot Interaction events.
    */
+  @open
   @complex model copilotInteractionAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Copilot Plugin Setting events.
    */
+  @open
   @complex model copilotPluginSettingAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Copilot Prompt Book Setting events.
    */
+  @open
   @complex model copilotPromptBookSettingAuditRecord extends auditData {
   }
 
+  /**
+   * Audit data for Copilot Session Sharing events.
+   */
+  @open
+  @complex model copilotSessionSharingAuditRecord extends auditData {
+  }
+
   /**
    * Audit data for Copilot Setting events.
    */
+  @open
   @complex model copilotSettingAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Copilot Workspace Setting events.
    */
+  @open
   @complex model copilotWorkspaceSettingAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Core Reporting Settings events.
    */
+  @open
   @complex model coreReportingSettingsAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Cortana Briefing events.
    */
+  @open
   @complex model cortanaBriefingAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Critical Asset Management Classification events.
    */
+  @open
   @complex model criticalAssetManagementClassificationRecord extends auditData {
   }
 
   /**
    * Audit data for CRM Entity Operation events.
    */
+  @open
   @complex model crmEntityOperationAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Cross Tenant Access Policy events.
    */
+  @open
   @complex model crossTenantAccessPolicyAuditRecord extends auditData {
   }
 
@@ -94137,6 +94496,7 @@ namespace reference.`microsoft.graph.security` {
   /**
    * Audit data for Customer Key Service Encryption events.
    */
+  @open
   @complex model customerKeyServiceEncryptionAuditRecord extends auditData {
   }
 
@@ -94149,36 +94509,42 @@ namespace reference.`microsoft.graph.security` {
   /**
    * Audit data for Data Center Security cmdlet events.
    */
+  @open
   @complex model dataCenterSecurityCmdletAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Data Governance events.
    */
+  @open
   @complex model dataGovernanceAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Data Insights Rest Api events.
    */
+  @open
   @complex model dataInsightsRestApiAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Data Lake Export Operation events.
    */
+  @open
   @complex model dataLakeExportOperationAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Data Security Investigation events.
    */
+  @open
   @complex model dataSecurityInvestigationAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Data Share Operation events.
    */
+  @open
   @complex model dataShareOperationAuditRecord extends auditData {
   }
 
@@ -94192,18 +94558,28 @@ namespace reference.`microsoft.graph.security` {
   /**
    * Audit data for Defender Case Management events.
    */
+  @open
   @complex model defenderCaseManagementAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Defender Preview Features events.
    */
+  @open
   @complex model defenderPreviewFeaturesRecord extends auditData {
   }
 
+  /**
+   * Audit data for Defender Security for AI Configuration events.
+   */
+  @open
+  @complex model defenderSecurityForAIConfigurationAuditRecord extends auditData {
+  }
+
   /**
    * Audit data for Deploy Feature Activity events.
    */
+  @open
   @complex model deployFeatureActivityRecord extends auditData {
   }
 
@@ -94211,6 +94587,15 @@ namespace reference.`microsoft.graph.security` {
     deploymentAccessKey: string;
   }
 
+  @complex model detectionAction {
+    alertTemplate: alertTemplate;
+    automatedActions: automatedActionSet | null;
+    organizationalScope: organizationalScope | null;
+
+    // Warning: Malformed version string '2025-01' detected.
+    responseActions: responseAction[] | null;
+  }
+
   @graphDeprecated("Tasks_And_Plans")
   @complex model detonationBehaviourDetails {
     actionStatus: string | null;
@@ -94258,18 +94643,21 @@ namespace reference.`microsoft.graph.security` {
   /**
    * Audit data for Device Discovery Settings Authenticated Scans events.
    */
+  @open
   @complex model deviceDiscoverySettingsAuthenticatedScansRecord extends auditData {
   }
 
   /**
    * Audit data for Device Discovery Settings Exclusion events.
    */
+  @open
   @complex model deviceDiscoverySettingsExclusionRecord extends auditData {
   }
 
   /**
    * Audit data for Device Discovery Settings events.
    */
+  @open
   @complex model deviceDiscoverySettingsRecord extends auditData {
   }
 
@@ -94315,27 +94703,37 @@ namespace reference.`microsoft.graph.security` {
   /**
    * Audit data for eDiscovery events.
    */
+  @open
   @complex model discoveryAuditRecord extends auditData {
   }
 
   /**
    * Audit data for DLP Endpoint events.
    */
+  @open
   @complex model dlpEndpointAuditRecord extends auditData {
   }
 
   /**
    * Audit data for DLP Import Result events.
    */
+  @open
   @complex model dlpImportResultAuditRecord extends auditData {
   }
 
   /**
    * Audit data for DLP Sensitive Information Type Rule Package cmdlet events.
    */
+  @open
   @complex model dlpSensitiveInformationTypeRulePackageCmdletRecord extends auditData {
   }
 
+  @complex model dnsEntityMapping extends entityMapping {
+    domainNameColumn: string;
+    hostIpAddressColumn: string;
+    serverIpColumn: string;
+  }
+
   @complex model dnsEvidence extends alertEvidence {
     dnsServerIp: ipEvidence | null;
     domainName: string | null;
@@ -94348,6 +94746,34 @@ namespace reference.`microsoft.graph.security` {
     justificationMessage: string | null;
   }
 
+  /**
+   * Audit data for Dragon Copilot Access events.
+   */
+  @open
+  @complex model dragonCopilotAccessRecord extends auditData {
+  }
+
+  /**
+   * Audit data for Dragon Copilot Admin events.
+   */
+  @open
+  @complex model dragonCopilotAdminRecord extends auditData {
+  }
+
+  /**
+   * Audit data for Dragon Copilot Clinical Data events.
+   */
+  @open
+  @complex model dragonCopilotClinicalDataRecord extends auditData {
+  }
+
+  /**
+   * Audit data for Dragon Copilot Session events.
+   */
+  @open
+  @complex model dragonCopilotSessionRecord extends auditData {
+  }
+
   @open
   @complex model dynamicColumnValue {
   }
@@ -94355,12 +94781,14 @@ namespace reference.`microsoft.graph.security` {
   /**
    * Audit data for Dynamics365 Business Central events.
    */
+  @open
   @complex model dynamics365BusinessCentralAuditRecord extends auditData {
   }
 
   /**
    * Audit data for EHR Connector events.
    */
+  @open
   @complex model ehrConnectorAuditBaseRecord extends auditData {
   }
 
@@ -94379,6 +94807,37 @@ namespace reference.`microsoft.graph.security` {
   @complex model enableUserIncidentTaskResponseAction extends incidentTaskResponseAction {
   }
 
+  @abstract
+  @complex model entityMapping {
+  }
+
+  @complex model entityMappingConfiguration {
+    accounts: accountEntityMapping[];
+    amazonResources: amazonResourceEntityMapping[];
+    azureResources: azureResourceEntityMapping[];
+    cloudApplications: cloudApplicationEntityMapping[];
+    dns: dnsEntityMapping[];
+    files: fileEntityMapping[];
+    googleCloudResources: googleCloudResourceEntityMapping[];
+    hosts: hostEntityMapping[];
+    ips: ipEntityMapping[];
+    mailboxes: mailboxEntityMapping[];
+    mailClusters: mailClusterEntityMapping[];
+    mailMessages: mailMessageEntityMapping[];
+    oAuthApplications: oAuthApplicationEntityMapping[];
+    processes: processEntityMapping[];
+    registryValues: registryValueEntityMapping[];
+    securityGroups: securityGroupEntityMapping[];
+    urls: urlEntityMapping[];
+  }
+
+  /**
+   * Audit data for EOP Submission Feed Entity events.
+   */
+  @open
+  @complex model eopSubmissionFeedEntityAuditRecord extends auditData {
+  }
+
   @complex model eventPropagationResult {
     location: string | null;
     serviceName: string | null;
@@ -94394,30 +94853,35 @@ namespace reference.`microsoft.graph.security` {
   /**
    * Audit data for Exchange Admin events.
    */
+  @open
   @complex model exchangeAdminAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Exchange Aggregated Mailbox events.
    */
+  @open
   @complex model exchangeAggregatedMailboxAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Exchange Aggregated Operation events.
    */
+  @open
   @complex model exchangeAggregatedOperationRecord extends auditData {
   }
 
   /**
    * Audit data for Exchange Mailbox Audit Group events.
    */
+  @open
   @complex model exchangeMailboxAuditGroupRecord extends auditData {
   }
 
   /**
    * Audit data for Exchange Mailbox events.
    */
+  @open
   @complex model exchangeMailboxAuditRecord extends auditData {
   }
 
@@ -94430,9 +94894,17 @@ namespace reference.`microsoft.graph.security` {
   /**
    * Audit data for Microsoft Fabric events.
    */
+  @open
   @complex model fabricAuditRecord extends auditData {
   }
 
+  /**
+   * Audit data for Fabric Policy events.
+   */
+  @open
+  @complex model fabricPolicyRecord extends auditData {
+  }
+
   @complex model fileAction extends automatedAction {
     deviceGroupNames: string[] | null;
     sha1Column: string | null;
@@ -94452,6 +94924,12 @@ namespace reference.`microsoft.graph.security` {
     signer: string | null;
   }
 
+  @complex model fileEntityMapping extends entityMapping {
+    nameColumn: string | null;
+    sha1Column: string | null;
+    sha256Column: string | null;
+  }
+
   @complex model fileEvidence extends alertEvidence {
     detectionStatus: detectionStatus | null;
     fileDetails: fileDetails | null;
@@ -94541,6 +95019,10 @@ namespace reference.`microsoft.graph.security` {
     webUrl: string | null;
   }
 
+  @complex model googleCloudResourceEntityMapping extends entityMapping {
+    fullResourceNameColumn: string;
+  }
+
   @complex model googleCloudResourceEvidence extends alertEvidence {
     fullResourceName: string | null;
     location: string | null;
@@ -94564,15 +95046,25 @@ namespace reference.`microsoft.graph.security` {
   /**
    * Audit data for Healthcare Signal events.
    */
+  @open
   @complex model healthcareSignalRecord extends auditData {
   }
 
   /**
    * Audit data for Hosted RPA events.
    */
+  @open
   @complex model hostedRpaAuditRecord extends auditData {
   }
 
+  @complex model hostEntityMapping extends entityMapping {
+    deviceIdColumn: string | null;
+    dnsDomainColumn: string | null;
+    nameColumn: string | null;
+    netBiosNameColumn: string | null;
+    ntDomainColumn: string | null;
+  }
+
   @complex model hostLogonSessionEvidence extends alertEvidence {
     account: userEvidence | null;
     endUtcDateTime: offsetDateTime | null;
@@ -94612,6 +95104,7 @@ namespace reference.`microsoft.graph.security` {
   /**
    * Audit data for HR Signal events.
    */
+  @open
   @complex model hrSignalAuditRecord extends auditData {
   }
 
@@ -94676,6 +95169,7 @@ namespace reference.`microsoft.graph.security` {
   /**
    * Audit data for Hygiene Event events.
    */
+  @open
   @complex model hygieneEventRecord extends auditData {
   }
 
@@ -94716,6 +95210,7 @@ namespace reference.`microsoft.graph.security` {
   /**
    * Audit data for Information Barrier Policy Application events.
    */
+  @open
   @complex model informationBarrierPolicyApplicationAuditRecord extends auditData {
   }
 
@@ -94726,6 +95221,7 @@ namespace reference.`microsoft.graph.security` {
   /**
    * Audit data for Information Worker Protection events.
    */
+  @open
   @complex model informationWorkerProtectionAuditRecord extends auditData {
   }
 
@@ -94738,24 +95234,28 @@ namespace reference.`microsoft.graph.security` {
   /**
    * Audit data for Insider Risk Scoped User Insights events.
    */
+  @open
   @complex model insiderRiskScopedUserInsightsRecord extends auditData {
   }
 
   /**
    * Audit data for Insider Risk Scoped Users events.
    */
+  @open
   @complex model insiderRiskScopedUsersRecord extends auditData {
   }
 
   /**
    * Audit data for Integrated Apps App Admin Activity events.
    */
+  @open
   @complex model integratedAppsAppAdminActivityAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Integrated Apps App Settings Admin Activity events.
    */
+  @open
   @complex model integratedAppsAppSettingsAdminActivityAuditRecord extends auditData {
   }
 
@@ -94800,6 +95300,11 @@ namespace reference.`microsoft.graph.security` {
     zone: string | null;
   }
 
+  @complex model ipEntityMapping extends entityMapping {
+    addressColumn: string | null;
+    scopeColumn: string | null;
+  }
+
   @complex model ipEvidence extends alertEvidence {
     countryLetterCode: string | null;
     ipAddress: string | null;
@@ -94810,12 +95315,14 @@ namespace reference.`microsoft.graph.security` {
   /**
    * Audit data for IRM Activity Audit Trail events.
    */
+  @open
   @complex model irmActivityAuditTrailRecord extends auditData {
   }
 
   /**
    * Audit data for IRM User Defined Detection events.
    */
+  @open
   @complex model irmUserDefinedDetectionRecord extends auditData {
   }
 
@@ -94841,6 +95348,7 @@ namespace reference.`microsoft.graph.security` {
   /**
    * Audit data for Microsoft Kaizala events.
    */
+  @open
   @complex model kaizalaAuditRecord extends auditData {
   }
 
@@ -94916,12 +95424,14 @@ namespace reference.`microsoft.graph.security` {
   /**
    * Audit data for Label Analytics Aggregate events.
    */
+  @open
   @complex model labelAnalyticsAggregateAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Label Content Explorer events.
    */
+  @open
   @complex model labelContentExplorerAuditRecord extends auditData {
   }
 
@@ -94935,6 +95445,7 @@ namespace reference.`microsoft.graph.security` {
   /**
    * Audit data for Large Content Meta events.
    */
+  @open
   @complex model largeContentMetadataAuditRecord extends auditData {
   }
 
@@ -94946,24 +95457,28 @@ namespace reference.`microsoft.graph.security` {
   /**
    * Audit data for M365 Compliance Connector events.
    */
+  @open
   @complex model m365ComplianceConnectorAuditRecord extends auditData {
   }
 
   /**
    * Audit data for M365daad events.
    */
+  @open
   @complex model m365daadAuditRecord extends auditData {
   }
 
   /**
    * Audit data for M365odsp Asset Meta events.
    */
+  @open
   @complex model m365odspAssetMetadataRecord extends auditData {
   }
 
   /**
    * Audit data for M365 Search Sections events.
    */
+  @open
   @complex model m365SearchSectionsRecord extends auditData {
   }
 
@@ -94976,6 +95491,10 @@ namespace reference.`microsoft.graph.security` {
     upn: string | null;
   }
 
+  @complex model mailboxEntityMapping extends entityMapping {
+    primaryAddressColumn: string;
+  }
+
   @complex model mailboxEvidence extends alertEvidence {
     displayName: string | null;
     primaryAddress: string | null;
@@ -94983,6 +95502,11 @@ namespace reference.`microsoft.graph.security` {
     userAccount: userAccount | null;
   }
 
+  @complex model mailClusterEntityMapping extends entityMapping {
+    queryColumn: string;
+    sourceColumn: string;
+  }
+
   @complex model mailClusterEvidence extends alertEvidence {
     clusterBy: string | null;
     clusterByValue: string | null;
@@ -94992,9 +95516,17 @@ namespace reference.`microsoft.graph.security` {
     urn: string | null;
   }
 
+  @complex model mailMessageEntityMapping extends entityMapping {
+    networkMessageIdColumn: string;
+    recipientColumn: string;
+    senderColumn: string;
+    subjectColumn: string;
+  }
+
   /**
    * Audit data for Mail Submission events.
    */
+  @open
   @complex model mailSubmissionData extends auditData {
   }
 
@@ -95008,36 +95540,42 @@ namespace reference.`microsoft.graph.security` {
   /**
    * Audit data for Managed Services events.
    */
+  @open
   @complex model managedServicesAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Managed Tenants events.
    */
+  @open
   @complex model managedTenantsAuditRecord extends auditData {
   }
 
   /**
    * Audit data for MAPG Alerts events.
    */
+  @open
   @complex model mapgAlertsAuditRecord extends auditData {
   }
 
   /**
    * Audit data for MAPG Onboard events.
    */
+  @open
   @complex model mapgOnboardAuditRecord extends auditData {
   }
 
   /**
    * Audit data for MAPG Policy events.
    */
+  @open
   @complex model mapgPolicyAuditRecord extends auditData {
   }
 
   /**
    * Audit data for MAPG Remediation events.
    */
+  @open
   @complex model mapgRemediationAuditRecord extends auditData {
   }
 
@@ -95054,36 +95592,49 @@ namespace reference.`microsoft.graph.security` {
   /**
    * Audit data for MCAS Alerts events.
    */
+  @open
   @complex model mcasAlertsAuditRecord extends auditData {
   }
 
   /**
    * Audit data for MDA events.
    */
+  @open
   @complex model mdaAuditRecord extends auditData {
   }
 
   /**
    * Audit data for MDA Data Security Signal events.
    */
+  @open
   @complex model mdaDataSecuritySignalRecord extends auditData {
   }
 
+  /**
+   * Audit data for MDASH events.
+   */
+  @open
+  @complex model mDASHAuditRecord extends auditData {
+  }
+
   /**
    * Audit data for MDATP events.
    */
+  @open
   @complex model mdatpAuditRecord extends auditData {
   }
 
   /**
    * Audit data for MDC Events events.
    */
+  @open
   @complex model mdcEventsRecord extends auditData {
   }
 
   /**
    * Audit data for MDI events.
    */
+  @open
   @complex model mdiAuditRecord extends auditData {
   }
 
@@ -95094,6 +95645,7 @@ namespace reference.`microsoft.graph.security` {
   /**
    * Audit data for Mesh Worlds events.
    */
+  @open
   @complex model meshWorldsAuditRecord extends auditData {
   }
 
@@ -95105,153 +95657,185 @@ namespace reference.`microsoft.graph.security` {
   /**
    * Audit data for Microsoft365 Backup Backup Item events.
    */
+  @open
   @complex model microsoft365BackupBackupItemAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Microsoft365 Backup Backup Policy events.
    */
+  @open
   @complex model microsoft365BackupBackupPolicyAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Microsoft365 Backup Granular Browse Task events.
    */
+  @open
   @complex model microsoft365BackupGranularBrowseTaskAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Microsoft365 Backup Restore Item events.
    */
+  @open
   @complex model microsoft365BackupRestoreItemAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Microsoft365 Backup Restore Task events.
    */
+  @open
   @complex model microsoft365BackupRestoreTaskAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Microsoft365 Copilot Scheduled Prompt events.
    */
+  @open
   @complex model microsoft365CopilotScheduledPromptAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Microsoft Defender Experts XDR events.
    */
+  @open
   @complex model microsoftDefenderExpertsXDRAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Microsoft Flow events.
    */
+  @open
   @complex model microsoftFlowAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Microsoft Forms events.
    */
+  @open
   @complex model microsoftFormsAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Microsoft Graph Data Connect Consent events.
    */
+  @open
   @complex model microsoftGraphDataConnectConsent extends auditData {
   }
 
   /**
    * Audit data for Microsoft Graph Data Connect Operation events.
    */
+  @open
   @complex model microsoftGraphDataConnectOperation extends auditData {
   }
 
   /**
    * Audit data for Microsoft Purview Data Catalog Operation events.
    */
+  @open
   @complex model microsoftPurviewDataCatalogOperationRecord extends auditData {
   }
 
   /**
    * Audit data for Microsoft Purview Data Map Operation events.
    */
+  @open
   @complex model microsoftPurviewDataMapOperationRecord extends auditData {
   }
 
   /**
    * Audit data for Microsoft Purview Metadata Policy Operation events.
    */
+  @open
   @complex model microsoftPurviewMetadataPolicyOperationRecord extends auditData {
   }
 
   /**
    * Audit data for Microsoft Purview Policy Operation events.
    */
+  @open
   @complex model microsoftPurviewPolicyOperationRecord extends auditData {
   }
 
   /**
    * Audit data for Microsoft Purview Privacy Audit Event events.
    */
+  @open
   @complex model microsoftPurviewPrivacyAuditEvent extends auditData {
   }
 
   /**
    * Audit data for Microsoft Purview Unified Catalog Operation events.
    */
+  @open
   @complex model microsoftPurviewUnifiedCatalogOperationRecord extends auditData {
   }
 
   /**
    * Audit data for Microsoft Stream events.
    */
+  @open
   @complex model microsoftStreamAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Microsoft Teams Admin events.
    */
+  @open
   @complex model microsoftTeamsAdminAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Microsoft Teams Analytics events.
    */
+  @open
   @complex model microsoftTeamsAnalyticsAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Microsoft Teams events.
    */
+  @open
   @complex model microsoftTeamsAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Microsoft Teams Device events.
    */
+  @open
   @complex model microsoftTeamsDeviceAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Microsoft Teams Retention Label Action events.
    */
+  @open
   @complex model microsoftTeamsRetentionLabelActionAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Microsoft Teams Sensitivity Label Action events.
    */
+  @open
   @complex model microsoftTeamsSensitivityLabelActionAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Microsoft Teams Shifts events.
    */
+  @open
   @complex model microsoftTeamsShiftsAuditRecord extends auditData {
   }
 
+  /**
+   * Audit data for Microsoft Teams User Concern events.
+   */
+  @open
+  @complex model microsoftTeamsUserConcernAuditRecord extends auditData {
+  }
+
   @complex model migrateSensorsResult {
     failedMigrationSensorIds: string[] | null;
     successfulMigrationSensorIds: string[] | null;
@@ -95260,60 +95844,70 @@ namespace reference.`microsoft.graph.security` {
   /**
    * Audit data for MIP Auto Label Exchange Item events.
    */
+  @open
   @complex model mipAutoLabelExchangeItemAuditRecord extends auditData {
   }
 
   /**
    * Audit data for MIP Auto Label Progress Feedback events.
    */
+  @open
   @complex model mipAutoLabelProgressFeedbackAuditRecord extends auditData {
   }
 
   /**
    * Audit data for MIP Auto Label SharePoint Item events.
    */
+  @open
   @complex model mipAutoLabelSharePointItemAuditRecord extends auditData {
   }
 
   /**
    * Audit data for MIP Auto Label SharePoint Policy Location events.
    */
+  @open
   @complex model mipAutoLabelSharePointPolicyLocationAuditRecord extends auditData {
   }
 
   /**
    * Audit data for MIP Auto Label Simulation SharePoint Completion events.
    */
+  @open
   @complex model mipAutoLabelSimulationSharePointCompletionRecord extends auditData {
   }
 
   /**
    * Audit data for MIP Auto Label Simulation SharePoint Progress events.
    */
+  @open
   @complex model mipAutoLabelSimulationSharePointProgressRecord extends auditData {
   }
 
   /**
    * Audit data for MIP Auto Label Simulation Statistics events.
    */
+  @open
   @complex model mipAutoLabelSimulationStatisticsRecord extends auditData {
   }
 
   /**
    * Audit data for MIP Exact Data Match events.
    */
+  @open
   @complex model mipExactDataMatchAuditRecord extends auditData {
   }
 
   /**
    * Audit data for MIP Label Analytics events.
    */
+  @open
   @complex model mipLabelAnalyticsAuditRecord extends auditData {
   }
 
   /**
    * Audit data for MIP Label events.
    */
+  @open
   @complex model mipLabelAuditRecord extends auditData {
   }
 
@@ -95330,9 +95924,17 @@ namespace reference.`microsoft.graph.security` {
   /**
    * Audit data for MOS Agent Info events.
    */
+  @open
   @complex model mosAgentInfoRecord extends auditData {
   }
 
+  /**
+   * Audit data for MOS Agent Info V2 events.
+   */
+  @open
+  @complex model mosAgentInfoRecordV2 extends auditData {
+  }
+
   // Warning: Malformed version string '2025-01' detected.
   // Warning: Malformed version string '2025-01' detected.
   @complex model moveToDeletedItemsResponseAction extends responseAction {
@@ -95354,66 +95956,84 @@ namespace reference.`microsoft.graph.security` {
   /**
    * Audit data for MS365D Custom Detection events.
    */
+  @open
   @complex model ms365dCustomDetectionAuditRecord extends auditData {
   }
 
   /**
    * Audit data for MS365D Incident events.
    */
+  @open
   @complex model ms365dIncidentAuditRecord extends auditData {
   }
 
   /**
    * Audit data for MS365D Suppression Rule events.
    */
+  @open
   @complex model ms365dSuppressionRuleAuditRecord extends auditData {
   }
 
   /**
    * Audit data for MSDE Custom Collection events.
    */
+  @open
   @complex model msdeCustomCollectionAuditRecord extends auditData {
   }
 
   /**
    * Audit data for MSDE General Settings events.
    */
+  @open
   @complex model msdeGeneralSettingsAuditRecord extends auditData {
   }
 
   /**
    * Audit data for MSDE Indicators Settings events.
    */
+  @open
   @complex model msdeIndicatorsSettingsAuditRecord extends auditData {
   }
 
   /**
    * Audit data for MSDE Response Actions events.
    */
+  @open
   @complex model msdeResponseActionsAuditRecord extends auditData {
   }
 
   /**
    * Audit data for MSDE Roles Settings events.
    */
+  @open
   @complex model msdeRolesSettingsAuditRecord extends auditData {
   }
 
+  /**
+   * Audit data for MSP Vector Search Content Metadata events.
+   */
+  @open
+  @complex model mspVectorSearchContentMetadataAuditRecord extends auditData {
+  }
+
   /**
    * Audit data for MSTIC Nation State Notification events.
    */
+  @open
   @complex model msticNationStateNotificationRecord extends auditData {
   }
 
   /**
    * Audit data for Multi Stage Disposition events.
    */
+  @open
   @complex model multiStageDispositionAuditRecord extends auditData {
   }
 
   /**
    * Audit data for My Analytics Settings events.
    */
+  @open
   @complex model myAnalyticsSettingsAuditRecord extends auditData {
   }
 
@@ -95434,9 +96054,14 @@ namespace reference.`microsoft.graph.security` {
   /**
    * Audit data for Noisy Alert Policy events.
    */
+  @open
   @complex model noisyAlertPolicyAuditRecord extends auditData {
   }
 
+  @complex model oAuthApplicationEntityMapping extends entityMapping {
+    oAuthAppIdColumn: string;
+  }
+
   @complex model oauthApplicationEvidence extends alertEvidence {
     appId: string | null;
     displayName: string | null;
@@ -95453,42 +96078,49 @@ namespace reference.`microsoft.graph.security` {
   /**
    * Audit data for Office Native events.
    */
+  @open
   @complex model officeNativeAuditRecord extends auditData {
   }
 
   /**
    * Audit data for OME Portal events.
    */
+  @open
   @complex model omePortalAuditRecord extends auditData {
   }
 
   /**
    * Audit data for On Demand SharePoint Classification events.
    */
+  @open
   @complex model onDemandSharePointClassificationAuditRecord extends auditData {
   }
 
   /**
    * Audit data for OneDrive events.
    */
+  @open
   @complex model oneDriveAuditRecord extends auditData {
   }
 
   /**
    * Audit data for On Premises File Share Scanner DLP events.
    */
+  @open
   @complex model onPremisesFileShareScannerDLPAuditRecord extends auditData {
   }
 
   /**
    * Audit data for On Premises SharePoint Scanner DLP events.
    */
+  @open
   @complex model onPremisesSharePointScannerDLPAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Organizational Data In M365 events.
    */
+  @open
   @complex model organizationalDataInM365AuditRecord extends auditData {
   }
 
@@ -95505,273 +96137,330 @@ namespace reference.`microsoft.graph.security` {
   /**
    * Audit data for Outlook Copilot Automation events.
    */
+  @open
   @complex model outlookCopilotAutomationAuditRecord extends auditData {
   }
 
   /**
    * Audit data for OWA Get Access Token For Resource events.
    */
+  @open
   @complex model owaGetAccessTokenForResourceAuditRecord extends auditData {
   }
 
   /**
    * Audit data for P4AI Assessment Category events.
    */
+  @open
   @complex model p4aiAssessmentCategoryRecord extends auditData {
   }
 
   /**
    * Audit data for P4AI Assessment Fabric Scanner events.
    */
+  @open
   @complex model p4aiAssessmentFabricScannerRecord extends auditData {
   }
 
   /**
    * Audit data for P4AI Assessment Location Result events.
    */
+  @open
   @complex model p4aiAssessmentLocationResultRecord extends auditData {
   }
 
   /**
    * Audit data for P4AI Assessment events.
    */
+  @open
   @complex model p4aiAssessmentRecord extends auditData {
   }
 
+  /**
+   * Audit data for P4 AI Risk Score events.
+   */
+  @open
+  @complex model p4AIRiskScoreRecord extends auditData {
+  }
+
   /**
    * Audit data for People Admin Settings events.
    */
+  @open
   @complex model peopleAdminSettingsAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Physical Badging Signal events.
    */
+  @open
   @complex model physicalBadgingSignalAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Places Directory events.
    */
+  @open
   @complex model placesDirectoryAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Planner Chat Message events.
    */
+  @open
   @complex model plannerChatMessageAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Planner Chat Message List events.
    */
+  @open
   @complex model plannerChatMessageListAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Planner Copy Plan events.
    */
+  @open
   @complex model plannerCopyPlanAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Planner Goal events.
    */
+  @open
   @complex model plannerGoalAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Planner Goal List events.
    */
+  @open
   @complex model plannerGoalListAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Planner Plan events.
    */
+  @open
   @complex model plannerPlanAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Planner Plan List events.
    */
+  @open
   @complex model plannerPlanListAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Planner Plan Sensitivity Label events.
    */
+  @open
   @complex model plannerPlanSensitivityLabelAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Planner Roster events.
    */
+  @open
   @complex model plannerRosterAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Planner Roster Sensitivity Label events.
    */
+  @open
   @complex model plannerRosterSensitivityLabelAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Planner Task events.
    */
+  @open
   @complex model plannerTaskAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Planner Task List events.
    */
+  @open
   @complex model plannerTaskListAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Planner Tenant Settings events.
    */
+  @open
   @complex model plannerTenantSettingsAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Policy Config Change events.
    */
+  @open
   @complex model policyConfigChangeAuditRecord extends auditData {
   }
 
   /**
    * Audit data for PowerApps Audit App events.
    */
+  @open
   @complex model powerAppsAuditAppRecord extends auditData {
   }
 
   /**
    * Audit data for PowerApps Audit Plan events.
    */
+  @open
   @complex model powerAppsAuditPlanRecord extends auditData {
   }
 
   /**
    * Audit data for PowerApps Audit Resource events.
    */
+  @open
   @complex model powerAppsAuditResourceRecord extends auditData {
   }
 
   /**
    * Audit data for Power BI events.
    */
+  @open
   @complex model powerBIAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Power BI DLP events.
    */
+  @open
   @complex model powerBIDlpAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Power Pages Site events.
    */
+  @open
   @complex model powerPagesSiteAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Power Platform Admin DLP events.
    */
+  @open
   @complex model powerPlatformAdminDlpAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Power Platform Admin Environment events.
    */
+  @open
   @complex model powerPlatformAdminEnvironmentAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Power Platform Administrator Activity events.
    */
+  @open
   @complex model powerPlatformAdministratorActivityRecord extends auditData {
   }
 
   /**
    * Audit data for Power Platform Lockbox Resource Access Request events.
    */
+  @open
   @complex model powerPlatformLockboxResourceAccessRequestAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Power Platform Lockbox Resource Command events.
    */
+  @open
   @complex model powerPlatformLockboxResourceCommandAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Power Platform Service Activity events.
    */
+  @open
   @complex model powerPlatformServiceActivityAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Power Platform Tenant Isolation events.
    */
+  @open
   @complex model powerPlatformTenantIsolationRecord extends auditData {
   }
 
   /**
    * Audit data for Privacy Data Match events.
    */
+  @open
   @complex model privacyDataMatchAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Privacy Data Minimization events.
    */
+  @open
   @complex model privacyDataMinimizationRecord extends auditData {
   }
 
   /**
    * Audit data for Privacy Digest Email events.
    */
+  @open
   @complex model privacyDigestEmailRecord extends auditData {
   }
 
   /**
    * Audit data for Privacy Open Access events.
    */
+  @open
   @complex model privacyOpenAccessAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Privacy Portal events.
    */
+  @open
   @complex model privacyPortalAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Privacy Remediation Action events.
    */
+  @open
   @complex model privacyRemediationActionRecord extends auditData {
   }
 
   /**
    * Audit data for Privacy Remediation events.
    */
+  @open
   @complex model privacyRemediationRecord extends auditData {
   }
 
   /**
    * Audit data for Priva Privacy Assessment Operation events.
    */
+  @open
   @complex model privaPrivacyAssessmentOperationRecord extends auditData {
   }
 
   /**
    * Audit data for Priva Privacy Consent Operation events.
    */
+  @open
   @complex model privaPrivacyConsentOperationRecord extends auditData {
   }
 
+  @complex model processEntityMapping extends entityMapping {
+    sha1Column: string | null;
+    sha256Column: string | null;
+  }
+
   @complex model processEvidence extends alertEvidence {
     detectionStatus: detectionStatus | null;
     imageFile: fileDetails | null;
@@ -95788,48 +96477,56 @@ namespace reference.`microsoft.graph.security` {
   /**
    * Audit data for Microsoft Project events.
    */
+  @open
   @complex model projectAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Project for the Web Assigned To Me Settings events.
    */
+  @open
   @complex model projectForTheWebAssignedToMeSettingsAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Project for the Web Project events.
    */
+  @open
   @complex model projectForTheWebProjectAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Project for the Web Project Settings events.
    */
+  @open
   @complex model projectForTheWebProjectSettingsAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Project for the Web Roadmap events.
    */
+  @open
   @complex model projectForTheWebRoadmapAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Project for the Web Roadmap Item events.
    */
+  @open
   @complex model projectForTheWebRoadmapItemAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Project for the Web Roadmap Settings events.
    */
+  @open
   @complex model projectForTheWebRoadmapSettingsAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Project for the Web Task events.
    */
+  @open
   @complex model projectForTheWebTaskAuditRecord extends auditData {
   }
 
@@ -95846,36 +96543,42 @@ namespace reference.`microsoft.graph.security` {
   /**
    * Audit data for Exchange public folder events.
    */
+  @open
   @complex model publicFolderAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Purview Insider Risk Alerts events.
    */
+  @open
   @complex model purviewInsiderRiskAlertsRecord extends auditData {
   }
 
   /**
    * Audit data for Purview Insider Risk Cases events.
    */
+  @open
   @complex model purviewInsiderRiskCasesRecord extends auditData {
   }
 
   /**
    * Audit data for Purview MC Recommendation events.
    */
+  @open
   @complex model purviewMCRecommendationRecord extends auditData {
   }
 
   /**
    * Audit data for Purview Posture Agent events.
    */
+  @open
   @complex model purviewPostureAgentAuditRecord extends auditData {
   }
 
   /**
    * Audit data for quarantine events.
    */
+  @open
   @complex model quarantineAuditRecord extends auditData {
   }
 
@@ -95900,6 +96603,7 @@ namespace reference.`microsoft.graph.security` {
   /**
    * Audit data for Records Management events.
    */
+  @open
   @complex model recordsManagementAuditRecord extends auditData {
   }
 
@@ -95915,6 +96619,11 @@ namespace reference.`microsoft.graph.security` {
     registryKey: string | null;
   }
 
+  @complex model registryValueEntityMapping extends entityMapping {
+    keyColumn: string;
+    valueNameColumn: string;
+  }
+
   @complex model registryValueEvidence extends alertEvidence {
     mdeDeviceId: string | null;
     registryHive: string | null;
@@ -95948,12 +96657,14 @@ namespace reference.`microsoft.graph.security` {
   /**
    * Audit data for Report Submission events.
    */
+  @open
   @complex model reportSubmission extends auditData {
   }
 
   /**
    * Audit data for Report Submission Result Detail events.
    */
+  @open
   @complex model reportSubmissionResultDetail extends auditData {
   }
 
@@ -95986,6 +96697,7 @@ namespace reference.`microsoft.graph.security` {
   /**
    * Audit data for Restricted Mode events.
    */
+  @open
   @complex model restrictedModeAuditRecord extends auditData {
   }
 
@@ -96008,12 +96720,14 @@ namespace reference.`microsoft.graph.security` {
   /**
    * Audit data for Retention Policy events.
    */
+  @open
   @complex model retentionPolicyAuditRecord extends auditData {
   }
 
   /**
    * Audit data for RTI Operations Agent events.
    */
+  @open
   @complex model rtiOperationsAgentAuditRecord extends auditData {
   }
 
@@ -96061,69 +96775,100 @@ namespace reference.`microsoft.graph.security` {
   /**
    * Audit data for SBP Configuration Event events.
    */
+  @open
   @complex model sbpConfigurationEventRecord extends auditData {
   }
 
   /**
    * Audit data for SBP Usage Event events.
    */
+  @open
   @complex model sbpUsageEventRecord extends auditData {
   }
 
   /**
    * Audit data for Secure Score evidence events.
    */
+  @open
   @complex model scoreEvidence extends auditData {
   }
 
   /**
    * Audit data for Score Platform Generic events.
    */
+  @open
   @complex model scorePlatformGenericAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Script Run events.
    */
+  @open
   @complex model scriptRunAuditRecord extends auditData {
   }
 
   /**
    * Audit data for search events.
    */
+  @open
   @complex model searchAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Security Compliance Alert events.
    */
+  @open
   @complex model securityComplianceAlertRecord extends auditData {
   }
 
   /**
    * Audit data for Security Compliance Center EOP cmdlet events.
    */
+  @open
   @complex model securityComplianceCenterEOPCmdletAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Security Compliance Insights events.
    */
+  @open
   @complex model securityComplianceInsightsAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Security Compliance RBAC events.
    */
+  @open
   @complex model securityComplianceRBACAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Security Compliance User Change events.
    */
+  @open
   @complex model securityComplianceUserChangeAuditRecord extends auditData {
   }
 
+  /**
+   * Audit data for Security Copilot Identity Management events.
+   */
+  @open
+  @complex model securityCopilotIdentityManagementAuditRecord extends auditData {
+  }
+
+  /**
+   * Audit data for Security Development Lifecycle AI Log events.
+   */
+  @open
+  @complex model securityDevelopmentLifecycleAILogAuditRecord extends auditData {
+  }
+
+  @complex model securityGroupEntityMapping extends entityMapping {
+    distinguishedNameColumn: string | null;
+    objectIdColumn: string | null;
+    sidColumn: string | null;
+  }
+
   @complex model securityGroupEvidence extends alertEvidence {
     activeDirectoryObjectGuid: guid | null;
     displayName: string | null;
@@ -96136,24 +96881,28 @@ namespace reference.`microsoft.graph.security` {
   /**
    * Audit data for Sensitive Info Remediation Agent events.
    */
+  @open
   @complex model sensitiveInfoRemediationAgentDataRecord extends auditData {
   }
 
   /**
    * Audit data for Sensitivity Label Action events.
    */
+  @open
   @complex model sensitivityLabelActionAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Sensitivity Labeled File Action events.
    */
+  @open
   @complex model sensitivityLabeledFileActionAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Sensitivity Label Policy Match events.
    */
+  @open
   @complex model sensitivityLabelPolicyMatchAuditRecord extends auditData {
   }
 
@@ -96172,54 +96921,63 @@ namespace reference.`microsoft.graph.security` {
   /**
    * Audit data for Sentinel AI Tool events.
    */
+  @open
   @complex model sentinelAIToolAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Sentinel Graph events.
    */
+  @open
   @complex model sentinelGraphAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Sentinel Job events.
    */
+  @open
   @complex model sentinelJobAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Sentinel KQL On Lake events.
    */
+  @open
   @complex model sentinelKQLOnLakeAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Sentinel Lake Data Onboarding events.
    */
+  @open
   @complex model sentinelLakeDataOnboardingAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Sentinel Lake Encryption events.
    */
+  @open
   @complex model sentinelLakeEncryptionAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Sentinel Lake Onboarding events.
    */
+  @open
   @complex model sentinelLakeOnboardingAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Sentinel Notebook On Lake events.
    */
+  @open
   @complex model sentinelNotebookOnLakeAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Sentinel Package events.
    */
+  @open
   @complex model sentinelPackageAuditRecord extends auditData {
   }
 
@@ -96235,66 +96993,77 @@ namespace reference.`microsoft.graph.security` {
   /**
    * Audit data for SharePoint App Permission Operation events.
    */
+  @open
   @complex model sharePointAppPermissionOperationAuditRecord extends auditData {
   }
 
   /**
    * Audit data for SharePoint events.
    */
+  @open
   @complex model sharePointAuditRecord extends auditData {
   }
 
   /**
    * Audit data for SharePoint Comment Operation events.
    */
+  @open
   @complex model sharePointCommentOperationAuditRecord extends auditData {
   }
 
   /**
    * Audit data for SharePoint Content Security Policy events.
    */
+  @open
   @complex model sharePointContentSecurityPolicyAuditRecord extends auditData {
   }
 
   /**
    * Audit data for SharePoint Content Type Operation events.
    */
+  @open
   @complex model sharePointContentTypeOperationAuditRecord extends auditData {
   }
 
   /**
    * Audit data for SharePoint E Signature events.
    */
+  @open
   @complex model sharePointESignatureAuditRecord extends auditData {
   }
 
   /**
    * Audit data for SharePoint Field Operation events.
    */
+  @open
   @complex model sharePointFieldOperationAuditRecord extends auditData {
   }
 
   /**
    * Audit data for SharePoint File Operation events.
    */
+  @open
   @complex model sharePointFileOperationAuditRecord extends auditData {
   }
 
   /**
    * Audit data for SharePoint List Item Operation events.
    */
+  @open
   @complex model sharePointListItemOperationAuditRecord extends auditData {
   }
 
   /**
    * Audit data for SharePoint List Operation events.
    */
+  @open
   @complex model sharePointListOperationAuditRecord extends auditData {
   }
 
   /**
    * Audit data for SharePoint Sharing Operation events.
    */
+  @open
   @complex model sharePointSharingOperationAuditRecord extends auditData {
   }
 
@@ -96311,18 +97080,21 @@ namespace reference.`microsoft.graph.security` {
   /**
    * Audit data for Skype for Business cmdlets events.
    */
+  @open
   @complex model skypeForBusinessCmdletsAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Skype for Business PSTN Usage events.
    */
+  @open
   @complex model skypeForBusinessPSTNUsageAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Skype for Business Users Blocked events.
    */
+  @open
   @complex model skypeForBusinessUsersBlockedAuditRecord extends auditData {
   }
 
@@ -96339,9 +97111,45 @@ namespace reference.`microsoft.graph.security` {
   /**
    * Audit data for Sonar Detonation Content Meta events.
    */
+  @open
   @complex model sonarDetonationContentMetadata extends auditData {
   }
 
+  /**
+   * Audit data for Sonar Detonation Entity events.
+   */
+  @open
+  @complex model sonarDetonationEntityAuditRecord extends auditData {
+  }
+
+  /**
+   * Audit data for Sonar File Detonation Entity events.
+   */
+  @open
+  @complex model sonarFileDetonationEntityAuditRecord extends auditData {
+  }
+
+  /**
+   * Audit data for Sonar Submission Entity events.
+   */
+  @open
+  @complex model sonarSubmissionEntityAuditRecord extends auditData {
+  }
+
+  /**
+   * Audit data for Sonar URL Detonation Entity events.
+   */
+  @open
+  @complex model sonarUrlDetonationEntityAuditRecord extends auditData {
+  }
+
+  /**
+   * Audit data for Spark Core Custom Live Pool events.
+   */
+  @open
+  @complex model sparkCoreCustomLivePoolRecord extends auditData {
+  }
+
   @complex model sslCertificateEntity {
     address: reference.`microsoft.graph`.physicalAddress | null;
     alternateNames: string[] | null;
@@ -96389,6 +97197,13 @@ namespace reference.`microsoft.graph.security` {
     fileName: string | null;
   }
 
+  /**
+   * Audit data for Submission Entity events.
+   */
+  @open
+  @complex model submissionEntityAuditRecord extends auditData {
+  }
+
   @complex model submissionMailEvidence extends alertEvidence {
     networkMessageId: string | null;
     recipient: string | null;
@@ -96417,48 +97232,56 @@ namespace reference.`microsoft.graph.security` {
   /**
    * Audit data for Supervisory Review Day X Insights events.
    */
+  @open
   @complex model supervisoryReviewDayXInsightsAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Synthetic Probe events.
    */
+  @open
   @complex model syntheticProbeAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Team Copilot Interaction events.
    */
+  @open
   @complex model teamCopilotInteractionAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Teams Easy Approvals events.
    */
+  @open
   @complex model teamsEasyApprovalsAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Teams Eval Data Hub Admin Operation events.
    */
+  @open
   @complex model teamsEvalDataHubAdminOperationAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Teams Eval Data Hub Data Access events.
    */
+  @open
   @complex model teamsEvalDataHubDataAccessAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Teams Eval Data Hub Permission Change events.
    */
+  @open
   @complex model teamsEvalDataHubPermissionChangeAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Teams Healthcare events.
    */
+  @open
   @complex model teamsHealthcareAuditRecord extends auditData {
   }
 
@@ -96492,12 +97315,14 @@ namespace reference.`microsoft.graph.security` {
   /**
    * Audit data for Teams Updates events.
    */
+  @open
   @complex model teamsUpdatesAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Tenant Allow Block List events.
    */
+  @open
   @complex model tenantAllowBlockListAuditRecord extends auditData {
   }
 
@@ -96525,36 +97350,42 @@ namespace reference.`microsoft.graph.security` {
   /**
    * Audit data for Threat Finder events.
    */
+  @open
   @complex model threatFinderAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Threat Intelligence Atp Content events.
    */
+  @open
   @complex model threatIntelligenceAtpContentData extends auditData {
   }
 
   /**
    * Audit data for Threat Intelligence Export events.
    */
+  @open
   @complex model threatIntelligenceExportAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Threat Intelligence Mail events.
    */
+  @open
   @complex model threatIntelligenceMailData extends auditData {
   }
 
   /**
    * Audit data for Threat Intelligence Object events.
    */
+  @open
   @complex model threatIntelligenceObjectAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Threat Intelligence Url Click events.
    */
+  @open
   @complex model threatIntelligenceUrlClickData extends auditData {
   }
 
@@ -96570,6 +97401,7 @@ namespace reference.`microsoft.graph.security` {
   /**
    * Audit data for Microsoft To Do events.
    */
+  @open
   @complex model todoAuditRecord extends auditData {
   }
 
@@ -96583,30 +97415,35 @@ namespace reference.`microsoft.graph.security` {
   /**
    * Audit data for Trainable Classifier events.
    */
+  @open
   @complex model trainableClassifierAuditRecord extends auditData {
   }
 
   /**
    * Audit data for UAM Operation events.
    */
+  @open
   @complex model uamOperationAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Unified Group events.
    */
+  @open
   @complex model unifiedGroupAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Unified Simulation Matched Item events.
    */
+  @open
   @complex model unifiedSimulationMatchedItemAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Unified Simulation Summary events.
    */
+  @open
   @complex model unifiedSimulationSummaryAuditRecord extends auditData {
   }
 
@@ -96617,12 +97454,14 @@ namespace reference.`microsoft.graph.security` {
   /**
    * Audit data for Universal Print Management events.
    */
+  @open
   @complex model universalPrintManagementAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Universal Print Print Job events.
    */
+  @open
   @complex model universalPrintPrintJobAuditRecord extends auditData {
   }
 
@@ -96633,21 +97472,28 @@ namespace reference.`microsoft.graph.security` {
   /**
    * Audit data for URBAC Assignment events.
    */
+  @open
   @complex model urbacAssignmentAuditRecord extends auditData {
   }
 
   /**
    * Audit data for URBAC Enable State events.
    */
+  @open
   @complex model urbacEnableStateAuditRecord extends auditData {
   }
 
   /**
    * Audit data for URBAC Role events.
    */
+  @open
   @complex model urbacRoleAuditRecord extends auditData {
   }
 
+  @complex model urlEntityMapping extends entityMapping {
+    addressColumn: string;
+  }
+
   @complex model urlEvidence extends alertEvidence {
     url: string | null;
   }
@@ -96672,12 +97518,14 @@ namespace reference.`microsoft.graph.security` {
   /**
    * Audit data for User Training events.
    */
+  @open
   @complex model userTrainingAuditRecord extends auditData {
   }
 
   /**
    * Audit data for USX Workspace Onboarding events.
    */
+  @open
   @complex model usxWorkspaceOnboardingAuditRecord extends auditData {
   }
 
@@ -96688,156 +97536,189 @@ namespace reference.`microsoft.graph.security` {
   /**
    * Audit data for VFAM Create Policy events.
    */
+  @open
   @complex model vfamCreatePolicyAuditRecord extends auditData {
   }
 
   /**
    * Audit data for VFAM Delete Policy events.
    */
+  @open
   @complex model vfamDeletePolicyAuditRecord extends auditData {
   }
 
   /**
    * Audit data for VFAM Update Policy events.
    */
+  @open
   @complex model vfamUpdatePolicyAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Viva Amplify events.
    */
+  @open
   @complex model vivaAmplifyAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Viva Engage Events events.
    */
+  @open
   @complex model vivaEngageEventsAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Viva Engage Network Association events.
    */
+  @open
   @complex model vivaEngageNetworkAssociationAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Viva Engage Segment events.
    */
+  @open
   @complex model vivaEngageSegmentAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Viva Glint Advanced Configuration events.
    */
+  @open
   @complex model vivaGlintAdvancedConfigurationAuditRecord extends auditData {
   }
 
+  /**
+   * Audit data for Viva Glint Agentic Campaign events.
+   */
+  @open
+  @complex model vivaGlintAgenticCampaignAuditRecord extends auditData {
+  }
+
   /**
    * Audit data for Viva Glint Feedback Program events.
    */
+  @open
   @complex model vivaGlintFeedbackProgramAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Viva Glint Organizational events.
    */
+  @open
   @complex model vivaGlintOrganizationalDataAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Viva Glint Pulse Program events.
    */
+  @open
   @complex model vivaGlintPulseProgramAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Viva Glint Pulse Program Respondent Rate events.
    */
+  @open
   @complex model vivaGlintPulseProgramRespondentRateAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Viva Glint Question events.
    */
+  @open
   @complex model vivaGlintQuestionAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Viva Glint Role events.
    */
+  @open
   @complex model vivaGlintRoleAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Viva Glint Rubicon events.
    */
+  @open
   @complex model vivaGlintRubiconAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Viva Glint Support Access events.
    */
+  @open
   @complex model vivaGlintSupportAccessAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Viva Glint System events.
    */
+  @open
   @complex model vivaGlintSystemAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Viva Glint User events.
    */
+  @open
   @complex model vivaGlintUserAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Viva Glint User Group events.
    */
+  @open
   @complex model vivaGlintUserGroupAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Viva Goals events.
    */
+  @open
   @complex model vivaGoalsAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Viva Learning Admin events.
    */
+  @open
   @complex model vivaLearningAdminAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Viva Learning events.
    */
+  @open
   @complex model vivaLearningAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Viva Pulse Admin events.
    */
+  @open
   @complex model vivaPulseAdminAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Viva Pulse Organizer events.
    */
+  @open
   @complex model vivaPulseOrganizerAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Viva Pulse Report events.
    */
+  @open
   @complex model vivaPulseReportAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Viva Pulse Response events.
    */
+  @open
   @complex model vivaPulseResponseAuditRecord extends auditData {
   }
 
@@ -96851,12 +97732,14 @@ namespace reference.`microsoft.graph.security` {
   /**
    * Audit data for WDATP Alerts events.
    */
+  @open
   @complex model wdatpAlertsAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Web Content Filtering events.
    */
+  @open
   @complex model webContentFilteringAuditRecord extends auditData {
   }
 
@@ -96878,37 +97761,31 @@ namespace reference.`microsoft.graph.security` {
   /**
    * Audit data for Windows365 Customer Lockbox events.
    */
+  @open
   @complex model windows365CustomerLockboxAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Workplace Analytics events.
    */
+  @open
   @complex model workplaceAnalyticsAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Yammer events.
    */
+  @open
   @complex model yammerAuditRecord extends auditData {
   }
 
   /**
    * Audit data for Yammer User Hiding events.
    */
+  @open
   @complex model yammerUserHidingAuditRecord extends auditData {
   }
 
-  @entity model accountEntityMapping extends entityMapping {
-    aadUserIdColumn: string | null;
-    dnsDomainColumn: string | null;
-    nameColumn: string | null;
-    ntDomainColumn: string | null;
-    sidColumn: string | null;
-    upnColumn: string | null;
-    upnSuffixColumn: string | null;
-  }
-
   @entity model aggregatedEnvironment extends MsGraph.SharedModels.entity {
     count: int32;
     @computed @key kind: string;
@@ -96954,29 +97831,6 @@ namespace reference.`microsoft.graph.security` {
     title: string | null;
   }
 
-  @entity model alertTemplate extends reference.`microsoft.graph`.entity {
-
-    // Warning: Malformed version string '2025-01' detected.
-    category: string | null;
-    customDetails: alertCustomDetails | null;
-    description: string;
-
-    // Warning: Malformed version string '2025-01' detected.
-    impactedAssets: impactedAsset[];
-
-    // Warning: Malformed version string '2025-01' detected.
-    mitreTechniques: string[] | null;
-    recommendedActions: string | null;
-    severity: alertSeverity;
-    tactics: mitreTactic[] | null;
-    title: string;
-    @contains entityMappings: entityMappingConfiguration;
-  }
-
-  @entity model amazonResourceEntityMapping extends entityMapping {
-    amazonResourceIdColumn: string;
-  }
-
   @entity model analyzedEmail extends reference.`microsoft.graph`.entity {
     alertIds: string[] | null;
     attachments: analyzedEmailAttachment[] | null;
@@ -97087,10 +97941,6 @@ namespace reference.`microsoft.graph.security` {
     isAutomatic: boolean;
   }
 
-  @entity model azureResourceEntityMapping extends entityMapping {
-    resourceIdColumn: string;
-  }
-
   @abstract
   @entity model case extends reference.`microsoft.graph`.entity {
     @computed createdDateTime: offsetDateTime | null;
@@ -97140,11 +97990,6 @@ namespace reference.`microsoft.graph.security` {
     supportedTrafficTypes: trafficType[];
   }
 
-  @entity model cloudApplicationEntityMapping extends entityMapping {
-    appIdColumn: string | null;
-    nameColumn: string | null;
-  }
-
   @abstract
   @entity model collaborationRoot extends reference.`microsoft.graph`.entity {
     @contains analyzedEmails: analyzedEmail[];
@@ -97187,19 +98032,11 @@ namespace reference.`microsoft.graph.security` {
   @entity model departmentTemplate extends filePlanDescriptorTemplate {
   }
 
-  @entity model detectionAction extends reference.`microsoft.graph`.entity {
-    automatedActions: automatedActionSet | null;
-    organizationalScope: organizationalScope | null;
-
-    // Warning: Malformed version string '2025-01' detected.
-    responseActions: responseAction[] | null;
-    @contains alertTemplate: alertTemplate;
-  }
-
   @entity model detectionRule extends reference.`microsoft.graph`.entity {
     createdBy: string;
     @computed createdDateTime: offsetDateTime;
     description: string | null;
+    detectionAction: detectionAction;
 
     // Warning: Malformed version string '2025-01' detected.
     detectorId: string | null;
@@ -97215,7 +98052,6 @@ namespace reference.`microsoft.graph.security` {
     queryCondition: queryCondition;
     schedule: ruleSchedule;
     status: detectionRuleStatus;
-    @contains detectionAction: detectionAction | null;
   }
 
   @entity model discoveredCloudAppDetail extends reference.`microsoft.graph`.entity {
@@ -97341,12 +98177,6 @@ namespace reference.`microsoft.graph.security` {
     @computed @key stageNumber: string;
   }
 
-  @entity model dnsEntityMapping extends entityMapping {
-    domainNameColumn: string;
-    hostIpAddressColumn: string;
-    serverIpColumn: string;
-  }
-
   @entity model ediscoveryAddToReviewSetOperation extends caseOperation {
     additionalDataOptions: additionalDataOptions | null;
     cloudAttachmentVersion: cloudAttachmentVersion | null;
@@ -97547,30 +98377,6 @@ namespace reference.`microsoft.graph.security` {
     role: entityDefinitionInputRole;
   }
 
-  @abstract
-  @entity model entityMapping extends reference.`microsoft.graph`.entity {
-  }
-
-  @entity model entityMappingConfiguration extends reference.`microsoft.graph`.entity {
-    @contains accounts: accountEntityMapping[];
-    @contains amazonResources: amazonResourceEntityMapping[];
-    @contains azureResources: azureResourceEntityMapping[];
-    @contains cloudApplications: cloudApplicationEntityMapping[];
-    @contains dns: dnsEntityMapping[];
-    @contains files: fileEntityMapping[];
-    @contains googleCloudResources: googleCloudResourceEntityMapping[];
-    @contains hosts: hostEntityMapping[];
-    @contains ips: ipEntityMapping[];
-    @contains mailboxes: mailboxEntityMapping[];
-    @contains mailClusters: mailClusterEntityMapping[];
-    @contains mailMessages: mailMessageEntityMapping[];
-    @contains oAuthApplications: oAuthApplicationEntityMapping[];
-    @contains processes: processEntityMapping[];
-    @contains registryValues: registryValueEntityMapping[];
-    @contains securityGroups: securityGroupEntityMapping[];
-    @contains urls: urlEntityMapping[];
-  }
-
   @entity model environment extends reference.`microsoft.graph`.entity {
     kind: environmentKind;
   }
@@ -97594,12 +98400,6 @@ namespace reference.`microsoft.graph.security` {
     fileContent: string;
   }
 
-  @entity model fileEntityMapping extends entityMapping {
-    nameColumn: string | null;
-    sha1Column: string | null;
-    sha256Column: string | null;
-  }
-
   @entity model filePlanDescriptor extends reference.`microsoft.graph`.entity {
     authority: filePlanAuthority | null;
     category: filePlanAppliedCategory | null;
@@ -97630,10 +98430,6 @@ namespace reference.`microsoft.graph.security` {
     fileUrl: string;
   }
 
-  @entity model googleCloudResourceEntityMapping extends entityMapping {
-    fullResourceNameColumn: string;
-  }
-
   @entity model healthIssue extends reference.`microsoft.graph`.entity {
     additionalInformation: string[];
     @computed createdDateTime: offsetDateTime;
@@ -97686,14 +98482,6 @@ namespace reference.`microsoft.graph.security` {
     @references host: host;
   }
 
-  @entity model hostEntityMapping extends entityMapping {
-    deviceIdColumn: string | null;
-    dnsDomainColumn: string | null;
-    nameColumn: string | null;
-    netBiosNameColumn: string | null;
-    ntDomainColumn: string | null;
-  }
-
   @entity model hostname extends host {
     registrant: string | null;
     registrar: string | null;
@@ -97846,11 +98634,6 @@ namespace reference.`microsoft.graph.security` {
     netblock: string | null;
   }
 
-  @entity model ipEntityMapping extends entityMapping {
-    addressColumn: string | null;
-    scopeColumn: string | null;
-  }
-
   @entity model labelsRoot extends reference.`microsoft.graph`.entity {
     @contains authorities: authorityTemplate[];
     @contains categories: categoryTemplate[];
@@ -97860,22 +98643,6 @@ namespace reference.`microsoft.graph.security` {
     @contains retentionLabels: retentionLabel[];
   }
 
-  @entity model mailboxEntityMapping extends entityMapping {
-    primaryAddressColumn: string;
-  }
-
-  @entity model mailClusterEntityMapping extends entityMapping {
-    queryColumn: string;
-    sourceColumn: string;
-  }
-
-  @entity model mailMessageEntityMapping extends entityMapping {
-    networkMessageIdColumn: string;
-    recipientColumn: string;
-    senderColumn: string;
-    subjectColumn: string;
-  }
-
   @entity model manualAlert extends alert {
     isExcludedFromCorrelation: boolean;
     linkToIncident: int64 | null;
@@ -97888,10 +98655,6 @@ namespace reference.`microsoft.graph.security` {
     name: string | null;
   }
 
-  @entity model oAuthApplicationEntityMapping extends entityMapping {
-    oAuthAppIdColumn: string;
-  }
-
   @entity model passiveDnsRecord extends artifact {
     collectedDateTime: offsetDateTime;
     firstSeenDateTime: offsetDateTime;
@@ -97912,16 +98675,6 @@ namespace reference.`microsoft.graph.security` {
     status: policyStatus | null;
   }
 
-  @entity model processEntityMapping extends entityMapping {
-    sha1Column: string | null;
-    sha256Column: string | null;
-  }
-
-  @entity model registryValueEntityMapping extends entityMapping {
-    keyColumn: string;
-    valueNameColumn: string;
-  }
-
   @entity model retentionEvent extends reference.`microsoft.graph`.entity {
     createdBy: reference.`microsoft.graph`.identitySet | null;
     @computed createdDateTime: offsetDateTime | null;
@@ -97985,12 +98738,6 @@ namespace reference.`microsoft.graph.security` {
     @contains informationProtection: informationProtection | null;
   }
 
-  @entity model securityGroupEntityMapping extends entityMapping {
-    distinguishedNameColumn: string | null;
-    objectIdColumn: string | null;
-    sidColumn: string | null;
-  }
-
   @entity model sensitivityLabel extends reference.`microsoft.graph`.entity {
     color: string | null;
     contentFormats: string[] | null;
@@ -98138,10 +98885,6 @@ namespace reference.`microsoft.graph.security` {
     @references group: reference.`microsoft.graph`.group;
   }
 
-  @entity model urlEntityMapping extends entityMapping {
-    addressColumn: string;
-  }
-
   @entity model urlThreatSubmission extends threatSubmission {
     webUrl: string;
   }
@@ -98949,9 +99692,35 @@ namespace reference.`microsoft.graph.security` {
     TeamsEvalDataHubPermissionChange: 445,
     TeamsEvalDataHubAdminOperation: 446,
     VivaGlintOrganizationalData: 447,
-    ReportSubmission: 448,
-    ReportSubmissionResultDetail: 449,
-    unknownFutureValue: 450,
+    AlertSubmission: 448,
+    AlertSubmissionResultDetail: 449,
+    ComplianceSitGradingSharePoint: 450,
+    CompliancePolicyGradingSharePoint: 451,
+    AzureAISearchAudit: 452,
+    P4AIRiskScoreRecord: 453,
+    DragonCopilotAdmin: 454,
+    AISpanOutputs: 455,
+    EopSubmissionFeedEntity: 456,
+    SonarFileDetonationEntity: 457,
+    SonarSubmissionEntity: 458,
+    SonarUrlDetonationEntity: 459,
+    SubmissionEntity: 460,
+    SonarDetonationEntity: 461,
+    MicrosoftTeamsUserConcern: 462,
+    VivaGlintAgenticCampaign: 463,
+    MSPVectorSearchContentMetadata: 464,
+    FabricPolicy: 465,
+    SecurityCopilotAgentIdentityManagement: 466,
+    CopilotSessionSharing: 467,
+    DragonCopilotAccess: 468,
+    DragonCopilotClinicalData: 469,
+    DragonCopilotSession: 470,
+    MosAgentInfoRecordV2: 471,
+    SecurityDevelopmentLifecycleAILog: 472,
+    MDASH: 473,
+    DefenderSecurityForAIConfiguration: 474,
+    SparkCoreCustomLivePool: 475,
+    unknownFutureValue: 476,
   }
 
   /**
@@ -101181,6 +101950,10 @@ namespace reference.`microsoft.graph.tenantGovernanceServices` {
 
   @entity model relatedTenant extends reference.`microsoft.graph`.entity {
     @computed createdDateTime: offsetDateTime;
+    /**
+     * Indicates whether this tenant is a Microsoft infrastructure tenant.
+     */
+    isMicrosoftInfrastructure: boolean;
     @references appB2BSignInActivityMetrics: b2BSignInActivityMetrics | null;
     @references b2BRegistrationMetrics: b2bRegistrationMetrics | null;
     @references b2BSignInActivityMetrics: b2BSignInActivityMetrics | null;