google-api-python-client 2.165.0__py2.py3-none-any.whl → 2.167.0__py2.py3-none-any.whl

googleapiclient/discovery_cache/documents/securitycenter.v1beta2.json

@@ -2003,7 +2003,7 @@
 }
 }
 },
-"revision": "20250308",
+"revision": "20250326",
 "rootUrl": "https://securitycenter.googleapis.com/",
 "schemas": {
 "Access": {
@@ -2107,6 +2107,18 @@
 },
 "type": "object"
 },
+"AffectedResources": {
+"description": "Details about resources affected by this finding.",
+"id": "AffectedResources",
+"properties": {
+"count": {
+"description": "The count of resources affected by the finding.",
+"format": "int64",
+"type": "string"
+}
+},
+"type": "object"
+},
 "Allowed": {
 "description": "Allowed IP rule.",
 "id": "Allowed",
@@ -2425,6 +2437,20 @@
 },
 "type": "object"
 },
+"Chokepoint": {
+"description": "Contains details about a chokepoint, which is a resource or resource group where high-risk attack paths converge, based on [attack path simulations] (https://cloud.google.com/security-command-center/docs/attack-exposure-learn#attack_path_simulations).",
+"id": "Chokepoint",
+"properties": {
+"relatedFindings": {
+"description": "List of resource names of findings associated with this chokepoint. For example, organizations/123/sources/456/findings/789. This list will have at most 100 findings.",
+"items": {
+"type": "string"
+},
+"type": "array"
+}
+},
+"type": "object"
+},
 "CloudArmor": {
 "description": "Fields related to Google Cloud Armor findings.",
 "id": "CloudArmor",
@@ -3439,6 +3465,10 @@
 "$ref": "Access",
 "description": "Access details associated with the finding, such as more information on the caller, which method was accessed, and from where."
 },
+"affectedResources": {
+"$ref": "AffectedResources",
+"description": "AffectedResources associated with the finding."
+},
 "application": {
 "$ref": "Application",
 "description": "Represents an application associated with the finding."
@@ -3459,6 +3489,10 @@
 "description": "The additional taxonomy group within findings from a given source. This field is immutable after creation time. Example: \"XSS_FLASH_INJECTION\"",
 "type": "string"
 },
+"chokepoint": {
+"$ref": "Chokepoint",
+"description": "Contains details about a chokepoint, which is a resource or resource group where high-risk attack paths converge, based on [attack path simulations] (https://cloud.google.com/security-command-center/docs/attack-exposure-learn#attack_path_simulations). This field cannot be updated. Its value is ignored in all update requests."
+},
 "cloudArmor": {
 "$ref": "CloudArmor",
 "description": "Fields related to Cloud Armor findings."
@@ -3577,7 +3611,8 @@
 "SCC_ERROR",
 "POSTURE_VIOLATION",
 "TOXIC_COMBINATION",
-"SENSITIVE_DATA_RISK"
+"SENSITIVE_DATA_RISK",
+"CHOKEPOINT"
 ],
 "enumDescriptions": [
 "Unspecified finding class.",
@@ -3588,7 +3623,8 @@
 "Describes an error that prevents some SCC functionality.",
 "Describes a potential security risk due to a change in the security posture.",
 "Describes a group of security issues that, when the issues occur together, represent a greater risk than when the issues occur independently. A group of such issues is referred to as a toxic combination.",
-"Describes a potential security risk to data assets that contain sensitive data."
+"Describes a potential security risk to data assets that contain sensitive data.",
+"Describes a resource or resource group where high risk attack paths converge, based on attack path simulations (APS)."
 ],
 "type": "string"
 },
@@ -4845,6 +4881,18 @@
 },
 "type": "object"
 },
+"GoogleCloudSecuritycenterV2AffectedResources": {
+"description": "Details about resources affected by this finding.",
+"id": "GoogleCloudSecuritycenterV2AffectedResources",
+"properties": {
+"count": {
+"description": "The count of resources affected by the finding.",
+"format": "int64",
+"type": "string"
+}
+},
+"type": "object"
+},
 "GoogleCloudSecuritycenterV2Allowed": {
 "description": "Allowed IP rule.",
 "id": "GoogleCloudSecuritycenterV2Allowed",
@@ -5241,6 +5289,20 @@
 "properties": {},
 "type": "object"
 },
+"GoogleCloudSecuritycenterV2Chokepoint": {
+"description": "Contains details about a chokepoint, which is a resource or resource group where high-risk attack paths converge, based on [attack path simulations] (https://cloud.google.com/security-command-center/docs/attack-exposure-learn#attack_path_simulations).",
+"id": "GoogleCloudSecuritycenterV2Chokepoint",
+"properties": {
+"relatedFindings": {
+"description": "List of resource names of findings associated with this chokepoint. For example, organizations/123/sources/456/findings/789. This list will have at most 100 findings.",
+"items": {
+"type": "string"
+},
+"type": "array"
+}
+},
+"type": "object"
+},
 "GoogleCloudSecuritycenterV2CloudArmor": {
 "description": "Fields related to Google Cloud Armor findings.",
 "id": "GoogleCloudSecuritycenterV2CloudArmor",
@@ -6083,6 +6145,10 @@
 "$ref": "GoogleCloudSecuritycenterV2Access",
 "description": "Access details associated with the finding, such as more information on the caller, which method was accessed, and from where."
 },
+"affectedResources": {
+"$ref": "GoogleCloudSecuritycenterV2AffectedResources",
+"description": "AffectedResources associated with the finding."
+},
 "application": {
 "$ref": "GoogleCloudSecuritycenterV2Application",
 "description": "Represents an application associated with the finding."
@@ -6104,6 +6170,10 @@
 "description": "Immutable. The additional taxonomy group within findings from a given source. Example: \"XSS_FLASH_INJECTION\"",
 "type": "string"
 },
+"chokepoint": {
+"$ref": "GoogleCloudSecuritycenterV2Chokepoint",
+"description": "Contains details about a chokepoint, which is a resource or resource group where high-risk attack paths converge, based on [attack path simulations] (https://cloud.google.com/security-command-center/docs/attack-exposure-learn#attack_path_simulations). This field cannot be updated. Its value is ignored in all update requests."
+},
 "cloudArmor": {
 "$ref": "GoogleCloudSecuritycenterV2CloudArmor",
 "description": "Fields related to Cloud Armor findings."
@@ -6223,7 +6293,8 @@
 "SCC_ERROR",
 "POSTURE_VIOLATION",
 "TOXIC_COMBINATION",
-"SENSITIVE_DATA_RISK"
+"SENSITIVE_DATA_RISK",
+"CHOKEPOINT"
 ],
 "enumDescriptions": [
 "Unspecified finding class.",
@@ -6234,7 +6305,8 @@
 "Describes an error that prevents some SCC functionality.",
 "Describes a potential security risk due to a change in the security posture.",
 "Describes a combination of security issues that represent a more severe security problem when taken together.",
-"Describes a potential security risk to data assets that contain sensitive data."
+"Describes a potential security risk to data assets that contain sensitive data.",
+"Describes a resource or resource group where high risk attack paths converge, based on attack path simulations (APS)."
 ],
 "type": "string"
 },
@@ -6469,11 +6541,13 @@
 "description": "Type of group.",
 "enum": [
 "GROUP_TYPE_UNSPECIFIED",
-"GROUP_TYPE_TOXIC_COMBINATION"
+"GROUP_TYPE_TOXIC_COMBINATION",
+"GROUP_TYPE_CHOKEPOINT"
 ],
 "enumDescriptions": [
 "Default value.",
-"Group represents a toxic combination."
+"Group represents a toxic combination.",
+"Group represents a chokepoint."
 ],
 "type": "string"
 }
@@ -7252,7 +7326,13 @@
 "items": {
 "enum": [
 "TECHNIQUE_UNSPECIFIED",
+"DATA_OBFUSCATION",
+"DATA_OBFUSCATION_STEGANOGRAPHY",
 "AUTOMATED_EXFILTRATION",
+"OBFUSCATED_FILES_OR_INFO",
+"STEGANOGRAPHY",
+"COMPILE_AFTER_DELIVERY",
+"COMMAND_OBFUSCATION",
 "MASQUERADING",
 "MATCH_LEGITIMATE_NAME_OR_LOCATION",
 "BOOT_OR_LOGON_INITIALIZATION_SCRIPTS",
@@ -7281,18 +7361,24 @@
 "ADDITIONAL_CLOUD_ROLES",
 "SSH_AUTHORIZED_KEYS",
 "ADDITIONAL_CONTAINER_CLUSTER_ROLES",
+"MULTI_STAGE_CHANNELS",
 "INGRESS_TOOL_TRANSFER",
 "NATIVE_API",
 "BRUTE_FORCE",
 "SHARED_MODULES",
+"DATA_ENCODING",
+"STANDARD_ENCODING",
 "ACCESS_TOKEN_MANIPULATION",
 "TOKEN_IMPERSONATION_OR_THEFT",
+"CREATE_ACCOUNT",
+"LOCAL_ACCOUNT",
 "EXPLOIT_PUBLIC_FACING_APPLICATION",
 "USER_EXECUTION",
 "DOMAIN_POLICY_MODIFICATION",
 "DATA_DESTRUCTION",
 "SERVICE_STOP",
 "INHIBIT_SYSTEM_RECOVERY",
+"FIRMWARE_CORRUPTION",
 "RESOURCE_HIJACKING",
 "NETWORK_DENIAL_OF_SERVICE",
 "CLOUD_SERVICE_DISCOVERY",
@@ -7301,11 +7387,17 @@
 "STEAL_WEB_SESSION_COOKIE",
 "CREATE_OR_MODIFY_SYSTEM_PROCESS",
 "EVENT_TRIGGERED_EXECUTION",
+"BOOT_OR_LOGON_AUTOSTART_EXECUTION",
+"KERNEL_MODULES_AND_EXTENSIONS",
 "ABUSE_ELEVATION_CONTROL_MECHANISM",
 "UNSECURED_CREDENTIALS",
+"COMPROMISE_HOST_SOFTWARE_BINARY",
 "MODIFY_AUTHENTICATION_PROCESS",
 "IMPAIR_DEFENSES",
 "DISABLE_OR_MODIFY_TOOLS",
+"HIDE_ARTIFACTS",
+"HIDDEN_FILES_AND_DIRECTORIES",
+"HIDDEN_USERS",
 "EXFILTRATION_OVER_WEB_SERVICE",
 "EXFILTRATION_TO_CLOUD_STORAGE",
 "DYNAMIC_RESOLUTION",
@@ -7316,6 +7408,7 @@
 "OBTAIN_CAPABILITIES",
 "ACTIVE_SCANNING",
 "SCANNING_IP_BLOCKS",
+"STAGE_CAPABILITIES",
 "CONTAINER_ADMINISTRATION_COMMAND",
 "DEPLOY_CONTAINER",
 "ESCAPE_TO_HOST",
@@ -7324,7 +7417,13 @@
 ],
 "enumDescriptions": [
 "Unspecified value.",
+"T1001",
+"T1001.002",
 "T1020",
+"T1027",
+"T1027.003",
+"T1027.004",
+"T1027.010",
 "T1036",
 "T1036.005",
 "T1037",
@@ -7353,18 +7452,24 @@
 "T1098.003",
 "T1098.004",
 "T1098.006",
+"T1104",
 "T1105",
 "T1106",
 "T1110",
 "T1129",
+"T1132",
+"T1132.001",
 "T1134",
 "T1134.001",
+"T1136",
+"T1136.001",
 "T1190",
 "T1204",
 "T1484",
 "T1485",
 "T1489",
 "T1490",
+"T1495",
 "T1496",
 "T1498",
 "T1526",
@@ -7373,11 +7478,17 @@
 "T1539",
 "T1543",
 "T1546",
+"T1547",
+"T1547.006",
 "T1548",
 "T1552",
+"T1554",
 "T1556",
 "T1562",
 "T1562.001",
+"T1564",
+"T1564.001",
+"T1564.002",
 "T1567",
 "T1567.002",
 "T1568",
@@ -7388,6 +7499,7 @@
 "T1588",
 "T1595",
 "T1595.001",
+"T1608",
 "T1609",
 "T1610",
 "T1611",
@@ -7441,7 +7553,13 @@
 "items": {
 "enum": [
 "TECHNIQUE_UNSPECIFIED",
+"DATA_OBFUSCATION",
+"DATA_OBFUSCATION_STEGANOGRAPHY",
 "AUTOMATED_EXFILTRATION",
+"OBFUSCATED_FILES_OR_INFO",
+"STEGANOGRAPHY",
+"COMPILE_AFTER_DELIVERY",
+"COMMAND_OBFUSCATION",
 "MASQUERADING",
 "MATCH_LEGITIMATE_NAME_OR_LOCATION",
 "BOOT_OR_LOGON_INITIALIZATION_SCRIPTS",
@@ -7470,18 +7588,24 @@
 "ADDITIONAL_CLOUD_ROLES",
 "SSH_AUTHORIZED_KEYS",
 "ADDITIONAL_CONTAINER_CLUSTER_ROLES",
+"MULTI_STAGE_CHANNELS",
 "INGRESS_TOOL_TRANSFER",
 "NATIVE_API",
 "BRUTE_FORCE",
 "SHARED_MODULES",
+"DATA_ENCODING",
+"STANDARD_ENCODING",
 "ACCESS_TOKEN_MANIPULATION",
 "TOKEN_IMPERSONATION_OR_THEFT",
+"CREATE_ACCOUNT",
+"LOCAL_ACCOUNT",
 "EXPLOIT_PUBLIC_FACING_APPLICATION",
 "USER_EXECUTION",
 "DOMAIN_POLICY_MODIFICATION",
 "DATA_DESTRUCTION",
 "SERVICE_STOP",
 "INHIBIT_SYSTEM_RECOVERY",
+"FIRMWARE_CORRUPTION",
 "RESOURCE_HIJACKING",
 "NETWORK_DENIAL_OF_SERVICE",
 "CLOUD_SERVICE_DISCOVERY",
@@ -7490,11 +7614,17 @@
 "STEAL_WEB_SESSION_COOKIE",
 "CREATE_OR_MODIFY_SYSTEM_PROCESS",
 "EVENT_TRIGGERED_EXECUTION",
+"BOOT_OR_LOGON_AUTOSTART_EXECUTION",
+"KERNEL_MODULES_AND_EXTENSIONS",
 "ABUSE_ELEVATION_CONTROL_MECHANISM",
 "UNSECURED_CREDENTIALS",
+"COMPROMISE_HOST_SOFTWARE_BINARY",
 "MODIFY_AUTHENTICATION_PROCESS",
 "IMPAIR_DEFENSES",
 "DISABLE_OR_MODIFY_TOOLS",
+"HIDE_ARTIFACTS",
+"HIDDEN_FILES_AND_DIRECTORIES",
+"HIDDEN_USERS",
 "EXFILTRATION_OVER_WEB_SERVICE",
 "EXFILTRATION_TO_CLOUD_STORAGE",
 "DYNAMIC_RESOLUTION",
@@ -7505,6 +7635,7 @@
 "OBTAIN_CAPABILITIES",
 "ACTIVE_SCANNING",
 "SCANNING_IP_BLOCKS",
+"STAGE_CAPABILITIES",
 "CONTAINER_ADMINISTRATION_COMMAND",
 "DEPLOY_CONTAINER",
 "ESCAPE_TO_HOST",
@@ -7513,7 +7644,13 @@
 ],
 "enumDescriptions": [
 "Unspecified value.",
+"T1001",
+"T1001.002",
 "T1020",
+"T1027",
+"T1027.003",
+"T1027.004",
+"T1027.010",
 "T1036",
 "T1036.005",
 "T1037",
@@ -7542,18 +7679,24 @@
 "T1098.003",
 "T1098.004",
 "T1098.006",
+"T1104",
 "T1105",
 "T1106",
 "T1110",
 "T1129",
+"T1132",
+"T1132.001",
 "T1134",
 "T1134.001",
+"T1136",
+"T1136.001",
 "T1190",
 "T1204",
 "T1484",
 "T1485",
 "T1489",
 "T1490",
+"T1495",
 "T1496",
 "T1498",
 "T1526",
@@ -7562,11 +7705,17 @@
 "T1539",
 "T1543",
 "T1546",
+"T1547",
+"T1547.006",
 "T1548",
 "T1552",
+"T1554",
 "T1556",
 "T1562",
 "T1562.001",
+"T1564",
+"T1564.001",
+"T1564.002",
 "T1567",
 "T1567.002",
 "T1568",
@@ -7577,6 +7726,7 @@
 "T1588",
 "T1595",
 "T1595.001",
+"T1608",
 "T1609",
 "T1610",
 "T1611",
@@ -8577,11 +8727,13 @@
 "description": "Type of group.",
 "enum": [
 "GROUP_TYPE_UNSPECIFIED",
-"GROUP_TYPE_TOXIC_COMBINATION"
+"GROUP_TYPE_TOXIC_COMBINATION",
+"GROUP_TYPE_CHOKEPOINT"
 ],
 "enumDescriptions": [
 "Default value.",
-"Group represents a toxic combination."
+"Group represents a toxic combination.",
+"Group represents a chokepoint."
 ],
 "type": "string"
 }
@@ -8963,7 +9115,13 @@
 "items": {
 "enum": [
 "TECHNIQUE_UNSPECIFIED",
+"DATA_OBFUSCATION",
+"DATA_OBFUSCATION_STEGANOGRAPHY",
 "AUTOMATED_EXFILTRATION",
+"OBFUSCATED_FILES_OR_INFO",
+"STEGANOGRAPHY",
+"COMPILE_AFTER_DELIVERY",
+"COMMAND_OBFUSCATION",
 "MASQUERADING",
 "MATCH_LEGITIMATE_NAME_OR_LOCATION",
 "BOOT_OR_LOGON_INITIALIZATION_SCRIPTS",
@@ -8992,18 +9150,24 @@
 "ADDITIONAL_CLOUD_ROLES",
 "SSH_AUTHORIZED_KEYS",
 "ADDITIONAL_CONTAINER_CLUSTER_ROLES",
+"MULTI_STAGE_CHANNELS",
 "INGRESS_TOOL_TRANSFER",
 "NATIVE_API",
 "BRUTE_FORCE",
 "SHARED_MODULES",
+"DATA_ENCODING",
+"STANDARD_ENCODING",
 "ACCESS_TOKEN_MANIPULATION",
 "TOKEN_IMPERSONATION_OR_THEFT",
+"CREATE_ACCOUNT",
+"LOCAL_ACCOUNT",
 "EXPLOIT_PUBLIC_FACING_APPLICATION",
 "USER_EXECUTION",
 "DOMAIN_POLICY_MODIFICATION",
 "DATA_DESTRUCTION",
 "SERVICE_STOP",
 "INHIBIT_SYSTEM_RECOVERY",
+"FIRMWARE_CORRUPTION",
 "RESOURCE_HIJACKING",
 "NETWORK_DENIAL_OF_SERVICE",
 "CLOUD_SERVICE_DISCOVERY",
@@ -9012,11 +9176,17 @@
 "STEAL_WEB_SESSION_COOKIE",
 "CREATE_OR_MODIFY_SYSTEM_PROCESS",
 "EVENT_TRIGGERED_EXECUTION",
+"BOOT_OR_LOGON_AUTOSTART_EXECUTION",
+"KERNEL_MODULES_AND_EXTENSIONS",
 "ABUSE_ELEVATION_CONTROL_MECHANISM",
 "UNSECURED_CREDENTIALS",
+"COMPROMISE_HOST_SOFTWARE_BINARY",
 "MODIFY_AUTHENTICATION_PROCESS",
 "IMPAIR_DEFENSES",
 "DISABLE_OR_MODIFY_TOOLS",
+"HIDE_ARTIFACTS",
+"HIDDEN_FILES_AND_DIRECTORIES",
+"HIDDEN_USERS",
 "EXFILTRATION_OVER_WEB_SERVICE",
 "EXFILTRATION_TO_CLOUD_STORAGE",
 "DYNAMIC_RESOLUTION",
@@ -9027,6 +9197,7 @@
 "OBTAIN_CAPABILITIES",
 "ACTIVE_SCANNING",
 "SCANNING_IP_BLOCKS",
+"STAGE_CAPABILITIES",
 "CONTAINER_ADMINISTRATION_COMMAND",
 "DEPLOY_CONTAINER",
 "ESCAPE_TO_HOST",
@@ -9035,7 +9206,13 @@
 ],
 "enumDescriptions": [
 "Unspecified value.",
+"T1001",
+"T1001.002",
 "T1020",
+"T1027",
+"T1027.003",
+"T1027.004",
+"T1027.010",
 "T1036",
 "T1036.005",
 "T1037",
@@ -9064,18 +9241,24 @@
 "T1098.003",
 "T1098.004",
 "T1098.006",
+"T1104",
 "T1105",
 "T1106",
 "T1110",
 "T1129",
+"T1132",
+"T1132.001",
 "T1134",
 "T1134.001",
+"T1136",
+"T1136.001",
 "T1190",
 "T1204",
 "T1484",
 "T1485",
 "T1489",
 "T1490",
+"T1495",
 "T1496",
 "T1498",
 "T1526",
@@ -9084,11 +9267,17 @@
 "T1539",
 "T1543",
 "T1546",
+"T1547",
+"T1547.006",
 "T1548",
 "T1552",
+"T1554",
 "T1556",
 "T1562",
 "T1562.001",
+"T1564",
+"T1564.001",
+"T1564.002",
 "T1567",
 "T1567.002",
 "T1568",
@@ -9099,6 +9288,7 @@
 "T1588",
 "T1595",
 "T1595.001",
+"T1608",
 "T1609",
 "T1610",
 "T1611",
@@ -9152,7 +9342,13 @@
 "items": {
 "enum": [
 "TECHNIQUE_UNSPECIFIED",
+"DATA_OBFUSCATION",
+"DATA_OBFUSCATION_STEGANOGRAPHY",
 "AUTOMATED_EXFILTRATION",
+"OBFUSCATED_FILES_OR_INFO",
+"STEGANOGRAPHY",
+"COMPILE_AFTER_DELIVERY",
+"COMMAND_OBFUSCATION",
 "MASQUERADING",
 "MATCH_LEGITIMATE_NAME_OR_LOCATION",
 "BOOT_OR_LOGON_INITIALIZATION_SCRIPTS",
@@ -9181,18 +9377,24 @@
 "ADDITIONAL_CLOUD_ROLES",
 "SSH_AUTHORIZED_KEYS",
 "ADDITIONAL_CONTAINER_CLUSTER_ROLES",
+"MULTI_STAGE_CHANNELS",
 "INGRESS_TOOL_TRANSFER",
 "NATIVE_API",
 "BRUTE_FORCE",
 "SHARED_MODULES",
+"DATA_ENCODING",
+"STANDARD_ENCODING",
 "ACCESS_TOKEN_MANIPULATION",
 "TOKEN_IMPERSONATION_OR_THEFT",
+"CREATE_ACCOUNT",
+"LOCAL_ACCOUNT",
 "EXPLOIT_PUBLIC_FACING_APPLICATION",
 "USER_EXECUTION",
 "DOMAIN_POLICY_MODIFICATION",
 "DATA_DESTRUCTION",
 "SERVICE_STOP",
 "INHIBIT_SYSTEM_RECOVERY",
+"FIRMWARE_CORRUPTION",
 "RESOURCE_HIJACKING",
 "NETWORK_DENIAL_OF_SERVICE",
 "CLOUD_SERVICE_DISCOVERY",
@@ -9201,11 +9403,17 @@
 "STEAL_WEB_SESSION_COOKIE",
 "CREATE_OR_MODIFY_SYSTEM_PROCESS",
 "EVENT_TRIGGERED_EXECUTION",
+"BOOT_OR_LOGON_AUTOSTART_EXECUTION",
+"KERNEL_MODULES_AND_EXTENSIONS",
 "ABUSE_ELEVATION_CONTROL_MECHANISM",
 "UNSECURED_CREDENTIALS",
+"COMPROMISE_HOST_SOFTWARE_BINARY",
 "MODIFY_AUTHENTICATION_PROCESS",
 "IMPAIR_DEFENSES",
 "DISABLE_OR_MODIFY_TOOLS",
+"HIDE_ARTIFACTS",
+"HIDDEN_FILES_AND_DIRECTORIES",
+"HIDDEN_USERS",
 "EXFILTRATION_OVER_WEB_SERVICE",
 "EXFILTRATION_TO_CLOUD_STORAGE",
 "DYNAMIC_RESOLUTION",
@@ -9216,6 +9424,7 @@
 "OBTAIN_CAPABILITIES",
 "ACTIVE_SCANNING",
 "SCANNING_IP_BLOCKS",
+"STAGE_CAPABILITIES",
 "CONTAINER_ADMINISTRATION_COMMAND",
 "DEPLOY_CONTAINER",
 "ESCAPE_TO_HOST",
@@ -9224,7 +9433,13 @@
 ],
 "enumDescriptions": [
 "Unspecified value.",
+"T1001",
+"T1001.002",
 "T1020",
+"T1027",
+"T1027.003",
+"T1027.004",
+"T1027.010",
 "T1036",
 "T1036.005",
 "T1037",
@@ -9253,18 +9468,24 @@
 "T1098.003",
 "T1098.004",
 "T1098.006",
+"T1104",
 "T1105",
 "T1106",
 "T1110",
 "T1129",
+"T1132",
+"T1132.001",
 "T1134",
 "T1134.001",
+"T1136",
+"T1136.001",
 "T1190",
 "T1204",
 "T1484",
 "T1485",
 "T1489",
 "T1490",
+"T1495",
 "T1496",
 "T1498",
 "T1526",
@@ -9273,11 +9494,17 @@
 "T1539",
 "T1543",
 "T1546",
+"T1547",
+"T1547.006",
 "T1548",
 "T1552",
+"T1554",
 "T1556",
 "T1562",
 "T1562.001",
+"T1564",
+"T1564.001",
+"T1564.002",
 "T1567",
 "T1567.002",
 "T1568",
@@ -9288,6 +9515,7 @@
 "T1588",
 "T1595",
 "T1595.001",
+"T1608",
 "T1609",
 "T1610",
 "T1611",
@@ -9792,7 +10020,7 @@
 "type": "object"
 },
 "SecurityCenterSettings": {
-"description": "Resource capturing the settings for Security Center. Next ID: 12",
+"description": "Resource capturing the settings for Security Center.",
 "id": "SecurityCenterSettings",
 "properties": {
 "logSinkProject": {