taegis-sdk-python 1.6.18__tar.gz → 1.6.19__tar.gz

{taegis_sdk_python-1.6.18 → taegis_sdk_python-1.6.19}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: taegis-sdk-python
-Version: 1.6.18
+Version: 1.6.19
 Summary: Taegis Python SDK
 Project-URL: Homepage, https://github.com/secureworks/taegis-sdk-python
 Project-URL: Bug Reports, https://github.com/secureworks/taegis-sdk-python/issues
@@ -192,6 +192,7 @@ Classifier: Programming Language :: Python :: 3.10
 Classifier: Programming Language :: Python :: 3.11
 Classifier: Programming Language :: Python :: 3.12
 Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
 Requires-Python: >=3.9
 Requires-Dist: aiohttp
 Requires-Dist: backoff
@@ -200,6 +201,7 @@ Requires-Dist: filelock>=3.12.4
 Requires-Dist: gql>=4
 Requires-Dist: graphql-core
 Requires-Dist: jinja2
+Requires-Dist: multidict
 Requires-Dist: oauthlib
 Requires-Dist: pyjwt>=2.8.0
 Requires-Dist: python-dateutil

{taegis_sdk_python-1.6.18 → taegis_sdk_python-1.6.19}/pyproject.toml

@@ -19,6 +19,7 @@ classifiers = [
     "Programming Language :: Python :: 3.11",
     "Programming Language :: Python :: 3.12",
     "Programming Language :: Python :: 3.13",
+    "Programming Language :: Python :: 3.14",
 ]
 dependencies = [
     "aiohttp",
@@ -35,6 +36,7 @@ dependencies = [
     "websockets",
     "jinja2",
     "backoff",
+    "multidict"
 ]
 
 [project.optional-dependencies]

taegis_sdk_python-1.6.19/taegis_sdk_python/_consts.py

@@ -0,0 +1,66 @@
+"""Taegis Constants."""
+
+from enum import Enum
+
+from multidict import CIMultiDict
+
+TAEGIS_ENVIRONMENT_URLS = CIMultiDict(
+    charlie="https://api.ctpx.secureworks.com",
+    production="https://api.ctpx.secureworks.com",
+    us1="https://api.ctpx.secureworks.com",
+    delta="https://api.delta.taegis.secureworks.com",
+    us2="https://api.delta.taegis.secureworks.com",
+    echo="https://api.echo.taegis.secureworks.com",
+    eu="https://api.echo.taegis.secureworks.com",
+    foxtrot="https://api.foxtrot.taegis.secureworks.com",
+    us3="https://api.foxtrot.taegis.secureworks.com",
+    golf="https://api.golf.taegis.secureworks.com",
+    euw1="https://api.golf.taegis.secureworks.com",
+    hotel="https://api.hotel.taegis.secureworks.com",
+    apse2="https://api.hotel.taegis.secureworks.com",
+    india="https://api.india.taegis.secureworks.com",
+    aps1="https://api.india.taegis.secureworks.com",
+    juliet="https://api.juliet.taegis.secureworks.com",
+    apne1="https://api.juliet.taegis.secureworks.com",
+    kilo="https://api.kilo.taegis.secureworks.com",
+    sae1="https://api.kilo.taegis.secureworks.com",
+    quebec="https://api.quebec.taegis.secureworks.com",
+    cac1="https://api.quebec.taegis.secureworks.com",
+)
+
+
+TAEGIS_TENANTS_URLS = CIMultiDict(
+    charlie="https://api.tenants.ctpx.secureworks.com",
+    production="https://api.tenants.ctpx.secureworks.com",
+    us1="https://api.tenants.ctpx.secureworks.com",
+    delta="https://api-tenants.delta.taegis.secureworks.com",
+    us2="https://api-tenants.delta.taegis.secureworks.com",
+    echo="https://api-tenants.echo.taegis.secureworks.com",
+    eu="https://api-tenants.echo.taegis.secureworks.com",
+    foxtrot="https://api-tenants.foxtrot.taegis.secureworks.com",
+    us3="https://api-tenants.foxtrot.taegis.secureworks.com",
+    golf="https://api-tenants.golf.taegis.secureworks.com",
+    euw1="https://api-tenants.golf.taegis.secureworks.com",
+    hotel="https://api-tenants.hotel.taegis.secureworks.com",
+    apse2="https://api-tenants.hotel.taegis.secureworks.com",
+    india="https://api-tenants.india.taegis.secureworks.com",
+    aps1="https://api-tenants.india.taegis.secureworks.com",
+    juliet="https://api-tenants.juliet.taegis.secureworks.com",
+    apne1="https://api-tenants.juliet.taegis.secureworks.com",
+    kilo="https://api-tenants.kilo.taegis.secureworks.com",
+    sae1="https://api-tenants.kilo.taegis.secureworks.com",
+    quebec="https://api-tenants.quebec.taegis.secureworks.com",
+    cac1="https://api-tenants.quebec.taegis.secureworks.com",
+)
+
+
+UNIVERSAL_ENVIRONMENT = "universal"
+UNIVERSAL_AUTHENTICATION_URL = "https://api.taegis.secureworks.com"
+
+DEFAULT_GATEWAY = "/graphql"
+
+
+class TaegisEnum(str, Enum):
+    """Handler for Unknown Enums."""
+
+    UNKNOWN = "TAEGIS_SDK_PYTHON_UNKNOWN"

{taegis_sdk_python-1.6.18 → taegis_sdk_python-1.6.19}/taegis_sdk_python/_version.py

@@ -1,3 +1,3 @@
 """Version idenitier."""
 
-__version__ = "1.6.18"
+__version__ = "1.6.19"

{taegis_sdk_python-1.6.18 → taegis_sdk_python-1.6.19}/taegis_sdk_python/services/__init__.py

@@ -99,7 +99,7 @@ class GraphQLService:
         *,
         environment: Optional[str] = None,
         tenant_id: Optional[str] = None,
-        environments: Optional[Dict[str, str]] = None,
+        environments: Optional[Union[Dict[str, str], CIMultiDict[str, str]]] = None,
         gateway: Optional[str] = None,
         extra_headers: Optional[Dict[str, Any]] = None,
         schema_expiry: int = 5,
@@ -158,7 +158,11 @@ class GraphQLService:
         """
         self.response_headers: CIMultiDictProxy[str] = CIMultiDictProxy(CIMultiDict())
 
-        self._environments = environments or TAEGIS_ENVIRONMENT_URLS
+        if not environments:
+            self._environments = TAEGIS_ENVIRONMENT_URLS
+        else:
+            self._environments = CIMultiDict(environments)
+
         self._environment = environment or list(self._environments)[0]
         self._use_universal_authentication = use_universal_authentication
 

{taegis_sdk_python-1.6.18 → taegis_sdk_python-1.6.19}/taegis_sdk_python/services/assets2/types.py

@@ -428,6 +428,9 @@ class TagV2:
     is_vendor_tag: Optional[bool] = field(
         default=None, metadata=config(field_name="isVendorTag")
     )
+    is_sophos_tag: Optional[bool] = field(
+        default=None, metadata=config(field_name="isSophosTag")
+    )
 
 
 @dataclass_json

{taegis_sdk_python-1.6.18 → taegis_sdk_python-1.6.19}/taegis_sdk_python/services/contracted_endpoint/types.py

@@ -40,7 +40,14 @@ class ContractedEndpoints:
         default=None, metadata=config(field_name="endpointCount")
     )
     service: Optional[List[str]] = field(
-        default=None, metadata=config(field_name="service")
+        default=None,
+        metadata=config(
+            metadata={
+                "deprecated": True,
+                "deprecation_reason": "Service list is best-effort only and may be empty if tenant service lookup fails.",
+            },
+            field_name="service",
+        ),
     )
     service_date: Optional[str] = field(
         default=None, metadata=config(field_name="serviceDate")

{taegis_sdk_python-1.6.18 → taegis_sdk_python-1.6.19}/taegis_sdk_python/services/investigations2/mutations.py

@@ -127,6 +127,27 @@ class TaegisSDKInvestigations2Mutation:
             return RemoveEvidenceFromCaseResult.from_dict(result.get(endpoint))
         raise GraphQLNoRowsInResultSetError("for mutation removeEvidenceFromCase")
 
+    def split_case(self, input_: SplitCaseInput) -> SplitCaseResult:
+        """splitCase creates one new destination case and moves the selected case evidence to it asynchronously.
+        Only detections, events, saved searches, and files can be moved. Key findings, comments, entities, and agents remain on the source case.
+        Requested evidence not attached to the source case (already removed, or never present) is silently ignored — only what is still attached when the move runs is moved; the rest is recorded in the audit trail as skipped. SCHEDULED attachments (upload link issued but file not yet uploaded) are likewise skipped and left on the source.
+        """
+        endpoint = "splitCase"
+
+        result = self.service.execute_mutation(
+            endpoint=endpoint,
+            variables={
+                "input": prepare_input(input_),
+            },
+            output=build_output_string(
+                SplitCaseResult,
+                exclude_deprecated_output=self.service.exclude_deprecated_output,
+            ),
+        )
+        if result.get(endpoint) is not None:
+            return SplitCaseResult.from_dict(result.get(endpoint))
+        raise GraphQLNoRowsInResultSetError("for mutation splitCase")
+
     def create_case_rule(self, input_: CreateCaseRuleInput) -> CaseRule:
         """createCaseRule accepts input to create a new auto-case rule."""
         endpoint = "createCaseRule"

{taegis_sdk_python-1.6.18 → taegis_sdk_python-1.6.19}/taegis_sdk_python/services/investigations2/types.py

@@ -296,6 +296,29 @@ class RemoveEvidenceFromCaseResult:
     )
 
 
+@dataclass_json
+@dataclass(order=True, eq=True, frozen=True)
+class SplitCaseResult:
+    """SplitCaseResult."""
+
+    case_id: Optional[str] = field(default=None, metadata=config(field_name="caseId"))
+    destination_case_id: Optional[str] = field(
+        default=None, metadata=config(field_name="destinationCaseId")
+    )
+    detection_ids: Optional[List[str]] = field(
+        default=None, metadata=config(field_name="detectionIds")
+    )
+    event_ids: Optional[List[str]] = field(
+        default=None, metadata=config(field_name="eventIds")
+    )
+    search_queries: Optional[List[str]] = field(
+        default=None, metadata=config(field_name="searchQueries")
+    )
+    file_ids: Optional[List[str]] = field(
+        default=None, metadata=config(field_name="fileIds")
+    )
+
+
 @dataclass_json
 @dataclass(order=True, eq=True, frozen=True)
 class CaseDetectionEvidence:
@@ -1016,6 +1039,10 @@ class CasePrimaryVerdictsArguments:
     primary_status_id: Optional[str] = field(
         default=None, metadata=config(field_name="primaryStatusId")
     )
+    case_id: Optional[str] = field(default=None, metadata=config(field_name="caseId"))
+    include_automation_verdicts: Optional[bool] = field(
+        default=None, metadata=config(field_name="includeAutomationVerdicts")
+    )
 
 
 @dataclass_json
@@ -1026,6 +1053,7 @@ class CaseSecondaryVerdictsArguments:
     primary_verdict_id: Optional[str] = field(
         default=None, metadata=config(field_name="primaryVerdictId")
     )
+    case_id: Optional[str] = field(default=None, metadata=config(field_name="caseId"))
 
 
 @dataclass_json
@@ -1037,6 +1065,7 @@ class CaseSecondaryStatusesArguments:
     primary_status_id: Optional[str] = field(
         default=None, metadata=config(field_name="primaryStatusId")
     )
+    case_id: Optional[str] = field(default=None, metadata=config(field_name="caseId"))
 
 
 @dataclass_json
@@ -1047,6 +1076,7 @@ class CaseTypesArguments:
     transition_from_id: Optional[str] = field(
         default=None, metadata=config(field_name="transitionFromId")
     )
+    case_id: Optional[str] = field(default=None, metadata=config(field_name="caseId"))
 
 
 @dataclass_json
@@ -2934,60 +2964,6 @@ class CaseEvidence:
     )
 
 
-@dataclass_json
-@dataclass(order=True, eq=True, frozen=True)
-class CaseType:
-    """CaseType."""
-
-    id: Optional[str] = field(default=None, metadata=config(field_name="id"))
-    name: Optional[str] = field(default=None, metadata=config(field_name="name"))
-    title: Optional[str] = field(default=None, metadata=config(field_name="title"))
-    description: Optional[str] = field(
-        default=None, metadata=config(field_name="description")
-    )
-    tenant_id: Optional[str] = field(
-        default=None, metadata=config(field_name="tenantId")
-    )
-    created_by_id: Optional[str] = field(
-        default=None, metadata=config(field_name="createdById")
-    )
-    created_at: Optional[str] = field(
-        default=None, metadata=config(field_name="createdAt")
-    )
-    updated_by_id: Optional[str] = field(
-        default=None, metadata=config(field_name="updatedById")
-    )
-    updated_at: Optional[str] = field(
-        default=None, metadata=config(field_name="updatedAt")
-    )
-    supported_primary_status_ids: Optional[List[str]] = field(
-        default=None, metadata=config(field_name="supportedPrimaryStatusIds")
-    )
-    supported_secondary_status_ids: Optional[List[str]] = field(
-        default=None, metadata=config(field_name="supportedSecondaryStatusIds")
-    )
-    supported_primary_verdict_ids: Optional[List[str]] = field(
-        default=None, metadata=config(field_name="supportedPrimaryVerdictIds")
-    )
-    supported_primary_statuses: Optional[List[CasePrimaryStatus]] = field(
-        default=None, metadata=config(field_name="supportedPrimaryStatuses")
-    )
-    supported_secondary_statuses: Optional[List[CaseSecondaryStatus]] = field(
-        default=None, metadata=config(field_name="supportedSecondaryStatuses")
-    )
-    supported_primary_verdicts: Optional[List[CasePrimaryVerdict]] = field(
-        default=None, metadata=config(field_name="supportedPrimaryVerdicts")
-    )
-    managed_by: Optional[Union[CaseManagedBy, TaegisEnum]] = field(
-        default=None,
-        metadata=config(
-            encoder=encode_enum,
-            decoder=lambda x: decode_enum(CaseManagedBy, x),
-            field_name="managedBy",
-        ),
-    )
-
-
 @dataclass_json
 @dataclass(order=True, eq=True, frozen=True)
 class CreateCaseTemplateInput:
@@ -3062,6 +3038,63 @@ class CreateCaseTemplateInput:
     )
 
 
+@dataclass_json
+@dataclass(order=True, eq=True, frozen=True)
+class CaseType:
+    """CaseType."""
+
+    id: Optional[str] = field(default=None, metadata=config(field_name="id"))
+    name: Optional[str] = field(default=None, metadata=config(field_name="name"))
+    title: Optional[str] = field(default=None, metadata=config(field_name="title"))
+    description: Optional[str] = field(
+        default=None, metadata=config(field_name="description")
+    )
+    tenant_id: Optional[str] = field(
+        default=None, metadata=config(field_name="tenantId")
+    )
+    created_by_id: Optional[str] = field(
+        default=None, metadata=config(field_name="createdById")
+    )
+    created_at: Optional[str] = field(
+        default=None, metadata=config(field_name="createdAt")
+    )
+    updated_by_id: Optional[str] = field(
+        default=None, metadata=config(field_name="updatedById")
+    )
+    updated_at: Optional[str] = field(
+        default=None, metadata=config(field_name="updatedAt")
+    )
+    supported_primary_status_ids: Optional[List[str]] = field(
+        default=None, metadata=config(field_name="supportedPrimaryStatusIds")
+    )
+    supported_secondary_status_ids: Optional[List[str]] = field(
+        default=None, metadata=config(field_name="supportedSecondaryStatusIds")
+    )
+    supported_primary_verdict_ids: Optional[List[str]] = field(
+        default=None, metadata=config(field_name="supportedPrimaryVerdictIds")
+    )
+    supported_primary_statuses: Optional[List[CasePrimaryStatus]] = field(
+        default=None, metadata=config(field_name="supportedPrimaryStatuses")
+    )
+    supported_secondary_statuses: Optional[List[CaseSecondaryStatus]] = field(
+        default=None, metadata=config(field_name="supportedSecondaryStatuses")
+    )
+    supported_primary_verdicts: Optional[List[CasePrimaryVerdict]] = field(
+        default=None, metadata=config(field_name="supportedPrimaryVerdicts")
+    )
+    allowed_next_types: Optional[List["CaseType"]] = field(
+        default=None, metadata=config(field_name="allowedNextTypes")
+    )
+    managed_by: Optional[Union[CaseManagedBy, TaegisEnum]] = field(
+        default=None,
+        metadata=config(
+            encoder=encode_enum,
+            decoder=lambda x: decode_enum(CaseManagedBy, x),
+            field_name="managedBy",
+        ),
+    )
+
+
 @dataclass_json
 @dataclass(order=True, eq=True, frozen=True)
 class InvestigationFileV2:
@@ -4059,6 +4092,29 @@ class CasesArguments:
     )
 
 
+@dataclass_json
+@dataclass(order=True, eq=True, frozen=True)
+class SplitCaseInput:
+    """SplitCaseInput."""
+
+    case_id: Optional[str] = field(default=None, metadata=config(field_name="caseId"))
+    detection_ids: Optional[List[str]] = field(
+        default=None, metadata=config(field_name="detectionIds")
+    )
+    event_ids: Optional[List[str]] = field(
+        default=None, metadata=config(field_name="eventIds")
+    )
+    search_queries: Optional[List[str]] = field(
+        default=None, metadata=config(field_name="searchQueries")
+    )
+    file_ids: Optional[List[str]] = field(
+        default=None, metadata=config(field_name="fileIds")
+    )
+    new_case: Optional[CreateCaseInput] = field(
+        default=None, metadata=config(field_name="newCase")
+    )
+
+
 @dataclass_json
 @dataclass(order=True, eq=True, frozen=True)
 class ExportInvestigationResourcesArguments:

{taegis_sdk_python-1.6.18 → taegis_sdk_python-1.6.19}/taegis_sdk_python/services/preferences/queries.py

@@ -218,6 +218,22 @@ class TaegisSDKPreferencesQuery:
             return PartnerPreference.from_dict(result.get(endpoint))
         raise GraphQLNoRowsInResultSetError("for query partnerPreferences")
 
+    def provider_preferences(self) -> PartnerPreference:
+        """No developer notes."""
+        endpoint = "providerPreferences"
+
+        result = self.service.execute_query(
+            endpoint=endpoint,
+            variables={},
+            output=build_output_string(
+                PartnerPreference,
+                exclude_deprecated_output=self.service.exclude_deprecated_output,
+            ),
+        )
+        if result.get(endpoint) is not None:
+            return PartnerPreference.from_dict(result.get(endpoint))
+        raise GraphQLNoRowsInResultSetError("for query providerPreferences")
+
     def get_preferences(
         self, get_preference_selector: Optional[GetPreferenceSelector] = None
     ) -> List[UserPreferenceDictionary]:

{taegis_sdk_python-1.6.18 → taegis_sdk_python-1.6.19}/taegis_sdk_python/services/tenants/types.py

@@ -441,17 +441,6 @@ class SAMLConnectionParameters:
     )
 
 
-@dataclass_json
-@dataclass(order=True, eq=True, frozen=True)
-class NewService:
-    """NewService."""
-
-    name: Optional[str] = field(default=None, metadata=config(field_name="name"))
-    description: Optional[str] = field(
-        default=None, metadata=config(field_name="description")
-    )
-
-
 @dataclass_json
 @dataclass(order=True, eq=True, frozen=True)
 class NewSubscription:
@@ -496,24 +485,6 @@ class InputTenantLabel:
     )
 
 
-@dataclass_json
-@dataclass(order=True, eq=True, frozen=True)
-class LabelsForTenantUpdate:
-    """LabelsForTenantUpdate."""
-
-    name: Optional[str] = field(default=None, metadata=config(field_name="name"))
-    value: Optional[str] = field(default=None, metadata=config(field_name="value"))
-
-
-@dataclass_json
-@dataclass(order=True, eq=True, frozen=True)
-class InputTenantEnvironment:
-    """InputTenantEnvironment."""
-
-    name: Optional[str] = field(default=None, metadata=config(field_name="name"))
-    enabled: Optional[bool] = field(default=None, metadata=config(field_name="enabled"))
-
-
 @dataclass_json
 @dataclass(order=True, eq=True, frozen=True)
 class TenantEnvironmentFilter:
@@ -657,6 +628,60 @@ class RegisterDomainInput:
     domain: Optional[str] = field(default=None, metadata=config(field_name="domain"))
 
 
+@dataclass_json
+@dataclass(order=True, eq=True, frozen=True)
+class SetTenantLicenseCapabilitiesInput:
+    """SetTenantLicenseCapabilitiesInput."""
+
+    tenant_id: Optional[str] = field(
+        default=None, metadata=config(field_name="tenantID")
+    )
+    capabilities: Optional[List[str]] = field(
+        default=None, metadata=config(field_name="capabilities")
+    )
+    refreshed_at: Optional[str] = field(
+        default=None, metadata=config(field_name="refreshedAt")
+    )
+
+
+@dataclass_json
+@dataclass(order=True, eq=True, frozen=True)
+class SetTenantLicenseCapabilitiesResult:
+    """SetTenantLicenseCapabilitiesResult."""
+
+    tenant_id: Optional[str] = field(
+        default=None, metadata=config(field_name="tenantID")
+    )
+    success: Optional[bool] = field(default=None, metadata=config(field_name="success"))
+
+
+@dataclass_json
+@dataclass(order=True, eq=True, frozen=True)
+class RecordTenantLicenseCapabilitiesRefreshFailureInput:
+    """RecordTenantLicenseCapabilitiesRefreshFailureInput."""
+
+    tenant_id: Optional[str] = field(
+        default=None, metadata=config(field_name="tenantID")
+    )
+    attempted_at: Optional[str] = field(
+        default=None, metadata=config(field_name="attemptedAt")
+    )
+    failure_reason: Optional[str] = field(
+        default=None, metadata=config(field_name="failureReason")
+    )
+
+
+@dataclass_json
+@dataclass(order=True, eq=True, frozen=True)
+class RecordTenantLicenseCapabilitiesRefreshFailureResult:
+    """RecordTenantLicenseCapabilitiesRefreshFailureResult."""
+
+    tenant_id: Optional[str] = field(
+        default=None, metadata=config(field_name="tenantID")
+    )
+    success: Optional[bool] = field(default=None, metadata=config(field_name="success"))
+
+
 @dataclass_json
 @dataclass(order=True, eq=True, frozen=True)
 class AuditResults:
@@ -795,43 +820,6 @@ class TenantsLicenseLevelInput:
     )
 
 
-@dataclass_json
-@dataclass(order=True, eq=True, frozen=True)
-class NewTenant:
-    """NewTenant."""
-
-    name: Optional[str] = field(default=None, metadata=config(field_name="name"))
-    initial_tenant_email: Optional[str] = field(
-        default=None, metadata=config(field_name="initial_tenant_email")
-    )
-    environments: Optional[List[str]] = field(
-        default=None, metadata=config(field_name="environments")
-    )
-    expires_at: Optional[int] = field(
-        default=None, metadata=config(field_name="expires_at")
-    )
-    parent_tenant_id: Optional[str] = field(
-        default=None, metadata=config(field_name="parentTenantID")
-    )
-    is_partner: Optional[bool] = field(
-        default=None, metadata=config(field_name="isPartner")
-    )
-    is_organization: Optional[bool] = field(
-        default=None, metadata=config(field_name="isOrganization")
-    )
-    labels: Optional[List[InputTenantLabel]] = field(
-        default=None, metadata=config(field_name="labels")
-    )
-    mdr_provider_type: Optional[Union[MdrProviderType, TaegisEnum]] = field(
-        default=None,
-        metadata=config(
-            encoder=encode_enum,
-            decoder=lambda x: decode_enum(MdrProviderType, x),
-            field_name="mdrProviderType",
-        ),
-    )
-
-
 @dataclass_json
 @dataclass(order=True, eq=True, frozen=True)
 class InternalSearchInputs:
@@ -1069,46 +1057,6 @@ class PermissionCheck:
     )
 
 
-@dataclass_json
-@dataclass(order=True, eq=True, frozen=True)
-class UpdateTenant:
-    """UpdateTenant."""
-
-    name: Optional[str] = field(default=None, metadata=config(field_name="name"))
-    enabled: Optional[bool] = field(default=None, metadata=config(field_name="enabled"))
-    allow_response_actions: Optional[bool] = field(
-        default=None, metadata=config(field_name="allow_response_actions")
-    )
-    expires_at: Optional[int] = field(
-        default=None, metadata=config(field_name="expires_at")
-    )
-    parent_tenant_id: Optional[str] = field(
-        default=None, metadata=config(field_name="parentTenantID")
-    )
-    environments: Optional[List[InputTenantEnvironment]] = field(
-        default=None, metadata=config(field_name="environments")
-    )
-    labels: Optional[List[LabelsForTenantUpdate]] = field(
-        default=None, metadata=config(field_name="labels")
-    )
-    data_retention_months: Optional[Union[RetentionMonths, TaegisEnum]] = field(
-        default=None,
-        metadata=config(
-            encoder=encode_enum,
-            decoder=lambda x: decode_enum(RetentionMonths, x),
-            field_name="dataRetentionMonths",
-        ),
-    )
-    mdr_provider_type: Optional[Union[MdrProviderType, TaegisEnum]] = field(
-        default=None,
-        metadata=config(
-            encoder=encode_enum,
-            decoder=lambda x: decode_enum(MdrProviderType, x),
-            field_name="mdrProviderType",
-        ),
-    )
-
-
 @dataclass_json
 @dataclass(order=True, eq=True, frozen=True)
 class TenantSSOConnectionQueryInput:

{taegis_sdk_python-1.6.18 → taegis_sdk_python-1.6.19}/taegis_sdk_python/services/tenants4/types.py

@@ -153,6 +153,14 @@ class XDRProvider(str, Enum):
     SECURITY_OPERATIONS = "SECURITY_OPERATIONS"
 
 
+class MdrProviderType(str, Enum):
+    """MdrProviderType."""
+
+    SOPHOS_MDR = "SOPHOS_MDR"
+    TAEGIS_MDR = "TAEGIS_MDR"
+    NONE = "NONE"
+
+
 class RetentionMonths(str, Enum):
     """RetentionMonths."""
 
@@ -187,6 +195,10 @@ class TenantLicenseCapability(str, Enum):
     NO_DATA = "NO_DATA"
     EDR = "EDR"
     MDR = "MDR"
+    MDR_ENDPOINT_ESSENTIALS = "MDR_ENDPOINT_ESSENTIALS"
+    MDR_ENDPOINT_COMPLETE = "MDR_ENDPOINT_COMPLETE"
+    MDR_SERVER_ESSENTIALS = "MDR_SERVER_ESSENTIALS"
+    MDR_SERVER_COMPLETE = "MDR_SERVER_COMPLETE"
     XDR = "XDR"
     ITDR = "ITDR"
     NG_SIEM = "NG_SIEM"
@@ -555,6 +567,14 @@ class TenantV4:
     updated_at: Optional[str] = field(
         default=None, metadata=config(field_name="updatedAt")
     )
+    mdr_provider_type: Optional[Union[MdrProviderType, TaegisEnum]] = field(
+        default=None,
+        metadata=config(
+            encoder=encode_enum,
+            decoder=lambda x: decode_enum(MdrProviderType, x),
+            field_name="mdrProviderType",
+        ),
+    )
     enabled_at_regions: Optional[List[Union[TenantRegion, TaegisEnum]]] = field(
         default=None,
         metadata=config(

{taegis_sdk_python-1.6.18 → taegis_sdk_python-1.6.19}/taegis_sdk_python/services/threat/types.py

@@ -207,6 +207,7 @@ class ThreatMalwareType(str, Enum):
     LOLBIN = "lolbin"
     MALICIOUS_DOCUMENT = "malicious_document"
     PACKER = "packer"
+    PHISHING_KIT = "phishing_kit"
     POST_COMPROMISE_TOOL = "post_compromise_tool"
     POST_EXPLOITATION = "post_exploitation"
     PRIVILEGE_ESCALATION_TOOL = "privilege_escalation_tool"