pulumi-azure-native 2.74.0__py3-none-any.whl → 2.74.0a1732168963__py3-none-any.whl

pulumi_azure_native/securityinsights/v20240901/_enums.py

@@ -1,1033 +0,0 @@
-# coding=utf-8
-# *** WARNING: this file was generated by pulumi-language-python. ***
-# *** Do not edit by hand unless you're certain you know what you are doing! ***
-
-from enum import Enum
-
-__all__ = [
-    'ActionType',
-    'AlertDetail',
-    'AlertProperty',
-    'AlertRuleKind',
-    'AlertSeverity',
-    'AttackTactic',
-    'AutomationRuleBooleanConditionSupportedOperator',
-    'AutomationRulePropertyArrayChangedConditionSupportedArrayType',
-    'AutomationRulePropertyArrayChangedConditionSupportedChangeType',
-    'AutomationRulePropertyArrayConditionSupportedArrayConditionType',
-    'AutomationRulePropertyArrayConditionSupportedArrayType',
-    'AutomationRulePropertyChangedConditionSupportedChangedType',
-    'AutomationRulePropertyChangedConditionSupportedPropertyType',
-    'AutomationRulePropertyConditionSupportedOperator',
-    'AutomationRulePropertyConditionSupportedProperty',
-    'CcpAuthType',
-    'ConditionType',
-    'DataConnectorDefinitionKind',
-    'DataConnectorKind',
-    'DataTypeState',
-    'EntityMappingType',
-    'EventGroupingAggregationKind',
-    'Flag',
-    'HttpMethodVerb',
-    'IncidentClassification',
-    'IncidentClassificationReason',
-    'IncidentSeverity',
-    'IncidentStatus',
-    'IncidentTaskStatus',
-    'Kind',
-    'MatchingMethod',
-    'MicrosoftSecurityProductName',
-    'Operator',
-    'OwnerType',
-    'PackageKind',
-    'ProviderPermissionsScope',
-    'RepositoryAccessKind',
-    'RestApiPollerRequestPagingKind',
-    'SecurityMLAnalyticsSettingsKind',
-    'SettingsStatus',
-    'SourceKind',
-    'SourceType',
-    'SupportTier',
-    'ThreatIntelligenceResourceInnerKind',
-    'TriggerOperator',
-    'TriggersOn',
-    'TriggersWhen',
-]
-
-
-class ActionType(str, Enum):
-    """
-    The type of the automation rule action.
-    """
-    MODIFY_PROPERTIES = "ModifyProperties"
-    """
-    Modify an object's properties
-    """
-    RUN_PLAYBOOK = "RunPlaybook"
-    """
-    Run a playbook on an object
-    """
-    ADD_INCIDENT_TASK = "AddIncidentTask"
-    """
-    Add a task to an incident object
-    """
-
-
-class AlertDetail(str, Enum):
-    """
-    Alert detail
-    """
-    DISPLAY_NAME = "DisplayName"
-    """
-    Alert display name
-    """
-    SEVERITY = "Severity"
-    """
-    Alert severity
-    """
-
-
-class AlertProperty(str, Enum):
-    """
-    The V3 alert property
-    """
-    ALERT_LINK = "AlertLink"
-    """
-    Alert's link
-    """
-    CONFIDENCE_LEVEL = "ConfidenceLevel"
-    """
-    Confidence level property
-    """
-    CONFIDENCE_SCORE = "ConfidenceScore"
-    """
-    Confidence score
-    """
-    EXTENDED_LINKS = "ExtendedLinks"
-    """
-    Extended links to the alert
-    """
-    PRODUCT_NAME = "ProductName"
-    """
-    Product name alert property
-    """
-    PROVIDER_NAME = "ProviderName"
-    """
-    Provider name alert property
-    """
-    PRODUCT_COMPONENT_NAME = "ProductComponentName"
-    """
-    Product component name alert property
-    """
-    REMEDIATION_STEPS = "RemediationSteps"
-    """
-    Remediation steps alert property
-    """
-    TECHNIQUES = "Techniques"
-    """
-    Techniques alert property
-    """
-
-
-class AlertRuleKind(str, Enum):
-    """
-    The alert rule kind
-    """
-    SCHEDULED = "Scheduled"
-    MICROSOFT_SECURITY_INCIDENT_CREATION = "MicrosoftSecurityIncidentCreation"
-    FUSION = "Fusion"
-
-
-class AlertSeverity(str, Enum):
-    """
-    The severity for alerts created by this alert rule.
-    """
-    HIGH = "High"
-    """
-    High severity
-    """
-    MEDIUM = "Medium"
-    """
-    Medium severity
-    """
-    LOW = "Low"
-    """
-    Low severity
-    """
-    INFORMATIONAL = "Informational"
-    """
-    Informational severity
-    """
-
-
-class AttackTactic(str, Enum):
-    """
-    The severity for alerts created by this alert rule.
-    """
-    RECONNAISSANCE = "Reconnaissance"
-    RESOURCE_DEVELOPMENT = "ResourceDevelopment"
-    INITIAL_ACCESS = "InitialAccess"
-    EXECUTION = "Execution"
-    PERSISTENCE = "Persistence"
-    PRIVILEGE_ESCALATION = "PrivilegeEscalation"
-    DEFENSE_EVASION = "DefenseEvasion"
-    CREDENTIAL_ACCESS = "CredentialAccess"
-    DISCOVERY = "Discovery"
-    LATERAL_MOVEMENT = "LateralMovement"
-    COLLECTION = "Collection"
-    EXFILTRATION = "Exfiltration"
-    COMMAND_AND_CONTROL = "CommandAndControl"
-    IMPACT = "Impact"
-    PRE_ATTACK = "PreAttack"
-    IMPAIR_PROCESS_CONTROL = "ImpairProcessControl"
-    INHIBIT_RESPONSE_FUNCTION = "InhibitResponseFunction"
-
-
-class AutomationRuleBooleanConditionSupportedOperator(str, Enum):
-    """
-    Describes a boolean condition operator.
-    """
-    AND_ = "And"
-    """
-    Evaluates as true if all the item conditions are evaluated as true
-    """
-    OR_ = "Or"
-    """
-    Evaluates as true if at least one of the item conditions are evaluated as true
-    """
-
-
-class AutomationRulePropertyArrayChangedConditionSupportedArrayType(str, Enum):
-    ALERTS = "Alerts"
-    """
-    Evaluate the condition on the alerts
-    """
-    LABELS = "Labels"
-    """
-    Evaluate the condition on the labels
-    """
-    TACTICS = "Tactics"
-    """
-    Evaluate the condition on the tactics
-    """
-    COMMENTS = "Comments"
-    """
-    Evaluate the condition on the comments
-    """
-
-
-class AutomationRulePropertyArrayChangedConditionSupportedChangeType(str, Enum):
-    ADDED = "Added"
-    """
-    Evaluate the condition on items added to the array
-    """
-
-
-class AutomationRulePropertyArrayConditionSupportedArrayConditionType(str, Enum):
-    """
-    Describes an array condition evaluation type.
-    """
-    ANY_ITEM = "AnyItem"
-    """
-    Evaluate the condition as true if any item fulfills it
-    """
-
-
-class AutomationRulePropertyArrayConditionSupportedArrayType(str, Enum):
-    """
-    Describes an array condition evaluated array type.
-    """
-    CUSTOM_DETAILS = "CustomDetails"
-    """
-    Evaluate the condition on the custom detail keys
-    """
-    CUSTOM_DETAIL_VALUES = "CustomDetailValues"
-    """
-    Evaluate the condition on a custom detail's values
-    """
-
-
-class AutomationRulePropertyChangedConditionSupportedChangedType(str, Enum):
-    CHANGED_FROM = "ChangedFrom"
-    """
-    Evaluate the condition on the previous value of the property
-    """
-    CHANGED_TO = "ChangedTo"
-    """
-    Evaluate the condition on the updated value of the property
-    """
-
-
-class AutomationRulePropertyChangedConditionSupportedPropertyType(str, Enum):
-    INCIDENT_SEVERITY = "IncidentSeverity"
-    """
-    Evaluate the condition on the incident severity
-    """
-    INCIDENT_STATUS = "IncidentStatus"
-    """
-    Evaluate the condition on the incident status
-    """
-    INCIDENT_OWNER = "IncidentOwner"
-    """
-    Evaluate the condition on the incident owner
-    """
-
-
-class AutomationRulePropertyConditionSupportedOperator(str, Enum):
-    EQUALS = "Equals"
-    """
-    Evaluates if the property equals at least one of the condition values
-    """
-    NOT_EQUALS = "NotEquals"
-    """
-    Evaluates if the property does not equal any of the condition values
-    """
-    CONTAINS = "Contains"
-    """
-    Evaluates if the property contains at least one of the condition values
-    """
-    NOT_CONTAINS = "NotContains"
-    """
-    Evaluates if the property does not contain any of the condition values
-    """
-    STARTS_WITH = "StartsWith"
-    """
-    Evaluates if the property starts with any of the condition values
-    """
-    NOT_STARTS_WITH = "NotStartsWith"
-    """
-    Evaluates if the property does not start with any of the condition values
-    """
-    ENDS_WITH = "EndsWith"
-    """
-    Evaluates if the property ends with any of the condition values
-    """
-    NOT_ENDS_WITH = "NotEndsWith"
-    """
-    Evaluates if the property does not end with any of the condition values
-    """
-
-
-class AutomationRulePropertyConditionSupportedProperty(str, Enum):
-    """
-    The property to evaluate in an automation rule property condition.
-    """
-    INCIDENT_TITLE = "IncidentTitle"
-    """
-    The title of the incident
-    """
-    INCIDENT_DESCRIPTION = "IncidentDescription"
-    """
-    The description of the incident
-    """
-    INCIDENT_SEVERITY = "IncidentSeverity"
-    """
-    The severity of the incident
-    """
-    INCIDENT_STATUS = "IncidentStatus"
-    """
-    The status of the incident
-    """
-    INCIDENT_RELATED_ANALYTIC_RULE_IDS = "IncidentRelatedAnalyticRuleIds"
-    """
-    The related Analytic rule ids of the incident
-    """
-    INCIDENT_TACTICS = "IncidentTactics"
-    """
-    The tactics of the incident
-    """
-    INCIDENT_LABEL = "IncidentLabel"
-    """
-    The labels of the incident
-    """
-    INCIDENT_PROVIDER_NAME = "IncidentProviderName"
-    """
-    The provider name of the incident
-    """
-    INCIDENT_UPDATED_BY_SOURCE = "IncidentUpdatedBySource"
-    """
-    The update source of the incident
-    """
-    INCIDENT_CUSTOM_DETAILS_KEY = "IncidentCustomDetailsKey"
-    """
-    The incident custom detail key
-    """
-    INCIDENT_CUSTOM_DETAILS_VALUE = "IncidentCustomDetailsValue"
-    """
-    The incident custom detail value
-    """
-    ACCOUNT_AAD_TENANT_ID = "AccountAadTenantId"
-    """
-    The account Azure Active Directory tenant id
-    """
-    ACCOUNT_AAD_USER_ID = "AccountAadUserId"
-    """
-    The account Azure Active Directory user id
-    """
-    ACCOUNT_NAME = "AccountName"
-    """
-    The account name
-    """
-    ACCOUNT_NT_DOMAIN = "AccountNTDomain"
-    """
-    The account NetBIOS domain name
-    """
-    ACCOUNT_PUID = "AccountPUID"
-    """
-    The account Azure Active Directory Passport User ID
-    """
-    ACCOUNT_SID = "AccountSid"
-    """
-    The account security identifier
-    """
-    ACCOUNT_OBJECT_GUID = "AccountObjectGuid"
-    """
-    The account unique identifier
-    """
-    ACCOUNT_UPN_SUFFIX = "AccountUPNSuffix"
-    """
-    The account user principal name suffix
-    """
-    ALERT_PRODUCT_NAMES = "AlertProductNames"
-    """
-    The name of the product of the alert
-    """
-    ALERT_ANALYTIC_RULE_IDS = "AlertAnalyticRuleIds"
-    """
-    The analytic rule ids of the alert
-    """
-    AZURE_RESOURCE_RESOURCE_ID = "AzureResourceResourceId"
-    """
-    The Azure resource id
-    """
-    AZURE_RESOURCE_SUBSCRIPTION_ID = "AzureResourceSubscriptionId"
-    """
-    The Azure resource subscription id
-    """
-    CLOUD_APPLICATION_APP_ID = "CloudApplicationAppId"
-    """
-    The cloud application identifier
-    """
-    CLOUD_APPLICATION_APP_NAME = "CloudApplicationAppName"
-    """
-    The cloud application name
-    """
-    DNS_DOMAIN_NAME = "DNSDomainName"
-    """
-    The dns record domain name
-    """
-    FILE_DIRECTORY = "FileDirectory"
-    """
-    The file directory full path
-    """
-    FILE_NAME = "FileName"
-    """
-    The file name without path
-    """
-    FILE_HASH_VALUE = "FileHashValue"
-    """
-    The file hash value
-    """
-    HOST_AZURE_ID = "HostAzureID"
-    """
-    The host Azure resource id
-    """
-    HOST_NAME = "HostName"
-    """
-    The host name without domain
-    """
-    HOST_NET_BIOS_NAME = "HostNetBiosName"
-    """
-    The host NetBIOS name
-    """
-    HOST_NT_DOMAIN = "HostNTDomain"
-    """
-    The host NT domain
-    """
-    HOST_OS_VERSION = "HostOSVersion"
-    """
-    The host operating system
-    """
-    IO_T_DEVICE_ID = "IoTDeviceId"
-    """
-    "The IoT device id
-    """
-    IO_T_DEVICE_NAME = "IoTDeviceName"
-    """
-    The IoT device name
-    """
-    IO_T_DEVICE_TYPE = "IoTDeviceType"
-    """
-    The IoT device type
-    """
-    IO_T_DEVICE_VENDOR = "IoTDeviceVendor"
-    """
-    The IoT device vendor
-    """
-    IO_T_DEVICE_MODEL = "IoTDeviceModel"
-    """
-    The IoT device model
-    """
-    IO_T_DEVICE_OPERATING_SYSTEM = "IoTDeviceOperatingSystem"
-    """
-    The IoT device operating system
-    """
-    IP_ADDRESS = "IPAddress"
-    """
-    The IP address
-    """
-    MAILBOX_DISPLAY_NAME = "MailboxDisplayName"
-    """
-    The mailbox display name
-    """
-    MAILBOX_PRIMARY_ADDRESS = "MailboxPrimaryAddress"
-    """
-    The mailbox primary address
-    """
-    MAILBOX_UPN = "MailboxUPN"
-    """
-    The mailbox user principal name
-    """
-    MAIL_MESSAGE_DELIVERY_ACTION = "MailMessageDeliveryAction"
-    """
-    The mail message delivery action
-    """
-    MAIL_MESSAGE_DELIVERY_LOCATION = "MailMessageDeliveryLocation"
-    """
-    The mail message delivery location
-    """
-    MAIL_MESSAGE_RECIPIENT = "MailMessageRecipient"
-    """
-    The mail message recipient
-    """
-    MAIL_MESSAGE_SENDER_IP = "MailMessageSenderIP"
-    """
-    The mail message sender IP address
-    """
-    MAIL_MESSAGE_SUBJECT = "MailMessageSubject"
-    """
-    The mail message subject
-    """
-    MAIL_MESSAGE_P1_SENDER = "MailMessageP1Sender"
-    """
-    The mail message P1 sender
-    """
-    MAIL_MESSAGE_P2_SENDER = "MailMessageP2Sender"
-    """
-    The mail message P2 sender
-    """
-    MALWARE_CATEGORY = "MalwareCategory"
-    """
-    The malware category
-    """
-    MALWARE_NAME = "MalwareName"
-    """
-    The malware name
-    """
-    PROCESS_COMMAND_LINE = "ProcessCommandLine"
-    """
-    The process execution command line
-    """
-    PROCESS_ID = "ProcessId"
-    """
-    The process id
-    """
-    REGISTRY_KEY = "RegistryKey"
-    """
-    The registry key path
-    """
-    REGISTRY_VALUE_DATA = "RegistryValueData"
-    """
-    The registry key value in string formatted representation
-    """
-    URL = "Url"
-    """
-    The url
-    """
-
-
-class CcpAuthType(str, Enum):
-    """
-    The auth type
-    """
-    BASIC = "Basic"
-    API_KEY = "APIKey"
-    O_AUTH2 = "OAuth2"
-    AWS = "AWS"
-    GCP = "GCP"
-    SESSION = "Session"
-    JWT_TOKEN = "JwtToken"
-    GIT_HUB = "GitHub"
-    SERVICE_BUS = "ServiceBus"
-    ORACLE = "Oracle"
-    NONE = "None"
-
-
-class ConditionType(str, Enum):
-    PROPERTY = "Property"
-    """
-    Evaluate an object property value
-    """
-    PROPERTY_ARRAY = "PropertyArray"
-    """
-    Evaluate an object array property value
-    """
-    PROPERTY_CHANGED = "PropertyChanged"
-    """
-    Evaluate an object property changed value
-    """
-    PROPERTY_ARRAY_CHANGED = "PropertyArrayChanged"
-    """
-    Evaluate an object array property changed value
-    """
-    BOOLEAN = "Boolean"
-    """
-    Apply a boolean operator (e.g AND, OR) to conditions
-    """
-
-
-class DataConnectorDefinitionKind(str, Enum):
-    """
-    The data connector kind
-    """
-    CUSTOMIZABLE = "Customizable"
-
-
-class DataConnectorKind(str, Enum):
-    """
-    The data connector kind
-    """
-    AZURE_ACTIVE_DIRECTORY = "AzureActiveDirectory"
-    AZURE_SECURITY_CENTER = "AzureSecurityCenter"
-    MICROSOFT_CLOUD_APP_SECURITY = "MicrosoftCloudAppSecurity"
-    THREAT_INTELLIGENCE = "ThreatIntelligence"
-    MICROSOFT_THREAT_INTELLIGENCE = "MicrosoftThreatIntelligence"
-    PREMIUM_MICROSOFT_DEFENDER_FOR_THREAT_INTELLIGENCE = "PremiumMicrosoftDefenderForThreatIntelligence"
-    OFFICE365 = "Office365"
-    AMAZON_WEB_SERVICES_CLOUD_TRAIL = "AmazonWebServicesCloudTrail"
-    AZURE_ADVANCED_THREAT_PROTECTION = "AzureAdvancedThreatProtection"
-    MICROSOFT_DEFENDER_ADVANCED_THREAT_PROTECTION = "MicrosoftDefenderAdvancedThreatProtection"
-    REST_API_POLLER = "RestApiPoller"
-
-
-class DataTypeState(str, Enum):
-    """
-    Describe whether this data type connection is enabled or not.
-    """
-    ENABLED = "Enabled"
-    DISABLED = "Disabled"
-
-
-class EntityMappingType(str, Enum):
-    """
-    The V3 type of the mapped entity
-    """
-    ACCOUNT = "Account"
-    """
-    User account entity type
-    """
-    HOST = "Host"
-    """
-    Host entity type
-    """
-    IP = "IP"
-    """
-    IP address entity type
-    """
-    MALWARE = "Malware"
-    """
-    Malware entity type
-    """
-    FILE = "File"
-    """
-    System file entity type
-    """
-    PROCESS = "Process"
-    """
-    Process entity type
-    """
-    CLOUD_APPLICATION = "CloudApplication"
-    """
-    Cloud app entity type
-    """
-    DNS = "DNS"
-    """
-    DNS entity type
-    """
-    AZURE_RESOURCE = "AzureResource"
-    """
-    Azure resource entity type
-    """
-    FILE_HASH = "FileHash"
-    """
-    File-hash entity type
-    """
-    REGISTRY_KEY = "RegistryKey"
-    """
-    Registry key entity type
-    """
-    REGISTRY_VALUE = "RegistryValue"
-    """
-    Registry value entity type
-    """
-    SECURITY_GROUP = "SecurityGroup"
-    """
-    Security group entity type
-    """
-    URL = "URL"
-    """
-    URL entity type
-    """
-    MAILBOX = "Mailbox"
-    """
-    Mailbox entity type
-    """
-    MAIL_CLUSTER = "MailCluster"
-    """
-    Mail cluster entity type
-    """
-    MAIL_MESSAGE = "MailMessage"
-    """
-    Mail message entity type
-    """
-    SUBMISSION_MAIL = "SubmissionMail"
-    """
-    Submission mail entity type
-    """
-
-
-class EventGroupingAggregationKind(str, Enum):
-    """
-    The event grouping aggregation kinds
-    """
-    SINGLE_ALERT = "SingleAlert"
-    ALERT_PER_RESULT = "AlertPerResult"
-
-
-class Flag(str, Enum):
-    """
-    Flag indicates if this package is in preview.
-    """
-    TRUE = "true"
-    FALSE = "false"
-
-
-class HttpMethodVerb(str, Enum):
-    """
-    The HTTP method, default value GET.
-    """
-    GET = "GET"
-    POST = "POST"
-    PUT = "PUT"
-    DELETE = "DELETE"
-
-
-class IncidentClassification(str, Enum):
-    """
-    The reason the incident was closed
-    """
-    UNDETERMINED = "Undetermined"
-    """
-    Incident classification was undetermined
-    """
-    TRUE_POSITIVE = "TruePositive"
-    """
-    Incident was true positive
-    """
-    BENIGN_POSITIVE = "BenignPositive"
-    """
-    Incident was benign positive
-    """
-    FALSE_POSITIVE = "FalsePositive"
-    """
-    Incident was false positive
-    """
-
-
-class IncidentClassificationReason(str, Enum):
-    """
-    The classification reason the incident was closed with
-    """
-    SUSPICIOUS_ACTIVITY = "SuspiciousActivity"
-    """
-    Classification reason was suspicious activity
-    """
-    SUSPICIOUS_BUT_EXPECTED = "SuspiciousButExpected"
-    """
-    Classification reason was suspicious but expected
-    """
-    INCORRECT_ALERT_LOGIC = "IncorrectAlertLogic"
-    """
-    Classification reason was incorrect alert logic
-    """
-    INACCURATE_DATA = "InaccurateData"
-    """
-    Classification reason was inaccurate data
-    """
-
-
-class IncidentSeverity(str, Enum):
-    """
-    The severity of the incident
-    """
-    HIGH = "High"
-    """
-    High severity
-    """
-    MEDIUM = "Medium"
-    """
-    Medium severity
-    """
-    LOW = "Low"
-    """
-    Low severity
-    """
-    INFORMATIONAL = "Informational"
-    """
-    Informational severity
-    """
-
-
-class IncidentStatus(str, Enum):
-    """
-    The status of the incident
-    """
-    NEW = "New"
-    """
-    An active incident which isn't being handled currently
-    """
-    ACTIVE = "Active"
-    """
-    An active incident which is being handled
-    """
-    CLOSED = "Closed"
-    """
-    A non-active incident
-    """
-
-
-class IncidentTaskStatus(str, Enum):
-    """
-    The status of the task
-    """
-    NEW = "New"
-    """
-    A new task
-    """
-    COMPLETED = "Completed"
-    """
-    A completed task
-    """
-
-
-class Kind(str, Enum):
-    """
-    Type of the content item we depend on
-    """
-    DATA_CONNECTOR = "DataConnector"
-    DATA_TYPE = "DataType"
-    WORKBOOK = "Workbook"
-    WORKBOOK_TEMPLATE = "WorkbookTemplate"
-    PLAYBOOK = "Playbook"
-    PLAYBOOK_TEMPLATE = "PlaybookTemplate"
-    ANALYTICS_RULE_TEMPLATE = "AnalyticsRuleTemplate"
-    ANALYTICS_RULE = "AnalyticsRule"
-    HUNTING_QUERY = "HuntingQuery"
-    INVESTIGATION_QUERY = "InvestigationQuery"
-    PARSER = "Parser"
-    WATCHLIST = "Watchlist"
-    WATCHLIST_TEMPLATE = "WatchlistTemplate"
-    SOLUTION = "Solution"
-    AZURE_FUNCTION = "AzureFunction"
-    LOGIC_APPS_CUSTOM_CONNECTOR = "LogicAppsCustomConnector"
-    AUTOMATION_RULE = "AutomationRule"
-
-
-class MatchingMethod(str, Enum):
-    """
-    Grouping matching method. When method is Selected at least one of groupByEntities, groupByAlertDetails, groupByCustomDetails must be provided and not empty.
-    """
-    ALL_ENTITIES = "AllEntities"
-    """
-    Grouping alerts into a single incident if all the entities match
-    """
-    ANY_ALERT = "AnyAlert"
-    """
-    Grouping any alerts triggered by this rule into a single incident
-    """
-    SELECTED = "Selected"
-    """
-    Grouping alerts into a single incident if the selected entities, custom details and alert details match
-    """
-
-
-class MicrosoftSecurityProductName(str, Enum):
-    """
-    The alerts' productName on which the cases will be generated
-    """
-    MICROSOFT_CLOUD_APP_SECURITY = "Microsoft Cloud App Security"
-    AZURE_SECURITY_CENTER = "Azure Security Center"
-    AZURE_ADVANCED_THREAT_PROTECTION = "Azure Advanced Threat Protection"
-    AZURE_ACTIVE_DIRECTORY_IDENTITY_PROTECTION = "Azure Active Directory Identity Protection"
-    AZURE_SECURITY_CENTER_FOR_IO_T = "Azure Security Center for IoT"
-
-
-class Operator(str, Enum):
-    """
-    Operator used for list of dependencies in criteria array.
-    """
-    AND_ = "AND"
-    OR_ = "OR"
-
-
-class OwnerType(str, Enum):
-    """
-    The type of the owner the incident is assigned to.
-    """
-    UNKNOWN = "Unknown"
-    """
-    The incident owner type is unknown
-    """
-    USER = "User"
-    """
-    The incident owner type is an AAD user
-    """
-    GROUP = "Group"
-    """
-    The incident owner type is an AAD group
-    """
-
-
-class PackageKind(str, Enum):
-    """
-    the packageKind of the package contains this template
-    """
-    SOLUTION = "Solution"
-    STANDALONE = "Standalone"
-
-
-class ProviderPermissionsScope(str, Enum):
-    """
-    The scope on which the user should have permissions, in order to be able to create connections.
-    """
-    SUBSCRIPTION = "Subscription"
-    RESOURCE_GROUP = "ResourceGroup"
-    WORKSPACE = "Workspace"
-
-
-class RepositoryAccessKind(str, Enum):
-    """
-    The kind of repository access credentials
-    """
-    O_AUTH = "OAuth"
-    PAT = "PAT"
-    APP = "App"
-
-
-class RestApiPollerRequestPagingKind(str, Enum):
-    """
-    Type of paging
-    """
-    LINK_HEADER = "LinkHeader"
-    NEXT_PAGE_TOKEN = "NextPageToken"
-    NEXT_PAGE_URL = "NextPageUrl"
-    PERSISTENT_TOKEN = "PersistentToken"
-    PERSISTENT_LINK_HEADER = "PersistentLinkHeader"
-    OFFSET = "Offset"
-    COUNT_BASED_PAGING = "CountBasedPaging"
-
-
-class SecurityMLAnalyticsSettingsKind(str, Enum):
-    """
-    The kind of security ML Analytics Settings
-    """
-    ANOMALY = "Anomaly"
-
-
-class SettingsStatus(str, Enum):
-    """
-    The anomaly SecurityMLAnalyticsSettings status
-    """
-    PRODUCTION = "Production"
-    """
-    Anomaly settings status in Production mode
-    """
-    FLIGHTING = "Flighting"
-    """
-    Anomaly settings status in Flighting mode
-    """
-
-
-class SourceKind(str, Enum):
-    """
-    Source type of the content
-    """
-    LOCAL_WORKSPACE = "LocalWorkspace"
-    COMMUNITY = "Community"
-    SOLUTION = "Solution"
-    SOURCE_REPOSITORY = "SourceRepository"
-
-
-class SourceType(str, Enum):
-    """
-    The sourceType of the watchlist
-    """
-    LOCAL_FILE = "Local file"
-    """
-    The source from local file.
-    """
-    REMOTE_STORAGE = "Remote storage"
-    """
-    The source from remote storage.
-    """
-
-
-class SupportTier(str, Enum):
-    """
-    Type of support for content item
-    """
-    MICROSOFT = "Microsoft"
-    PARTNER = "Partner"
-    COMMUNITY = "Community"
-
-
-class ThreatIntelligenceResourceInnerKind(str, Enum):
-    """
-    The kind of the entity.
-    """
-    INDICATOR = "indicator"
-    """
-    Entity represents threat intelligence indicator in the system.
-    """
-
-
-class TriggerOperator(str, Enum):
-    """
-    The operation against the threshold that triggers alert rule.
-    """
-    GREATER_THAN = "GreaterThan"
-    LESS_THAN = "LessThan"
-    EQUAL = "Equal"
-    NOT_EQUAL = "NotEqual"
-
-
-class TriggersOn(str, Enum):
-    INCIDENTS = "Incidents"
-    """
-    Trigger on Incidents
-    """
-    ALERTS = "Alerts"
-    """
-    Trigger on Alerts
-    """
-
-
-class TriggersWhen(str, Enum):
-    CREATED = "Created"
-    """
-    Trigger on created objects
-    """
-    UPDATED = "Updated"
-    """
-    Trigger on updated objects
-    """