Options
All
  • Public
  • Public/Protected
  • All
Menu

@azure/arm-securityinsight

Package version

Index

Enumerations

Classes

Interfaces

Type aliases

Variables

Object literals

Type aliases

AADCheckRequirements

AADCheckRequirements: DataConnectorsCheckRequirements & { kind: "AzureActiveDirectory"; tenantId?: undefined | string }

Represents AAD (Azure Active Directory) requirements check request.

AADCheckRequirementsProperties

AADCheckRequirementsProperties: DataConnectorTenantId & {}

AAD (Azure Active Directory) requirements check properties.

AADDataConnector

AADDataConnector: DataConnector & { dataTypes?: AlertsDataTypeOfDataConnector; tenantId?: undefined | string }

Represents AAD (Azure Active Directory) data connector.

AADDataConnectorProperties

AADDataConnectorProperties: DataConnectorTenantId & DataConnectorWithAlertsProperties & {}

AAD (Azure Active Directory) data connector properties.

ASCCheckRequirements

ASCCheckRequirements: DataConnectorsCheckRequirements & { kind: "AzureSecurityCenter"; subscriptionId?: undefined | string }

Represents ASC (Azure Security Center) requirements check request.

ASCDataConnector

ASCDataConnector: DataConnector & { dataTypes?: AlertsDataTypeOfDataConnector; subscriptionId?: undefined | string }

Represents ASC (Azure Security Center) data connector.

ASCDataConnectorProperties

ASCDataConnectorProperties: DataConnectorWithAlertsProperties & { subscriptionId?: undefined | string }

ASC (Azure Security Center) data connector properties.

AatpCheckRequirements

AatpCheckRequirements: DataConnectorsCheckRequirements & { kind: "AzureAdvancedThreatProtection"; tenantId?: undefined | string }

Represents AATP (Azure Advanced Threat Protection) requirements check request.

AatpCheckRequirementsProperties

AatpCheckRequirementsProperties: DataConnectorTenantId & {}

AATP (Azure Advanced Threat Protection) requirements check properties.

AatpDataConnector

AatpDataConnector: DataConnector & { dataTypes?: AlertsDataTypeOfDataConnector; tenantId?: undefined | string }

Represents AATP (Azure Advanced Threat Protection) data connector.

AatpDataConnectorProperties

AatpDataConnectorProperties: DataConnectorTenantId & DataConnectorWithAlertsProperties & {}

AATP (Azure Advanced Threat Protection) data connector properties.

AccountEntity

AccountEntity: Entity & { aadTenantId?: undefined | string; aadUserId?: undefined | string; accountName?: undefined | string; additionalData?: undefined | {}; displayName?: undefined | string; dnsDomain?: undefined | string; friendlyName?: undefined | string; hostEntityId?: undefined | string; isDomainJoined?: undefined | false | true; ntDomain?: undefined | string; objectGuid?: undefined | string; puid?: undefined | string; sid?: undefined | string; upnSuffix?: undefined | string }

Represents an account entity.

AccountEntityProperties

AccountEntityProperties: EntityCommonProperties & { aadTenantId?: undefined | string; aadUserId?: undefined | string; accountName?: undefined | string; displayName?: undefined | string; dnsDomain?: undefined | string; hostEntityId?: undefined | string; isDomainJoined?: undefined | false | true; ntDomain?: undefined | string; objectGuid?: undefined | string; puid?: undefined | string; sid?: undefined | string; upnSuffix?: undefined | string }

Account entity property bag.

ActionRequest

ActionRequest: ResourceWithEtag & { logicAppResourceId?: undefined | string; triggerUri?: undefined | string }

Action for alert rule.

ActionRequestProperties

ActionRequestProperties: ActionPropertiesBase & { triggerUri: string }

Action property bag.

ActionResponse

ActionResponse: ResourceWithEtag & { logicAppResourceId?: undefined | string; workflowId?: undefined | string }

Action for alert rule.

ActionResponseProperties

ActionResponseProperties: ActionPropertiesBase & { workflowId?: undefined | string }

Action property bag.

ActionType

ActionType: string

Defines values for ActionType.
KnownActionType can be used interchangeably with ActionType, this enum contains the known values that the service supports.

Known values supported by the service

ModifyProperties: Modify an object's properties
RunPlaybook: Run a playbook on an object

ActionsCreateOrUpdateResponse

ActionsCreateOrUpdateResponse: ActionResponse

Contains response data for the createOrUpdate operation.

ActionsGetResponse

ActionsGetResponse: ActionResponse

Contains response data for the get operation.

ActionsListByAlertRuleNextResponse

ActionsListByAlertRuleNextResponse: ActionsList

Contains response data for the listByAlertRuleNext operation.

ActionsListByAlertRuleResponse

ActionsListByAlertRuleResponse: ActionsList

Contains response data for the listByAlertRule operation.

ActivityCustomEntityQuery

ActivityCustomEntityQuery: CustomEntityQuery & { content?: undefined | string; createdTimeUtc?: Date; description?: undefined | string; enabled?: undefined | false | true; entitiesFilter?: undefined | {}; inputEntityType?: EntityType; lastModifiedTimeUtc?: Date; queryDefinitions?: ActivityEntityQueriesPropertiesQueryDefinitions; requiredInputFieldsSets?: string[][]; templateName?: undefined | string; title?: undefined | string }

Represents Activity entity query.

ActivityEntityQuery

ActivityEntityQuery: EntityQuery & { content?: undefined | string; createdTimeUtc?: Date; description?: undefined | string; enabled?: undefined | false | true; entitiesFilter?: undefined | {}; inputEntityType?: EntityType; lastModifiedTimeUtc?: Date; queryDefinitions?: ActivityEntityQueriesPropertiesQueryDefinitions; requiredInputFieldsSets?: string[][]; templateName?: undefined | string; title?: undefined | string }

Represents Activity entity query.

ActivityEntityQueryTemplate

ActivityEntityQueryTemplate: EntityQueryTemplate & { content?: undefined | string; dataTypes?: DataTypeDefinitions[]; description?: undefined | string; entitiesFilter?: undefined | {}; inputEntityType?: EntityType; queryDefinitions?: ActivityEntityQueryTemplatePropertiesQueryDefinitions; requiredInputFieldsSets?: string[][]; title?: undefined | string }

Represents Activity entity query.

ActivityTimelineItem

ActivityTimelineItem: EntityTimelineItem & { bucketEndTimeUTC: Date; bucketStartTimeUTC: Date; content: string; firstActivityTimeUTC: Date; kind: "Activity"; lastActivityTimeUTC: Date; queryId: string; title: string }

Represents Activity timeline item.

AlertDetail

AlertDetail: string

Defines values for AlertDetail.
KnownAlertDetail can be used interchangeably with AlertDetail, this enum contains the known values that the service supports.

Known values supported by the service

DisplayName: Alert display name
Severity: Alert severity

AlertRule

AlertRule: ResourceWithEtag & { kind: AlertRuleKind }

Alert rule.

AlertRuleKind

AlertRuleKind: string

Defines values for AlertRuleKind.
KnownAlertRuleKind can be used interchangeably with AlertRuleKind, this enum contains the known values that the service supports.

Known values supported by the service

Scheduled
MicrosoftSecurityIncidentCreation
Fusion
MLBehaviorAnalytics
ThreatIntelligence
NRT

AlertRuleTemplate

AlertRuleTemplate: Resource & { kind: AlertRuleKind }

Alert rule template.

AlertRuleTemplateUnion

AlertRuleTemplateWithMitreProperties

AlertRuleTemplateWithMitreProperties: AlertRuleTemplatePropertiesBase & { tactics?: AttackTactic[]; techniques?: string[] }

Alert rule template with MITRE property bag.

AlertRuleTemplatesGetResponse

AlertRuleTemplatesGetResponse: AlertRuleTemplateUnion

Contains response data for the get operation.

AlertRuleTemplatesListNextResponse

AlertRuleTemplatesListNextResponse: AlertRuleTemplatesList

Contains response data for the listNext operation.

AlertRuleTemplatesListResponse

AlertRuleTemplatesListResponse: AlertRuleTemplatesList

Contains response data for the list operation.

AlertRuleUnion

AlertRulesCreateOrUpdateResponse

AlertRulesCreateOrUpdateResponse: AlertRuleUnion

Contains response data for the createOrUpdate operation.

AlertRulesGetResponse

AlertRulesGetResponse: AlertRuleUnion

Contains response data for the get operation.

AlertRulesListNextResponse

AlertRulesListNextResponse: AlertRulesList

Contains response data for the listNext operation.

AlertRulesListResponse

AlertRulesListResponse: AlertRulesList

Contains response data for the list operation.

AlertSeverity

AlertSeverity: string

Defines values for AlertSeverity.
KnownAlertSeverity can be used interchangeably with AlertSeverity, this enum contains the known values that the service supports.

Known values supported by the service

High: High severity
Medium: Medium severity
Low: Low severity
Informational: Informational severity

AlertStatus

AlertStatus: string

Defines values for AlertStatus.
KnownAlertStatus can be used interchangeably with AlertStatus, this enum contains the known values that the service supports.

Known values supported by the service

Unknown: Unknown value
New: New alert
Resolved: Alert closed after handling
Dismissed: Alert dismissed as false positive
InProgress: Alert is being handled

Anomalies

Anomalies: Settings & { isEnabled?: undefined | false | true }

Settings with single toggle.

AntispamMailDirection

AntispamMailDirection: string

Defines values for AntispamMailDirection.
KnownAntispamMailDirection can be used interchangeably with AntispamMailDirection, this enum contains the known values that the service supports.

Known values supported by the service

Unknown: Unknown
Inbound: Inbound
Outbound: Outbound
Intraorg: Intraorg

AttackTactic

AttackTactic: string

Defines values for AttackTactic.
KnownAttackTactic can be used interchangeably with AttackTactic, this enum contains the known values that the service supports.

Known values supported by the service

Reconnaissance
ResourceDevelopment
InitialAccess
Execution
Persistence
PrivilegeEscalation
DefenseEvasion
CredentialAccess
Discovery
LateralMovement
Collection
Exfiltration
CommandAndControl
Impact
PreAttack
ImpairProcessControl
InhibitResponseFunction

AutomationRule

AutomationRule: ResourceWithEtag & { actions: AutomationRuleActionUnion[]; createdBy?: ClientInfo; createdTimeUtc?: Date; displayName: string; lastModifiedBy?: ClientInfo; lastModifiedTimeUtc?: Date; order: number; triggeringLogic: AutomationRuleTriggeringLogic }

AutomationRuleActionUnion

AutomationRuleConditionUnion

AutomationRuleModifyPropertiesAction

AutomationRuleModifyPropertiesAction: AutomationRuleAction & { actionConfiguration?: IncidentPropertiesAction; actionType: "ModifyProperties" }

Describes an automation rule action to modify an object's properties

AutomationRulePropertyConditionSupportedOperator

AutomationRulePropertyConditionSupportedOperator: string

Defines values for AutomationRulePropertyConditionSupportedOperator.
KnownAutomationRulePropertyConditionSupportedOperator can be used interchangeably with AutomationRulePropertyConditionSupportedOperator, this enum contains the known values that the service supports.

Known values supported by the service

Equals: Evaluates if the property equals at least one of the condition values
NotEquals: Evaluates if the property does not equal any of the condition values
Contains: Evaluates if the property contains at least one of the condition values
NotContains: Evaluates if the property does not contain any of the condition values
StartsWith: Evaluates if the property starts with any of the condition values
NotStartsWith: Evaluates if the property does not start with any of the condition values
EndsWith: Evaluates if the property ends with any of the condition values
NotEndsWith: Evaluates if the property does not end with any of the condition values

AutomationRulePropertyConditionSupportedProperty

AutomationRulePropertyConditionSupportedProperty: string

Defines values for AutomationRulePropertyConditionSupportedProperty.
KnownAutomationRulePropertyConditionSupportedProperty can be used interchangeably with AutomationRulePropertyConditionSupportedProperty, this enum contains the known values that the service supports.

Known values supported by the service

IncidentTitle: The title of the incident
IncidentDescription: The description of the incident
IncidentSeverity: The severity of the incident
IncidentStatus: The status of the incident
IncidentRelatedAnalyticRuleIds: The related Analytic rule ids of the incident
IncidentTactics: The tactics of the incident
IncidentLabel: The labels of the incident
IncidentProviderName: The provider name of the incident
AccountAadTenantId: The account Azure Active Directory tenant id
AccountAadUserId: The account Azure Active Directory user id
AccountName: The account name
AccountNTDomain: The account NetBIOS domain name
AccountPUID: The account Azure Active Directory Passport User ID
AccountSid: The account security identifier
AccountObjectGuid: The account unique identifier
AccountUPNSuffix: The account user principal name suffix
AlertProductNames: The name of the product of the alert
AzureResourceResourceId: The Azure resource id
AzureResourceSubscriptionId: The Azure resource subscription id
CloudApplicationAppId: The cloud application identifier
CloudApplicationAppName: The cloud application name
DNSDomainName: The dns record domain name
FileDirectory: The file directory full path
FileName: The file name without path
FileHashValue: The file hash value
HostAzureID: The host Azure resource id
HostName: The host name without domain
HostNetBiosName: The host NetBIOS name
HostNTDomain: The host NT domain
HostOSVersion: The host operating system
IoTDeviceId: "The IoT device id
IoTDeviceName: The IoT device name
IoTDeviceType: The IoT device type
IoTDeviceVendor: The IoT device vendor
IoTDeviceModel: The IoT device model
IoTDeviceOperatingSystem: The IoT device operating system
IPAddress: The IP address
MailboxDisplayName: The mailbox display name
MailboxPrimaryAddress: The mailbox primary address
MailboxUPN: The mailbox user principal name
MailMessageDeliveryAction: The mail message delivery action
MailMessageDeliveryLocation: The mail message delivery location
MailMessageRecipient: The mail message recipient
MailMessageSenderIP: The mail message sender IP address
MailMessageSubject: The mail message subject
MailMessageP1Sender: The mail message P1 sender
MailMessageP2Sender: The mail message P2 sender
MalwareCategory: The malware category
MalwareName: The malware name
ProcessCommandLine: The process execution command line
ProcessId: The process id
RegistryKey: The registry key path
RegistryValueData: The registry key value in string formatted representation
Url: The url

AutomationRuleRunPlaybookAction

AutomationRuleRunPlaybookAction: AutomationRuleAction & { actionConfiguration?: PlaybookActionProperties; actionType: "RunPlaybook" }

Describes an automation rule action to run a playbook

AutomationRulesCreateOrUpdateResponse

AutomationRulesCreateOrUpdateResponse: AutomationRule

Contains response data for the createOrUpdate operation.

AutomationRulesDeleteResponse

AutomationRulesDeleteResponse: Record<string, unknown>

Contains response data for the delete operation.

AutomationRulesGetResponse

AutomationRulesGetResponse: AutomationRule

Contains response data for the get operation.

AutomationRulesListNextResponse

AutomationRulesListNextResponse: AutomationRulesList

Contains response data for the listNext operation.

AutomationRulesListResponse

AutomationRulesListResponse: AutomationRulesList

Contains response data for the list operation.

AwsCloudTrailCheckRequirements

AwsCloudTrailCheckRequirements: DataConnectorsCheckRequirements & { kind: "AmazonWebServicesCloudTrail" }

Amazon Web Services CloudTrail requirements check request.

AwsCloudTrailDataConnector

AwsCloudTrailDataConnector: DataConnector & { awsRoleArn?: undefined | string; dataTypes?: AwsCloudTrailDataConnectorDataTypes }

Represents Amazon Web Services CloudTrail data connector.

AwsCloudTrailDataConnectorDataTypesLogs

AwsCloudTrailDataConnectorDataTypesLogs: DataConnectorDataTypeCommon & {}

Logs data type.

AwsS3CheckRequirements

AwsS3CheckRequirements: DataConnectorsCheckRequirements & { kind: "AmazonWebServicesS3" }

Amazon Web Services S3 requirements check request.

AwsS3DataConnector

AwsS3DataConnector: DataConnector & { dataTypes?: AwsS3DataConnectorDataTypes; destinationTable?: undefined | string; roleArn?: undefined | string; sqsUrls?: string[] }

Represents Amazon Web Services S3 data connector.

AwsS3DataConnectorDataTypesLogs

AwsS3DataConnectorDataTypesLogs: DataConnectorDataTypeCommon & {}

Logs data type.

AzureResourceEntity

AzureResourceEntity: Entity & { additionalData?: undefined | {}; friendlyName?: undefined | string; resourceId?: undefined | string; subscriptionId?: undefined | string }

Represents an azure resource entity.

AzureResourceEntityProperties

AzureResourceEntityProperties: EntityCommonProperties & { resourceId?: undefined | string; subscriptionId?: undefined | string }

AzureResource entity property bag.

Bookmark

Bookmark: ResourceWithEtag & { created?: Date; createdBy?: UserInfo; displayName?: undefined | string; entityMappings?: BookmarkEntityMappings[]; eventTime?: Date; incidentInfo?: IncidentInfo; labels?: string[]; notes?: undefined | string; query?: undefined | string; queryEndTime?: Date; queryResult?: undefined | string; queryStartTime?: Date; tactics?: AttackTactic[]; techniques?: string[]; updated?: Date; updatedBy?: UserInfo }

Represents a bookmark in Azure Security Insights.

BookmarkExpandOperationResponse

BookmarkExpandOperationResponse: BookmarkExpandResponse

Contains response data for the expand operation.

BookmarkRelationsCreateOrUpdateResponse

BookmarkRelationsCreateOrUpdateResponse: Relation

Contains response data for the createOrUpdate operation.

BookmarkRelationsGetResponse

BookmarkRelationsGetResponse: Relation

Contains response data for the get operation.

BookmarkRelationsListNextResponse

BookmarkRelationsListNextResponse: RelationList

Contains response data for the listNext operation.

BookmarkRelationsListResponse

BookmarkRelationsListResponse: RelationList

Contains response data for the list operation.

BookmarkTimelineItem

BookmarkTimelineItem: EntityTimelineItem & { azureResourceId: string; createdBy?: UserInfo; displayName?: undefined | string; endTimeUtc?: Date; eventTime?: Date; kind: "Bookmark"; labels?: string[]; notes?: undefined | string; startTimeUtc?: Date }

Represents bookmark timeline item.

BookmarksCreateOrUpdateResponse

BookmarksCreateOrUpdateResponse: Bookmark

Contains response data for the createOrUpdate operation.

BookmarksGetResponse

BookmarksGetResponse: Bookmark

Contains response data for the get operation.

BookmarksListNextResponse

BookmarksListNextResponse: BookmarkList

Contains response data for the listNext operation.

BookmarksListResponse

BookmarksListResponse: BookmarkList

Contains response data for the list operation.

CloudApplicationEntity

CloudApplicationEntity: Entity & { additionalData?: undefined | {}; appId?: undefined | number; appName?: undefined | string; friendlyName?: undefined | string; instanceName?: undefined | string }

Represents a cloud application entity.

CloudApplicationEntityProperties

CloudApplicationEntityProperties: EntityCommonProperties & { appId?: undefined | number; appName?: undefined | string; instanceName?: undefined | string }

CloudApplication entity property bag.

CodelessApiPollingDataConnector

CodelessApiPollingDataConnector: DataConnector & { connectorUiConfig?: CodelessUiConnectorConfigProperties; pollingConfig?: CodelessConnectorPollingConfigProperties }

Represents Codeless API Polling data connector.

CodelessUiConnectorConfigPropertiesConnectivityCriteriaItem

CodelessUiConnectorConfigPropertiesConnectivityCriteriaItem: ConnectivityCriteria & {}

CodelessUiConnectorConfigPropertiesDataTypesItem

CodelessUiConnectorConfigPropertiesDataTypesItem: LastDataReceivedDataType & {}

CodelessUiConnectorConfigPropertiesGraphQueriesItem

CodelessUiConnectorConfigPropertiesGraphQueriesItem: GraphQueries & {}

CodelessUiConnectorConfigPropertiesInstructionStepsItem

CodelessUiConnectorConfigPropertiesInstructionStepsItem: InstructionSteps & {}

CodelessUiConnectorConfigPropertiesSampleQueriesItem

CodelessUiConnectorConfigPropertiesSampleQueriesItem: SampleQueries & {}

CodelessUiDataConnector

CodelessUiDataConnector: DataConnector & { connectorUiConfig?: CodelessUiConnectorConfigProperties }

Represents Codeless UI data connector.

ConditionType

ConditionType: string

Defines values for ConditionType.
KnownConditionType can be used interchangeably with ConditionType, this enum contains the known values that the service supports.

Known values supported by the service

Property: Evaluate an object property value

ConfidenceLevel

ConfidenceLevel: string

Defines values for ConfidenceLevel.
KnownConfidenceLevel can be used interchangeably with ConfidenceLevel, this enum contains the known values that the service supports.

Known values supported by the service

Unknown: Unknown confidence, the is the default value
Low: Low confidence, meaning we have some doubts this is indeed malicious or part of an attack
High: High confidence that the alert is true positive malicious

ConfidenceScoreStatus

ConfidenceScoreStatus: string

Defines values for ConfidenceScoreStatus.
KnownConfidenceScoreStatus can be used interchangeably with ConfidenceScoreStatus, this enum contains the known values that the service supports.

Known values supported by the service

NotApplicable: Score will not be calculated for this alert as it is not supported by virtual analyst
InProcess: No score was set yet and calculation is in progress
NotFinal: Score is calculated and shown as part of the alert, but may be updated again at a later time following the processing of additional data
Final: Final score was calculated and available

ConnectAuthKind

ConnectAuthKind: string

Defines values for ConnectAuthKind.
KnownConnectAuthKind can be used interchangeably with ConnectAuthKind, this enum contains the known values that the service supports.

Known values supported by the service

Basic
OAuth2
APIKey

ConnectivityType

ConnectivityType: string

Defines values for ConnectivityType.
KnownConnectivityType can be used interchangeably with ConnectivityType, this enum contains the known values that the service supports.

Known values supported by the service

IsConnectedQuery

ContentType

ContentType: string

Defines values for ContentType.
KnownContentType can be used interchangeably with ContentType, this enum contains the known values that the service supports.

Known values supported by the service

AnalyticRule
Workbook

CreatedByType

CreatedByType: string

Defines values for CreatedByType.
KnownCreatedByType can be used interchangeably with CreatedByType, this enum contains the known values that the service supports.

Known values supported by the service

User
Application
ManagedIdentity
Key

CustomEntityQuery

CustomEntityQuery: ResourceWithEtag & { kind: CustomEntityQueryKind }

Specific entity query that supports put requests.

CustomEntityQueryKind

CustomEntityQueryKind: string

Defines values for CustomEntityQueryKind.
KnownCustomEntityQueryKind can be used interchangeably with CustomEntityQueryKind, this enum contains the known values that the service supports.

Known values supported by the service

Activity

CustomEntityQueryUnion

Customs

Customs: CustomsPermission & {}

Customs permissions required for the connector

DataConnector

DataConnector: ResourceWithEtag & { kind: DataConnectorKind }

Data connector

DataConnectorAuthorizationState

DataConnectorAuthorizationState: string

Defines values for DataConnectorAuthorizationState.
KnownDataConnectorAuthorizationState can be used interchangeably with DataConnectorAuthorizationState, this enum contains the known values that the service supports.

Known values supported by the service

Valid
Invalid

DataConnectorKind

DataConnectorKind: string

Defines values for DataConnectorKind.
KnownDataConnectorKind can be used interchangeably with DataConnectorKind, this enum contains the known values that the service supports.

Known values supported by the service

AzureActiveDirectory
AzureSecurityCenter
MicrosoftCloudAppSecurity
ThreatIntelligence
ThreatIntelligenceTaxii
Office365
OfficeATP
OfficeIRM
Office365Project
OfficePowerBI
AmazonWebServicesCloudTrail
AmazonWebServicesS3
AzureAdvancedThreatProtection
MicrosoftDefenderAdvancedThreatProtection
Dynamics365
MicrosoftThreatProtection
MicrosoftThreatIntelligence
GenericUI
APIPolling
IOT

DataConnectorLicenseState

DataConnectorLicenseState: string

Defines values for DataConnectorLicenseState.
KnownDataConnectorLicenseState can be used interchangeably with DataConnectorLicenseState, this enum contains the known values that the service supports.

Known values supported by the service

Valid
Invalid
Unknown

DataConnectorUnion

DataConnectorsCheckRequirementsPostResponse

DataConnectorsCheckRequirementsPostResponse: DataConnectorRequirementsState

Contains response data for the post operation.

DataConnectorsCheckRequirementsUnion

DataConnectorsCreateOrUpdateResponse

DataConnectorsCreateOrUpdateResponse: DataConnectorUnion

Contains response data for the createOrUpdate operation.

DataConnectorsGetResponse

DataConnectorsGetResponse: DataConnectorUnion

Contains response data for the get operation.

DataConnectorsListNextResponse

DataConnectorsListNextResponse: DataConnectorList

Contains response data for the listNext operation.

DataConnectorsListResponse

DataConnectorsListResponse: DataConnectorList

Contains response data for the list operation.

DataTypeState

DataTypeState: string

Defines values for DataTypeState.
KnownDataTypeState can be used interchangeably with DataTypeState, this enum contains the known values that the service supports.

Known values supported by the service

Enabled
Disabled

DeliveryAction

DeliveryAction: "Unknown" | "DeliveredAsSpam" | "Delivered" | "Blocked" | "Replaced"

Defines values for DeliveryAction.

DeliveryLocation

DeliveryLocation: "Unknown" | "Inbox" | "JunkFolder" | "DeletedFolder" | "Quarantine" | "External" | "Failed" | "Dropped" | "Forwarded"

Defines values for DeliveryLocation.

DeploymentFetchStatus

DeploymentFetchStatus: string

Defines values for DeploymentFetchStatus.
KnownDeploymentFetchStatus can be used interchangeably with DeploymentFetchStatus, this enum contains the known values that the service supports.

Known values supported by the service

Success
Unauthorized
NotFound

DeploymentResult

DeploymentResult: string

Defines values for DeploymentResult.
KnownDeploymentResult can be used interchangeably with DeploymentResult, this enum contains the known values that the service supports.

Known values supported by the service

Success
Canceled
Failed

DeploymentState

DeploymentState: string

Defines values for DeploymentState.
KnownDeploymentState can be used interchangeably with DeploymentState, this enum contains the known values that the service supports.

Known values supported by the service

In_Progress
Completed
Queued
Canceling

DnsEntity

DnsEntity: Entity & { additionalData?: undefined | {}; dnsServerIpEntityId?: undefined | string; domainName?: undefined | string; friendlyName?: undefined | string; hostIpAddressEntityId?: undefined | string; ipAddressEntityIds?: string[] }

Represents a dns entity.

DnsEntityProperties

DnsEntityProperties: EntityCommonProperties & { dnsServerIpEntityId?: undefined | string; domainName?: undefined | string; hostIpAddressEntityId?: undefined | string; ipAddressEntityIds?: string[] }

Dns entity property bag.

DomainWhoisGetResponse

DomainWhoisGetResponse: EnrichmentDomainWhois

Contains response data for the get operation.

Dynamics365CheckRequirements

Dynamics365CheckRequirements: DataConnectorsCheckRequirements & { kind: "Dynamics365"; tenantId?: undefined | string }

Represents Dynamics365 requirements check request.

Dynamics365CheckRequirementsProperties

Dynamics365CheckRequirementsProperties: DataConnectorTenantId & {}

Dynamics365 requirements check properties.

Dynamics365DataConnector

Dynamics365DataConnector: DataConnector & { dataTypes?: Dynamics365DataConnectorDataTypes; tenantId?: undefined | string }

Represents Dynamics365 data connector.

Dynamics365DataConnectorDataTypesDynamics365CdsActivities

Dynamics365DataConnectorDataTypesDynamics365CdsActivities: DataConnectorDataTypeCommon & {}

Common Data Service data type connection.

Dynamics365DataConnectorProperties

Dynamics365DataConnectorProperties: DataConnectorTenantId & { dataTypes: Dynamics365DataConnectorDataTypes }

Dynamics365 data connector properties.

ElevationToken

ElevationToken: "Default" | "Full" | "Limited"

Defines values for ElevationToken.

EntitiesExpandResponse

EntitiesExpandResponse: EntityExpandResponse

Contains response data for the expand operation.

EntitiesGetInsightsResponse

EntitiesGetInsightsResponse: EntityGetInsightsResponse

Contains response data for the getInsights operation.

EntitiesGetResponse

EntitiesGetResponse: EntityUnion

Contains response data for the get operation.

EntitiesGetTimelineListResponse

EntitiesGetTimelineListResponse: EntityTimelineResponse

Contains response data for the list operation.

EntitiesListNextResponse

EntitiesListNextResponse: EntityList

Contains response data for the listNext operation.

EntitiesListResponse

EntitiesListResponse: EntityList

Contains response data for the list operation.

EntitiesQueriesResponse

EntitiesQueriesResponse: GetQueriesResponse

Contains response data for the queries operation.

EntitiesRelationsListNextResponse

EntitiesRelationsListNextResponse: RelationList

Contains response data for the listNext operation.

EntitiesRelationsListResponse

EntitiesRelationsListResponse: RelationList

Contains response data for the list operation.

Entity

Entity: Resource & { kind: EntityKind }

Specific entity.

EntityAnalytics

EntityAnalytics: Settings & { isEnabled?: undefined | false | true }

Settings with single toggle.

EntityItemQueryKind

EntityItemQueryKind: string

Defines values for EntityItemQueryKind.
KnownEntityItemQueryKind can be used interchangeably with EntityItemQueryKind, this enum contains the known values that the service supports.

Known values supported by the service

Insight: insight

EntityKind

EntityKind: string

Defines values for EntityKind.
KnownEntityKind can be used interchangeably with EntityKind, this enum contains the known values that the service supports.

Known values supported by the service

Account: Entity represents account in the system.
Host: Entity represents host in the system.
File: Entity represents file in the system.
AzureResource: Entity represents azure resource in the system.
CloudApplication: Entity represents cloud application in the system.
DnsResolution: Entity represents dns resolution in the system.
FileHash: Entity represents file hash in the system.
Ip: Entity represents ip in the system.
Malware: Entity represents malware in the system.
Process: Entity represents process in the system.
RegistryKey: Entity represents registry key in the system.
RegistryValue: Entity represents registry value in the system.
SecurityGroup: Entity represents security group in the system.
Url: Entity represents url in the system.
IoTDevice: Entity represents IoT device in the system.
SecurityAlert: Entity represents security alert in the system.
Bookmark: Entity represents bookmark in the system.
MailCluster: Entity represents mail cluster in the system.
MailMessage: Entity represents mail message in the system.
Mailbox: Entity represents mailbox in the system.
SubmissionMail: Entity represents submission mail in the system.

EntityMappingType

EntityMappingType: string

Defines values for EntityMappingType.
KnownEntityMappingType can be used interchangeably with EntityMappingType, this enum contains the known values that the service supports.

Known values supported by the service

Account: User account entity type
Host: Host entity type
IP: IP address entity type
Malware: Malware entity type
File: System file entity type
Process: Process entity type
CloudApplication: Cloud app entity type
DNS: DNS entity type
AzureResource: Azure resource entity type
FileHash: File-hash entity type
RegistryKey: Registry key entity type
RegistryValue: Registry value entity type
SecurityGroup: Security group entity type
URL: URL entity type
Mailbox: Mailbox entity type
MailCluster: Mail cluster entity type
MailMessage: Mail message entity type
SubmissionMail: Submission mail entity type

EntityQueriesCreateOrUpdateResponse

EntityQueriesCreateOrUpdateResponse: EntityQueryUnion

Contains response data for the createOrUpdate operation.

EntityQueriesGetResponse

EntityQueriesGetResponse: EntityQueryUnion

Contains response data for the get operation.

EntityQueriesListNextResponse

EntityQueriesListNextResponse: EntityQueryList

Contains response data for the listNext operation.

EntityQueriesListResponse

EntityQueriesListResponse: EntityQueryList

Contains response data for the list operation.

EntityQuery

EntityQuery: ResourceWithEtag & { kind: EntityQueryKind }

Specific entity query.

EntityQueryItemUnion

EntityQueryItemUnion: EntityQueryItem | InsightQueryItem

EntityQueryKind

EntityQueryKind: string

Defines values for EntityQueryKind.
KnownEntityQueryKind can be used interchangeably with EntityQueryKind, this enum contains the known values that the service supports.

Known values supported by the service

Expansion
Insight
Activity

EntityQueryTemplate

EntityQueryTemplate: Resource & { kind: EntityQueryTemplateKind }

Specific entity query template.

EntityQueryTemplateKind

EntityQueryTemplateKind: string

Defines values for EntityQueryTemplateKind.
KnownEntityQueryTemplateKind can be used interchangeably with EntityQueryTemplateKind, this enum contains the known values that the service supports.

Known values supported by the service

Activity

EntityQueryTemplateUnion

EntityQueryTemplatesGetResponse

EntityQueryTemplatesGetResponse: EntityQueryTemplateUnion

Contains response data for the get operation.

EntityQueryTemplatesListNextResponse

EntityQueryTemplatesListNextResponse: EntityQueryTemplateList

Contains response data for the listNext operation.

EntityQueryTemplatesListResponse

EntityQueryTemplatesListResponse: EntityQueryTemplateList

Contains response data for the list operation.

EntityQueryUnion

EntityRelationsGetRelationResponse

EntityRelationsGetRelationResponse: Relation

Contains response data for the getRelation operation.

EntityTimelineItemUnion

EntityTimelineKind

EntityTimelineKind: string

Defines values for EntityTimelineKind.
KnownEntityTimelineKind can be used interchangeably with EntityTimelineKind, this enum contains the known values that the service supports.

Known values supported by the service

Activity: activity
Bookmark: bookmarks
SecurityAlert: security alerts

EntityType

EntityType: string

Defines values for EntityType.
KnownEntityType can be used interchangeably with EntityType, this enum contains the known values that the service supports.

Known values supported by the service

Account: Entity represents account in the system.
Host: Entity represents host in the system.
File: Entity represents file in the system.
AzureResource: Entity represents azure resource in the system.
CloudApplication: Entity represents cloud application in the system.
DNS: Entity represents dns in the system.
FileHash: Entity represents file hash in the system.
IP: Entity represents ip in the system.
Malware: Entity represents malware in the system.
Process: Entity represents process in the system.
RegistryKey: Entity represents registry key in the system.
RegistryValue: Entity represents registry value in the system.
SecurityGroup: Entity represents security group in the system.
URL: Entity represents url in the system.
IoTDevice: Entity represents IoT device in the system.
SecurityAlert: Entity represents security alert in the system.
HuntingBookmark: Entity represents HuntingBookmark in the system.
MailCluster: Entity represents mail cluster in the system.
MailMessage: Entity represents mail message in the system.
Mailbox: Entity represents mailbox in the system.
SubmissionMail: Entity represents submission mail in the system.

EntityUnion

Enum12

Enum12: string

Defines values for Enum12.
KnownEnum12 can be used interchangeably with Enum12, this enum contains the known values that the service supports.

Known values supported by the service

Expansion
Activity

EventGroupingAggregationKind

EventGroupingAggregationKind: string

Defines values for EventGroupingAggregationKind.
KnownEventGroupingAggregationKind can be used interchangeably with EventGroupingAggregationKind, this enum contains the known values that the service supports.

Known values supported by the service

SingleAlert
AlertPerResult

ExpansionEntityQuery

ExpansionEntityQuery: EntityQuery & { dataSources?: string[]; displayName?: undefined | string; inputEntityType?: EntityType; inputFields?: string[]; outputEntityTypes?: EntityType[]; queryTemplate?: undefined | string }

Represents Expansion entity query.

EyesOn

EyesOn: Settings & { isEnabled?: undefined | false | true }

Settings with single toggle.

FileEntity

FileEntity: Entity & { additionalData?: undefined | {}; directory?: undefined | string; fileHashEntityIds?: string[]; fileName?: undefined | string; friendlyName?: undefined | string; hostEntityId?: undefined | string }

Represents a file entity.

FileEntityProperties

FileEntityProperties: EntityCommonProperties & { directory?: undefined | string; fileHashEntityIds?: string[]; fileName?: undefined | string; hostEntityId?: undefined | string }

File entity property bag.

FileHashAlgorithm

FileHashAlgorithm: string

Defines values for FileHashAlgorithm.
KnownFileHashAlgorithm can be used interchangeably with FileHashAlgorithm, this enum contains the known values that the service supports.

Known values supported by the service

Unknown: Unknown hash algorithm
MD5: MD5 hash type
SHA1: SHA1 hash type
SHA256: SHA256 hash type
SHA256AC: SHA256 Authenticode hash type

FileHashEntity

FileHashEntity: Entity & { additionalData?: undefined | {}; algorithm?: FileHashAlgorithm; friendlyName?: undefined | string; hashValue?: undefined | string }

Represents a file hash entity.

FileHashEntityProperties

FileHashEntityProperties: EntityCommonProperties & { algorithm?: FileHashAlgorithm; hashValue?: undefined | string }

FileHash entity property bag.

FusionAlertRule

FusionAlertRule: AlertRule & { alertRuleTemplateName?: undefined | string; description?: undefined | string; displayName?: undefined | string; enabled?: undefined | false | true; lastModifiedUtc?: Date; scenarioExclusionPatterns?: FusionScenarioExclusionPattern[]; severity?: AlertSeverity; sourceSettings?: FusionSourceSettings[]; tactics?: AttackTactic[]; techniques?: string[] }

Represents Fusion alert rule.

FusionAlertRuleTemplate

FusionAlertRuleTemplate: AlertRuleTemplate & { alertRulesCreatedByTemplateCount?: undefined | number; createdDateUTC?: Date; description?: undefined | string; displayName?: undefined | string; lastUpdatedDateUTC?: Date; requiredDataConnectors?: AlertRuleTemplateDataSource[]; severity?: AlertSeverity; sourceSettings?: FusionTemplateSourceSetting[]; status?: TemplateStatus; tactics?: AttackTactic[]; techniques?: string[] }

Represents Fusion alert rule template.

HostEntity

HostEntity: Entity & { additionalData?: undefined | {}; azureID?: undefined | string; dnsDomain?: undefined | string; friendlyName?: undefined | string; hostName?: undefined | string; isDomainJoined?: undefined | false | true; netBiosName?: undefined | string; ntDomain?: undefined | string; omsAgentID?: undefined | string; osFamily?: OSFamily; osVersion?: undefined | string }

Represents a host entity.

HostEntityProperties

HostEntityProperties: EntityCommonProperties & { azureID?: undefined | string; dnsDomain?: undefined | string; hostName?: undefined | string; isDomainJoined?: undefined | false | true; netBiosName?: undefined | string; ntDomain?: undefined | string; omsAgentID?: undefined | string; osFamily?: OSFamily; osVersion?: undefined | string }

Host entity property bag.

HuntingBookmark

HuntingBookmark: Entity & { additionalData?: undefined | {}; created?: Date; createdBy?: UserInfo; displayName?: undefined | string; eventTime?: Date; friendlyName?: undefined | string; incidentInfo?: IncidentInfo; labels?: string[]; notes?: undefined | string; query?: undefined | string; queryResult?: undefined | string; updated?: Date; updatedBy?: UserInfo }

Represents a Hunting bookmark entity.

HuntingBookmarkProperties

HuntingBookmarkProperties: EntityCommonProperties & { created?: Date; createdBy?: UserInfo; displayName: string; eventTime?: Date; incidentInfo?: IncidentInfo; labels?: string[]; notes?: undefined | string; query: string; queryResult?: undefined | string; updated?: Date; updatedBy?: UserInfo }

Describes bookmark properties

IPGeodataGetResponse

IPGeodataGetResponse: EnrichmentIpGeodata

Contains response data for the get operation.

Incident

Incident: ResourceWithEtag & { additionalData?: IncidentAdditionalData; classification?: IncidentClassification; classificationComment?: undefined | string; classificationReason?: IncidentClassificationReason; createdTimeUtc?: Date; description?: undefined | string; firstActivityTimeUtc?: Date; incidentNumber?: undefined | number; incidentUrl?: undefined | string; labels?: IncidentLabel[]; lastActivityTimeUtc?: Date; lastModifiedTimeUtc?: Date; owner?: IncidentOwnerInfo; providerIncidentId?: undefined | string; providerName?: undefined | string; relatedAnalyticRuleIds?: string[]; severity?: IncidentSeverity; status?: IncidentStatus; teamInformation?: TeamInformation; title?: undefined | string }

Represents an incident in Azure Security Insights.

IncidentClassification

IncidentClassification: string

Defines values for IncidentClassification.
KnownIncidentClassification can be used interchangeably with IncidentClassification, this enum contains the known values that the service supports.

Known values supported by the service

Undetermined: Incident classification was undetermined
TruePositive: Incident was true positive
BenignPositive: Incident was benign positive
FalsePositive: Incident was false positive

IncidentClassificationReason

IncidentClassificationReason: string

Defines values for IncidentClassificationReason.
KnownIncidentClassificationReason can be used interchangeably with IncidentClassificationReason, this enum contains the known values that the service supports.

Known values supported by the service

SuspiciousActivity: Classification reason was suspicious activity
SuspiciousButExpected: Classification reason was suspicious but expected
IncorrectAlertLogic: Classification reason was incorrect alert logic
InaccurateData: Classification reason was inaccurate data

IncidentComment

IncidentComment: ResourceWithEtag & { author?: ClientInfo; createdTimeUtc?: Date; lastModifiedTimeUtc?: Date; message?: undefined | string }

Represents an incident comment

IncidentCommentsCreateOrUpdateResponse

IncidentCommentsCreateOrUpdateResponse: IncidentComment

Contains response data for the createOrUpdate operation.

IncidentCommentsGetResponse

IncidentCommentsGetResponse: IncidentComment

Contains response data for the get operation.

IncidentCommentsListNextResponse

IncidentCommentsListNextResponse: IncidentCommentList

Contains response data for the listNext operation.

IncidentCommentsListResponse

IncidentCommentsListResponse: IncidentCommentList

Contains response data for the list operation.

IncidentLabelType

IncidentLabelType: string

Defines values for IncidentLabelType.
KnownIncidentLabelType can be used interchangeably with IncidentLabelType, this enum contains the known values that the service supports.

Known values supported by the service

User: Label manually created by a user
AutoAssigned: Label automatically created by the system

IncidentRelationsCreateOrUpdateResponse

IncidentRelationsCreateOrUpdateResponse: Relation

Contains response data for the createOrUpdate operation.

IncidentRelationsGetResponse

IncidentRelationsGetResponse: Relation

Contains response data for the get operation.

IncidentRelationsListNextResponse

IncidentRelationsListNextResponse: RelationList

Contains response data for the listNext operation.

IncidentRelationsListResponse

IncidentRelationsListResponse: RelationList

Contains response data for the list operation.

IncidentSeverity

IncidentSeverity: string

Defines values for IncidentSeverity.
KnownIncidentSeverity can be used interchangeably with IncidentSeverity, this enum contains the known values that the service supports.

Known values supported by the service

High: High severity
Medium: Medium severity
Low: Low severity
Informational: Informational severity

IncidentStatus

IncidentStatus: string

Defines values for IncidentStatus.
KnownIncidentStatus can be used interchangeably with IncidentStatus, this enum contains the known values that the service supports.

Known values supported by the service

New: An active incident which isn't being handled currently
Active: An active incident which is being handled
Closed: A non-active incident

IncidentsCreateOrUpdateResponse

IncidentsCreateOrUpdateResponse: Incident

Contains response data for the createOrUpdate operation.

IncidentsCreateTeamResponse

IncidentsCreateTeamResponse: TeamInformation

Contains response data for the createTeam operation.

IncidentsGetResponse

IncidentsGetResponse: Incident

Contains response data for the get operation.

IncidentsListAlertsResponse

IncidentsListAlertsResponse: IncidentAlertList

Contains response data for the listAlerts operation.

IncidentsListBookmarksResponse

IncidentsListBookmarksResponse: IncidentBookmarkList

Contains response data for the listBookmarks operation.

IncidentsListEntitiesResponse

IncidentsListEntitiesResponse: IncidentEntitiesResponse

Contains response data for the listEntities operation.

IncidentsListNextResponse

IncidentsListNextResponse: IncidentList

Contains response data for the listNext operation.

IncidentsListResponse

IncidentsListResponse: IncidentList

Contains response data for the list operation.

IncidentsRunPlaybookResponse

IncidentsRunPlaybookResponse: Record<string, unknown>

Contains response data for the runPlaybook operation.

InsightQueryItem

InsightQueryItem: EntityQueryItem & { kind: "Insight"; properties?: InsightQueryItemProperties }

Represents Insight Query.

InsightQueryItemProperties

InsightQueryItemProperties: EntityQueryItemProperties & { additionalQuery?: InsightQueryItemPropertiesAdditionalQuery; baseQuery?: undefined | string; chartQuery?: Record<string, unknown>; defaultTimeRange?: InsightQueryItemPropertiesDefaultTimeRange; description?: undefined | string; displayName?: undefined | string; referenceTimeRange?: InsightQueryItemPropertiesReferenceTimeRange; tableQuery?: InsightQueryItemPropertiesTableQuery }

Represents Insight Query.

InstructionStepsInstructionsItem

InstructionStepsInstructionsItem: ConnectorInstructionModelBase & {}

IoTCheckRequirements

IoTCheckRequirements: DataConnectorsCheckRequirements & { kind: "IOT"; subscriptionId?: undefined | string }

Represents IoT requirements check request.

IoTDataConnector

IoTDataConnector: DataConnector & { dataTypes?: AlertsDataTypeOfDataConnector; subscriptionId?: undefined | string }

Represents IoT data connector.

IoTDataConnectorProperties

IoTDataConnectorProperties: DataConnectorWithAlertsProperties & { subscriptionId?: undefined | string }

IoT data connector properties.

IoTDeviceEntity

IoTDeviceEntity: Entity & { additionalData?: undefined | {}; deviceId?: undefined | string; deviceName?: undefined | string; deviceType?: undefined | string; edgeId?: undefined | string; firmwareVersion?: undefined | string; friendlyName?: undefined | string; hostEntityId?: undefined | string; iotHubEntityId?: undefined | string; iotSecurityAgentId?: undefined | string; ipAddressEntityId?: undefined | string; macAddress?: undefined | string; model?: undefined | string; operatingSystem?: undefined | string; protocols?: string[]; serialNumber?: undefined | string; source?: undefined | string; threatIntelligence?: ThreatIntelligence[]; vendor?: undefined | string }

Represents an IoT device entity.

IoTDeviceEntityProperties

IoTDeviceEntityProperties: EntityCommonProperties & { deviceId?: undefined | string; deviceName?: undefined | string; deviceType?: undefined | string; edgeId?: undefined | string; firmwareVersion?: undefined | string; hostEntityId?: undefined | string; iotHubEntityId?: undefined | string; iotSecurityAgentId?: undefined | string; ipAddressEntityId?: undefined | string; macAddress?: undefined | string; model?: undefined | string; operatingSystem?: undefined | string; protocols?: string[]; serialNumber?: undefined | string; source?: undefined | string; threatIntelligence?: ThreatIntelligence[]; vendor?: undefined | string }

IoTDevice entity property bag.

IpEntity

IpEntity: Entity & { additionalData?: undefined | {}; address?: undefined | string; friendlyName?: undefined | string; location?: GeoLocation; threatIntelligence?: ThreatIntelligence[] }

Represents an ip entity.

IpEntityProperties

IpEntityProperties: EntityCommonProperties & { address?: undefined | string; location?: GeoLocation; threatIntelligence?: ThreatIntelligence[] }

Ip entity property bag.

KillChainIntent

KillChainIntent: string

Defines values for KillChainIntent.
KnownKillChainIntent can be used interchangeably with KillChainIntent, this enum contains the known values that the service supports.

Known values supported by the service

Unknown: The default value.
Probing: Probing could be an attempt to access a certain resource regardless of a malicious intent or a failed attempt to gain access to a target system to gather information prior to exploitation. This step is usually detected as an attempt originating from outside the network in attempt to scan the target system and find a way in.
Exploitation: Exploitation is the stage where an attacker manage to get foothold on the attacked resource. This stage is applicable not only for compute hosts, but also for resources such as user accounts, certificates etc. Adversaries will often be able to control the resource after this stage.
Persistence: Persistence is any access, action, or configuration change to a system that gives an adversary a persistent presence on that system. Adversaries will often need to maintain access to systems through interruptions such as system restarts, loss of credentials, or other failures that would require a remote access tool to restart or alternate backdoor for them to regain access.
PrivilegeEscalation: Privilege escalation is the result of actions that allow an adversary to obtain a higher level of permissions on a system or network. Certain tools or actions require a higher level of privilege to work and are likely necessary at many points throughout an operation. User accounts with permissions to access specific systems or perform specific functions necessary for adversaries to achieve their objective may also be considered an escalation of privilege.
DefenseEvasion: Defense evasion consists of techniques an adversary may use to evade detection or avoid other defenses. Sometimes these actions are the same as or variations of techniques in other categories that have the added benefit of subverting a particular defense or mitigation.
CredentialAccess: Credential access represents techniques resulting in access to or control over system, domain, or service credentials that are used within an enterprise environment. Adversaries will likely attempt to obtain legitimate credentials from users or administrator accounts (local system administrator or domain users with administrator access) to use within the network. With sufficient access within a network, an adversary can create accounts for later use within the environment.
Discovery: Discovery consists of techniques that allow the adversary to gain knowledge about the system and internal network. When adversaries gain access to a new system, they must orient themselves to what they now have control of and what benefits operating from that system give to their current objective or overall goals during the intrusion. The operating system provides many native tools that aid in this post-compromise information-gathering phase.
LateralMovement: Lateral movement consists of techniques that enable an adversary to access and control remote systems on a network and could, but does not necessarily, include execution of tools on remote systems. The lateral movement techniques could allow an adversary to gather information from a system without needing additional tools, such as a remote access tool. An adversary can use lateral movement for many purposes, including remote Execution of tools, pivoting to additional systems, access to specific information or files, access to additional credentials, or to cause an effect.
Execution: The execution tactic represents techniques that result in execution of adversary-controlled code on a local or remote system. This tactic is often used in conjunction with lateral movement to expand access to remote systems on a network.
Collection: Collection consists of techniques used to identify and gather information, such as sensitive files, from a target network prior to exfiltration. This category also covers locations on a system or network where the adversary may look for information to exfiltrate.
Exfiltration: Exfiltration refers to techniques and attributes that result or aid in the adversary removing files and information from a target network. This category also covers locations on a system or network where the adversary may look for information to exfiltrate.
CommandAndControl: The command and control tactic represents how adversaries communicate with systems under their control within a target network.
Impact: The impact intent primary objective is to directly reduce the availability or integrity of a system, service, or network; including manipulation of data to impact a business or operational process. This would often refer to techniques such as ransom-ware, defacement, data manipulation and others.

Kind

Kind: string

Defines values for Kind.
KnownKind can be used interchangeably with Kind, this enum contains the known values that the service supports.

Known values supported by the service

DataConnector
DataType
Workbook
WorkbookTemplate
Playbook
PlaybookTemplate
AnalyticsRuleTemplate
AnalyticsRule
HuntingQuery
InvestigationQuery
Parser
Watchlist
WatchlistTemplate
Solution
AzureFunction
LogicAppsCustomConnector
AutomationRule

MLBehaviorAnalyticsAlertRule

MLBehaviorAnalyticsAlertRule: AlertRule & { alertRuleTemplateName?: undefined | string; description?: undefined | string; displayName?: undefined | string; enabled?: undefined | false | true; lastModifiedUtc?: Date; severity?: AlertSeverity; tactics?: AttackTactic[]; techniques?: string[] }

Represents MLBehaviorAnalytics alert rule.

MLBehaviorAnalyticsAlertRuleTemplate

MLBehaviorAnalyticsAlertRuleTemplate: AlertRuleTemplate & { alertRulesCreatedByTemplateCount?: undefined | number; createdDateUTC?: Date; description?: undefined | string; displayName?: undefined | string; lastUpdatedDateUTC?: Date; requiredDataConnectors?: AlertRuleTemplateDataSource[]; severity?: AlertSeverity; status?: TemplateStatus; tactics?: AttackTactic[]; techniques?: string[] }

Represents MLBehaviorAnalytics alert rule template.

MLBehaviorAnalyticsAlertRuleTemplateProperties

MLBehaviorAnalyticsAlertRuleTemplateProperties: AlertRuleTemplateWithMitreProperties & { severity: AlertSeverity }

MLBehaviorAnalytics alert rule template properties.

MTPCheckRequirementsProperties

MTPCheckRequirementsProperties: DataConnectorTenantId & {}

MTP (Microsoft Threat Protection) requirements check properties.

MTPDataConnector

MTPDataConnector: DataConnector & { dataTypes?: MTPDataConnectorDataTypes; tenantId?: undefined | string }

Represents MTP (Microsoft Threat Protection) data connector.

MTPDataConnectorDataTypesIncidents

MTPDataConnectorDataTypesIncidents: DataConnectorDataTypeCommon & {}

Data type for Microsoft Threat Protection Platforms data connector.

MTPDataConnectorProperties

MTPDataConnectorProperties: DataConnectorTenantId & { dataTypes: MTPDataConnectorDataTypes }

MTP (Microsoft Threat Protection) data connector properties.

MailClusterEntity

MailClusterEntity: Entity & { additionalData?: undefined | {}; clusterGroup?: undefined | string; clusterQueryEndTime?: Date; clusterQueryStartTime?: Date; clusterSourceIdentifier?: undefined | string; clusterSourceType?: undefined | string; countByDeliveryStatus?: Record<string, unknown>; countByProtectionStatus?: Record<string, unknown>; countByThreatType?: Record<string, unknown>; friendlyName?: undefined | string; isVolumeAnomaly?: undefined | false | true; mailCount?: undefined | number; networkMessageIds?: string[]; query?: undefined | string; queryTime?: Date; source?: undefined | string; threats?: string[] }

Represents a mail cluster entity.

MailClusterEntityProperties

MailClusterEntityProperties: EntityCommonProperties & { clusterGroup?: undefined | string; clusterQueryEndTime?: Date; clusterQueryStartTime?: Date; clusterSourceIdentifier?: undefined | string; clusterSourceType?: undefined | string; countByDeliveryStatus?: Record<string, unknown>; countByProtectionStatus?: Record<string, unknown>; countByThreatType?: Record<string, unknown>; isVolumeAnomaly?: undefined | false | true; mailCount?: undefined | number; networkMessageIds?: string[]; query?: undefined | string; queryTime?: Date; source?: undefined | string; threats?: string[] }

Mail cluster entity property bag.

MailMessageEntity

MailMessageEntity: Entity & { additionalData?: undefined | {}; antispamDirection?: AntispamMailDirection; bodyFingerprintBin1?: undefined | number; bodyFingerprintBin2?: undefined | number; bodyFingerprintBin3?: undefined | number; bodyFingerprintBin4?: undefined | number; bodyFingerprintBin5?: undefined | number; deliveryAction?: DeliveryAction; deliveryLocation?: DeliveryLocation; fileEntityIds?: string[]; friendlyName?: undefined | string; internetMessageId?: undefined | string; language?: undefined | string; networkMessageId?: undefined | string; p1Sender?: undefined | string; p1SenderDisplayName?: undefined | string; p1SenderDomain?: undefined | string; p2Sender?: undefined | string; p2SenderDisplayName?: undefined | string; p2SenderDomain?: undefined | string; receiveDate?: Date; recipient?: undefined | string; senderIP?: undefined | string; subject?: undefined | string; threatDetectionMethods?: string[]; threats?: string[]; urls?: string[] }

Represents a mail message entity.

MailMessageEntityProperties

MailMessageEntityProperties: EntityCommonProperties & { antispamDirection?: AntispamMailDirection; bodyFingerprintBin1?: undefined | number; bodyFingerprintBin2?: undefined | number; bodyFingerprintBin3?: undefined | number; bodyFingerprintBin4?: undefined | number; bodyFingerprintBin5?: undefined | number; deliveryAction?: DeliveryAction; deliveryLocation?: DeliveryLocation; fileEntityIds?: string[]; internetMessageId?: undefined | string; language?: undefined | string; networkMessageId?: undefined | string; p1Sender?: undefined | string; p1SenderDisplayName?: undefined | string; p1SenderDomain?: undefined | string; p2Sender?: undefined | string; p2SenderDisplayName?: undefined | string; p2SenderDomain?: undefined | string; receiveDate?: Date; recipient?: undefined | string; senderIP?: undefined | string; subject?: undefined | string; threatDetectionMethods?: string[]; threats?: string[]; urls?: string[] }

Mail message entity property bag.

MailboxEntity

MailboxEntity: Entity & { additionalData?: undefined | {}; displayName?: undefined | string; externalDirectoryObjectId?: undefined | string; friendlyName?: undefined | string; mailboxPrimaryAddress?: undefined | string; upn?: undefined | string }

Represents a mailbox entity.

MailboxEntityProperties

MailboxEntityProperties: EntityCommonProperties & { displayName?: undefined | string; externalDirectoryObjectId?: undefined | string; mailboxPrimaryAddress?: undefined | string; upn?: undefined | string }

Mailbox entity property bag.

MalwareEntity

MalwareEntity: Entity & { additionalData?: undefined | {}; category?: undefined | string; fileEntityIds?: string[]; friendlyName?: undefined | string; malwareName?: undefined | string; processEntityIds?: string[] }

Represents a malware entity.

MalwareEntityProperties

MalwareEntityProperties: EntityCommonProperties & { category?: undefined | string; fileEntityIds?: string[]; malwareName?: undefined | string; processEntityIds?: string[] }

Malware entity property bag.

MatchingMethod

MatchingMethod: string

Defines values for MatchingMethod.
KnownMatchingMethod can be used interchangeably with MatchingMethod, this enum contains the known values that the service supports.

Known values supported by the service

AllEntities: Grouping alerts into a single incident if all the entities match
AnyAlert: Grouping any alerts triggered by this rule into a single incident
Selected: Grouping alerts into a single incident if the selected entities, custom details and alert details match

McasCheckRequirements

McasCheckRequirements: DataConnectorsCheckRequirements & { kind: "MicrosoftCloudAppSecurity"; tenantId?: undefined | string }

Represents MCAS (Microsoft Cloud App Security) requirements check request.

McasCheckRequirementsProperties

McasCheckRequirementsProperties: DataConnectorTenantId & {}

MCAS (Microsoft Cloud App Security) requirements check properties.

McasDataConnector

McasDataConnector: DataConnector & { dataTypes?: McasDataConnectorDataTypes; tenantId?: undefined | string }

Represents MCAS (Microsoft Cloud App Security) data connector.

McasDataConnectorDataTypes

McasDataConnectorDataTypes: AlertsDataTypeOfDataConnector & { discoveryLogs?: DataConnectorDataTypeCommon }

The available data types for MCAS (Microsoft Cloud App Security) data connector.

McasDataConnectorProperties

McasDataConnectorProperties: DataConnectorTenantId & { dataTypes: McasDataConnectorDataTypes }

MCAS (Microsoft Cloud App Security) data connector properties.

MdatpCheckRequirements

MdatpCheckRequirements: DataConnectorsCheckRequirements & { kind: "MicrosoftDefenderAdvancedThreatProtection"; tenantId?: undefined | string }

Represents MDATP (Microsoft Defender Advanced Threat Protection) requirements check request.

MdatpCheckRequirementsProperties

MdatpCheckRequirementsProperties: DataConnectorTenantId & {}

MDATP (Microsoft Defender Advanced Threat Protection) requirements check properties.

MdatpDataConnector

MdatpDataConnector: DataConnector & { dataTypes?: AlertsDataTypeOfDataConnector; tenantId?: undefined | string }

Represents MDATP (Microsoft Defender Advanced Threat Protection) data connector.

MdatpDataConnectorProperties

MdatpDataConnectorProperties: DataConnectorTenantId & DataConnectorWithAlertsProperties & {}

MDATP (Microsoft Defender Advanced Threat Protection) data connector properties.

MetadataCreateResponse

MetadataCreateResponse: MetadataModel

Contains response data for the create operation.

MetadataGetResponse

MetadataGetResponse: MetadataModel

Contains response data for the get operation.

MetadataListNextResponse

MetadataListNextResponse: MetadataList

Contains response data for the listNext operation.

MetadataListResponse

MetadataListResponse: MetadataList

Contains response data for the list operation.

MetadataModel

MetadataModel: ResourceWithEtag & { author?: MetadataAuthor; categories?: MetadataCategories; contentId?: undefined | string; contentSchemaVersion?: undefined | string; customVersion?: undefined | string; dependencies?: MetadataDependencies; firstPublishDate?: Date; icon?: undefined | string; kind?: Kind; lastPublishDate?: Date; parentId?: undefined | string; previewImages?: string[]; previewImagesDark?: string[]; providers?: string[]; source?: MetadataSource; support?: MetadataSupport; threatAnalysisTactics?: string[]; threatAnalysisTechniques?: string[]; version?: undefined | string }

Metadata resource definition.

MetadataPatch

MetadataPatch: ResourceWithEtag & { author?: MetadataAuthor; categories?: MetadataCategories; contentId?: undefined | string; contentSchemaVersion?: undefined | string; customVersion?: undefined | string; dependencies?: MetadataDependencies; firstPublishDate?: Date; icon?: undefined | string; kind?: Kind; lastPublishDate?: Date; parentId?: undefined | string; previewImages?: string[]; previewImagesDark?: string[]; providers?: string[]; source?: MetadataSource; support?: MetadataSupport; threatAnalysisTactics?: string[]; threatAnalysisTechniques?: string[]; version?: undefined | string }

Metadata patch request body.

MetadataUpdateResponse

MetadataUpdateResponse: MetadataModel

Contains response data for the update operation.

MicrosoftSecurityIncidentCreationAlertRule

MicrosoftSecurityIncidentCreationAlertRule: AlertRule & { alertRuleTemplateName?: undefined | string; description?: undefined | string; displayName?: undefined | string; displayNamesExcludeFilter?: string[]; displayNamesFilter?: string[]; enabled?: undefined | false | true; lastModifiedUtc?: Date; productFilter?: MicrosoftSecurityProductName; severitiesFilter?: AlertSeverity[] }

Represents MicrosoftSecurityIncidentCreation rule.

MicrosoftSecurityIncidentCreationAlertRuleProperties

MicrosoftSecurityIncidentCreationAlertRuleProperties: MicrosoftSecurityIncidentCreationAlertRuleCommonProperties & { alertRuleTemplateName?: undefined | string; description?: undefined | string; displayName: string; enabled: boolean; lastModifiedUtc?: Date }

MicrosoftSecurityIncidentCreation rule property bag.

MicrosoftSecurityIncidentCreationAlertRuleTemplate

MicrosoftSecurityIncidentCreationAlertRuleTemplate: AlertRuleTemplate & { alertRulesCreatedByTemplateCount?: undefined | number; createdDateUTC?: Date; description?: undefined | string; displayName?: undefined | string; displayNamesExcludeFilter?: string[]; displayNamesFilter?: string[]; lastUpdatedDateUTC?: Date; productFilter?: MicrosoftSecurityProductName; requiredDataConnectors?: AlertRuleTemplateDataSource[]; severitiesFilter?: AlertSeverity[]; status?: TemplateStatus }

Represents MicrosoftSecurityIncidentCreation rule template.

MicrosoftSecurityIncidentCreationAlertRuleTemplateProperties

MicrosoftSecurityIncidentCreationAlertRuleTemplateProperties: AlertRuleTemplatePropertiesBase & { displayNamesExcludeFilter?: string[]; displayNamesFilter?: string[]; productFilter?: MicrosoftSecurityProductName; severitiesFilter?: AlertSeverity[] }

MicrosoftSecurityIncidentCreation rule template properties

MicrosoftSecurityProductName

MicrosoftSecurityProductName: string

Defines values for MicrosoftSecurityProductName.
KnownMicrosoftSecurityProductName can be used interchangeably with MicrosoftSecurityProductName, this enum contains the known values that the service supports.

Known values supported by the service

Microsoft Cloud App Security
Azure Security Center
Azure Advanced Threat Protection
Azure Active Directory Identity Protection
Azure Security Center for IoT
Office 365 Advanced Threat Protection
Microsoft Defender Advanced Threat Protection

MstiCheckRequirements

MstiCheckRequirements: DataConnectorsCheckRequirements & { kind: "MicrosoftThreatIntelligence"; tenantId?: undefined | string }

Represents Microsoft Threat Intelligence requirements check request.

MstiCheckRequirementsProperties

MstiCheckRequirementsProperties: DataConnectorTenantId & {}

Microsoft Threat Intelligence requirements check properties.

MstiDataConnector

MstiDataConnector: DataConnector & { dataTypes?: MstiDataConnectorDataTypes; tenantId?: undefined | string }

Represents Microsoft Threat Intelligence data connector.

MstiDataConnectorDataTypesBingSafetyPhishingURL

MstiDataConnectorDataTypesBingSafetyPhishingURL: DataConnectorDataTypeCommon & { lookbackPeriod: string }

Data type for Microsoft Threat Intelligence Platforms data connector.

MstiDataConnectorDataTypesMicrosoftEmergingThreatFeed

MstiDataConnectorDataTypesMicrosoftEmergingThreatFeed: DataConnectorDataTypeCommon & { lookbackPeriod: string }

Data type for Microsoft Threat Intelligence Platforms data connector.

MstiDataConnectorProperties

MstiDataConnectorProperties: DataConnectorTenantId & { dataTypes: MstiDataConnectorDataTypes }

Microsoft Threat Intelligence data connector properties.

MtpCheckRequirements

MtpCheckRequirements: DataConnectorsCheckRequirements & { kind: "MicrosoftThreatProtection"; tenantId?: undefined | string }

Represents MTP (Microsoft Threat Protection) requirements check request.

NrtAlertRule

NrtAlertRule: AlertRule & { alertDetailsOverride?: AlertDetailsOverride; alertRuleTemplateName?: undefined | string; customDetails?: undefined | {}; description?: undefined | string; displayName?: undefined | string; enabled?: undefined | false | true; entityMappings?: EntityMapping[]; incidentConfiguration?: IncidentConfiguration; lastModifiedUtc?: Date; query?: undefined | string; severity?: AlertSeverity; suppressionDuration?: undefined | string; suppressionEnabled?: undefined | false | true; tactics?: AttackTactic[]; techniques?: string[]; templateVersion?: undefined | string }

Represents NRT alert rule.

NrtAlertRuleTemplate

NrtAlertRuleTemplate: AlertRuleTemplate & { alertDetailsOverride?: AlertDetailsOverride; alertRulesCreatedByTemplateCount?: undefined | number; createdDateUTC?: Date; customDetails?: undefined | {}; description?: undefined | string; displayName?: undefined | string; entityMappings?: EntityMapping[]; lastUpdatedDateUTC?: Date; query?: undefined | string; requiredDataConnectors?: AlertRuleTemplateDataSource[]; severity?: AlertSeverity; status?: TemplateStatus; tactics?: AttackTactic[]; techniques?: string[]; version?: undefined | string }

Represents NRT alert rule template.

NrtAlertRuleTemplateProperties

NRT alert rule template properties

OSFamily

OSFamily: "Linux" | "Windows" | "Android" | "IOS" | "Unknown"

Defines values for OSFamily.

Office365ProjectCheckRequirements

Office365ProjectCheckRequirements: DataConnectorsCheckRequirements & { kind: "Office365Project"; tenantId?: undefined | string }

Represents Office365 Project requirements check request.

Office365ProjectCheckRequirementsProperties

Office365ProjectCheckRequirementsProperties: DataConnectorTenantId & {}

Office365 Project requirements check properties.

Office365ProjectConnectorDataTypesLogs

Office365ProjectConnectorDataTypesLogs: DataConnectorDataTypeCommon & {}

Logs data type.

Office365ProjectDataConnector

Office365ProjectDataConnector: DataConnector & { dataTypes?: Office365ProjectConnectorDataTypes; tenantId?: undefined | string }

Represents Office Microsoft Project data connector.

Office365ProjectDataConnectorProperties

Office365ProjectDataConnectorProperties: DataConnectorTenantId & { dataTypes: Office365ProjectConnectorDataTypes }

Office Microsoft Project data connector properties.

OfficeATPCheckRequirements

OfficeATPCheckRequirements: DataConnectorsCheckRequirements & { kind: "OfficeATP"; tenantId?: undefined | string }

Represents OfficeATP (Office 365 Advanced Threat Protection) requirements check request.

OfficeATPCheckRequirementsProperties

OfficeATPCheckRequirementsProperties: DataConnectorTenantId & {}

OfficeATP (Office 365 Advanced Threat Protection) requirements check properties.

OfficeATPDataConnector

OfficeATPDataConnector: DataConnector & { dataTypes?: AlertsDataTypeOfDataConnector; tenantId?: undefined | string }

Represents OfficeATP (Office 365 Advanced Threat Protection) data connector.

OfficeATPDataConnectorProperties

OfficeATPDataConnectorProperties: DataConnectorTenantId & DataConnectorWithAlertsProperties & {}

OfficeATP (Office 365 Advanced Threat Protection) data connector properties.

OfficeConsent

OfficeConsent: Resource & { consentId?: undefined | string; tenantId?: undefined | string }

Consent for Office365 tenant that already made.

OfficeConsentsGetResponse

OfficeConsentsGetResponse: OfficeConsent

Contains response data for the get operation.

OfficeConsentsListNextResponse

OfficeConsentsListNextResponse: OfficeConsentList

Contains response data for the listNext operation.

OfficeConsentsListResponse

OfficeConsentsListResponse: OfficeConsentList

Contains response data for the list operation.

OfficeDataConnector

OfficeDataConnector: DataConnector & { dataTypes?: OfficeDataConnectorDataTypes; tenantId?: undefined | string }

Represents office data connector.

OfficeDataConnectorDataTypesExchange

OfficeDataConnectorDataTypesExchange: DataConnectorDataTypeCommon & {}

Exchange data type connection.

OfficeDataConnectorDataTypesSharePoint

OfficeDataConnectorDataTypesSharePoint: DataConnectorDataTypeCommon & {}

SharePoint data type connection.

OfficeDataConnectorDataTypesTeams

OfficeDataConnectorDataTypesTeams: DataConnectorDataTypeCommon & {}

Teams data type connection.

OfficeDataConnectorProperties

OfficeDataConnectorProperties: DataConnectorTenantId & { dataTypes: OfficeDataConnectorDataTypes }

Office data connector properties.

OfficeIRMCheckRequirements

OfficeIRMCheckRequirements: DataConnectorsCheckRequirements & { kind: "OfficeIRM"; tenantId?: undefined | string }

Represents OfficeIRM (Microsoft Insider Risk Management) requirements check request.

OfficeIRMCheckRequirementsProperties

OfficeIRMCheckRequirementsProperties: DataConnectorTenantId & {}

OfficeIRM (Microsoft Insider Risk Management) requirements check properties.

OfficeIRMDataConnector

OfficeIRMDataConnector: DataConnector & { dataTypes?: AlertsDataTypeOfDataConnector; tenantId?: undefined | string }

Represents OfficeIRM (Microsoft Insider Risk Management) data connector.

OfficeIRMDataConnectorProperties

OfficeIRMDataConnectorProperties: DataConnectorTenantId & DataConnectorWithAlertsProperties & {}

OfficeIRM (Microsoft Insider Risk Management) data connector properties.

OfficePowerBICheckRequirements

OfficePowerBICheckRequirements: DataConnectorsCheckRequirements & { kind: "OfficePowerBI"; tenantId?: undefined | string }

Represents Office PowerBI requirements check request.

OfficePowerBICheckRequirementsProperties

OfficePowerBICheckRequirementsProperties: DataConnectorTenantId & {}

Office PowerBI requirements check properties.

OfficePowerBIConnectorDataTypesLogs

OfficePowerBIConnectorDataTypesLogs: DataConnectorDataTypeCommon & {}

Logs data type.

OfficePowerBIDataConnector

OfficePowerBIDataConnector: DataConnector & { dataTypes?: OfficePowerBIConnectorDataTypes; tenantId?: undefined | string }

Represents Office Microsoft PowerBI data connector.

OfficePowerBIDataConnectorProperties

OfficePowerBIDataConnectorProperties: DataConnectorTenantId & { dataTypes: OfficePowerBIConnectorDataTypes }

Office Microsoft PowerBI data connector properties.

OperationsListNextResponse

OperationsListNextResponse: OperationsList

Contains response data for the listNext operation.

OperationsListResponse

OperationsListResponse: OperationsList

Contains response data for the list operation.

Operator

Operator: string

Defines values for Operator.
KnownOperator can be used interchangeably with Operator, this enum contains the known values that the service supports.

Known values supported by the service

AND
OR

OutputType

OutputType: string

Defines values for OutputType.
KnownOutputType can be used interchangeably with OutputType, this enum contains the known values that the service supports.

Known values supported by the service

Number
String
Date
Entity

OwnerType

OwnerType: string

Defines values for OwnerType.
KnownOwnerType can be used interchangeably with OwnerType, this enum contains the known values that the service supports.

Known values supported by the service

Unknown: The incident owner type is unknown
User: The incident owner type is an AAD user
Group: The incident owner type is an AAD group

PermissionProviderScope

PermissionProviderScope: string

Defines values for PermissionProviderScope.
KnownPermissionProviderScope can be used interchangeably with PermissionProviderScope, this enum contains the known values that the service supports.

Known values supported by the service

ResourceGroup
Subscription
Workspace

PermissionsCustomsItem

PermissionsCustomsItem: Customs & {}

PermissionsResourceProviderItem

PermissionsResourceProviderItem: ResourceProvider & {}

PollingFrequency

PollingFrequency: string

Defines values for PollingFrequency.
KnownPollingFrequency can be used interchangeably with PollingFrequency, this enum contains the known values that the service supports.

Known values supported by the service

OnceAMinute: Once a minute
OnceAnHour: Once an hour
OnceADay: Once a day

ProcessEntity

ProcessEntity: Entity & { accountEntityId?: undefined | string; additionalData?: undefined | {}; commandLine?: undefined | string; creationTimeUtc?: Date; elevationToken?: ElevationToken; friendlyName?: undefined | string; hostEntityId?: undefined | string; hostLogonSessionEntityId?: undefined | string; imageFileEntityId?: undefined | string; parentProcessEntityId?: undefined | string; processId?: undefined | string }

Represents a process entity.

ProcessEntityProperties

ProcessEntityProperties: EntityCommonProperties & { accountEntityId?: undefined | string; commandLine?: undefined | string; creationTimeUtc?: Date; elevationToken?: ElevationToken; hostEntityId?: undefined | string; hostLogonSessionEntityId?: undefined | string; imageFileEntityId?: undefined | string; parentProcessEntityId?: undefined | string; processId?: undefined | string }

Process entity property bag.

ProductSettingsGetResponse

ProductSettingsGetResponse: SettingsUnion

Contains response data for the get operation.

ProductSettingsListResponse

ProductSettingsListResponse: SettingList

Contains response data for the list operation.

ProductSettingsUpdateResponse

ProductSettingsUpdateResponse: SettingsUnion

Contains response data for the update operation.

PropertyConditionProperties

PropertyConditionProperties: AutomationRuleCondition & { conditionProperties?: AutomationRulePropertyValuesCondition; conditionType: "Property" }

Describes an automation rule condition that evaluates a property's value

ProviderName

ProviderName: string

Defines values for ProviderName.
KnownProviderName can be used interchangeably with ProviderName, this enum contains the known values that the service supports.

Known values supported by the service

Microsoft.OperationalInsights/solutions
Microsoft.OperationalInsights/workspaces
Microsoft.OperationalInsights/workspaces/datasources
microsoft.aadiam/diagnosticSettings
Microsoft.OperationalInsights/workspaces/sharedKeys
Microsoft.Authorization/policyAssignments

ProvisioningState

ProvisioningState: string

Defines values for ProvisioningState.
KnownProvisioningState can be used interchangeably with ProvisioningState, this enum contains the known values that the service supports.

Known values supported by the service

Succeeded
Failed
Canceled
InProgress

RegistryHive

RegistryHive: string

Defines values for RegistryHive.
KnownRegistryHive can be used interchangeably with RegistryHive, this enum contains the known values that the service supports.

Known values supported by the service

HKEY_LOCAL_MACHINE: HKEY_LOCAL_MACHINE
HKEY_CLASSES_ROOT: HKEY_CLASSES_ROOT
HKEY_CURRENT_CONFIG: HKEY_CURRENT_CONFIG
HKEY_USERS: HKEY_USERS
HKEY_CURRENT_USER_LOCAL_SETTINGS: HKEY_CURRENT_USER_LOCAL_SETTINGS
HKEY_PERFORMANCE_DATA: HKEY_PERFORMANCE_DATA
HKEY_PERFORMANCE_NLSTEXT: HKEY_PERFORMANCE_NLSTEXT
HKEY_PERFORMANCE_TEXT: HKEY_PERFORMANCE_TEXT
HKEY_A: HKEY_A
HKEY_CURRENT_USER: HKEY_CURRENT_USER

RegistryKeyEntity

RegistryKeyEntity: Entity & { additionalData?: undefined | {}; friendlyName?: undefined | string; hive?: RegistryHive; key?: undefined | string }

Represents a registry key entity.

RegistryKeyEntityProperties

RegistryKeyEntityProperties: EntityCommonProperties & { hive?: RegistryHive; key?: undefined | string }

RegistryKey entity property bag.

RegistryValueEntity

RegistryValueEntity: Entity & { additionalData?: undefined | {}; friendlyName?: undefined | string; keyEntityId?: undefined | string; valueData?: undefined | string; valueName?: undefined | string; valueType?: RegistryValueKind }

Represents a registry value entity.

RegistryValueEntityProperties

RegistryValueEntityProperties: EntityCommonProperties & { keyEntityId?: undefined | string; valueData?: undefined | string; valueName?: undefined | string; valueType?: RegistryValueKind }

RegistryValue entity property bag.

RegistryValueKind

RegistryValueKind: string

Defines values for RegistryValueKind.
KnownRegistryValueKind can be used interchangeably with RegistryValueKind, this enum contains the known values that the service supports.

Known values supported by the service

None: None
Unknown: Unknown value type
String: String value type
ExpandString: ExpandString value type
Binary: Binary value type
DWord: DWord value type
MultiString: MultiString value type
QWord: QWord value type

Relation

Relation: ResourceWithEtag & { relatedResourceId?: undefined | string; relatedResourceKind?: undefined | string; relatedResourceName?: undefined | string; relatedResourceType?: undefined | string }

Represents a relation between two resources

RepoType

RepoType: string

Defines values for RepoType.
KnownRepoType can be used interchangeably with RepoType, this enum contains the known values that the service supports.

Known values supported by the service

Github
DevOps

ResourceWithEtag

ResourceWithEtag: Resource & { etag?: undefined | string }

An azure resource object with an Etag property

ScheduledAlertRule

ScheduledAlertRule: AlertRule & { alertDetailsOverride?: AlertDetailsOverride; alertRuleTemplateName?: undefined | string; customDetails?: undefined | {}; description?: undefined | string; displayName?: undefined | string; enabled?: undefined | false | true; entityMappings?: EntityMapping[]; eventGroupingSettings?: EventGroupingSettings; incidentConfiguration?: IncidentConfiguration; lastModifiedUtc?: Date; query?: undefined | string; queryFrequency?: undefined | string; queryPeriod?: undefined | string; severity?: AlertSeverity; suppressionDuration?: undefined | string; suppressionEnabled?: undefined | false | true; tactics?: AttackTactic[]; techniques?: string[]; templateVersion?: undefined | string; triggerOperator?: TriggerOperator; triggerThreshold?: undefined | number }

Represents scheduled alert rule.

ScheduledAlertRuleProperties

ScheduledAlertRuleProperties: ScheduledAlertRuleCommonProperties & { alertRuleTemplateName?: undefined | string; description?: undefined | string; displayName: string; enabled: boolean; incidentConfiguration?: IncidentConfiguration; lastModifiedUtc?: Date; suppressionDuration: string; suppressionEnabled: boolean; tactics?: AttackTactic[]; techniques?: string[]; templateVersion?: undefined | string }

Scheduled alert rule base property bag.

ScheduledAlertRuleTemplate

ScheduledAlertRuleTemplate: AlertRuleTemplate & { alertDetailsOverride?: AlertDetailsOverride; alertRulesCreatedByTemplateCount?: undefined | number; createdDateUTC?: Date; customDetails?: undefined | {}; description?: undefined | string; displayName?: undefined | string; entityMappings?: EntityMapping[]; eventGroupingSettings?: EventGroupingSettings; lastUpdatedDateUTC?: Date; query?: undefined | string; queryFrequency?: undefined | string; queryPeriod?: undefined | string; requiredDataConnectors?: AlertRuleTemplateDataSource[]; severity?: AlertSeverity; status?: TemplateStatus; tactics?: AttackTactic[]; techniques?: string[]; triggerOperator?: TriggerOperator; triggerThreshold?: undefined | number; version?: undefined | string }

Represents scheduled alert rule template.

SecurityAlert

SecurityAlert: Entity & { additionalData?: undefined | {}; alertDisplayName?: undefined | string; alertLink?: undefined | string; alertType?: undefined | string; compromisedEntity?: undefined | string; confidenceLevel?: ConfidenceLevel; confidenceReasons?: SecurityAlertPropertiesConfidenceReasonsItem[]; confidenceScore?: undefined | number; confidenceScoreStatus?: ConfidenceScoreStatus; description?: undefined | string; endTimeUtc?: Date; friendlyName?: undefined | string; intent?: KillChainIntent; processingEndTime?: Date; productComponentName?: undefined | string; productName?: undefined | string; productVersion?: undefined | string; providerAlertId?: undefined | string; remediationSteps?: string[]; resourceIdentifiers?: Record<string, unknown>[]; severity?: AlertSeverity; startTimeUtc?: Date; status?: AlertStatus; systemAlertId?: undefined | string; tactics?: AttackTactic[]; timeGenerated?: Date; vendorName?: undefined | string }

Represents a security alert entity.

SecurityAlertProperties

SecurityAlertProperties: EntityCommonProperties & { alertDisplayName?: undefined | string; alertLink?: undefined | string; alertType?: undefined | string; compromisedEntity?: undefined | string; confidenceLevel?: ConfidenceLevel; confidenceReasons?: SecurityAlertPropertiesConfidenceReasonsItem[]; confidenceScore?: undefined | number; confidenceScoreStatus?: ConfidenceScoreStatus; description?: undefined | string; endTimeUtc?: Date; intent?: KillChainIntent; processingEndTime?: Date; productComponentName?: undefined | string; productName?: undefined | string; productVersion?: undefined | string; providerAlertId?: undefined | string; remediationSteps?: string[]; resourceIdentifiers?: Record<string, unknown>[]; severity?: AlertSeverity; startTimeUtc?: Date; status?: AlertStatus; systemAlertId?: undefined | string; tactics?: AttackTactic[]; timeGenerated?: Date; vendorName?: undefined | string }

SecurityAlert entity property bag.

SecurityAlertTimelineItem

SecurityAlertTimelineItem: EntityTimelineItem & { alertType: string; azureResourceId: string; description?: undefined | string; displayName: string; endTimeUtc: Date; kind: "SecurityAlert"; productName?: undefined | string; severity: AlertSeverity; startTimeUtc: Date; timeGenerated: Date }

Represents security alert timeline item.

SecurityGroupEntity

SecurityGroupEntity: Entity & { additionalData?: undefined | {}; distinguishedName?: undefined | string; friendlyName?: undefined | string; objectGuid?: undefined | string; sid?: undefined | string }

Represents a security group entity.

SecurityGroupEntityProperties

SecurityGroupEntityProperties: EntityCommonProperties & { distinguishedName?: undefined | string; objectGuid?: undefined | string; sid?: undefined | string }

SecurityGroup entity property bag.

SentinelOnboardingState

SentinelOnboardingState: ResourceWithEtag & { customerManagedKey?: undefined | false | true }

Sentinel onboarding state

SentinelOnboardingStatesCreateResponse

SentinelOnboardingStatesCreateResponse: SentinelOnboardingState

Contains response data for the create operation.

SentinelOnboardingStatesGetResponse

SentinelOnboardingStatesGetResponse: SentinelOnboardingState

Contains response data for the get operation.

SentinelOnboardingStatesListResponse

SentinelOnboardingStatesListResponse: SentinelOnboardingStatesList

Contains response data for the list operation.

SettingKind

SettingKind: string

Defines values for SettingKind.
KnownSettingKind can be used interchangeably with SettingKind, this enum contains the known values that the service supports.

Known values supported by the service

Anomalies
EyesOn
EntityAnalytics
Ueba

SettingType

SettingType: string

Defines values for SettingType.
KnownSettingType can be used interchangeably with SettingType, this enum contains the known values that the service supports.

Known values supported by the service

CopyableLabel
InstructionStepsGroup
InfoMessage

Settings

Settings: ResourceWithEtag & { kind: SettingKind }

The Setting.

SettingsUnion

SkuKind

SkuKind: string

Defines values for SkuKind.
KnownSkuKind can be used interchangeably with SkuKind, this enum contains the known values that the service supports.

Known values supported by the service

PerGB
CapacityReservation

SourceControl

SourceControl: ResourceWithEtag & { contentTypes?: ContentType[]; description?: undefined | string; displayName?: undefined | string; idPropertiesId?: undefined | string; lastDeploymentInfo?: DeploymentInfo; repoType?: RepoType; repository?: Repository; repositoryResourceInfo?: RepositoryResourceInfo; version?: Version }

Represents a SourceControl in Azure Security Insights.

SourceControlListRepositoriesNextResponse

SourceControlListRepositoriesNextResponse: RepoList

Contains response data for the listRepositoriesNext operation.

SourceControlListRepositoriesResponse

SourceControlListRepositoriesResponse: RepoList

Contains response data for the listRepositories operation.

SourceControlsCreateResponse

SourceControlsCreateResponse: SourceControl

Contains response data for the create operation.

SourceControlsGetResponse

SourceControlsGetResponse: SourceControl

Contains response data for the get operation.

SourceControlsListNextResponse

SourceControlsListNextResponse: SourceControlList

Contains response data for the listNext operation.

SourceControlsListResponse

SourceControlsListResponse: SourceControlList

Contains response data for the list operation.

SourceKind

SourceKind: string

Defines values for SourceKind.
KnownSourceKind can be used interchangeably with SourceKind, this enum contains the known values that the service supports.

Known values supported by the service

LocalWorkspace
Community
Solution
SourceRepository

SourceType

SourceType: string

Defines values for SourceType.
KnownSourceType can be used interchangeably with SourceType, this enum contains the known values that the service supports.

Known values supported by the service

Local file
Remote storage

SubmissionMailEntity

SubmissionMailEntity: Entity & { additionalData?: undefined | {}; friendlyName?: undefined | string; networkMessageId?: undefined | string; recipient?: undefined | string; reportType?: undefined | string; sender?: undefined | string; senderIp?: undefined | string; subject?: undefined | string; submissionDate?: Date; submissionId?: undefined | string; submitter?: undefined | string; timestamp?: Date }

Represents a submission mail entity.

SubmissionMailEntityProperties

SubmissionMailEntityProperties: EntityCommonProperties & { networkMessageId?: undefined | string; recipient?: undefined | string; reportType?: undefined | string; sender?: undefined | string; senderIp?: undefined | string; subject?: undefined | string; submissionDate?: Date; submissionId?: undefined | string; submitter?: undefined | string; timestamp?: Date }

Submission mail entity property bag.

SupportTier

SupportTier: string

Defines values for SupportTier.
KnownSupportTier can be used interchangeably with SupportTier, this enum contains the known values that the service supports.

Known values supported by the service

Microsoft
Partner
Community

TICheckRequirements

TICheckRequirements: DataConnectorsCheckRequirements & { kind: "ThreatIntelligence"; tenantId?: undefined | string }

Threat Intelligence Platforms data connector check requirements

TICheckRequirementsProperties

TICheckRequirementsProperties: DataConnectorTenantId & {}

Threat Intelligence Platforms data connector required properties.

TIDataConnector

TIDataConnector: DataConnector & { dataTypes?: TIDataConnectorDataTypes; tenantId?: undefined | string; tipLookbackPeriod?: Date }

Represents threat intelligence data connector.

TIDataConnectorDataTypesIndicators

TIDataConnectorDataTypesIndicators: DataConnectorDataTypeCommon & {}

Data type for indicators connection.

TIDataConnectorProperties

TIDataConnectorProperties: DataConnectorTenantId & { dataTypes: TIDataConnectorDataTypes; tipLookbackPeriod?: Date }

TI (Threat Intelligence) data connector properties.

TemplateStatus

TemplateStatus: string

Defines values for TemplateStatus.
KnownTemplateStatus can be used interchangeably with TemplateStatus, this enum contains the known values that the service supports.

Known values supported by the service

Installed: Alert rule template installed. and can not use more then once
Available: Alert rule template is available.
NotAvailable: Alert rule template is not available

ThreatIntelligenceAlertRule

ThreatIntelligenceAlertRule: AlertRule & { alertRuleTemplateName?: undefined | string; description?: undefined | string; displayName?: undefined | string; enabled?: undefined | false | true; lastModifiedUtc?: Date; severity?: AlertSeverity; tactics?: AttackTactic[]; techniques?: string[] }

Represents Threat Intelligence alert rule.

ThreatIntelligenceAlertRuleTemplate

ThreatIntelligenceAlertRuleTemplate: AlertRuleTemplate & { alertRulesCreatedByTemplateCount?: undefined | number; createdDateUTC?: Date; description?: undefined | string; displayName?: undefined | string; lastUpdatedDateUTC?: Date; requiredDataConnectors?: AlertRuleTemplateDataSource[]; severity?: AlertSeverity; status?: TemplateStatus; tactics?: AttackTactic[]; techniques?: string[] }

Represents Threat Intelligence alert rule template.

ThreatIntelligenceAlertRuleTemplateProperties

ThreatIntelligenceAlertRuleTemplateProperties: AlertRuleTemplateWithMitreProperties & { severity: AlertSeverity }

Threat Intelligence alert rule template properties

ThreatIntelligenceIndicatorCreateIndicatorResponse

ThreatIntelligenceIndicatorCreateIndicatorResponse: ThreatIntelligenceInformationUnion

Contains response data for the createIndicator operation.

ThreatIntelligenceIndicatorCreateResponse

ThreatIntelligenceIndicatorCreateResponse: ThreatIntelligenceInformationUnion

Contains response data for the create operation.

ThreatIntelligenceIndicatorGetResponse

ThreatIntelligenceIndicatorGetResponse: ThreatIntelligenceInformationUnion

Contains response data for the get operation.

ThreatIntelligenceIndicatorMetricsListResponse

ThreatIntelligenceIndicatorMetricsListResponse: ThreatIntelligenceMetricsList

Contains response data for the list operation.

ThreatIntelligenceIndicatorModel

ThreatIntelligenceIndicatorModel: ThreatIntelligenceInformation & { additionalData?: undefined | {}; confidence?: undefined | number; created?: undefined | string; createdByRef?: undefined | string; defanged?: undefined | false | true; description?: undefined | string; displayName?: undefined | string; extensions?: undefined | {}; externalId?: undefined | string; externalLastUpdatedTimeUtc?: undefined | string; externalReferences?: ThreatIntelligenceExternalReference[]; friendlyName?: undefined | string; granularMarkings?: ThreatIntelligenceGranularMarkingModel[]; indicatorTypes?: string[]; killChainPhases?: ThreatIntelligenceKillChainPhase[]; labels?: string[]; language?: undefined | string; lastUpdatedTimeUtc?: undefined | string; modified?: undefined | string; objectMarkingRefs?: string[]; parsedPattern?: ThreatIntelligenceParsedPattern[]; pattern?: undefined | string; patternType?: undefined | string; patternVersion?: undefined | string; revoked?: undefined | false | true; source?: undefined | string; threatIntelligenceTags?: string[]; threatTypes?: string[]; validFrom?: undefined | string; validUntil?: undefined | string }

Threat intelligence indicator entity.

ThreatIntelligenceIndicatorProperties

ThreatIntelligenceIndicatorProperties: EntityCommonProperties & { confidence?: undefined | number; created?: undefined | string; createdByRef?: undefined | string; defanged?: undefined | false | true; description?: undefined | string; displayName?: undefined | string; extensions?: undefined | {}; externalId?: undefined | string; externalLastUpdatedTimeUtc?: undefined | string; externalReferences?: ThreatIntelligenceExternalReference[]; granularMarkings?: ThreatIntelligenceGranularMarkingModel[]; indicatorTypes?: string[]; killChainPhases?: ThreatIntelligenceKillChainPhase[]; labels?: string[]; language?: undefined | string; lastUpdatedTimeUtc?: undefined | string; modified?: undefined | string; objectMarkingRefs?: string[]; parsedPattern?: ThreatIntelligenceParsedPattern[]; pattern?: undefined | string; patternType?: undefined | string; patternVersion?: undefined | string; revoked?: undefined | false | true; source?: undefined | string; threatIntelligenceTags?: string[]; threatTypes?: string[]; validFrom?: undefined | string; validUntil?: undefined | string }

Describes threat intelligence entity properties

ThreatIntelligenceIndicatorQueryIndicatorsNextResponse

ThreatIntelligenceIndicatorQueryIndicatorsNextResponse: ThreatIntelligenceInformationList

Contains response data for the queryIndicatorsNext operation.

ThreatIntelligenceIndicatorQueryIndicatorsResponse

ThreatIntelligenceIndicatorQueryIndicatorsResponse: ThreatIntelligenceInformationList

Contains response data for the queryIndicators operation.

ThreatIntelligenceIndicatorReplaceTagsResponse

ThreatIntelligenceIndicatorReplaceTagsResponse: ThreatIntelligenceInformationUnion

Contains response data for the replaceTags operation.

ThreatIntelligenceIndicatorsListNextResponse

ThreatIntelligenceIndicatorsListNextResponse: ThreatIntelligenceInformationList

Contains response data for the listNext operation.

ThreatIntelligenceIndicatorsListResponse

ThreatIntelligenceIndicatorsListResponse: ThreatIntelligenceInformationList

Contains response data for the list operation.

ThreatIntelligenceInformation

ThreatIntelligenceInformation: ResourceWithEtag & { kind: ThreatIntelligenceResourceKindEnum }

Threat intelligence information object.

ThreatIntelligenceInformationUnion

ThreatIntelligenceResourceKindEnum

ThreatIntelligenceResourceKindEnum: string

Defines values for ThreatIntelligenceResourceKindEnum.
KnownThreatIntelligenceResourceKindEnum can be used interchangeably with ThreatIntelligenceResourceKindEnum, this enum contains the known values that the service supports.

Known values supported by the service

indicator: Entity represents threat intelligence indicator in the system.

ThreatIntelligenceSortingCriteriaEnum

ThreatIntelligenceSortingCriteriaEnum: string

Defines values for ThreatIntelligenceSortingCriteriaEnum.
KnownThreatIntelligenceSortingCriteriaEnum can be used interchangeably with ThreatIntelligenceSortingCriteriaEnum, this enum contains the known values that the service supports.

Known values supported by the service

unsorted
ascending
descending

TiTaxiiCheckRequirements

TiTaxiiCheckRequirements: DataConnectorsCheckRequirements & { kind: "ThreatIntelligenceTaxii"; tenantId?: undefined | string }

Threat Intelligence TAXII data connector check requirements

TiTaxiiCheckRequirementsProperties

TiTaxiiCheckRequirementsProperties: DataConnectorTenantId & {}

Threat Intelligence TAXII data connector required properties.

TiTaxiiDataConnector

TiTaxiiDataConnector: DataConnector & { collectionId?: undefined | string; dataTypes?: TiTaxiiDataConnectorDataTypes; friendlyName?: undefined | string; password?: undefined | string; pollingFrequency?: PollingFrequency; taxiiLookbackPeriod?: Date; taxiiServer?: undefined | string; tenantId?: undefined | string; userName?: undefined | string; workspaceId?: undefined | string }

Data connector to pull Threat intelligence data from TAXII 2.0/2.1 server

TiTaxiiDataConnectorDataTypesTaxiiClient

TiTaxiiDataConnectorDataTypesTaxiiClient: DataConnectorDataTypeCommon & {}

Data type for TAXII connector.

TiTaxiiDataConnectorProperties

TiTaxiiDataConnectorProperties: DataConnectorTenantId & { collectionId?: undefined | string; dataTypes: TiTaxiiDataConnectorDataTypes; friendlyName?: undefined | string; password?: undefined | string; pollingFrequency: PollingFrequency | null; taxiiLookbackPeriod?: Date; taxiiServer?: undefined | string; userName?: undefined | string; workspaceId?: undefined | string }

Threat Intelligence TAXII data connector properties.

TriggerOperator

TriggerOperator: "GreaterThan" | "LessThan" | "Equal" | "NotEqual"

Defines values for TriggerOperator.

TriggersOn

TriggersOn: string

Defines values for TriggersOn.
KnownTriggersOn can be used interchangeably with TriggersOn, this enum contains the known values that the service supports.

Known values supported by the service

Incidents: Trigger on Incidents

TriggersWhen

TriggersWhen: string

Defines values for TriggersWhen.
KnownTriggersWhen can be used interchangeably with TriggersWhen, this enum contains the known values that the service supports.

Known values supported by the service

Created: Trigger on created objects

Ueba

Ueba: Settings & { dataSources?: UebaDataSources[] }

Settings with single toggle.

UebaDataSources

UebaDataSources: string

Defines values for UebaDataSources.
KnownUebaDataSources can be used interchangeably with UebaDataSources, this enum contains the known values that the service supports.

Known values supported by the service

AuditLogs
AzureActivity
SecurityEvent
SigninLogs

UrlEntity

UrlEntity: Entity & { additionalData?: undefined | {}; friendlyName?: undefined | string; url?: undefined | string }

Represents a url entity.

UrlEntityProperties

UrlEntityProperties: EntityCommonProperties & { url?: undefined | string }

Url entity property bag.

Version

Version: string

Defines values for Version.
KnownVersion can be used interchangeably with Version, this enum contains the known values that the service supports.

Known values supported by the service

V1
V2

Watchlist

Watchlist: ResourceWithEtag & { contentType?: undefined | string; created?: Date; createdBy?: UserInfo; defaultDuration?: undefined | string; description?: undefined | string; displayName?: undefined | string; isDeleted?: undefined | false | true; itemsSearchKey?: undefined | string; labels?: string[]; numberOfLinesToSkip?: undefined | number; provider?: undefined | string; provisioningState?: ProvisioningState; rawContent?: undefined | string; sasUri?: undefined | string; source?: undefined | string; sourceType?: SourceType; tenantId?: undefined | string; updated?: Date; updatedBy?: UserInfo; uploadStatus?: undefined | string; watchlistAlias?: undefined | string; watchlistId?: undefined | string; watchlistType?: undefined | string }

Represents a Watchlist in Azure Security Insights.

WatchlistItem

WatchlistItem: ResourceWithEtag & { created?: Date; createdBy?: UserInfo; entityMapping?: undefined | {}; isDeleted?: undefined | false | true; itemsKeyValue?: undefined | {}; tenantId?: undefined | string; updated?: Date; updatedBy?: UserInfo; watchlistItemId?: undefined | string; watchlistItemType?: undefined | string }

Represents a Watchlist item in Azure Security Insights.

WatchlistItemsCreateOrUpdateResponse

WatchlistItemsCreateOrUpdateResponse: WatchlistItem

Contains response data for the createOrUpdate operation.

WatchlistItemsGetResponse

WatchlistItemsGetResponse: WatchlistItem

Contains response data for the get operation.

WatchlistItemsListNextResponse

WatchlistItemsListNextResponse: WatchlistItemList

Contains response data for the listNext operation.

WatchlistItemsListResponse

WatchlistItemsListResponse: WatchlistItemList

Contains response data for the list operation.

WatchlistsCreateOrUpdateResponse

WatchlistsCreateOrUpdateResponse: Watchlist

Contains response data for the createOrUpdate operation.

WatchlistsDeleteResponse

WatchlistsDeleteResponse: WatchlistsDeleteHeaders

Contains response data for the delete operation.

WatchlistsGetResponse

WatchlistsGetResponse: Watchlist

Contains response data for the get operation.

WatchlistsListNextResponse

WatchlistsListNextResponse: WatchlistList

Contains response data for the listNext operation.

WatchlistsListResponse

WatchlistsListResponse: WatchlistList

Contains response data for the list operation.

Variables

Const serializer

serializer: any = coreClient.createSerializer(Mappers, /* isXml */ false)

Object literals

Const $host

$host: object

parameterPath

parameterPath: string = "$host"

skipEncoding

skipEncoding: boolean = true

mapper

mapper: object

required

required: boolean = true

serializedName

serializedName: string = "$host"

type

type: object

name

name: string = "String"

Const AADCheckRequirements

AADCheckRequirements: object

serializedName

serializedName: string = "AzureActiveDirectory"

type

type: object

className

className: string = "AADCheckRequirements"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = DataConnectorsCheckRequirements.type.polymorphicDiscriminator

uberParent

uberParent: string = "DataConnectorsCheckRequirements"

modelProperties

modelProperties: object

tenantId

tenantId: object

serializedName

serializedName: string = "properties.tenantId"

type

type: object

name

name: string = "String"

Const AADCheckRequirementsProperties

AADCheckRequirementsProperties: object

type

type: object

className

className: string = "AADCheckRequirementsProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

Const AADDataConnector

AADDataConnector: object

serializedName

serializedName: string = "AzureActiveDirectory"

type

type: object

className

className: string = "AADDataConnector"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = Resource.type.polymorphicDiscriminator

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

dataTypes

dataTypes: object

serializedName

serializedName: string = "properties.dataTypes"

type

type: object

className

className: string = "AlertsDataTypeOfDataConnector"

name

name: string = "Composite"

tenantId

tenantId: object

serializedName

serializedName: string = "properties.tenantId"

type

type: object

name

name: string = "String"

Const AADDataConnectorProperties

AADDataConnectorProperties: object

type

type: object

className

className: string = "AADDataConnectorProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

Const ASCCheckRequirements

ASCCheckRequirements: object

serializedName

serializedName: string = "AzureSecurityCenter"

type

type: object

className

className: string = "ASCCheckRequirements"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = DataConnectorsCheckRequirements.type.polymorphicDiscriminator

uberParent

uberParent: string = "DataConnectorsCheckRequirements"

modelProperties

modelProperties: object

subscriptionId

subscriptionId: object

serializedName

serializedName: string = "properties.subscriptionId"

type

type: object

name

name: string = "String"

Const ASCDataConnector

ASCDataConnector: object

serializedName

serializedName: string = "AzureSecurityCenter"

type

type: object

className

className: string = "ASCDataConnector"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = Resource.type.polymorphicDiscriminator

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

dataTypes

dataTypes: object

serializedName

serializedName: string = "properties.dataTypes"

type

type: object

className

className: string = "AlertsDataTypeOfDataConnector"

name

name: string = "Composite"

subscriptionId

subscriptionId: object

serializedName

serializedName: string = "properties.subscriptionId"

type

type: object

name

name: string = "String"

Const ASCDataConnectorProperties

ASCDataConnectorProperties: object

type

type: object

className

className: string = "ASCDataConnectorProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

subscriptionId

subscriptionId: object

serializedName

serializedName: string = "subscriptionId"

type

type: object

name

name: string = "String"

Const AatpCheckRequirements

AatpCheckRequirements: object

serializedName

serializedName: string = "AzureAdvancedThreatProtection"

type

type: object

className

className: string = "AatpCheckRequirements"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = DataConnectorsCheckRequirements.type.polymorphicDiscriminator

uberParent

uberParent: string = "DataConnectorsCheckRequirements"

modelProperties

modelProperties: object

tenantId

tenantId: object

serializedName

serializedName: string = "properties.tenantId"

type

type: object

name

name: string = "String"

Const AatpCheckRequirementsProperties

AatpCheckRequirementsProperties: object

type

type: object

className

className: string = "AatpCheckRequirementsProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

Const AatpDataConnector

AatpDataConnector: object

serializedName

serializedName: string = "AzureAdvancedThreatProtection"

type

type: object

className

className: string = "AatpDataConnector"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = Resource.type.polymorphicDiscriminator

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

dataTypes

dataTypes: object

serializedName

serializedName: string = "properties.dataTypes"

type

type: object

className

className: string = "AlertsDataTypeOfDataConnector"

name

name: string = "Composite"

tenantId

tenantId: object

serializedName

serializedName: string = "properties.tenantId"

type

type: object

name

name: string = "String"

Const AatpDataConnectorProperties

AatpDataConnectorProperties: object

type

type: object

className

className: string = "AatpDataConnectorProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

Const AccountEntity

AccountEntity: object

serializedName

serializedName: string = "Account"

type

type: object

className

className: string = "AccountEntity"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = Resource.type.polymorphicDiscriminator

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

aadTenantId

aadTenantId: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.aadTenantId"

type

type: object

name

name: string = "String"

aadUserId

aadUserId: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.aadUserId"

type

type: object

name

name: string = "String"

accountName

accountName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.accountName"

type

type: object

name

name: string = "String"

additionalData

additionalData: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.additionalData"

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "any"

displayName

displayName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.displayName"

type

type: object

name

name: string = "String"

dnsDomain

dnsDomain: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.dnsDomain"

type

type: object

name

name: string = "String"

friendlyName

friendlyName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.friendlyName"

type

type: object

name

name: string = "String"

hostEntityId

hostEntityId: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.hostEntityId"

type

type: object

name

name: string = "String"

isDomainJoined

isDomainJoined: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.isDomainJoined"

type

type: object

name

name: string = "Boolean"

ntDomain

ntDomain: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.ntDomain"

type

type: object

name

name: string = "String"

objectGuid

objectGuid: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.objectGuid"

type

type: object

name

name: string = "Uuid"

puid

puid: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.puid"

type

type: object

name

name: string = "String"

sid

sid: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.sid"

type

type: object

name

name: string = "String"

upnSuffix

upnSuffix: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.upnSuffix"

type

type: object

name

name: string = "String"

Const AccountEntityProperties

AccountEntityProperties: object

type

type: object

className

className: string = "AccountEntityProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

aadTenantId

aadTenantId: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "aadTenantId"

type

type: object

name

name: string = "String"

aadUserId

aadUserId: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "aadUserId"

type

type: object

name

name: string = "String"

accountName

accountName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "accountName"

type

type: object

name

name: string = "String"

displayName

displayName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "displayName"

type

type: object

name

name: string = "String"

dnsDomain

dnsDomain: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "dnsDomain"

type

type: object

name

name: string = "String"

hostEntityId

hostEntityId: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "hostEntityId"

type

type: object

name

name: string = "String"

isDomainJoined

isDomainJoined: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "isDomainJoined"

type

type: object

name

name: string = "Boolean"

ntDomain

ntDomain: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "ntDomain"

type

type: object

name

name: string = "String"

objectGuid

objectGuid: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "objectGuid"

type

type: object

name

name: string = "Uuid"

puid

puid: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "puid"

type

type: object

name

name: string = "String"

sid

sid: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "sid"

type

type: object

name

name: string = "String"

upnSuffix

upnSuffix: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "upnSuffix"

type

type: object

name

name: string = "String"

Const ActionPropertiesBase

ActionPropertiesBase: object

type

type: object

className

className: string = "ActionPropertiesBase"

name

name: string = "Composite"

modelProperties

modelProperties: object

logicAppResourceId

logicAppResourceId: object

required

required: boolean = true

serializedName

serializedName: string = "logicAppResourceId"

type

type: object

name

name: string = "String"

Const ActionRequest

ActionRequest: object

type

type: object

className

className: string = "ActionRequest"

name

name: string = "Composite"

modelProperties

modelProperties: object

logicAppResourceId

logicAppResourceId: object

serializedName

serializedName: string = "properties.logicAppResourceId"

type

type: object

name

name: string = "String"

triggerUri

triggerUri: object

serializedName

serializedName: string = "properties.triggerUri"

type

type: object

name

name: string = "String"

Const ActionRequestProperties

ActionRequestProperties: object

type

type: object

className

className: string = "ActionRequestProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

triggerUri

triggerUri: object

required

required: boolean = true

serializedName

serializedName: string = "triggerUri"

type

type: object

name

name: string = "String"

Const ActionResponse

ActionResponse: object

type

type: object

className

className: string = "ActionResponse"

name

name: string = "Composite"

modelProperties

modelProperties: object

logicAppResourceId

logicAppResourceId: object

serializedName

serializedName: string = "properties.logicAppResourceId"

type

type: object

name

name: string = "String"

workflowId

workflowId: object

serializedName

serializedName: string = "properties.workflowId"

type

type: object

name

name: string = "String"

Const ActionResponseProperties

ActionResponseProperties: object

type

type: object

className

className: string = "ActionResponseProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

workflowId

workflowId: object

serializedName

serializedName: string = "workflowId"

type

type: object

name

name: string = "String"

Const ActionsList

ActionsList: object

type

type: object

className

className: string = "ActionsList"

name

name: string = "Composite"

modelProperties

modelProperties: object

nextLink

nextLink: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "nextLink"

type

type: object

name

name: string = "String"

value

value: object

required

required: boolean = true

serializedName

serializedName: string = "value"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "ActionResponse"

name

name: string = "Composite"

Const ActivityCustomEntityQuery

ActivityCustomEntityQuery: object

serializedName

serializedName: string = "Activity"

type

type: object

className

className: string = "ActivityCustomEntityQuery"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = Resource.type.polymorphicDiscriminator

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

content

content: object

serializedName

serializedName: string = "properties.content"

type

type: object

name

name: string = "String"

createdTimeUtc

createdTimeUtc: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.createdTimeUtc"

type

type: object

name

name: string = "DateTime"

description

description: object

serializedName

serializedName: string = "properties.description"

type

type: object

name

name: string = "String"

enabled

enabled: object

serializedName

serializedName: string = "properties.enabled"

type

type: object

name

name: string = "Boolean"

entitiesFilter

entitiesFilter: object

serializedName

serializedName: string = "properties.entitiesFilter"

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

inputEntityType

inputEntityType: object

serializedName

serializedName: string = "properties.inputEntityType"

type

type: object

name

name: string = "String"

lastModifiedTimeUtc

lastModifiedTimeUtc: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.lastModifiedTimeUtc"

type

type: object

name

name: string = "DateTime"

queryDefinitions

queryDefinitions: object

serializedName

serializedName: string = "properties.queryDefinitions"

type

type: object

className

className: string = "ActivityEntityQueriesPropertiesQueryDefinitions"

name

name: string = "Composite"

requiredInputFieldsSets

requiredInputFieldsSets: object

serializedName

serializedName: string = "properties.requiredInputFieldsSets"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

templateName

templateName: object

serializedName

serializedName: string = "properties.templateName"

type

type: object

name

name: string = "String"

title

title: object

serializedName

serializedName: string = "properties.title"

type

type: object

name

name: string = "String"

Const ActivityEntityQueriesPropertiesQueryDefinitions

ActivityEntityQueriesPropertiesQueryDefinitions: object

type

type: object

className

className: string = "ActivityEntityQueriesPropertiesQueryDefinitions"

name

name: string = "Composite"

modelProperties

modelProperties: object

query

query: object

serializedName

serializedName: string = "query"

type

type: object

name

name: string = "String"

Const ActivityEntityQuery

ActivityEntityQuery: object

serializedName

serializedName: string = "Activity"

type

type: object

className

className: string = "ActivityEntityQuery"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = Resource.type.polymorphicDiscriminator

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

content

content: object

serializedName

serializedName: string = "properties.content"

type

type: object

name

name: string = "String"

createdTimeUtc

createdTimeUtc: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.createdTimeUtc"

type

type: object

name

name: string = "DateTime"

description

description: object

serializedName

serializedName: string = "properties.description"

type

type: object

name

name: string = "String"

enabled

enabled: object

serializedName

serializedName: string = "properties.enabled"

type

type: object

name

name: string = "Boolean"

entitiesFilter

entitiesFilter: object

serializedName

serializedName: string = "properties.entitiesFilter"

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

inputEntityType

inputEntityType: object

serializedName

serializedName: string = "properties.inputEntityType"

type

type: object

name

name: string = "String"

lastModifiedTimeUtc

lastModifiedTimeUtc: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.lastModifiedTimeUtc"

type

type: object

name

name: string = "DateTime"

queryDefinitions

queryDefinitions: object

serializedName

serializedName: string = "properties.queryDefinitions"

type

type: object

className

className: string = "ActivityEntityQueriesPropertiesQueryDefinitions"

name

name: string = "Composite"

requiredInputFieldsSets

requiredInputFieldsSets: object

serializedName

serializedName: string = "properties.requiredInputFieldsSets"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

templateName

templateName: object

serializedName

serializedName: string = "properties.templateName"

type

type: object

name

name: string = "String"

title

title: object

serializedName

serializedName: string = "properties.title"

type

type: object

name

name: string = "String"

Const ActivityEntityQueryTemplate

ActivityEntityQueryTemplate: object

serializedName

serializedName: string = "Activity"

type

type: object

className

className: string = "ActivityEntityQueryTemplate"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = Resource.type.polymorphicDiscriminator

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

content

content: object

serializedName

serializedName: string = "properties.content"

type

type: object

name

name: string = "String"

dataTypes

dataTypes: object

serializedName

serializedName: string = "properties.dataTypes"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "DataTypeDefinitions"

name

name: string = "Composite"

description

description: object

serializedName

serializedName: string = "properties.description"

type

type: object

name

name: string = "String"

entitiesFilter

entitiesFilter: object

serializedName

serializedName: string = "properties.entitiesFilter"

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

inputEntityType

inputEntityType: object

serializedName

serializedName: string = "properties.inputEntityType"

type

type: object

name

name: string = "String"

queryDefinitions

queryDefinitions: object

serializedName

serializedName: string = "properties.queryDefinitions"

type

type: object

className

className: string = "ActivityEntityQueryTemplatePropertiesQueryDefinitions"

name

name: string = "Composite"

requiredInputFieldsSets

requiredInputFieldsSets: object

serializedName

serializedName: string = "properties.requiredInputFieldsSets"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

title

title: object

serializedName

serializedName: string = "properties.title"

type

type: object

name

name: string = "String"

Const ActivityEntityQueryTemplatePropertiesQueryDefinitions

ActivityEntityQueryTemplatePropertiesQueryDefinitions: object

type

type: object

className

className: string = "ActivityEntityQueryTemplatePropertiesQueryDefinitions"

name

name: string = "Composite"

modelProperties

modelProperties: object

query

query: object

serializedName

serializedName: string = "query"

type

type: object

name

name: string = "String"

summarizeBy

summarizeBy: object

serializedName

serializedName: string = "summarizeBy"

type

type: object

name

name: string = "String"

Const ActivityTimelineItem

ActivityTimelineItem: object

serializedName

serializedName: string = "Activity"

type

type: object

className

className: string = "ActivityTimelineItem"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = EntityTimelineItem.type.polymorphicDiscriminator

uberParent

uberParent: string = "EntityTimelineItem"

modelProperties

modelProperties: object

bucketEndTimeUTC

bucketEndTimeUTC: object

required

required: boolean = true

serializedName

serializedName: string = "bucketEndTimeUTC"

type

type: object

name

name: string = "DateTime"

bucketStartTimeUTC

bucketStartTimeUTC: object

required

required: boolean = true

serializedName

serializedName: string = "bucketStartTimeUTC"

type

type: object

name

name: string = "DateTime"

content

content: object

required

required: boolean = true

serializedName

serializedName: string = "content"

type

type: object

name

name: string = "String"

firstActivityTimeUTC

firstActivityTimeUTC: object

required

required: boolean = true

serializedName

serializedName: string = "firstActivityTimeUTC"

type

type: object

name

name: string = "DateTime"

lastActivityTimeUTC

lastActivityTimeUTC: object

required

required: boolean = true

serializedName

serializedName: string = "lastActivityTimeUTC"

type

type: object

name

name: string = "DateTime"

queryId

queryId: object

required

required: boolean = true

serializedName

serializedName: string = "queryId"

type

type: object

name

name: string = "String"

title

title: object

required

required: boolean = true

serializedName

serializedName: string = "title"

type

type: object

name

name: string = "String"

Const AlertDetailsOverride

AlertDetailsOverride: object

type

type: object

className

className: string = "AlertDetailsOverride"

name

name: string = "Composite"

modelProperties

modelProperties: object

alertDescriptionFormat

alertDescriptionFormat: object

serializedName

serializedName: string = "alertDescriptionFormat"

type

type: object

name

name: string = "String"

alertDisplayNameFormat

alertDisplayNameFormat: object

serializedName

serializedName: string = "alertDisplayNameFormat"

type

type: object

name

name: string = "String"

alertSeverityColumnName

alertSeverityColumnName: object

serializedName

serializedName: string = "alertSeverityColumnName"

type

type: object

name

name: string = "String"

alertTacticsColumnName

alertTacticsColumnName: object

serializedName

serializedName: string = "alertTacticsColumnName"

type

type: object

name

name: string = "String"

Const AlertRule

AlertRule: object

serializedName

serializedName: string = "AlertRule"

type

type: object

className

className: string = "AlertRule"

name

name: string = "Composite"

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

kind

kind: object

required

required: boolean = true

serializedName

serializedName: string = "kind"

type

type: object

name

name: string = "String"

polymorphicDiscriminator

polymorphicDiscriminator: object

clientName

clientName: string = "kind"

serializedName

serializedName: string = "kind"

Const AlertRuleTemplate

AlertRuleTemplate: object

serializedName

serializedName: string = "AlertRuleTemplate"

type

type: object

className

className: string = "AlertRuleTemplate"

name

name: string = "Composite"

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

kind

kind: object

required

required: boolean = true

serializedName

serializedName: string = "kind"

type

type: object

name

name: string = "String"

polymorphicDiscriminator

polymorphicDiscriminator: object

clientName

clientName: string = "kind"

serializedName

serializedName: string = "kind"

Const AlertRuleTemplateDataSource

AlertRuleTemplateDataSource: object

type

type: object

className

className: string = "AlertRuleTemplateDataSource"

name

name: string = "Composite"

modelProperties

modelProperties: object

connectorId

connectorId: object

serializedName

serializedName: string = "connectorId"

type

type: object

name

name: string = "String"

dataTypes

dataTypes: object

serializedName

serializedName: string = "dataTypes"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

Const AlertRuleTemplatePropertiesBase

AlertRuleTemplatePropertiesBase: object

type

type: object

className

className: string = "AlertRuleTemplatePropertiesBase"

name

name: string = "Composite"

modelProperties

modelProperties: object

alertRulesCreatedByTemplateCount

alertRulesCreatedByTemplateCount: object

serializedName

serializedName: string = "alertRulesCreatedByTemplateCount"

type

type: object

name

name: string = "Number"

createdDateUTC

createdDateUTC: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "createdDateUTC"

type

type: object

name

name: string = "DateTime"

description

description: object

serializedName

serializedName: string = "description"

type

type: object

name

name: string = "String"

displayName

displayName: object

serializedName

serializedName: string = "displayName"

type

type: object

name

name: string = "String"

lastUpdatedDateUTC

lastUpdatedDateUTC: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "lastUpdatedDateUTC"

type

type: object

name

name: string = "DateTime"

requiredDataConnectors

requiredDataConnectors: object

serializedName

serializedName: string = "requiredDataConnectors"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "AlertRuleTemplateDataSource"

name

name: string = "Composite"

status

status: object

serializedName

serializedName: string = "status"

type

type: object

name

name: string = "String"

Const AlertRuleTemplateWithMitreProperties

AlertRuleTemplateWithMitreProperties: object

type

type: object

className

className: string = "AlertRuleTemplateWithMitreProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

tactics

tactics: object

serializedName

serializedName: string = "tactics"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

techniques

techniques: object

serializedName

serializedName: string = "techniques"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

Const AlertRuleTemplatesList

AlertRuleTemplatesList: object

type

type: object

className

className: string = "AlertRuleTemplatesList"

name

name: string = "Composite"

modelProperties

modelProperties: object

nextLink

nextLink: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "nextLink"

type

type: object

name

name: string = "String"

value

value: object

required

required: boolean = true

serializedName

serializedName: string = "value"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "AlertRuleTemplate"

name

name: string = "Composite"

Const AlertRulesList

AlertRulesList: object

type

type: object

className

className: string = "AlertRulesList"

name

name: string = "Composite"

modelProperties

modelProperties: object

nextLink

nextLink: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "nextLink"

type

type: object

name

name: string = "String"

value

value: object

required

required: boolean = true

serializedName

serializedName: string = "value"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "AlertRule"

name

name: string = "Composite"

Const AlertsDataTypeOfDataConnector

AlertsDataTypeOfDataConnector: object

type

type: object

className

className: string = "AlertsDataTypeOfDataConnector"

name

name: string = "Composite"

modelProperties

modelProperties: object

alerts

alerts: object

serializedName

serializedName: string = "alerts"

type

type: object

className

className: string = "DataConnectorDataTypeCommon"

name

name: string = "Composite"

Const Anomalies

Anomalies: object

serializedName

serializedName: string = "Anomalies"

type

type: object

className

className: string = "Anomalies"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = Resource.type.polymorphicDiscriminator

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

isEnabled

isEnabled: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.isEnabled"

type

type: object

name

name: string = "Boolean"

Const AutomationRule

AutomationRule: object

type

type: object

className

className: string = "AutomationRule"

name

name: string = "Composite"

modelProperties

modelProperties: object

actions

actions: object

required

required: boolean = true

serializedName

serializedName: string = "properties.actions"

constraints

constraints: object

MaxItems

MaxItems: number = 20

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "AutomationRuleAction"

name

name: string = "Composite"

createdBy

createdBy: object

serializedName

serializedName: string = "properties.createdBy"

type

type: object

className

className: string = "ClientInfo"

name

name: string = "Composite"

createdTimeUtc

createdTimeUtc: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.createdTimeUtc"

type

type: object

name

name: string = "DateTime"

displayName

displayName: object

required

required: boolean = true

serializedName

serializedName: string = "properties.displayName"

constraints

constraints: object

MaxLength

MaxLength: number = 500

type

type: object

name

name: string = "String"

lastModifiedBy

lastModifiedBy: object

serializedName

serializedName: string = "properties.lastModifiedBy"

type

type: object

className

className: string = "ClientInfo"

name

name: string = "Composite"

lastModifiedTimeUtc

lastModifiedTimeUtc: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.lastModifiedTimeUtc"

type

type: object

name

name: string = "DateTime"

order

order: object

required

required: boolean = true

serializedName

serializedName: string = "properties.order"

constraints

constraints: object

InclusiveMaximum

InclusiveMaximum: number = 1000

InclusiveMinimum

InclusiveMinimum: number = 1

type

type: object

name

name: string = "Number"

triggeringLogic

triggeringLogic: object

serializedName

serializedName: string = "properties.triggeringLogic"

type

type: object

className

className: string = "AutomationRuleTriggeringLogic"

name

name: string = "Composite"

Const AutomationRuleAction

AutomationRuleAction: object

type

type: object

className

className: string = "AutomationRuleAction"

name

name: string = "Composite"

uberParent

uberParent: string = "AutomationRuleAction"

modelProperties

modelProperties: object

actionType

actionType: object

required

required: boolean = true

serializedName

serializedName: string = "actionType"

type

type: object

name

name: string = "String"

order

order: object

required

required: boolean = true

serializedName

serializedName: string = "order"

type

type: object

name

name: string = "Number"

polymorphicDiscriminator

polymorphicDiscriminator: object

clientName

clientName: string = "actionType"

serializedName

serializedName: string = "actionType"

Const AutomationRuleCondition

AutomationRuleCondition: object

type

type: object

className

className: string = "AutomationRuleCondition"

name

name: string = "Composite"

uberParent

uberParent: string = "AutomationRuleCondition"

modelProperties

modelProperties: object

conditionType

conditionType: object

required

required: boolean = true

serializedName

serializedName: string = "conditionType"

type

type: object

name

name: string = "String"

polymorphicDiscriminator

polymorphicDiscriminator: object

clientName

clientName: string = "conditionType"

serializedName

serializedName: string = "conditionType"

Const AutomationRuleModifyPropertiesAction

AutomationRuleModifyPropertiesAction: object

serializedName

serializedName: string = "ModifyProperties"

type

type: object

className

className: string = "AutomationRuleModifyPropertiesAction"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = AutomationRuleAction.type.polymorphicDiscriminator

uberParent

uberParent: string = "AutomationRuleAction"

modelProperties

modelProperties: object

actionConfiguration

actionConfiguration: object

serializedName

serializedName: string = "actionConfiguration"

type

type: object

className

className: string = "IncidentPropertiesAction"

name

name: string = "Composite"

Const AutomationRulePropertyValuesCondition

AutomationRulePropertyValuesCondition: object

type

type: object

className

className: string = "AutomationRulePropertyValuesCondition"

name

name: string = "Composite"

modelProperties

modelProperties: object

operator

operator: object

serializedName

serializedName: string = "operator"

type

type: object

name

name: string = "String"

propertyName

propertyName: object

serializedName

serializedName: string = "propertyName"

type

type: object

name

name: string = "String"

propertyValues

propertyValues: object

serializedName

serializedName: string = "propertyValues"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

Const AutomationRuleRunPlaybookAction

AutomationRuleRunPlaybookAction: object

serializedName

serializedName: string = "RunPlaybook"

type

type: object

className

className: string = "AutomationRuleRunPlaybookAction"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = AutomationRuleAction.type.polymorphicDiscriminator

uberParent

uberParent: string = "AutomationRuleAction"

modelProperties

modelProperties: object

actionConfiguration

actionConfiguration: object

serializedName

serializedName: string = "actionConfiguration"

type

type: object

className

className: string = "PlaybookActionProperties"

name

name: string = "Composite"

Const AutomationRuleTriggeringLogic

AutomationRuleTriggeringLogic: object

type

type: object

className

className: string = "AutomationRuleTriggeringLogic"

name

name: string = "Composite"

modelProperties

modelProperties: object

conditions

conditions: object

serializedName

serializedName: string = "conditions"

constraints

constraints: object

MaxItems

MaxItems: number = 50

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "AutomationRuleCondition"

name

name: string = "Composite"

expirationTimeUtc

expirationTimeUtc: object

serializedName

serializedName: string = "expirationTimeUtc"

type

type: object

name

name: string = "DateTime"

isEnabled

isEnabled: object

required

required: boolean = true

serializedName

serializedName: string = "isEnabled"

type

type: object

name

name: string = "Boolean"

triggersOn

triggersOn: object

required

required: boolean = true

serializedName

serializedName: string = "triggersOn"

type

type: object

name

name: string = "String"

triggersWhen

triggersWhen: object

required

required: boolean = true

serializedName

serializedName: string = "triggersWhen"

type

type: object

name

name: string = "String"

Const AutomationRulesList

AutomationRulesList: object

type

type: object

className

className: string = "AutomationRulesList"

name

name: string = "Composite"

modelProperties

modelProperties: object

nextLink

nextLink: object

serializedName

serializedName: string = "nextLink"

type

type: object

name

name: string = "String"

value

value: object

serializedName

serializedName: string = "value"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "AutomationRule"

name

name: string = "Composite"

Const Availability

Availability: object

type

type: object

className

className: string = "Availability"

name

name: string = "Composite"

modelProperties

modelProperties: object

isPreview

isPreview: object

serializedName

serializedName: string = "isPreview"

type

type: object

name

name: string = "Boolean"

status

status: object

defaultValue

defaultValue: number = 1

isConstant

isConstant: boolean = true

serializedName

serializedName: string = "status"

type

type: object

name

name: string = "Number"

Const AwsCloudTrailCheckRequirements

AwsCloudTrailCheckRequirements: object

serializedName

serializedName: string = "AmazonWebServicesCloudTrail"

type

type: object

className

className: string = "AwsCloudTrailCheckRequirements"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = DataConnectorsCheckRequirements.type.polymorphicDiscriminator

uberParent

uberParent: string = "DataConnectorsCheckRequirements"

modelProperties

modelProperties: object

Const AwsCloudTrailDataConnector

AwsCloudTrailDataConnector: object

serializedName

serializedName: string = "AmazonWebServicesCloudTrail"

type

type: object

className

className: string = "AwsCloudTrailDataConnector"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = Resource.type.polymorphicDiscriminator

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

awsRoleArn

awsRoleArn: object

serializedName

serializedName: string = "properties.awsRoleArn"

type

type: object

name

name: string = "String"

dataTypes

dataTypes: object

serializedName

serializedName: string = "properties.dataTypes"

type

type: object

className

className: string = "AwsCloudTrailDataConnectorDataTypes"

name

name: string = "Composite"

Const AwsCloudTrailDataConnectorDataTypes

AwsCloudTrailDataConnectorDataTypes: object

type

type: object

className

className: string = "AwsCloudTrailDataConnectorDataTypes"

name

name: string = "Composite"

modelProperties

modelProperties: object

logs

logs: object

serializedName

serializedName: string = "logs"

type

type: object

className

className: string = "AwsCloudTrailDataConnectorDataTypesLogs"

name

name: string = "Composite"

Const AwsCloudTrailDataConnectorDataTypesLogs

AwsCloudTrailDataConnectorDataTypesLogs: object

type

type: object

className

className: string = "AwsCloudTrailDataConnectorDataTypesLogs"

name

name: string = "Composite"

modelProperties

modelProperties: object

Const AwsS3CheckRequirements

AwsS3CheckRequirements: object

serializedName

serializedName: string = "AmazonWebServicesS3"

type

type: object

className

className: string = "AwsS3CheckRequirements"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = DataConnectorsCheckRequirements.type.polymorphicDiscriminator

uberParent

uberParent: string = "DataConnectorsCheckRequirements"

modelProperties

modelProperties: object

Const AwsS3DataConnector

AwsS3DataConnector: object

serializedName

serializedName: string = "AmazonWebServicesS3"

type

type: object

className

className: string = "AwsS3DataConnector"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = Resource.type.polymorphicDiscriminator

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

dataTypes

dataTypes: object

serializedName

serializedName: string = "properties.dataTypes"

type

type: object

className

className: string = "AwsS3DataConnectorDataTypes"

name

name: string = "Composite"

destinationTable

destinationTable: object

serializedName

serializedName: string = "properties.destinationTable"

type

type: object

name

name: string = "String"

roleArn

roleArn: object

serializedName

serializedName: string = "properties.roleArn"

type

type: object

name

name: string = "String"

sqsUrls

sqsUrls: object

serializedName

serializedName: string = "properties.sqsUrls"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

Const AwsS3DataConnectorDataTypes

AwsS3DataConnectorDataTypes: object

type

type: object

className

className: string = "AwsS3DataConnectorDataTypes"

name

name: string = "Composite"

modelProperties

modelProperties: object

logs

logs: object

serializedName

serializedName: string = "logs"

type

type: object

className

className: string = "AwsS3DataConnectorDataTypesLogs"

name

name: string = "Composite"

Const AwsS3DataConnectorDataTypesLogs

AwsS3DataConnectorDataTypesLogs: object

type

type: object

className

className: string = "AwsS3DataConnectorDataTypesLogs"

name

name: string = "Composite"

modelProperties

modelProperties: object

Const AzureDevOpsResourceInfo

AzureDevOpsResourceInfo: object

type

type: object

className

className: string = "AzureDevOpsResourceInfo"

name

name: string = "Composite"

modelProperties

modelProperties: object

pipelineId

pipelineId: object

serializedName

serializedName: string = "pipelineId"

type

type: object

name

name: string = "String"

serviceConnectionId

serviceConnectionId: object

serializedName

serializedName: string = "serviceConnectionId"

type

type: object

name

name: string = "String"

Const AzureResourceEntity

AzureResourceEntity: object

serializedName

serializedName: string = "AzureResource"

type

type: object

className

className: string = "AzureResourceEntity"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = Resource.type.polymorphicDiscriminator

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

additionalData

additionalData: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.additionalData"

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "any"

friendlyName

friendlyName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.friendlyName"

type

type: object

name

name: string = "String"

resourceId

resourceId: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.resourceId"

type

type: object

name

name: string = "String"

subscriptionId

subscriptionId: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.subscriptionId"

type

type: object

name

name: string = "String"

Const AzureResourceEntityProperties

AzureResourceEntityProperties: object

type

type: object

className

className: string = "AzureResourceEntityProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

resourceId

resourceId: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "resourceId"

type

type: object

name

name: string = "String"

subscriptionId

subscriptionId: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "subscriptionId"

type

type: object

name

name: string = "String"

Const Bookmark

Bookmark: object

type

type: object

className

className: string = "Bookmark"

name

name: string = "Composite"

modelProperties

modelProperties: object

created

created: object

serializedName

serializedName: string = "properties.created"

type

type: object

name

name: string = "DateTime"

createdBy

createdBy: object

serializedName

serializedName: string = "properties.createdBy"

type

type: object

className

className: string = "UserInfo"

name

name: string = "Composite"

displayName

displayName: object

serializedName

serializedName: string = "properties.displayName"

type

type: object

name

name: string = "String"

entityMappings

entityMappings: object

serializedName

serializedName: string = "properties.entityMappings"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "BookmarkEntityMappings"

name

name: string = "Composite"

eventTime

eventTime: object

serializedName

serializedName: string = "properties.eventTime"

type

type: object

name

name: string = "DateTime"

incidentInfo

incidentInfo: object

serializedName

serializedName: string = "properties.incidentInfo"

type

type: object

className

className: string = "IncidentInfo"

name

name: string = "Composite"

labels

labels: object

serializedName

serializedName: string = "properties.labels"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

notes

notes: object

serializedName

serializedName: string = "properties.notes"

type

type: object

name

name: string = "String"

query

query: object

serializedName

serializedName: string = "properties.query"

type

type: object

name

name: string = "String"

queryEndTime

queryEndTime: object

serializedName

serializedName: string = "properties.queryEndTime"

type

type: object

name

name: string = "DateTime"

queryResult

queryResult: object

serializedName

serializedName: string = "properties.queryResult"

type

type: object

name

name: string = "String"

queryStartTime

queryStartTime: object

serializedName

serializedName: string = "properties.queryStartTime"

type

type: object

name

name: string = "DateTime"

tactics

tactics: object

serializedName

serializedName: string = "properties.tactics"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

techniques

techniques: object

serializedName

serializedName: string = "properties.techniques"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

updated

updated: object

serializedName

serializedName: string = "properties.updated"

type

type: object

name

name: string = "DateTime"

updatedBy

updatedBy: object

serializedName

serializedName: string = "properties.updatedBy"

type

type: object

className

className: string = "UserInfo"

name

name: string = "Composite"

Const BookmarkEntityMappings

BookmarkEntityMappings: object

type

type: object

className

className: string = "BookmarkEntityMappings"

name

name: string = "Composite"

modelProperties

modelProperties: object

entityType

entityType: object

serializedName

serializedName: string = "entityType"

type

type: object

name

name: string = "String"

fieldMappings

fieldMappings: object

serializedName

serializedName: string = "fieldMappings"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "EntityFieldMapping"

name

name: string = "Composite"

Const BookmarkExpandParameters

BookmarkExpandParameters: object

type

type: object

className

className: string = "BookmarkExpandParameters"

name

name: string = "Composite"

modelProperties

modelProperties: object

endTime

endTime: object

serializedName

serializedName: string = "endTime"

type

type: object

name

name: string = "DateTime"

expansionId

expansionId: object

serializedName

serializedName: string = "expansionId"

type

type: object

name

name: string = "Uuid"

startTime

startTime: object

serializedName

serializedName: string = "startTime"

type

type: object

name

name: string = "DateTime"

Const BookmarkExpandResponse

BookmarkExpandResponse: object

type

type: object

className

className: string = "BookmarkExpandResponse"

name

name: string = "Composite"

modelProperties

modelProperties: object

metaData

metaData: object

serializedName

serializedName: string = "metaData"

type

type: object

className

className: string = "ExpansionResultsMetadata"

name

name: string = "Composite"

value

value: object

serializedName

serializedName: string = "value"

type

type: object

className

className: string = "BookmarkExpandResponseValue"

name

name: string = "Composite"

Const BookmarkExpandResponseValue

BookmarkExpandResponseValue: object

type

type: object

className

className: string = "BookmarkExpandResponseValue"

name

name: string = "Composite"

modelProperties

modelProperties: object

edges

edges: object

serializedName

serializedName: string = "edges"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "ConnectedEntity"

name

name: string = "Composite"

entities

entities: object

serializedName

serializedName: string = "entities"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "Entity"

name

name: string = "Composite"

Const BookmarkList

BookmarkList: object

type

type: object

className

className: string = "BookmarkList"

name

name: string = "Composite"

modelProperties

modelProperties: object

nextLink

nextLink: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "nextLink"

type

type: object

name

name: string = "String"

value

value: object

required

required: boolean = true

serializedName

serializedName: string = "value"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "Bookmark"

name

name: string = "Composite"

Const BookmarkTimelineItem

BookmarkTimelineItem: object

serializedName

serializedName: string = "Bookmark"

type

type: object

className

className: string = "BookmarkTimelineItem"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = EntityTimelineItem.type.polymorphicDiscriminator

uberParent

uberParent: string = "EntityTimelineItem"

modelProperties

modelProperties: object

azureResourceId

azureResourceId: object

required

required: boolean = true

serializedName

serializedName: string = "azureResourceId"

type

type: object

name

name: string = "String"

createdBy

createdBy: object

serializedName

serializedName: string = "createdBy"

type

type: object

className

className: string = "UserInfo"

name

name: string = "Composite"

displayName

displayName: object

serializedName

serializedName: string = "displayName"

type

type: object

name

name: string = "String"

endTimeUtc

endTimeUtc: object

serializedName

serializedName: string = "endTimeUtc"

type

type: object

name

name: string = "DateTime"

eventTime

eventTime: object

serializedName

serializedName: string = "eventTime"

type

type: object

name

name: string = "DateTime"

labels

labels: object

serializedName

serializedName: string = "labels"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

notes

notes: object

serializedName

serializedName: string = "notes"

type

type: object

name

name: string = "String"

startTimeUtc

startTimeUtc: object

serializedName

serializedName: string = "startTimeUtc"

type

type: object

name

name: string = "DateTime"

Const ClientInfo

ClientInfo: object

type

type: object

className

className: string = "ClientInfo"

name

name: string = "Composite"

modelProperties

modelProperties: object

email

email: object

serializedName

serializedName: string = "email"

type

type: object

name

name: string = "String"

name

name: object

serializedName

serializedName: string = "name"

type

type: object

name

name: string = "String"

objectId

objectId: object

serializedName

serializedName: string = "objectId"

type

type: object

name

name: string = "Uuid"

userPrincipalName

userPrincipalName: object

serializedName

serializedName: string = "userPrincipalName"

type

type: object

name

name: string = "String"

Const CloudApplicationEntity

CloudApplicationEntity: object

serializedName

serializedName: string = "CloudApplication"

type

type: object

className

className: string = "CloudApplicationEntity"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = Resource.type.polymorphicDiscriminator

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

additionalData

additionalData: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.additionalData"

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "any"

appId

appId: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.appId"

type

type: object

name

name: string = "Number"

appName

appName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.appName"

type

type: object

name

name: string = "String"

friendlyName

friendlyName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.friendlyName"

type

type: object

name

name: string = "String"

instanceName

instanceName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.instanceName"

type

type: object

name

name: string = "String"

Const CloudApplicationEntityProperties

CloudApplicationEntityProperties: object

type

type: object

className

className: string = "CloudApplicationEntityProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

appId

appId: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "appId"

type

type: object

name

name: string = "Number"

appName

appName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "appName"

type

type: object

name

name: string = "String"

instanceName

instanceName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "instanceName"

type

type: object

name

name: string = "String"

Const CloudError

CloudError: object

type

type: object

className

className: string = "CloudError"

name

name: string = "Composite"

modelProperties

modelProperties: object

error

error: object

serializedName

serializedName: string = "error"

type

type: object

className

className: string = "CloudErrorBody"

name

name: string = "Composite"

Const CloudErrorBody

CloudErrorBody: object

type

type: object

className

className: string = "CloudErrorBody"

name

name: string = "Composite"

modelProperties

modelProperties: object

code

code: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "code"

type

type: object

name

name: string = "String"

message

message: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "message"

type

type: object

name

name: string = "String"

Const CodelessApiPollingDataConnector

CodelessApiPollingDataConnector: object

serializedName

serializedName: string = "APIPolling"

type

type: object

className

className: string = "CodelessApiPollingDataConnector"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = Resource.type.polymorphicDiscriminator

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

connectorUiConfig

connectorUiConfig: object

serializedName

serializedName: string = "properties.connectorUiConfig"

type

type: object

className

className: string = "CodelessUiConnectorConfigProperties"

name

name: string = "Composite"

pollingConfig

pollingConfig: object

serializedName

serializedName: string = "properties.pollingConfig"

type

type: object

className

className: string = "CodelessConnectorPollingConfigProperties"

name

name: string = "Composite"

Const CodelessConnectorPollingAuthProperties

CodelessConnectorPollingAuthProperties: object

type

type: object

className

className: string = "CodelessConnectorPollingAuthProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

apiKeyIdentifier

apiKeyIdentifier: object

serializedName

serializedName: string = "apiKeyIdentifier"

type

type: object

name

name: string = "String"

apiKeyName

apiKeyName: object

serializedName

serializedName: string = "apiKeyName"

type

type: object

name

name: string = "String"

authType

authType: object

required

required: boolean = true

serializedName

serializedName: string = "authType"

type

type: object

name

name: string = "String"

authorizationEndpoint

authorizationEndpoint: object

serializedName

serializedName: string = "authorizationEndpoint"

type

type: object

name

name: string = "String"

authorizationEndpointQueryParameters

authorizationEndpointQueryParameters: object

serializedName

serializedName: string = "authorizationEndpointQueryParameters"

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "any"

flowName

flowName: object

serializedName

serializedName: string = "flowName"

type

type: object

name

name: string = "String"

isApiKeyInPostPayload

isApiKeyInPostPayload: object

serializedName

serializedName: string = "isApiKeyInPostPayload"

type

type: object

name

name: string = "String"

isClientSecretInHeader

isClientSecretInHeader: object

serializedName

serializedName: string = "isClientSecretInHeader"

type

type: object

name

name: string = "Boolean"

redirectionEndpoint

redirectionEndpoint: object

serializedName

serializedName: string = "redirectionEndpoint"

type

type: object

name

name: string = "String"

scope

scope: object

serializedName

serializedName: string = "scope"

type

type: object

name

name: string = "String"

tokenEndpoint

tokenEndpoint: object

serializedName

serializedName: string = "tokenEndpoint"

type

type: object

name

name: string = "String"

tokenEndpointHeaders

tokenEndpointHeaders: object

serializedName

serializedName: string = "tokenEndpointHeaders"

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "any"

tokenEndpointQueryParameters

tokenEndpointQueryParameters: object

serializedName

serializedName: string = "tokenEndpointQueryParameters"

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "any"

Const CodelessConnectorPollingConfigProperties

CodelessConnectorPollingConfigProperties: object

type

type: object

className

className: string = "CodelessConnectorPollingConfigProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

auth

auth: object

serializedName

serializedName: string = "auth"

type

type: object

className

className: string = "CodelessConnectorPollingAuthProperties"

name

name: string = "Composite"

isActive

isActive: object

serializedName

serializedName: string = "isActive"

type

type: object

name

name: string = "Boolean"

paging

paging: object

serializedName

serializedName: string = "paging"

type

type: object

className

className: string = "CodelessConnectorPollingPagingProperties"

name

name: string = "Composite"

request

request: object

serializedName

serializedName: string = "request"

type

type: object

className

className: string = "CodelessConnectorPollingRequestProperties"

name

name: string = "Composite"

response

response: object

serializedName

serializedName: string = "response"

type

type: object

className

className: string = "CodelessConnectorPollingResponseProperties"

name

name: string = "Composite"

Const CodelessConnectorPollingPagingProperties

CodelessConnectorPollingPagingProperties: object

type

type: object

className

className: string = "CodelessConnectorPollingPagingProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

nextPageParaName

nextPageParaName: object

serializedName

serializedName: string = "nextPageParaName"

type

type: object

name

name: string = "String"

nextPageTokenJsonPath

nextPageTokenJsonPath: object

serializedName

serializedName: string = "nextPageTokenJsonPath"

type

type: object

name

name: string = "String"

pageCountAttributePath

pageCountAttributePath: object

serializedName

serializedName: string = "pageCountAttributePath"

type

type: object

name

name: string = "String"

pageSize

pageSize: object

serializedName

serializedName: string = "pageSize"

type

type: object

name

name: string = "Number"

pageSizeParaName

pageSizeParaName: object

serializedName

serializedName: string = "pageSizeParaName"

type

type: object

name

name: string = "String"

pageTimeStampAttributePath

pageTimeStampAttributePath: object

serializedName

serializedName: string = "pageTimeStampAttributePath"

type

type: object

name

name: string = "String"

pageTotalCountAttributePath

pageTotalCountAttributePath: object

serializedName

serializedName: string = "pageTotalCountAttributePath"

type

type: object

name

name: string = "String"

pagingType

pagingType: object

required

required: boolean = true

serializedName

serializedName: string = "pagingType"

type

type: object

name

name: string = "String"

searchTheLatestTimeStampFromEventsList

searchTheLatestTimeStampFromEventsList: object

serializedName

serializedName: string = "searchTheLatestTimeStampFromEventsList"

type

type: object

name

name: string = "String"

Const CodelessConnectorPollingRequestProperties

CodelessConnectorPollingRequestProperties: object

type

type: object

className

className: string = "CodelessConnectorPollingRequestProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

apiEndpoint

apiEndpoint: object

required

required: boolean = true

serializedName

serializedName: string = "apiEndpoint"

type

type: object

name

name: string = "String"

endTimeAttributeName

endTimeAttributeName: object

serializedName

serializedName: string = "endTimeAttributeName"

type

type: object

name

name: string = "String"

headers

headers: object

serializedName

serializedName: string = "headers"

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "any"

httpMethod

httpMethod: object

required

required: boolean = true

serializedName

serializedName: string = "httpMethod"

type

type: object

name

name: string = "String"

queryParameters

queryParameters: object

serializedName

serializedName: string = "queryParameters"

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "any"

queryParametersTemplate

queryParametersTemplate: object

serializedName

serializedName: string = "queryParametersTemplate"

type

type: object

name

name: string = "String"

queryTimeFormat

queryTimeFormat: object

required

required: boolean = true

serializedName

serializedName: string = "queryTimeFormat"

type

type: object

name

name: string = "String"

queryWindowInMin

queryWindowInMin: object

required

required: boolean = true

serializedName

serializedName: string = "queryWindowInMin"

type

type: object

name

name: string = "Number"

rateLimitQps

rateLimitQps: object

serializedName

serializedName: string = "rateLimitQps"

type

type: object

name

name: string = "Number"

retryCount

retryCount: object

serializedName

serializedName: string = "retryCount"

type

type: object

name

name: string = "Number"

startTimeAttributeName

startTimeAttributeName: object

serializedName

serializedName: string = "startTimeAttributeName"

type

type: object

name

name: string = "String"

timeoutInSeconds

timeoutInSeconds: object

serializedName

serializedName: string = "timeoutInSeconds"

type

type: object

name

name: string = "Number"

Const CodelessConnectorPollingResponseProperties

CodelessConnectorPollingResponseProperties: object

type

type: object

className

className: string = "CodelessConnectorPollingResponseProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

eventsJsonPaths

eventsJsonPaths: object

required

required: boolean = true

serializedName

serializedName: string = "eventsJsonPaths"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

isGzipCompressed

isGzipCompressed: object

serializedName

serializedName: string = "isGzipCompressed"

type

type: object

name

name: string = "Boolean"

successStatusJsonPath

successStatusJsonPath: object

serializedName

serializedName: string = "successStatusJsonPath"

type

type: object

name

name: string = "String"

successStatusValue

successStatusValue: object

serializedName

serializedName: string = "successStatusValue"

type

type: object

name

name: string = "String"

Const CodelessUiConnectorConfigProperties

CodelessUiConnectorConfigProperties: object

type

type: object

className

className: string = "CodelessUiConnectorConfigProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

availability

availability: object

serializedName

serializedName: string = "availability"

type

type: object

className

className: string = "Availability"

name

name: string = "Composite"

connectivityCriteria

connectivityCriteria: object

required

required: boolean = true

serializedName

serializedName: string = "connectivityCriteria"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "CodelessUiConnectorConfigPropertiesConnectivityCriteriaItem"

name

name: string = "Composite"

customImage

customImage: object

serializedName

serializedName: string = "customImage"

type

type: object

name

name: string = "String"

dataTypes

dataTypes: object

required

required: boolean = true

serializedName

serializedName: string = "dataTypes"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "CodelessUiConnectorConfigPropertiesDataTypesItem"

name

name: string = "Composite"

descriptionMarkdown

descriptionMarkdown: object

required

required: boolean = true

serializedName

serializedName: string = "descriptionMarkdown"

type

type: object

name

name: string = "String"

graphQueries

graphQueries: object

required

required: boolean = true

serializedName

serializedName: string = "graphQueries"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "CodelessUiConnectorConfigPropertiesGraphQueriesItem"

name

name: string = "Composite"

graphQueriesTableName

graphQueriesTableName: object

required

required: boolean = true

serializedName

serializedName: string = "graphQueriesTableName"

type

type: object

name

name: string = "String"

instructionSteps

instructionSteps: object

required

required: boolean = true

serializedName

serializedName: string = "instructionSteps"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "CodelessUiConnectorConfigPropertiesInstructionStepsItem"

name

name: string = "Composite"

permissions

permissions: object

serializedName

serializedName: string = "permissions"

type

type: object

className

className: string = "Permissions"

name

name: string = "Composite"

publisher

publisher: object

required

required: boolean = true

serializedName

serializedName: string = "publisher"

type

type: object

name

name: string = "String"

sampleQueries

sampleQueries: object

required

required: boolean = true

serializedName

serializedName: string = "sampleQueries"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "CodelessUiConnectorConfigPropertiesSampleQueriesItem"

name

name: string = "Composite"

title

title: object

required

required: boolean = true

serializedName

serializedName: string = "title"

type

type: object

name

name: string = "String"

Const CodelessUiConnectorConfigPropertiesConnectivityCriteriaItem

CodelessUiConnectorConfigPropertiesConnectivityCriteriaItem: object

type

type: object

className

className: string = "CodelessUiConnectorConfigPropertiesConnectivityCriteriaItem"

name

name: string = "Composite"

modelProperties

modelProperties: object

Const CodelessUiConnectorConfigPropertiesDataTypesItem

CodelessUiConnectorConfigPropertiesDataTypesItem: object

type

type: object

className

className: string = "CodelessUiConnectorConfigPropertiesDataTypesItem"

name

name: string = "Composite"

modelProperties

modelProperties: object

Const CodelessUiConnectorConfigPropertiesGraphQueriesItem

CodelessUiConnectorConfigPropertiesGraphQueriesItem: object

type

type: object

className

className: string = "CodelessUiConnectorConfigPropertiesGraphQueriesItem"

name

name: string = "Composite"

modelProperties

modelProperties: object

Const CodelessUiConnectorConfigPropertiesInstructionStepsItem

CodelessUiConnectorConfigPropertiesInstructionStepsItem: object

type

type: object

className

className: string = "CodelessUiConnectorConfigPropertiesInstructionStepsItem"

name

name: string = "Composite"

modelProperties

modelProperties: object

Const CodelessUiConnectorConfigPropertiesSampleQueriesItem

CodelessUiConnectorConfigPropertiesSampleQueriesItem: object

type

type: object

className

className: string = "CodelessUiConnectorConfigPropertiesSampleQueriesItem"

name

name: string = "Composite"

modelProperties

modelProperties: object

Const CodelessUiDataConnector

CodelessUiDataConnector: object

serializedName

serializedName: string = "GenericUI"

type

type: object

className

className: string = "CodelessUiDataConnector"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = Resource.type.polymorphicDiscriminator

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

connectorUiConfig

connectorUiConfig: object

serializedName

serializedName: string = "properties.connectorUiConfig"

type

type: object

className

className: string = "CodelessUiConnectorConfigProperties"

name

name: string = "Composite"

Const ConnectedEntity

ConnectedEntity: object

type

type: object

className

className: string = "ConnectedEntity"

name

name: string = "Composite"

modelProperties

modelProperties: object

additionalData

additionalData: object

serializedName

serializedName: string = "additionalData"

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "any"

targetEntityId

targetEntityId: object

serializedName

serializedName: string = "targetEntityId"

type

type: object

name

name: string = "String"

Const ConnectivityCriteria

ConnectivityCriteria: object

type

type: object

className

className: string = "ConnectivityCriteria"

name

name: string = "Composite"

modelProperties

modelProperties: object

type

type: object

serializedName

serializedName: string = "type"

type

type: object

name

name: string = "String"

value

value: object

serializedName

serializedName: string = "value"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

Const ConnectorInstructionModelBase

ConnectorInstructionModelBase: object

type

type: object

className

className: string = "ConnectorInstructionModelBase"

name

name: string = "Composite"

modelProperties

modelProperties: object

parameters

parameters: object

serializedName

serializedName: string = "parameters"

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "any"

type

type: object

required

required: boolean = true

serializedName

serializedName: string = "type"

type

type: object

name

name: string = "String"

Const ContentPathMap

ContentPathMap: object

type

type: object

className

className: string = "ContentPathMap"

name

name: string = "Composite"

modelProperties

modelProperties: object

contentType

contentType: object

serializedName

serializedName: string = "contentType"

type

type: object

name

name: string = "String"

path

path: object

serializedName

serializedName: string = "path"

type

type: object

name

name: string = "String"

Const CustomEntityQuery

CustomEntityQuery: object

serializedName

serializedName: string = "CustomEntityQuery"

type

type: object

className

className: string = "CustomEntityQuery"

name

name: string = "Composite"

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

kind

kind: object

required

required: boolean = true

serializedName

serializedName: string = "kind"

type

type: object

name

name: string = "String"

polymorphicDiscriminator

polymorphicDiscriminator: object

clientName

clientName: string = "kind"

serializedName

serializedName: string = "kind"

Const Customs

Customs: object

type

type: object

className

className: string = "Customs"

name

name: string = "Composite"

modelProperties

modelProperties: object

Const CustomsPermission

CustomsPermission: object

type

type: object

className

className: string = "CustomsPermission"

name

name: string = "Composite"

modelProperties

modelProperties: object

description

description: object

serializedName

serializedName: string = "description"

type

type: object

name

name: string = "String"

name

name: object

serializedName

serializedName: string = "name"

type

type: object

name

name: string = "String"

Const DataConnector

DataConnector: object

serializedName

serializedName: string = "DataConnector"

type

type: object

className

className: string = "DataConnector"

name

name: string = "Composite"

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

kind

kind: object

required

required: boolean = true

serializedName

serializedName: string = "kind"

type

type: object

name

name: string = "String"

polymorphicDiscriminator

polymorphicDiscriminator: object

clientName

clientName: string = "kind"

serializedName

serializedName: string = "kind"

Const DataConnectorConnectBody

DataConnectorConnectBody: object

type

type: object

className

className: string = "DataConnectorConnectBody"

name

name: string = "Composite"

modelProperties

modelProperties: object

apiKey

apiKey: object

serializedName

serializedName: string = "apiKey"

type

type: object

name

name: string = "String"

authorizationCode

authorizationCode: object

serializedName

serializedName: string = "authorizationCode"

type

type: object

name

name: string = "String"

clientId

clientId: object

serializedName

serializedName: string = "clientId"

type

type: object

name

name: string = "String"

clientSecret

clientSecret: object

serializedName

serializedName: string = "clientSecret"

type

type: object

name

name: string = "String"

kind

kind: object

serializedName

serializedName: string = "kind"

type

type: object

name

name: string = "String"

password

password: object

serializedName

serializedName: string = "password"

type

type: object

name

name: string = "String"

requestConfigUserInputValues

requestConfigUserInputValues: object

serializedName

serializedName: string = "requestConfigUserInputValues"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "any"

userName

userName: object

serializedName

serializedName: string = "userName"

type

type: object

name

name: string = "String"

Const DataConnectorDataTypeCommon

DataConnectorDataTypeCommon: object

type

type: object

className

className: string = "DataConnectorDataTypeCommon"

name

name: string = "Composite"

modelProperties

modelProperties: object

state

state: object

required

required: boolean = true

serializedName

serializedName: string = "state"

type

type: object

name

name: string = "String"

Const DataConnectorList

DataConnectorList: object

type

type: object

className

className: string = "DataConnectorList"

name

name: string = "Composite"

modelProperties

modelProperties: object

nextLink

nextLink: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "nextLink"

type

type: object

name

name: string = "String"

value

value: object

required

required: boolean = true

serializedName

serializedName: string = "value"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "DataConnector"

name

name: string = "Composite"

Const DataConnectorRequirementsState

DataConnectorRequirementsState: object

type

type: object

className

className: string = "DataConnectorRequirementsState"

name

name: string = "Composite"

modelProperties

modelProperties: object

authorizationState

authorizationState: object

serializedName

serializedName: string = "authorizationState"

type

type: object

name

name: string = "String"

licenseState

licenseState: object

serializedName

serializedName: string = "licenseState"

type

type: object

name

name: string = "String"

Const DataConnectorTenantId

DataConnectorTenantId: object

type

type: object

className

className: string = "DataConnectorTenantId"

name

name: string = "Composite"

modelProperties

modelProperties: object

tenantId

tenantId: object

required

required: boolean = true

serializedName

serializedName: string = "tenantId"

type

type: object

name

name: string = "String"

Const DataConnectorWithAlertsProperties

DataConnectorWithAlertsProperties: object

type

type: object

className

className: string = "DataConnectorWithAlertsProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

dataTypes

dataTypes: object

serializedName

serializedName: string = "dataTypes"

type

type: object

className

className: string = "AlertsDataTypeOfDataConnector"

name

name: string = "Composite"

Const DataConnectorsCheckRequirements

DataConnectorsCheckRequirements: object

type

type: object

className

className: string = "DataConnectorsCheckRequirements"

name

name: string = "Composite"

uberParent

uberParent: string = "DataConnectorsCheckRequirements"

modelProperties

modelProperties: object

kind

kind: object

required

required: boolean = true

serializedName

serializedName: string = "kind"

type

type: object

name

name: string = "String"

polymorphicDiscriminator

polymorphicDiscriminator: object

clientName

clientName: string = "kind"

serializedName

serializedName: string = "kind"

Const DataTypeDefinitions

DataTypeDefinitions: object

type

type: object

className

className: string = "DataTypeDefinitions"

name

name: string = "Composite"

modelProperties

modelProperties: object

dataType

dataType: object

serializedName

serializedName: string = "dataType"

type

type: object

name

name: string = "String"

Const Deployment

Deployment: object

type

type: object

className

className: string = "Deployment"

name

name: string = "Composite"

modelProperties

modelProperties: object

deploymentId

deploymentId: object

serializedName

serializedName: string = "deploymentId"

type

type: object

name

name: string = "String"

deploymentLogsUrl

deploymentLogsUrl: object

serializedName

serializedName: string = "deploymentLogsUrl"

type

type: object

name

name: string = "String"

deploymentResult

deploymentResult: object

serializedName

serializedName: string = "deploymentResult"

type

type: object

name

name: string = "String"

deploymentState

deploymentState: object

serializedName

serializedName: string = "deploymentState"

type

type: object

name

name: string = "String"

deploymentTime

deploymentTime: object

serializedName

serializedName: string = "deploymentTime"

type

type: object

name

name: string = "DateTime"

Const DeploymentInfo

DeploymentInfo: object

type

type: object

className

className: string = "DeploymentInfo"

name

name: string = "Composite"

modelProperties

modelProperties: object

deployment

deployment: object

serializedName

serializedName: string = "deployment"

type

type: object

className

className: string = "Deployment"

name

name: string = "Composite"

deploymentFetchStatus

deploymentFetchStatus: object

serializedName

serializedName: string = "deploymentFetchStatus"

type

type: object

name

name: string = "String"

message

message: object

serializedName

serializedName: string = "message"

type

type: object

name

name: string = "String"

Const DnsEntity

DnsEntity: object

serializedName

serializedName: string = "DnsResolution"

type

type: object

className

className: string = "DnsEntity"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = Resource.type.polymorphicDiscriminator

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

additionalData

additionalData: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.additionalData"

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "any"

dnsServerIpEntityId

dnsServerIpEntityId: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.dnsServerIpEntityId"

type

type: object

name

name: string = "String"

domainName

domainName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.domainName"

type

type: object

name

name: string = "String"

friendlyName

friendlyName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.friendlyName"

type

type: object

name

name: string = "String"

hostIpAddressEntityId

hostIpAddressEntityId: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.hostIpAddressEntityId"

type

type: object

name

name: string = "String"

ipAddressEntityIds

ipAddressEntityIds: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.ipAddressEntityIds"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

Const DnsEntityProperties

DnsEntityProperties: object

type

type: object

className

className: string = "DnsEntityProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

dnsServerIpEntityId

dnsServerIpEntityId: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "dnsServerIpEntityId"

type

type: object

name

name: string = "String"

domainName

domainName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "domainName"

type

type: object

name

name: string = "String"

hostIpAddressEntityId

hostIpAddressEntityId: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "hostIpAddressEntityId"

type

type: object

name

name: string = "String"

ipAddressEntityIds

ipAddressEntityIds: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "ipAddressEntityIds"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

Const Dynamics365CheckRequirements

Dynamics365CheckRequirements: object

serializedName

serializedName: string = "Dynamics365"

type

type: object

className

className: string = "Dynamics365CheckRequirements"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = DataConnectorsCheckRequirements.type.polymorphicDiscriminator

uberParent

uberParent: string = "DataConnectorsCheckRequirements"

modelProperties

modelProperties: object

tenantId

tenantId: object

serializedName

serializedName: string = "properties.tenantId"

type

type: object

name

name: string = "String"

Const Dynamics365CheckRequirementsProperties

Dynamics365CheckRequirementsProperties: object

type

type: object

className

className: string = "Dynamics365CheckRequirementsProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

Const Dynamics365DataConnector

Dynamics365DataConnector: object

serializedName

serializedName: string = "Dynamics365"

type

type: object

className

className: string = "Dynamics365DataConnector"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = Resource.type.polymorphicDiscriminator

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

dataTypes

dataTypes: object

serializedName

serializedName: string = "properties.dataTypes"

type

type: object

className

className: string = "Dynamics365DataConnectorDataTypes"

name

name: string = "Composite"

tenantId

tenantId: object

serializedName

serializedName: string = "properties.tenantId"

type

type: object

name

name: string = "String"

Const Dynamics365DataConnectorDataTypes

Dynamics365DataConnectorDataTypes: object

type

type: object

className

className: string = "Dynamics365DataConnectorDataTypes"

name

name: string = "Composite"

modelProperties

modelProperties: object

dynamics365CdsActivities

dynamics365CdsActivities: object

serializedName

serializedName: string = "dynamics365CdsActivities"

type

type: object

className

className: string = "Dynamics365DataConnectorDataTypesDynamics365CdsActivities"

name

name: string = "Composite"

Const Dynamics365DataConnectorDataTypesDynamics365CdsActivities

Dynamics365DataConnectorDataTypesDynamics365CdsActivities: object

type

type: object

className

className: string = "Dynamics365DataConnectorDataTypesDynamics365CdsActivities"

name

name: string = "Composite"

modelProperties

modelProperties: object

Const Dynamics365DataConnectorProperties

Dynamics365DataConnectorProperties: object

type

type: object

className

className: string = "Dynamics365DataConnectorProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

dataTypes

dataTypes: object

serializedName

serializedName: string = "dataTypes"

type

type: object

className

className: string = "Dynamics365DataConnectorDataTypes"

name

name: string = "Composite"

Const EnrichmentDomainWhois

EnrichmentDomainWhois: object

type

type: object

className

className: string = "EnrichmentDomainWhois"

name

name: string = "Composite"

modelProperties

modelProperties: object

created

created: object

serializedName

serializedName: string = "created"

type

type: object

name

name: string = "DateTime"

domain

domain: object

serializedName

serializedName: string = "domain"

type

type: object

name

name: string = "String"

expires

expires: object

serializedName

serializedName: string = "expires"

type

type: object

name

name: string = "DateTime"

parsedWhois

parsedWhois: object

serializedName

serializedName: string = "parsedWhois"

type

type: object

className

className: string = "EnrichmentDomainWhoisDetails"

name

name: string = "Composite"

server

server: object

serializedName

serializedName: string = "server"

type

type: object

name

name: string = "String"

updated

updated: object

serializedName

serializedName: string = "updated"

type

type: object

name

name: string = "DateTime"

Const EnrichmentDomainWhoisContact

EnrichmentDomainWhoisContact: object

type

type: object

className

className: string = "EnrichmentDomainWhoisContact"

name

name: string = "Composite"

modelProperties

modelProperties: object

city

city: object

serializedName

serializedName: string = "city"

type

type: object

name

name: string = "String"

country

country: object

serializedName

serializedName: string = "country"

type

type: object

name

name: string = "String"

email

email: object

serializedName

serializedName: string = "email"

type

type: object

name

name: string = "String"

fax

fax: object

serializedName

serializedName: string = "fax"

type

type: object

name

name: string = "String"

name

name: object

serializedName

serializedName: string = "name"

type

type: object

name

name: string = "String"

org

org: object

serializedName

serializedName: string = "org"

type

type: object

name

name: string = "String"

phone

phone: object

serializedName

serializedName: string = "phone"

type

type: object

name

name: string = "String"

postal

postal: object

serializedName

serializedName: string = "postal"

type

type: object

name

name: string = "String"

state

state: object

serializedName

serializedName: string = "state"

type

type: object

name

name: string = "String"

street

street: object

serializedName

serializedName: string = "street"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

Const EnrichmentDomainWhoisContacts

EnrichmentDomainWhoisContacts: object

type

type: object

className

className: string = "EnrichmentDomainWhoisContacts"

name

name: string = "Composite"

modelProperties

modelProperties: object

admin

admin: object

serializedName

serializedName: string = "admin"

type

type: object

className

className: string = "EnrichmentDomainWhoisContact"

name

name: string = "Composite"

billing

billing: object

serializedName

serializedName: string = "billing"

type

type: object

className

className: string = "EnrichmentDomainWhoisContact"

name

name: string = "Composite"

registrant

registrant: object

serializedName

serializedName: string = "registrant"

type

type: object

className

className: string = "EnrichmentDomainWhoisContact"

name

name: string = "Composite"

tech

tech: object

serializedName

serializedName: string = "tech"

type

type: object

className

className: string = "EnrichmentDomainWhoisContact"

name

name: string = "Composite"

Const EnrichmentDomainWhoisDetails

EnrichmentDomainWhoisDetails: object

type

type: object

className

className: string = "EnrichmentDomainWhoisDetails"

name

name: string = "Composite"

modelProperties

modelProperties: object

contacts

contacts: object

serializedName

serializedName: string = "contacts"

type

type: object

className

className: string = "EnrichmentDomainWhoisContacts"

name

name: string = "Composite"

nameServers

nameServers: object

serializedName

serializedName: string = "nameServers"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

registrar

registrar: object

serializedName

serializedName: string = "registrar"

type

type: object

className

className: string = "EnrichmentDomainWhoisRegistrarDetails"

name

name: string = "Composite"

statuses

statuses: object

serializedName

serializedName: string = "statuses"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

Const EnrichmentDomainWhoisRegistrarDetails

EnrichmentDomainWhoisRegistrarDetails: object

type

type: object

className

className: string = "EnrichmentDomainWhoisRegistrarDetails"

name

name: string = "Composite"

modelProperties

modelProperties: object

abuseContactEmail

abuseContactEmail: object

serializedName

serializedName: string = "abuseContactEmail"

type

type: object

name

name: string = "String"

abuseContactPhone

abuseContactPhone: object

serializedName

serializedName: string = "abuseContactPhone"

type

type: object

name

name: string = "String"

ianaId

ianaId: object

serializedName

serializedName: string = "ianaId"

type

type: object

name

name: string = "String"

name

name: object

serializedName

serializedName: string = "name"

type

type: object

name

name: string = "String"

url

url: object

serializedName

serializedName: string = "url"

type

type: object

name

name: string = "String"

whoisServer

whoisServer: object

serializedName

serializedName: string = "whoisServer"

type

type: object

name

name: string = "String"

Const EnrichmentIpGeodata

EnrichmentIpGeodata: object

type

type: object

className

className: string = "EnrichmentIpGeodata"

name

name: string = "Composite"

modelProperties

modelProperties: object

asn

asn: object

serializedName

serializedName: string = "asn"

type

type: object

name

name: string = "String"

carrier

carrier: object

serializedName

serializedName: string = "carrier"

type

type: object

name

name: string = "String"

city

city: object

serializedName

serializedName: string = "city"

type

type: object

name

name: string = "String"

cityCf

cityCf: object

serializedName

serializedName: string = "cityCf"

type

type: object

name

name: string = "Number"

continent

continent: object

serializedName

serializedName: string = "continent"

type

type: object

name

name: string = "String"

country

country: object

serializedName

serializedName: string = "country"

type

type: object

name

name: string = "String"

countryCf

countryCf: object

serializedName

serializedName: string = "countryCf"

type

type: object

name

name: string = "Number"

ipAddr

ipAddr: object

serializedName

serializedName: string = "ipAddr"

type

type: object

name

name: string = "String"

ipRoutingType

ipRoutingType: object

serializedName

serializedName: string = "ipRoutingType"

type

type: object

name

name: string = "String"

latitude

latitude: object

serializedName

serializedName: string = "latitude"

type

type: object

name

name: string = "String"

longitude

longitude: object

serializedName

serializedName: string = "longitude"

type

type: object

name

name: string = "String"

organization

organization: object

serializedName

serializedName: string = "organization"

type

type: object

name

name: string = "String"

organizationType

organizationType: object

serializedName

serializedName: string = "organizationType"

type

type: object

name

name: string = "String"

region

region: object

serializedName

serializedName: string = "region"

type

type: object

name

name: string = "String"

state

state: object

serializedName

serializedName: string = "state"

type

type: object

name

name: string = "String"

stateCf

stateCf: object

serializedName

serializedName: string = "stateCf"

type

type: object

name

name: string = "Number"

stateCode

stateCode: object

serializedName

serializedName: string = "stateCode"

type

type: object

name

name: string = "String"

Const Entity

Entity: object

serializedName

serializedName: string = "Entity"

type

type: object

className

className: string = "Entity"

name

name: string = "Composite"

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

kind

kind: object

required

required: boolean = true

serializedName

serializedName: string = "kind"

type

type: object

name

name: string = "String"

polymorphicDiscriminator

polymorphicDiscriminator: object

clientName

clientName: string = "kind"

serializedName

serializedName: string = "kind"

Const EntityAnalytics

EntityAnalytics: object

serializedName

serializedName: string = "EntityAnalytics"

type

type: object

className

className: string = "EntityAnalytics"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = Resource.type.polymorphicDiscriminator

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

isEnabled

isEnabled: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.isEnabled"

type

type: object

name

name: string = "Boolean"

Const EntityCommonProperties

EntityCommonProperties: object

type

type: object

className

className: string = "EntityCommonProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

additionalData

additionalData: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "additionalData"

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "any"

friendlyName

friendlyName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "friendlyName"

type

type: object

name

name: string = "String"

Const EntityEdges

EntityEdges: object

type

type: object

className

className: string = "EntityEdges"

name

name: string = "Composite"

modelProperties

modelProperties: object

additionalData

additionalData: object

serializedName

serializedName: string = "additionalData"

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "any"

targetEntityId

targetEntityId: object

serializedName

serializedName: string = "targetEntityId"

type

type: object

name

name: string = "String"

Const EntityExpandParameters

EntityExpandParameters: object

type

type: object

className

className: string = "EntityExpandParameters"

name

name: string = "Composite"

modelProperties

modelProperties: object

endTime

endTime: object

serializedName

serializedName: string = "endTime"

type

type: object

name

name: string = "DateTime"

expansionId

expansionId: object

serializedName

serializedName: string = "expansionId"

type

type: object

name

name: string = "Uuid"

startTime

startTime: object

serializedName

serializedName: string = "startTime"

type

type: object

name

name: string = "DateTime"

Const EntityExpandResponse

EntityExpandResponse: object

type

type: object

className

className: string = "EntityExpandResponse"

name

name: string = "Composite"

modelProperties

modelProperties: object

metaData

metaData: object

serializedName

serializedName: string = "metaData"

type

type: object

className

className: string = "ExpansionResultsMetadata"

name

name: string = "Composite"

value

value: object

serializedName

serializedName: string = "value"

type

type: object

className

className: string = "EntityExpandResponseValue"

name

name: string = "Composite"

Const EntityExpandResponseValue

EntityExpandResponseValue: object

type

type: object

className

className: string = "EntityExpandResponseValue"

name

name: string = "Composite"

modelProperties

modelProperties: object

edges

edges: object

serializedName

serializedName: string = "edges"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "EntityEdges"

name

name: string = "Composite"

entities

entities: object

serializedName

serializedName: string = "entities"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "Entity"

name

name: string = "Composite"

Const EntityFieldMapping

EntityFieldMapping: object

type

type: object

className

className: string = "EntityFieldMapping"

name

name: string = "Composite"

modelProperties

modelProperties: object

identifier

identifier: object

serializedName

serializedName: string = "identifier"

type

type: object

name

name: string = "String"

value

value: object

serializedName

serializedName: string = "value"

type

type: object

name

name: string = "String"

Const EntityGetInsightsParameters

EntityGetInsightsParameters: object

type

type: object

className

className: string = "EntityGetInsightsParameters"

name

name: string = "Composite"

modelProperties

modelProperties: object

addDefaultExtendedTimeRange

addDefaultExtendedTimeRange: object

serializedName

serializedName: string = "addDefaultExtendedTimeRange"

type

type: object

name

name: string = "Boolean"

endTime

endTime: object

required

required: boolean = true

serializedName

serializedName: string = "endTime"

type

type: object

name

name: string = "DateTime"

insightQueryIds

insightQueryIds: object

serializedName

serializedName: string = "insightQueryIds"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "Uuid"

startTime

startTime: object

required

required: boolean = true

serializedName

serializedName: string = "startTime"

type

type: object

name

name: string = "DateTime"

Const EntityGetInsightsResponse

EntityGetInsightsResponse: object

type

type: object

className

className: string = "EntityGetInsightsResponse"

name

name: string = "Composite"

modelProperties

modelProperties: object

metaData

metaData: object

serializedName

serializedName: string = "metaData"

type

type: object

className

className: string = "GetInsightsResultsMetadata"

name

name: string = "Composite"

value

value: object

serializedName

serializedName: string = "value"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "EntityInsightItem"

name

name: string = "Composite"

Const EntityInsightItem

EntityInsightItem: object

type

type: object

className

className: string = "EntityInsightItem"

name

name: string = "Composite"

modelProperties

modelProperties: object

chartQueryResults

chartQueryResults: object

serializedName

serializedName: string = "chartQueryResults"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "InsightsTableResult"

name

name: string = "Composite"

queryId

queryId: object

serializedName

serializedName: string = "queryId"

type

type: object

name

name: string = "String"

queryTimeInterval

queryTimeInterval: object

serializedName

serializedName: string = "queryTimeInterval"

type

type: object

className

className: string = "EntityInsightItemQueryTimeInterval"

name

name: string = "Composite"

tableQueryResults

tableQueryResults: object

serializedName

serializedName: string = "tableQueryResults"

type

type: object

className

className: string = "InsightsTableResult"

name

name: string = "Composite"

Const EntityInsightItemQueryTimeInterval

EntityInsightItemQueryTimeInterval: object

type

type: object

className

className: string = "EntityInsightItemQueryTimeInterval"

name

name: string = "Composite"

modelProperties

modelProperties: object

endTime

endTime: object

serializedName

serializedName: string = "endTime"

type

type: object

name

name: string = "DateTime"

startTime

startTime: object

serializedName

serializedName: string = "startTime"

type

type: object

name

name: string = "DateTime"

Const EntityList

EntityList: object

type

type: object

className

className: string = "EntityList"

name

name: string = "Composite"

modelProperties

modelProperties: object

nextLink

nextLink: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "nextLink"

type

type: object

name

name: string = "String"

value

value: object

required

required: boolean = true

serializedName

serializedName: string = "value"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "Entity"

name

name: string = "Composite"

Const EntityMapping

EntityMapping: object

type

type: object

className

className: string = "EntityMapping"

name

name: string = "Composite"

modelProperties

modelProperties: object

entityType

entityType: object

serializedName

serializedName: string = "entityType"

type

type: object

name

name: string = "String"

fieldMappings

fieldMappings: object

serializedName

serializedName: string = "fieldMappings"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "FieldMapping"

name

name: string = "Composite"

Const EntityQuery

EntityQuery: object

serializedName

serializedName: string = "EntityQuery"

type

type: object

className

className: string = "EntityQuery"

name

name: string = "Composite"

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

kind

kind: object

required

required: boolean = true

serializedName

serializedName: string = "kind"

type

type: object

name

name: string = "String"

polymorphicDiscriminator

polymorphicDiscriminator: object

clientName

clientName: string = "kind"

serializedName

serializedName: string = "kind"

Const EntityQueryItem

EntityQueryItem: object

type

type: object

className

className: string = "EntityQueryItem"

name

name: string = "Composite"

uberParent

uberParent: string = "EntityQueryItem"

modelProperties

modelProperties: object

id

id: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "id"

type

type: object

name

name: string = "String"

kind

kind: object

required

required: boolean = true

serializedName

serializedName: string = "kind"

type

type: object

name

name: string = "String"

name

name: object

serializedName

serializedName: string = "name"

type

type: object

name

name: string = "String"

type

type: object

serializedName

serializedName: string = "type"

type

type: object

name

name: string = "String"

polymorphicDiscriminator

polymorphicDiscriminator: object

clientName

clientName: string = "kind"

serializedName

serializedName: string = "kind"

Const EntityQueryItemProperties

EntityQueryItemProperties: object

type

type: object

className

className: string = "EntityQueryItemProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

dataTypes

dataTypes: object

serializedName

serializedName: string = "dataTypes"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "EntityQueryItemPropertiesDataTypesItem"

name

name: string = "Composite"

entitiesFilter

entitiesFilter: object

serializedName

serializedName: string = "entitiesFilter"

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "any"

inputEntityType

inputEntityType: object

serializedName

serializedName: string = "inputEntityType"

type

type: object

name

name: string = "String"

requiredInputFieldsSets

requiredInputFieldsSets: object

serializedName

serializedName: string = "requiredInputFieldsSets"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

Const EntityQueryItemPropertiesDataTypesItem

EntityQueryItemPropertiesDataTypesItem: object

type

type: object

className

className: string = "EntityQueryItemPropertiesDataTypesItem"

name

name: string = "Composite"

modelProperties

modelProperties: object

dataType

dataType: object

serializedName

serializedName: string = "dataType"

type

type: object

name

name: string = "String"

Const EntityQueryList

EntityQueryList: object

type

type: object

className

className: string = "EntityQueryList"

name

name: string = "Composite"

modelProperties

modelProperties: object

nextLink

nextLink: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "nextLink"

type

type: object

name

name: string = "String"

value

value: object

required

required: boolean = true

serializedName

serializedName: string = "value"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "EntityQuery"

name

name: string = "Composite"

Const EntityQueryTemplate

EntityQueryTemplate: object

serializedName

serializedName: string = "EntityQueryTemplate"

type

type: object

className

className: string = "EntityQueryTemplate"

name

name: string = "Composite"

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

kind

kind: object

required

required: boolean = true

serializedName

serializedName: string = "kind"

type

type: object

name

name: string = "String"

polymorphicDiscriminator

polymorphicDiscriminator: object

clientName

clientName: string = "kind"

serializedName

serializedName: string = "kind"

Const EntityQueryTemplateList

EntityQueryTemplateList: object

type

type: object

className

className: string = "EntityQueryTemplateList"

name

name: string = "Composite"

modelProperties

modelProperties: object

nextLink

nextLink: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "nextLink"

type

type: object

name

name: string = "String"

value

value: object

required

required: boolean = true

serializedName

serializedName: string = "value"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "EntityQueryTemplate"

name

name: string = "Composite"

Const EntityTimelineItem

EntityTimelineItem: object

type

type: object

className

className: string = "EntityTimelineItem"

name

name: string = "Composite"

uberParent

uberParent: string = "EntityTimelineItem"

modelProperties

modelProperties: object

kind

kind: object

required

required: boolean = true

serializedName

serializedName: string = "kind"

type

type: object

name

name: string = "String"

polymorphicDiscriminator

polymorphicDiscriminator: object

clientName

clientName: string = "kind"

serializedName

serializedName: string = "kind"

Const EntityTimelineParameters

EntityTimelineParameters: object

type

type: object

className

className: string = "EntityTimelineParameters"

name

name: string = "Composite"

modelProperties

modelProperties: object

endTime

endTime: object

required

required: boolean = true

serializedName

serializedName: string = "endTime"

type

type: object

name

name: string = "DateTime"

kinds

kinds: object

serializedName

serializedName: string = "kinds"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

numberOfBucket

numberOfBucket: object

serializedName

serializedName: string = "numberOfBucket"

type

type: object

name

name: string = "Number"

startTime

startTime: object

required

required: boolean = true

serializedName

serializedName: string = "startTime"

type

type: object

name

name: string = "DateTime"

Const EntityTimelineResponse

EntityTimelineResponse: object

type

type: object

className

className: string = "EntityTimelineResponse"

name

name: string = "Composite"

modelProperties

modelProperties: object

metaData

metaData: object

serializedName

serializedName: string = "metaData"

type

type: object

className

className: string = "TimelineResultsMetadata"

name

name: string = "Composite"

value

value: object

serializedName

serializedName: string = "value"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "EntityTimelineItem"

name

name: string = "Composite"

Const EventGroupingSettings

EventGroupingSettings: object

type

type: object

className

className: string = "EventGroupingSettings"

name

name: string = "Composite"

modelProperties

modelProperties: object

aggregationKind

aggregationKind: object

serializedName

serializedName: string = "aggregationKind"

type

type: object

name

name: string = "String"

Const ExpansionEntityQuery

ExpansionEntityQuery: object

serializedName

serializedName: string = "Expansion"

type

type: object

className

className: string = "ExpansionEntityQuery"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = Resource.type.polymorphicDiscriminator

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

dataSources

dataSources: object

serializedName

serializedName: string = "properties.dataSources"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

displayName

displayName: object

serializedName

serializedName: string = "properties.displayName"

type

type: object

name

name: string = "String"

inputEntityType

inputEntityType: object

serializedName

serializedName: string = "properties.inputEntityType"

type

type: object

name

name: string = "String"

inputFields

inputFields: object

serializedName

serializedName: string = "properties.inputFields"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

outputEntityTypes

outputEntityTypes: object

serializedName

serializedName: string = "properties.outputEntityTypes"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

queryTemplate

queryTemplate: object

serializedName

serializedName: string = "properties.queryTemplate"

type

type: object

name

name: string = "String"

Const ExpansionResultAggregation

ExpansionResultAggregation: object

type

type: object

className

className: string = "ExpansionResultAggregation"

name

name: string = "Composite"

modelProperties

modelProperties: object

aggregationType

aggregationType: object

serializedName

serializedName: string = "aggregationType"

type

type: object

name

name: string = "String"

count

count: object

required

required: boolean = true

serializedName

serializedName: string = "count"

type

type: object

name

name: string = "Number"

displayName

displayName: object

serializedName

serializedName: string = "displayName"

type

type: object

name

name: string = "String"

entityKind

entityKind: object

required

required: boolean = true

serializedName

serializedName: string = "entityKind"

type

type: object

name

name: string = "String"

Const ExpansionResultsMetadata

ExpansionResultsMetadata: object

type

type: object

className

className: string = "ExpansionResultsMetadata"

name

name: string = "Composite"

modelProperties

modelProperties: object

aggregations

aggregations: object

serializedName

serializedName: string = "aggregations"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "ExpansionResultAggregation"

name

name: string = "Composite"

Const EyesOn

EyesOn: object

serializedName

serializedName: string = "EyesOn"

type

type: object

className

className: string = "EyesOn"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = Resource.type.polymorphicDiscriminator

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

isEnabled

isEnabled: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.isEnabled"

type

type: object

name

name: string = "Boolean"

Const FieldMapping

FieldMapping: object

type

type: object

className

className: string = "FieldMapping"

name

name: string = "Composite"

modelProperties

modelProperties: object

columnName

columnName: object

serializedName

serializedName: string = "columnName"

type

type: object

name

name: string = "String"

identifier

identifier: object

serializedName

serializedName: string = "identifier"

type

type: object

name

name: string = "String"

Const FileEntity

FileEntity: object

serializedName

serializedName: string = "File"

type

type: object

className

className: string = "FileEntity"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = Resource.type.polymorphicDiscriminator

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

additionalData

additionalData: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.additionalData"

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "any"

directory

directory: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.directory"

type

type: object

name

name: string = "String"

fileHashEntityIds

fileHashEntityIds: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.fileHashEntityIds"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

fileName

fileName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.fileName"

type

type: object

name

name: string = "String"

friendlyName

friendlyName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.friendlyName"

type

type: object

name

name: string = "String"

hostEntityId

hostEntityId: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.hostEntityId"

type

type: object

name

name: string = "String"

Const FileEntityProperties

FileEntityProperties: object

type

type: object

className

className: string = "FileEntityProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

directory

directory: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "directory"

type

type: object

name

name: string = "String"

fileHashEntityIds

fileHashEntityIds: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "fileHashEntityIds"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

fileName

fileName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "fileName"

type

type: object

name

name: string = "String"

hostEntityId

hostEntityId: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "hostEntityId"

type

type: object

name

name: string = "String"

Const FileHashEntity

FileHashEntity: object

serializedName

serializedName: string = "FileHash"

type

type: object

className

className: string = "FileHashEntity"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = Resource.type.polymorphicDiscriminator

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

additionalData

additionalData: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.additionalData"

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "any"

algorithm

algorithm: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.algorithm"

type

type: object

name

name: string = "String"

friendlyName

friendlyName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.friendlyName"

type

type: object

name

name: string = "String"

hashValue

hashValue: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.hashValue"

type

type: object

name

name: string = "String"

Const FileHashEntityProperties

FileHashEntityProperties: object

type

type: object

className

className: string = "FileHashEntityProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

algorithm

algorithm: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "algorithm"

type

type: object

name

name: string = "String"

hashValue

hashValue: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "hashValue"

type

type: object

name

name: string = "String"

Const FusionAlertRule

FusionAlertRule: object

serializedName

serializedName: string = "Fusion"

type

type: object

className

className: string = "FusionAlertRule"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = Resource.type.polymorphicDiscriminator

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

alertRuleTemplateName

alertRuleTemplateName: object

serializedName

serializedName: string = "properties.alertRuleTemplateName"

type

type: object

name

name: string = "String"

description

description: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.description"

type

type: object

name

name: string = "String"

displayName

displayName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.displayName"

type

type: object

name

name: string = "String"

enabled

enabled: object

serializedName

serializedName: string = "properties.enabled"

type

type: object

name

name: string = "Boolean"

lastModifiedUtc

lastModifiedUtc: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.lastModifiedUtc"

type

type: object

name

name: string = "DateTime"

scenarioExclusionPatterns

scenarioExclusionPatterns: object

serializedName

serializedName: string = "properties.scenarioExclusionPatterns"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "FusionScenarioExclusionPattern"

name

name: string = "Composite"

severity

severity: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.severity"

type

type: object

name

name: string = "String"

sourceSettings

sourceSettings: object

serializedName

serializedName: string = "properties.sourceSettings"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "FusionSourceSettings"

name

name: string = "Composite"

tactics

tactics: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.tactics"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

techniques

techniques: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.techniques"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

Const FusionAlertRuleTemplate

FusionAlertRuleTemplate: object

serializedName

serializedName: string = "Fusion"

type

type: object

className

className: string = "FusionAlertRuleTemplate"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = Resource.type.polymorphicDiscriminator

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

alertRulesCreatedByTemplateCount

alertRulesCreatedByTemplateCount: object

serializedName

serializedName: string = "properties.alertRulesCreatedByTemplateCount"

type

type: object

name

name: string = "Number"

createdDateUTC

createdDateUTC: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.createdDateUTC"

type

type: object

name

name: string = "DateTime"

description

description: object

serializedName

serializedName: string = "properties.description"

type

type: object

name

name: string = "String"

displayName

displayName: object

serializedName

serializedName: string = "properties.displayName"

type

type: object

name

name: string = "String"

lastUpdatedDateUTC

lastUpdatedDateUTC: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.lastUpdatedDateUTC"

type

type: object

name

name: string = "DateTime"

requiredDataConnectors

requiredDataConnectors: object

serializedName

serializedName: string = "properties.requiredDataConnectors"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "AlertRuleTemplateDataSource"

name

name: string = "Composite"

severity

severity: object

serializedName

serializedName: string = "properties.severity"

type

type: object

name

name: string = "String"

sourceSettings

sourceSettings: object

serializedName

serializedName: string = "properties.sourceSettings"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "FusionTemplateSourceSetting"

name

name: string = "Composite"

status

status: object

serializedName

serializedName: string = "properties.status"

type

type: object

name

name: string = "String"

tactics

tactics: object

serializedName

serializedName: string = "properties.tactics"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

techniques

techniques: object

serializedName

serializedName: string = "properties.techniques"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

Const FusionScenarioExclusionPattern

FusionScenarioExclusionPattern: object

type

type: object

className

className: string = "FusionScenarioExclusionPattern"

name

name: string = "Composite"

modelProperties

modelProperties: object

dateAddedInUTC

dateAddedInUTC: object

required

required: boolean = true

serializedName

serializedName: string = "dateAddedInUTC"

type

type: object

name

name: string = "String"

exclusionPattern

exclusionPattern: object

required

required: boolean = true

serializedName

serializedName: string = "exclusionPattern"

type

type: object

name

name: string = "String"

Const FusionSourceSettings

FusionSourceSettings: object

type

type: object

className

className: string = "FusionSourceSettings"

name

name: string = "Composite"

modelProperties

modelProperties: object

enabled

enabled: object

required

required: boolean = true

serializedName

serializedName: string = "enabled"

type

type: object

name

name: string = "Boolean"

sourceName

sourceName: object

required

required: boolean = true

serializedName

serializedName: string = "sourceName"

type

type: object

name

name: string = "String"

sourceSubTypes

sourceSubTypes: object

serializedName

serializedName: string = "sourceSubTypes"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "FusionSourceSubTypeSetting"

name

name: string = "Composite"

Const FusionSourceSubTypeSetting

FusionSourceSubTypeSetting: object

type

type: object

className

className: string = "FusionSourceSubTypeSetting"

name

name: string = "Composite"

modelProperties

modelProperties: object

enabled

enabled: object

required

required: boolean = true

serializedName

serializedName: string = "enabled"

type

type: object

name

name: string = "Boolean"

severityFilters

severityFilters: object

serializedName

serializedName: string = "severityFilters"

type

type: object

className

className: string = "FusionSubTypeSeverityFilter"

name

name: string = "Composite"

sourceSubTypeDisplayName

sourceSubTypeDisplayName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "sourceSubTypeDisplayName"

type

type: object

name

name: string = "String"

sourceSubTypeName

sourceSubTypeName: object

required

required: boolean = true

serializedName

serializedName: string = "sourceSubTypeName"

type

type: object

name

name: string = "String"

Const FusionSubTypeSeverityFilter

FusionSubTypeSeverityFilter: object

type

type: object

className

className: string = "FusionSubTypeSeverityFilter"

name

name: string = "Composite"

modelProperties

modelProperties: object

filters

filters: object

serializedName

serializedName: string = "filters"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "FusionSubTypeSeverityFiltersItem"

name

name: string = "Composite"

isSupported

isSupported: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "isSupported"

type

type: object

name

name: string = "Boolean"

Const FusionSubTypeSeverityFiltersItem

FusionSubTypeSeverityFiltersItem: object

type

type: object

className

className: string = "FusionSubTypeSeverityFiltersItem"

name

name: string = "Composite"

modelProperties

modelProperties: object

enabled

enabled: object

required

required: boolean = true

serializedName

serializedName: string = "enabled"

type

type: object

name

name: string = "Boolean"

severity

severity: object

required

required: boolean = true

serializedName

serializedName: string = "severity"

type

type: object

name

name: string = "String"

Const FusionTemplateSourceSetting

FusionTemplateSourceSetting: object

type

type: object

className

className: string = "FusionTemplateSourceSetting"

name

name: string = "Composite"

modelProperties

modelProperties: object

sourceName

sourceName: object

required

required: boolean = true

serializedName

serializedName: string = "sourceName"

type

type: object

name

name: string = "String"

sourceSubTypes

sourceSubTypes: object

serializedName

serializedName: string = "sourceSubTypes"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "FusionTemplateSourceSubType"

name

name: string = "Composite"

Const FusionTemplateSourceSubType

FusionTemplateSourceSubType: object

type

type: object

className

className: string = "FusionTemplateSourceSubType"

name

name: string = "Composite"

modelProperties

modelProperties: object

severityFilter

severityFilter: object

serializedName

serializedName: string = "severityFilter"

type

type: object

className

className: string = "FusionTemplateSubTypeSeverityFilter"

name

name: string = "Composite"

sourceSubTypeDisplayName

sourceSubTypeDisplayName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "sourceSubTypeDisplayName"

type

type: object

name

name: string = "String"

sourceSubTypeName

sourceSubTypeName: object

required

required: boolean = true

serializedName

serializedName: string = "sourceSubTypeName"

type

type: object

name

name: string = "String"

Const FusionTemplateSubTypeSeverityFilter

FusionTemplateSubTypeSeverityFilter: object

type

type: object

className

className: string = "FusionTemplateSubTypeSeverityFilter"

name

name: string = "Composite"

modelProperties

modelProperties: object

isSupported

isSupported: object

required

required: boolean = true

serializedName

serializedName: string = "isSupported"

type

type: object

name

name: string = "Boolean"

severityFilters

severityFilters: object

serializedName

serializedName: string = "severityFilters"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

Const GeoLocation

GeoLocation: object

type

type: object

className

className: string = "GeoLocation"

name

name: string = "Composite"

modelProperties

modelProperties: object

asn

asn: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "asn"

type

type: object

name

name: string = "Number"

city

city: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "city"

type

type: object

name

name: string = "String"

countryCode

countryCode: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "countryCode"

type

type: object

name

name: string = "String"

countryName

countryName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "countryName"

type

type: object

name

name: string = "String"

latitude

latitude: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "latitude"

type

type: object

name

name: string = "Number"

longitude

longitude: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "longitude"

type

type: object

name

name: string = "Number"

state

state: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "state"

type

type: object

name

name: string = "String"

Const GetInsightsError

GetInsightsError: object

type

type: object

className

className: string = "GetInsightsError"

name

name: string = "Composite"

modelProperties

modelProperties: object

errorMessage

errorMessage: object

required

required: boolean = true

serializedName

serializedName: string = "errorMessage"

type

type: object

name

name: string = "String"

kind

kind: object

defaultValue

defaultValue: string = "Insight"

isConstant

isConstant: boolean = true

serializedName

serializedName: string = "kind"

type

type: object

name

name: string = "String"

queryId

queryId: object

serializedName

serializedName: string = "queryId"

type

type: object

name

name: string = "String"

Const GetInsightsResultsMetadata

GetInsightsResultsMetadata: object

type

type: object

className

className: string = "GetInsightsResultsMetadata"

name

name: string = "Composite"

modelProperties

modelProperties: object

errors

errors: object

serializedName

serializedName: string = "errors"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "GetInsightsError"

name

name: string = "Composite"

totalCount

totalCount: object

required

required: boolean = true

serializedName

serializedName: string = "totalCount"

type

type: object

name

name: string = "Number"

Const GetQueriesResponse

GetQueriesResponse: object

type

type: object

className

className: string = "GetQueriesResponse"

name

name: string = "Composite"

modelProperties

modelProperties: object

value

value: object

serializedName

serializedName: string = "value"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "EntityQueryItem"

name

name: string = "Composite"

Const GitHubResourceInfo

GitHubResourceInfo: object

type

type: object

className

className: string = "GitHubResourceInfo"

name

name: string = "Composite"

modelProperties

modelProperties: object

appInstallationId

appInstallationId: object

serializedName

serializedName: string = "appInstallationId"

type

type: object

name

name: string = "String"

Const GraphQueries

GraphQueries: object

type

type: object

className

className: string = "GraphQueries"

name

name: string = "Composite"

modelProperties

modelProperties: object

baseQuery

baseQuery: object

serializedName

serializedName: string = "baseQuery"

type

type: object

name

name: string = "String"

legend

legend: object

serializedName

serializedName: string = "legend"

type

type: object

name

name: string = "String"

metricName

metricName: object

serializedName

serializedName: string = "metricName"

type

type: object

name

name: string = "String"

Const GroupingConfiguration

GroupingConfiguration: object

type

type: object

className

className: string = "GroupingConfiguration"

name

name: string = "Composite"

modelProperties

modelProperties: object

enabled

enabled: object

required

required: boolean = true

serializedName

serializedName: string = "enabled"

type

type: object

name

name: string = "Boolean"

groupByAlertDetails

groupByAlertDetails: object

serializedName

serializedName: string = "groupByAlertDetails"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

groupByCustomDetails

groupByCustomDetails: object

serializedName

serializedName: string = "groupByCustomDetails"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

groupByEntities

groupByEntities: object

serializedName

serializedName: string = "groupByEntities"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

lookbackDuration

lookbackDuration: object

required

required: boolean = true

serializedName

serializedName: string = "lookbackDuration"

type

type: object

name

name: string = "TimeSpan"

matchingMethod

matchingMethod: object

required

required: boolean = true

serializedName

serializedName: string = "matchingMethod"

type

type: object

name

name: string = "String"

reopenClosedIncident

reopenClosedIncident: object

required

required: boolean = true

serializedName

serializedName: string = "reopenClosedIncident"

type

type: object

name

name: string = "Boolean"

Const HostEntity

HostEntity: object

serializedName

serializedName: string = "Host"

type

type: object

className

className: string = "HostEntity"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = Resource.type.polymorphicDiscriminator

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

additionalData

additionalData: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.additionalData"

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "any"

azureID

azureID: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.azureID"

type

type: object

name

name: string = "String"

dnsDomain

dnsDomain: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.dnsDomain"

type

type: object

name

name: string = "String"

friendlyName

friendlyName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.friendlyName"

type

type: object

name

name: string = "String"

hostName

hostName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.hostName"

type

type: object

name

name: string = "String"

isDomainJoined

isDomainJoined: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.isDomainJoined"

type

type: object

name

name: string = "Boolean"

netBiosName

netBiosName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.netBiosName"

type

type: object

name

name: string = "String"

ntDomain

ntDomain: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.ntDomain"

type

type: object

name

name: string = "String"

omsAgentID

omsAgentID: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.omsAgentID"

type

type: object

name

name: string = "String"

osFamily

osFamily: object

serializedName

serializedName: string = "properties.osFamily"

type

type: object

allowedValues

allowedValues: string[] = ["Linux", "Windows", "Android", "IOS", "Unknown"]

name

name: string = "Enum"

osVersion

osVersion: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.osVersion"

type

type: object

name

name: string = "String"

Const HostEntityProperties

HostEntityProperties: object

type

type: object

className

className: string = "HostEntityProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

azureID

azureID: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "azureID"

type

type: object

name

name: string = "String"

dnsDomain

dnsDomain: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "dnsDomain"

type

type: object

name

name: string = "String"

hostName

hostName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "hostName"

type

type: object

name

name: string = "String"

isDomainJoined

isDomainJoined: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "isDomainJoined"

type

type: object

name

name: string = "Boolean"

netBiosName

netBiosName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "netBiosName"

type

type: object

name

name: string = "String"

ntDomain

ntDomain: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "ntDomain"

type

type: object

name

name: string = "String"

omsAgentID

omsAgentID: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "omsAgentID"

type

type: object

name

name: string = "String"

osFamily

osFamily: object

serializedName

serializedName: string = "osFamily"

type

type: object

allowedValues

allowedValues: string[] = ["Linux", "Windows", "Android", "IOS", "Unknown"]

name

name: string = "Enum"

osVersion

osVersion: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "osVersion"

type

type: object

name

name: string = "String"

Const HuntingBookmark

HuntingBookmark: object

serializedName

serializedName: string = "Bookmark"

type

type: object

className

className: string = "HuntingBookmark"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = Resource.type.polymorphicDiscriminator

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

additionalData

additionalData: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.additionalData"

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "any"

created

created: object

serializedName

serializedName: string = "properties.created"

type

type: object

name

name: string = "DateTime"

createdBy

createdBy: object

serializedName

serializedName: string = "properties.createdBy"

type

type: object

className

className: string = "UserInfo"

name

name: string = "Composite"

displayName

displayName: object

serializedName

serializedName: string = "properties.displayName"

type

type: object

name

name: string = "String"

eventTime

eventTime: object

serializedName

serializedName: string = "properties.eventTime"

type

type: object

name

name: string = "DateTime"

friendlyName

friendlyName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.friendlyName"

type

type: object

name

name: string = "String"

incidentInfo

incidentInfo: object

serializedName

serializedName: string = "properties.incidentInfo"

type

type: object

className

className: string = "IncidentInfo"

name

name: string = "Composite"

labels

labels: object

serializedName

serializedName: string = "properties.labels"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

notes

notes: object

serializedName

serializedName: string = "properties.notes"

type

type: object

name

name: string = "String"

query

query: object

serializedName

serializedName: string = "properties.query"

type

type: object

name

name: string = "String"

queryResult

queryResult: object

serializedName

serializedName: string = "properties.queryResult"

type

type: object

name

name: string = "String"

updated

updated: object

serializedName

serializedName: string = "properties.updated"

type

type: object

name

name: string = "DateTime"

updatedBy

updatedBy: object

serializedName

serializedName: string = "properties.updatedBy"

type

type: object

className

className: string = "UserInfo"

name

name: string = "Composite"

Const HuntingBookmarkProperties

HuntingBookmarkProperties: object

type

type: object

className

className: string = "HuntingBookmarkProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

created

created: object

serializedName

serializedName: string = "created"

type

type: object

name

name: string = "DateTime"

createdBy

createdBy: object

serializedName

serializedName: string = "createdBy"

type

type: object

className

className: string = "UserInfo"

name

name: string = "Composite"

displayName

displayName: object

required

required: boolean = true

serializedName

serializedName: string = "displayName"

type

type: object

name

name: string = "String"

eventTime

eventTime: object

serializedName

serializedName: string = "eventTime"

type

type: object

name

name: string = "DateTime"

incidentInfo

incidentInfo: object

serializedName

serializedName: string = "incidentInfo"

type

type: object

className

className: string = "IncidentInfo"

name

name: string = "Composite"

labels

labels: object

serializedName

serializedName: string = "labels"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

notes

notes: object

serializedName

serializedName: string = "notes"

type

type: object

name

name: string = "String"

query

query: object

required

required: boolean = true

serializedName

serializedName: string = "query"

type

type: object

name

name: string = "String"

queryResult

queryResult: object

serializedName

serializedName: string = "queryResult"

type

type: object

name

name: string = "String"

updated

updated: object

serializedName

serializedName: string = "updated"

type

type: object

name

name: string = "DateTime"

updatedBy

updatedBy: object

serializedName

serializedName: string = "updatedBy"

type

type: object

className

className: string = "UserInfo"

name

name: string = "Composite"

Const Incident

Incident: object

type

type: object

className

className: string = "Incident"

name

name: string = "Composite"

modelProperties

modelProperties: object

additionalData

additionalData: object

serializedName

serializedName: string = "properties.additionalData"

type

type: object

className

className: string = "IncidentAdditionalData"

name

name: string = "Composite"

classification

classification: object

serializedName

serializedName: string = "properties.classification"

type

type: object

name

name: string = "String"

classificationComment

classificationComment: object

serializedName

serializedName: string = "properties.classificationComment"

type

type: object

name

name: string = "String"

classificationReason

classificationReason: object

serializedName

serializedName: string = "properties.classificationReason"

type

type: object

name

name: string = "String"

createdTimeUtc

createdTimeUtc: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.createdTimeUtc"

type

type: object

name

name: string = "DateTime"

description

description: object

serializedName

serializedName: string = "properties.description"

type

type: object

name

name: string = "String"

firstActivityTimeUtc

firstActivityTimeUtc: object

serializedName

serializedName: string = "properties.firstActivityTimeUtc"

type

type: object

name

name: string = "DateTime"

incidentNumber

incidentNumber: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.incidentNumber"

type

type: object

name

name: string = "Number"

incidentUrl

incidentUrl: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.incidentUrl"

type

type: object

name

name: string = "String"

labels

labels: object

serializedName

serializedName: string = "properties.labels"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "IncidentLabel"

name

name: string = "Composite"

lastActivityTimeUtc

lastActivityTimeUtc: object

serializedName

serializedName: string = "properties.lastActivityTimeUtc"

type

type: object

name

name: string = "DateTime"

lastModifiedTimeUtc

lastModifiedTimeUtc: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.lastModifiedTimeUtc"

type

type: object

name

name: string = "DateTime"

owner

owner: object

serializedName

serializedName: string = "properties.owner"

type

type: object

className

className: string = "IncidentOwnerInfo"

name

name: string = "Composite"

providerIncidentId

providerIncidentId: object

serializedName

serializedName: string = "properties.providerIncidentId"

type

type: object

name

name: string = "String"

providerName

providerName: object

serializedName

serializedName: string = "properties.providerName"

type

type: object

name

name: string = "String"

relatedAnalyticRuleIds

relatedAnalyticRuleIds: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.relatedAnalyticRuleIds"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

severity

severity: object

serializedName

serializedName: string = "properties.severity"

type

type: object

name

name: string = "String"

status

status: object

serializedName

serializedName: string = "properties.status"

type

type: object

name

name: string = "String"

teamInformation

teamInformation: object

serializedName

serializedName: string = "properties.teamInformation"

type

type: object

className

className: string = "TeamInformation"

name

name: string = "Composite"

title

title: object

serializedName

serializedName: string = "properties.title"

type

type: object

name

name: string = "String"

Const IncidentAdditionalData

IncidentAdditionalData: object

type

type: object

className

className: string = "IncidentAdditionalData"

name

name: string = "Composite"

modelProperties

modelProperties: object

alertProductNames

alertProductNames: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "alertProductNames"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

alertsCount

alertsCount: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "alertsCount"

type

type: object

name

name: string = "Number"

bookmarksCount

bookmarksCount: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "bookmarksCount"

type

type: object

name

name: string = "Number"

commentsCount

commentsCount: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "commentsCount"

type

type: object

name

name: string = "Number"

providerIncidentUrl

providerIncidentUrl: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "providerIncidentUrl"

type

type: object

name

name: string = "String"

tactics

tactics: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "tactics"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

techniques

techniques: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "techniques"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

Const IncidentAlertList

IncidentAlertList: object

type

type: object

className

className: string = "IncidentAlertList"

name

name: string = "Composite"

modelProperties

modelProperties: object

value

value: object

required

required: boolean = true

serializedName

serializedName: string = "value"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "SecurityAlert"

name

name: string = "Composite"

Const IncidentBookmarkList

IncidentBookmarkList: object

type

type: object

className

className: string = "IncidentBookmarkList"

name

name: string = "Composite"

modelProperties

modelProperties: object

value

value: object

required

required: boolean = true

serializedName

serializedName: string = "value"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "HuntingBookmark"

name

name: string = "Composite"

Const IncidentComment

IncidentComment: object

type

type: object

className

className: string = "IncidentComment"

name

name: string = "Composite"

modelProperties

modelProperties: object

author

author: object

serializedName

serializedName: string = "properties.author"

type

type: object

className

className: string = "ClientInfo"

name

name: string = "Composite"

createdTimeUtc

createdTimeUtc: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.createdTimeUtc"

type

type: object

name

name: string = "DateTime"

lastModifiedTimeUtc

lastModifiedTimeUtc: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.lastModifiedTimeUtc"

type

type: object

name

name: string = "DateTime"

message

message: object

serializedName

serializedName: string = "properties.message"

type

type: object

name

name: string = "String"

Const IncidentCommentList

IncidentCommentList: object

type

type: object

className

className: string = "IncidentCommentList"

name

name: string = "Composite"

modelProperties

modelProperties: object

nextLink

nextLink: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "nextLink"

type

type: object

name

name: string = "String"

value

value: object

required

required: boolean = true

serializedName

serializedName: string = "value"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "IncidentComment"

name

name: string = "Composite"

Const IncidentConfiguration

IncidentConfiguration: object

type

type: object

className

className: string = "IncidentConfiguration"

name

name: string = "Composite"

modelProperties

modelProperties: object

createIncident

createIncident: object

required

required: boolean = true

serializedName

serializedName: string = "createIncident"

type

type: object

name

name: string = "Boolean"

groupingConfiguration

groupingConfiguration: object

serializedName

serializedName: string = "groupingConfiguration"

type

type: object

className

className: string = "GroupingConfiguration"

name

name: string = "Composite"

Const IncidentEntitiesResponse

IncidentEntitiesResponse: object

type

type: object

className

className: string = "IncidentEntitiesResponse"

name

name: string = "Composite"

modelProperties

modelProperties: object

entities

entities: object

serializedName

serializedName: string = "entities"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "Entity"

name

name: string = "Composite"

metaData

metaData: object

serializedName

serializedName: string = "metaData"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "IncidentEntitiesResultsMetadata"

name

name: string = "Composite"

Const IncidentEntitiesResultsMetadata

IncidentEntitiesResultsMetadata: object

type

type: object

className

className: string = "IncidentEntitiesResultsMetadata"

name

name: string = "Composite"

modelProperties

modelProperties: object

count

count: object

required

required: boolean = true

serializedName

serializedName: string = "count"

type

type: object

name

name: string = "Number"

entityKind

entityKind: object

required

required: boolean = true

serializedName

serializedName: string = "entityKind"

type

type: object

name

name: string = "String"

Const IncidentInfo

IncidentInfo: object

type

type: object

className

className: string = "IncidentInfo"

name

name: string = "Composite"

modelProperties

modelProperties: object

incidentId

incidentId: object

serializedName

serializedName: string = "incidentId"

type

type: object

name

name: string = "String"

relationName

relationName: object

serializedName

serializedName: string = "relationName"

type

type: object

name

name: string = "String"

severity

severity: object

serializedName

serializedName: string = "severity"

type

type: object

name

name: string = "String"

title

title: object

serializedName

serializedName: string = "title"

type

type: object

name

name: string = "String"

Const IncidentLabel

IncidentLabel: object

type

type: object

className

className: string = "IncidentLabel"

name

name: string = "Composite"

modelProperties

modelProperties: object

labelName

labelName: object

required

required: boolean = true

serializedName

serializedName: string = "labelName"

type

type: object

name

name: string = "String"

labelType

labelType: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "labelType"

type

type: object

name

name: string = "String"

Const IncidentList

IncidentList: object

type

type: object

className

className: string = "IncidentList"

name

name: string = "Composite"

modelProperties

modelProperties: object

nextLink

nextLink: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "nextLink"

type

type: object

name

name: string = "String"

value

value: object

required

required: boolean = true

serializedName

serializedName: string = "value"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "Incident"

name

name: string = "Composite"

Const IncidentOwnerInfo

IncidentOwnerInfo: object

type

type: object

className

className: string = "IncidentOwnerInfo"

name

name: string = "Composite"

modelProperties

modelProperties: object

assignedTo

assignedTo: object

serializedName

serializedName: string = "assignedTo"

type

type: object

name

name: string = "String"

email

email: object

serializedName

serializedName: string = "email"

type

type: object

name

name: string = "String"

objectId

objectId: object

serializedName

serializedName: string = "objectId"

type

type: object

name

name: string = "Uuid"

ownerType

ownerType: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "ownerType"

type

type: object

name

name: string = "String"

userPrincipalName

userPrincipalName: object

serializedName

serializedName: string = "userPrincipalName"

type

type: object

name

name: string = "String"

Const IncidentPropertiesAction

IncidentPropertiesAction: object

type

type: object

className

className: string = "IncidentPropertiesAction"

name

name: string = "Composite"

modelProperties

modelProperties: object

classification

classification: object

serializedName

serializedName: string = "classification"

type

type: object

name

name: string = "String"

classificationComment

classificationComment: object

serializedName

serializedName: string = "classificationComment"

type

type: object

name

name: string = "String"

classificationReason

classificationReason: object

serializedName

serializedName: string = "classificationReason"

type

type: object

name

name: string = "String"

labels

labels: object

serializedName

serializedName: string = "labels"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "IncidentLabel"

name

name: string = "Composite"

owner

owner: object

serializedName

serializedName: string = "owner"

type

type: object

className

className: string = "IncidentOwnerInfo"

name

name: string = "Composite"

severity

severity: object

serializedName

serializedName: string = "severity"

type

type: object

name

name: string = "String"

status

status: object

serializedName

serializedName: string = "status"

type

type: object

name

name: string = "String"

Const InsightQueryItem

InsightQueryItem: object

serializedName

serializedName: string = "Insight"

type

type: object

className

className: string = "InsightQueryItem"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = EntityQueryItem.type.polymorphicDiscriminator

uberParent

uberParent: string = "EntityQueryItem"

modelProperties

modelProperties: object

properties

properties: object

serializedName

serializedName: string = "properties"

type

type: object

className

className: string = "InsightQueryItemProperties"

name

name: string = "Composite"

Const InsightQueryItemProperties

InsightQueryItemProperties: object

type

type: object

className

className: string = "InsightQueryItemProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

additionalQuery

additionalQuery: object

serializedName

serializedName: string = "additionalQuery"

type

type: object

className

className: string = "InsightQueryItemPropertiesAdditionalQuery"

name

name: string = "Composite"

baseQuery

baseQuery: object

serializedName

serializedName: string = "baseQuery"

type

type: object

name

name: string = "String"

chartQuery

chartQuery: object

serializedName

serializedName: string = "chartQuery"

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "any"

defaultTimeRange

defaultTimeRange: object

serializedName

serializedName: string = "defaultTimeRange"

type

type: object

className

className: string = "InsightQueryItemPropertiesDefaultTimeRange"

name

name: string = "Composite"

description

description: object

serializedName

serializedName: string = "description"

type

type: object

name

name: string = "String"

displayName

displayName: object

serializedName

serializedName: string = "displayName"

type

type: object

name

name: string = "String"

referenceTimeRange

referenceTimeRange: object

serializedName

serializedName: string = "referenceTimeRange"

type

type: object

className

className: string = "InsightQueryItemPropertiesReferenceTimeRange"

name

name: string = "Composite"

tableQuery

tableQuery: object

serializedName

serializedName: string = "tableQuery"

type

type: object

className

className: string = "InsightQueryItemPropertiesTableQuery"

name

name: string = "Composite"

Const InsightQueryItemPropertiesAdditionalQuery

InsightQueryItemPropertiesAdditionalQuery: object

type

type: object

className

className: string = "InsightQueryItemPropertiesAdditionalQuery"

name

name: string = "Composite"

modelProperties

modelProperties: object

query

query: object

serializedName

serializedName: string = "query"

type

type: object

name

name: string = "String"

text

text: object

serializedName

serializedName: string = "text"

type

type: object

name

name: string = "String"

Const InsightQueryItemPropertiesDefaultTimeRange

InsightQueryItemPropertiesDefaultTimeRange: object

type

type: object

className

className: string = "InsightQueryItemPropertiesDefaultTimeRange"

name

name: string = "Composite"

modelProperties

modelProperties: object

afterRange

afterRange: object

serializedName

serializedName: string = "afterRange"

type

type: object

name

name: string = "String"

beforeRange

beforeRange: object

serializedName

serializedName: string = "beforeRange"

type

type: object

name

name: string = "String"

Const InsightQueryItemPropertiesReferenceTimeRange

InsightQueryItemPropertiesReferenceTimeRange: object

type

type: object

className

className: string = "InsightQueryItemPropertiesReferenceTimeRange"

name

name: string = "Composite"

modelProperties

modelProperties: object

beforeRange

beforeRange: object

serializedName

serializedName: string = "beforeRange"

type

type: object

name

name: string = "String"

Const InsightQueryItemPropertiesTableQuery

InsightQueryItemPropertiesTableQuery: object

type

type: object

className

className: string = "InsightQueryItemPropertiesTableQuery"

name

name: string = "Composite"

modelProperties

modelProperties: object

columnsDefinitions

columnsDefinitions: object

serializedName

serializedName: string = "columnsDefinitions"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "InsightQueryItemPropertiesTableQueryColumnsDefinitionsItem"

name

name: string = "Composite"

queriesDefinitions

queriesDefinitions: object

serializedName

serializedName: string = "queriesDefinitions"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "InsightQueryItemPropertiesTableQueryQueriesDefinitionsItem"

name

name: string = "Composite"

Const InsightQueryItemPropertiesTableQueryColumnsDefinitionsItem

InsightQueryItemPropertiesTableQueryColumnsDefinitionsItem: object

type

type: object

className

className: string = "InsightQueryItemPropertiesTableQueryColumnsDefinitionsItem"

name

name: string = "Composite"

modelProperties

modelProperties: object

header

header: object

serializedName

serializedName: string = "header"

type

type: object

name

name: string = "String"

outputType

outputType: object

serializedName

serializedName: string = "outputType"

type

type: object

name

name: string = "String"

supportDeepLink

supportDeepLink: object

serializedName

serializedName: string = "supportDeepLink"

type

type: object

name

name: string = "Boolean"

Const InsightQueryItemPropertiesTableQueryQueriesDefinitionsItem

InsightQueryItemPropertiesTableQueryQueriesDefinitionsItem: object

type

type: object

className

className: string = "InsightQueryItemPropertiesTableQueryQueriesDefinitionsItem"

name

name: string = "Composite"

modelProperties

modelProperties: object

filter

filter: object

serializedName

serializedName: string = "filter"

type

type: object

name

name: string = "String"

linkColumnsDefinitions

linkColumnsDefinitions: object

serializedName

serializedName: string = "linkColumnsDefinitions"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "InsightQueryItemPropertiesTableQueryQueriesDefinitionsPropertiesItemsItem"

name

name: string = "Composite"

project

project: object

serializedName

serializedName: string = "project"

type

type: object

name

name: string = "String"

summarize

summarize: object

serializedName

serializedName: string = "summarize"

type

type: object

name

name: string = "String"

Const InsightQueryItemPropertiesTableQueryQueriesDefinitionsPropertiesItemsItem

InsightQueryItemPropertiesTableQueryQueriesDefinitionsPropertiesItemsItem: object

type

type: object

className

className: string = "InsightQueryItemPropertiesTableQueryQueriesDefinitionsPropertiesItemsItem"

name

name: string = "Composite"

modelProperties

modelProperties: object

projectedName

projectedName: object

serializedName

serializedName: string = "projectedName"

type

type: object

name

name: string = "String"

query

query: object

serializedName

serializedName: string = "Query"

type

type: object

name

name: string = "String"

Const InsightsTableResult

InsightsTableResult: object

type

type: object

className

className: string = "InsightsTableResult"

name

name: string = "Composite"

modelProperties

modelProperties: object

columns

columns: object

serializedName

serializedName: string = "columns"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "InsightsTableResultColumnsItem"

name

name: string = "Composite"

rows

rows: object

serializedName

serializedName: string = "rows"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

Const InsightsTableResultColumnsItem

InsightsTableResultColumnsItem: object

type

type: object

className

className: string = "InsightsTableResultColumnsItem"

name

name: string = "Composite"

modelProperties

modelProperties: object

name

name: object

serializedName

serializedName: string = "name"

type

type: object

name

name: string = "String"

type

type: object

serializedName

serializedName: string = "type"

type

type: object

name

name: string = "String"

Const InstructionSteps

InstructionSteps: object

type

type: object

className

className: string = "InstructionSteps"

name

name: string = "Composite"

modelProperties

modelProperties: object

description

description: object

serializedName

serializedName: string = "description"

type

type: object

name

name: string = "String"

instructions

instructions: object

serializedName

serializedName: string = "instructions"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "InstructionStepsInstructionsItem"

name

name: string = "Composite"

title

title: object

serializedName

serializedName: string = "title"

type

type: object

name

name: string = "String"

Const InstructionStepsInstructionsItem

InstructionStepsInstructionsItem: object

type

type: object

className

className: string = "InstructionStepsInstructionsItem"

name

name: string = "Composite"

modelProperties

modelProperties: object

Const IoTCheckRequirements

IoTCheckRequirements: object

serializedName

serializedName: string = "IOT"

type

type: object

className

className: string = "IoTCheckRequirements"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = DataConnectorsCheckRequirements.type.polymorphicDiscriminator

uberParent

uberParent: string = "DataConnectorsCheckRequirements"

modelProperties

modelProperties: object

subscriptionId

subscriptionId: object

serializedName

serializedName: string = "properties.subscriptionId"

type

type: object

name

name: string = "String"

Const IoTDataConnector

IoTDataConnector: object

serializedName

serializedName: string = "IOT"

type

type: object

className

className: string = "IoTDataConnector"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = Resource.type.polymorphicDiscriminator

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

dataTypes

dataTypes: object

serializedName

serializedName: string = "properties.dataTypes"

type

type: object

className

className: string = "AlertsDataTypeOfDataConnector"

name

name: string = "Composite"

subscriptionId

subscriptionId: object

serializedName

serializedName: string = "properties.subscriptionId"

type

type: object

name

name: string = "String"

Const IoTDataConnectorProperties

IoTDataConnectorProperties: object

type

type: object

className

className: string = "IoTDataConnectorProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

subscriptionId

subscriptionId: object

serializedName

serializedName: string = "subscriptionId"

type

type: object

name

name: string = "String"

Const IoTDeviceEntity

IoTDeviceEntity: object

serializedName

serializedName: string = "IoTDevice"

type

type: object

className

className: string = "IoTDeviceEntity"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = Resource.type.polymorphicDiscriminator

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

additionalData

additionalData: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.additionalData"

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "any"

deviceId

deviceId: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.deviceId"

type

type: object

name

name: string = "String"

deviceName

deviceName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.deviceName"

type

type: object

name

name: string = "String"

deviceType

deviceType: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.deviceType"

type

type: object

name

name: string = "String"

edgeId

edgeId: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.edgeId"

type

type: object

name

name: string = "String"

firmwareVersion

firmwareVersion: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.firmwareVersion"

type

type: object

name

name: string = "String"

friendlyName

friendlyName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.friendlyName"

type

type: object

name

name: string = "String"

hostEntityId

hostEntityId: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.hostEntityId"

type

type: object

name

name: string = "String"

iotHubEntityId

iotHubEntityId: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.iotHubEntityId"

type

type: object

name

name: string = "String"

iotSecurityAgentId

iotSecurityAgentId: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.iotSecurityAgentId"

type

type: object

name

name: string = "Uuid"

ipAddressEntityId

ipAddressEntityId: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.ipAddressEntityId"

type

type: object

name

name: string = "String"

macAddress

macAddress: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.macAddress"

type

type: object

name

name: string = "String"

model

model: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.model"

type

type: object

name

name: string = "String"

operatingSystem

operatingSystem: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.operatingSystem"

type

type: object

name

name: string = "String"

protocols

protocols: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.protocols"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

serialNumber

serialNumber: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.serialNumber"

type

type: object

name

name: string = "String"

source

source: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.source"

type

type: object

name

name: string = "String"

threatIntelligence

threatIntelligence: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.threatIntelligence"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "ThreatIntelligence"

name

name: string = "Composite"

vendor

vendor: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.vendor"

type

type: object

name

name: string = "String"

Const IoTDeviceEntityProperties

IoTDeviceEntityProperties: object

type

type: object

className

className: string = "IoTDeviceEntityProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

deviceId

deviceId: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "deviceId"

type

type: object

name

name: string = "String"

deviceName

deviceName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "deviceName"

type

type: object

name

name: string = "String"

deviceType

deviceType: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "deviceType"

type

type: object

name

name: string = "String"

edgeId

edgeId: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "edgeId"

type

type: object

name

name: string = "String"

firmwareVersion

firmwareVersion: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "firmwareVersion"

type

type: object

name

name: string = "String"

hostEntityId

hostEntityId: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "hostEntityId"

type

type: object

name

name: string = "String"

iotHubEntityId

iotHubEntityId: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "iotHubEntityId"

type

type: object

name

name: string = "String"

iotSecurityAgentId

iotSecurityAgentId: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "iotSecurityAgentId"

type

type: object

name

name: string = "Uuid"

ipAddressEntityId

ipAddressEntityId: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "ipAddressEntityId"

type

type: object

name

name: string = "String"

macAddress

macAddress: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "macAddress"

type

type: object

name

name: string = "String"

model

model: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "model"

type

type: object

name

name: string = "String"

operatingSystem

operatingSystem: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "operatingSystem"

type

type: object

name

name: string = "String"

protocols

protocols: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "protocols"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

serialNumber

serialNumber: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "serialNumber"

type

type: object

name

name: string = "String"

source

source: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "source"

type

type: object

name

name: string = "String"

threatIntelligence

threatIntelligence: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "threatIntelligence"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "ThreatIntelligence"

name

name: string = "Composite"

vendor

vendor: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "vendor"

type

type: object

name

name: string = "String"

Const IpEntity

IpEntity: object

serializedName

serializedName: string = "Ip"

type

type: object

className

className: string = "IpEntity"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = Resource.type.polymorphicDiscriminator

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

additionalData

additionalData: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.additionalData"

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "any"

address

address: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.address"

type

type: object

name

name: string = "String"

friendlyName

friendlyName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.friendlyName"

type

type: object

name

name: string = "String"

location

location: object

serializedName

serializedName: string = "properties.location"

type

type: object

className

className: string = "GeoLocation"

name

name: string = "Composite"

threatIntelligence

threatIntelligence: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.threatIntelligence"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "ThreatIntelligence"

name

name: string = "Composite"

Const IpEntityProperties

IpEntityProperties: object

type

type: object

className

className: string = "IpEntityProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

address

address: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "address"

type

type: object

name

name: string = "String"

location

location: object

serializedName

serializedName: string = "location"

type

type: object

className

className: string = "GeoLocation"

name

name: string = "Composite"

threatIntelligence

threatIntelligence: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "threatIntelligence"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "ThreatIntelligence"

name

name: string = "Composite"

Const LastDataReceivedDataType

LastDataReceivedDataType: object

type

type: object

className

className: string = "LastDataReceivedDataType"

name

name: string = "Composite"

modelProperties

modelProperties: object

lastDataReceivedQuery

lastDataReceivedQuery: object

serializedName

serializedName: string = "lastDataReceivedQuery"

type

type: object

name

name: string = "String"

name

name: object

serializedName

serializedName: string = "name"

type

type: object

name

name: string = "String"

Const MLBehaviorAnalyticsAlertRule

MLBehaviorAnalyticsAlertRule: object

serializedName

serializedName: string = "MLBehaviorAnalytics"

type

type: object

className

className: string = "MLBehaviorAnalyticsAlertRule"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = Resource.type.polymorphicDiscriminator

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

alertRuleTemplateName

alertRuleTemplateName: object

serializedName

serializedName: string = "properties.alertRuleTemplateName"

type

type: object

name

name: string = "String"

description

description: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.description"

type

type: object

name

name: string = "String"

displayName

displayName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.displayName"

type

type: object

name

name: string = "String"

enabled

enabled: object

serializedName

serializedName: string = "properties.enabled"

type

type: object

name

name: string = "Boolean"

lastModifiedUtc

lastModifiedUtc: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.lastModifiedUtc"

type

type: object

name

name: string = "DateTime"

severity

severity: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.severity"

type

type: object

name

name: string = "String"

tactics

tactics: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.tactics"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

techniques

techniques: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.techniques"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

Const MLBehaviorAnalyticsAlertRuleTemplate

MLBehaviorAnalyticsAlertRuleTemplate: object

serializedName

serializedName: string = "MLBehaviorAnalytics"

type

type: object

className

className: string = "MLBehaviorAnalyticsAlertRuleTemplate"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = Resource.type.polymorphicDiscriminator

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

alertRulesCreatedByTemplateCount

alertRulesCreatedByTemplateCount: object

serializedName

serializedName: string = "properties.alertRulesCreatedByTemplateCount"

type

type: object

name

name: string = "Number"

createdDateUTC

createdDateUTC: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.createdDateUTC"

type

type: object

name

name: string = "DateTime"

description

description: object

serializedName

serializedName: string = "properties.description"

type

type: object

name

name: string = "String"

displayName

displayName: object

serializedName

serializedName: string = "properties.displayName"

type

type: object

name

name: string = "String"

lastUpdatedDateUTC

lastUpdatedDateUTC: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.lastUpdatedDateUTC"

type

type: object

name

name: string = "DateTime"

requiredDataConnectors

requiredDataConnectors: object

serializedName

serializedName: string = "properties.requiredDataConnectors"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "AlertRuleTemplateDataSource"

name

name: string = "Composite"

severity

severity: object

serializedName

serializedName: string = "properties.severity"

type

type: object

name

name: string = "String"

status

status: object

serializedName

serializedName: string = "properties.status"

type

type: object

name

name: string = "String"

tactics

tactics: object

serializedName

serializedName: string = "properties.tactics"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

techniques

techniques: object

serializedName

serializedName: string = "properties.techniques"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

Const MLBehaviorAnalyticsAlertRuleTemplateProperties

MLBehaviorAnalyticsAlertRuleTemplateProperties: object

type

type: object

className

className: string = "MLBehaviorAnalyticsAlertRuleTemplateProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

severity

severity: object

required

required: boolean = true

serializedName

serializedName: string = "severity"

type

type: object

name

name: string = "String"

Const MTPCheckRequirementsProperties

MTPCheckRequirementsProperties: object

type

type: object

className

className: string = "MTPCheckRequirementsProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

Const MTPDataConnector

MTPDataConnector: object

serializedName

serializedName: string = "MicrosoftThreatProtection"

type

type: object

className

className: string = "MTPDataConnector"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = Resource.type.polymorphicDiscriminator

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

dataTypes

dataTypes: object

serializedName

serializedName: string = "properties.dataTypes"

type

type: object

className

className: string = "MTPDataConnectorDataTypes"

name

name: string = "Composite"

tenantId

tenantId: object

serializedName

serializedName: string = "properties.tenantId"

type

type: object

name

name: string = "String"

Const MTPDataConnectorDataTypes

MTPDataConnectorDataTypes: object

type

type: object

className

className: string = "MTPDataConnectorDataTypes"

name

name: string = "Composite"

modelProperties

modelProperties: object

incidents

incidents: object

serializedName

serializedName: string = "incidents"

type

type: object

className

className: string = "MTPDataConnectorDataTypesIncidents"

name

name: string = "Composite"

Const MTPDataConnectorDataTypesIncidents

MTPDataConnectorDataTypesIncidents: object

type

type: object

className

className: string = "MTPDataConnectorDataTypesIncidents"

name

name: string = "Composite"

modelProperties

modelProperties: object

Const MTPDataConnectorProperties

MTPDataConnectorProperties: object

type

type: object

className

className: string = "MTPDataConnectorProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

dataTypes

dataTypes: object

serializedName

serializedName: string = "dataTypes"

type

type: object

className

className: string = "MTPDataConnectorDataTypes"

name

name: string = "Composite"

Const MailClusterEntity

MailClusterEntity: object

serializedName

serializedName: string = "MailCluster"

type

type: object

className

className: string = "MailClusterEntity"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = Resource.type.polymorphicDiscriminator

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

additionalData

additionalData: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.additionalData"

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "any"

clusterGroup

clusterGroup: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.clusterGroup"

type

type: object

name

name: string = "String"

clusterQueryEndTime

clusterQueryEndTime: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.clusterQueryEndTime"

type

type: object

name

name: string = "DateTime"

clusterQueryStartTime

clusterQueryStartTime: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.clusterQueryStartTime"

type

type: object

name

name: string = "DateTime"

clusterSourceIdentifier

clusterSourceIdentifier: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.clusterSourceIdentifier"

type

type: object

name

name: string = "String"

clusterSourceType

clusterSourceType: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.clusterSourceType"

type

type: object

name

name: string = "String"

countByDeliveryStatus

countByDeliveryStatus: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.countByDeliveryStatus"

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "any"

countByProtectionStatus

countByProtectionStatus: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.countByProtectionStatus"

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "any"

countByThreatType

countByThreatType: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.countByThreatType"

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "any"

friendlyName

friendlyName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.friendlyName"

type

type: object

name

name: string = "String"

isVolumeAnomaly

isVolumeAnomaly: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.isVolumeAnomaly"

type

type: object

name

name: string = "Boolean"

mailCount

mailCount: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.mailCount"

type

type: object

name

name: string = "Number"

networkMessageIds

networkMessageIds: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.networkMessageIds"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

query

query: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.query"

type

type: object

name

name: string = "String"

queryTime

queryTime: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.queryTime"

type

type: object

name

name: string = "DateTime"

source

source: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.source"

type

type: object

name

name: string = "String"

threats

threats: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.threats"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

Const MailClusterEntityProperties

MailClusterEntityProperties: object

type

type: object

className

className: string = "MailClusterEntityProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

clusterGroup

clusterGroup: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "clusterGroup"

type

type: object

name

name: string = "String"

clusterQueryEndTime

clusterQueryEndTime: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "clusterQueryEndTime"

type

type: object

name

name: string = "DateTime"

clusterQueryStartTime

clusterQueryStartTime: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "clusterQueryStartTime"

type

type: object

name

name: string = "DateTime"

clusterSourceIdentifier

clusterSourceIdentifier: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "clusterSourceIdentifier"

type

type: object

name

name: string = "String"

clusterSourceType

clusterSourceType: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "clusterSourceType"

type

type: object

name

name: string = "String"

countByDeliveryStatus

countByDeliveryStatus: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "countByDeliveryStatus"

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "any"

countByProtectionStatus

countByProtectionStatus: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "countByProtectionStatus"

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "any"

countByThreatType

countByThreatType: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "countByThreatType"

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "any"

isVolumeAnomaly

isVolumeAnomaly: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "isVolumeAnomaly"

type

type: object

name

name: string = "Boolean"

mailCount

mailCount: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "mailCount"

type

type: object

name

name: string = "Number"

networkMessageIds

networkMessageIds: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "networkMessageIds"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

query

query: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "query"

type

type: object

name

name: string = "String"

queryTime

queryTime: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "queryTime"

type

type: object

name

name: string = "DateTime"

source

source: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "source"

type

type: object

name

name: string = "String"

threats

threats: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "threats"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

Const MailMessageEntity

MailMessageEntity: object

serializedName

serializedName: string = "MailMessage"

type

type: object

className

className: string = "MailMessageEntity"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = Resource.type.polymorphicDiscriminator

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

additionalData

additionalData: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.additionalData"

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "any"

antispamDirection

antispamDirection: object

serializedName

serializedName: string = "properties.antispamDirection"

type

type: object

name

name: string = "String"

bodyFingerprintBin1

bodyFingerprintBin1: object

serializedName

serializedName: string = "properties.bodyFingerprintBin1"

type

type: object

name

name: string = "Number"

bodyFingerprintBin2

bodyFingerprintBin2: object

serializedName

serializedName: string = "properties.bodyFingerprintBin2"

type

type: object

name

name: string = "Number"

bodyFingerprintBin3

bodyFingerprintBin3: object

serializedName

serializedName: string = "properties.bodyFingerprintBin3"

type

type: object

name

name: string = "Number"

bodyFingerprintBin4

bodyFingerprintBin4: object

serializedName

serializedName: string = "properties.bodyFingerprintBin4"

type

type: object

name

name: string = "Number"

bodyFingerprintBin5

bodyFingerprintBin5: object

serializedName

serializedName: string = "properties.bodyFingerprintBin5"

type

type: object

name

name: string = "Number"

deliveryAction

deliveryAction: object

serializedName

serializedName: string = "properties.deliveryAction"

type

type: object

allowedValues

allowedValues: string[] = ["Unknown","DeliveredAsSpam","Delivered","Blocked","Replaced"]

name

name: string = "Enum"

deliveryLocation

deliveryLocation: object

serializedName

serializedName: string = "properties.deliveryLocation"

type

type: object

allowedValues

allowedValues: string[] = ["Unknown","Inbox","JunkFolder","DeletedFolder","Quarantine","External","Failed","Dropped","Forwarded"]

name

name: string = "Enum"

fileEntityIds

fileEntityIds: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.fileEntityIds"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

friendlyName

friendlyName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.friendlyName"

type

type: object

name

name: string = "String"

internetMessageId

internetMessageId: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.internetMessageId"

type

type: object

name

name: string = "String"

language

language: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.language"

type

type: object

name

name: string = "String"

networkMessageId

networkMessageId: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.networkMessageId"

type

type: object

name

name: string = "Uuid"

p1Sender

p1Sender: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.p1Sender"

type

type: object

name

name: string = "String"

p1SenderDisplayName

p1SenderDisplayName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.p1SenderDisplayName"

type

type: object

name

name: string = "String"

p1SenderDomain

p1SenderDomain: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.p1SenderDomain"

type

type: object

name

name: string = "String"

p2Sender

p2Sender: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.p2Sender"

type

type: object

name

name: string = "String"

p2SenderDisplayName

p2SenderDisplayName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.p2SenderDisplayName"

type

type: object

name

name: string = "String"

p2SenderDomain

p2SenderDomain: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.p2SenderDomain"

type

type: object

name

name: string = "String"

receiveDate

receiveDate: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.receiveDate"

type

type: object

name

name: string = "DateTime"

recipient

recipient: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.recipient"

type

type: object

name

name: string = "String"

senderIP

senderIP: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.senderIP"

type

type: object

name

name: string = "String"

subject

subject: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.subject"

type

type: object

name

name: string = "String"

threatDetectionMethods

threatDetectionMethods: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.threatDetectionMethods"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

threats

threats: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.threats"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

urls

urls: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.urls"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

Const MailMessageEntityProperties

MailMessageEntityProperties: object

type

type: object

className

className: string = "MailMessageEntityProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

antispamDirection

antispamDirection: object

serializedName

serializedName: string = "antispamDirection"

type

type: object

name

name: string = "String"

bodyFingerprintBin1

bodyFingerprintBin1: object

serializedName

serializedName: string = "bodyFingerprintBin1"

type

type: object

name

name: string = "Number"

bodyFingerprintBin2

bodyFingerprintBin2: object

serializedName

serializedName: string = "bodyFingerprintBin2"

type

type: object

name

name: string = "Number"

bodyFingerprintBin3

bodyFingerprintBin3: object

serializedName

serializedName: string = "bodyFingerprintBin3"

type

type: object

name

name: string = "Number"

bodyFingerprintBin4

bodyFingerprintBin4: object

serializedName

serializedName: string = "bodyFingerprintBin4"

type

type: object

name

name: string = "Number"

bodyFingerprintBin5

bodyFingerprintBin5: object

serializedName

serializedName: string = "bodyFingerprintBin5"

type

type: object

name

name: string = "Number"

deliveryAction

deliveryAction: object

serializedName

serializedName: string = "deliveryAction"

type

type: object

allowedValues

allowedValues: string[] = ["Unknown","DeliveredAsSpam","Delivered","Blocked","Replaced"]

name

name: string = "Enum"

deliveryLocation

deliveryLocation: object

serializedName

serializedName: string = "deliveryLocation"

type

type: object

allowedValues

allowedValues: string[] = ["Unknown","Inbox","JunkFolder","DeletedFolder","Quarantine","External","Failed","Dropped","Forwarded"]

name

name: string = "Enum"

fileEntityIds

fileEntityIds: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "fileEntityIds"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

internetMessageId

internetMessageId: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "internetMessageId"

type

type: object

name

name: string = "String"

language

language: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "language"

type

type: object

name

name: string = "String"

networkMessageId

networkMessageId: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "networkMessageId"

type

type: object

name

name: string = "Uuid"

p1Sender

p1Sender: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "p1Sender"

type

type: object

name

name: string = "String"

p1SenderDisplayName

p1SenderDisplayName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "p1SenderDisplayName"

type

type: object

name

name: string = "String"

p1SenderDomain

p1SenderDomain: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "p1SenderDomain"

type

type: object

name

name: string = "String"

p2Sender

p2Sender: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "p2Sender"

type

type: object

name

name: string = "String"

p2SenderDisplayName

p2SenderDisplayName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "p2SenderDisplayName"

type

type: object

name

name: string = "String"

p2SenderDomain

p2SenderDomain: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "p2SenderDomain"

type

type: object

name

name: string = "String"

receiveDate

receiveDate: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "receiveDate"

type

type: object

name

name: string = "DateTime"

recipient

recipient: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "recipient"

type

type: object

name

name: string = "String"

senderIP

senderIP: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "senderIP"

type

type: object

name

name: string = "String"

subject

subject: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "subject"

type

type: object

name

name: string = "String"

threatDetectionMethods

threatDetectionMethods: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "threatDetectionMethods"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

threats

threats: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "threats"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

urls

urls: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "urls"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

Const MailboxEntity

MailboxEntity: object

serializedName

serializedName: string = "Mailbox"

type

type: object

className

className: string = "MailboxEntity"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = Resource.type.polymorphicDiscriminator

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

additionalData

additionalData: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.additionalData"

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "any"

displayName

displayName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.displayName"

type

type: object

name

name: string = "String"

externalDirectoryObjectId

externalDirectoryObjectId: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.externalDirectoryObjectId"

type

type: object

name

name: string = "Uuid"

friendlyName

friendlyName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.friendlyName"

type

type: object

name

name: string = "String"

mailboxPrimaryAddress

mailboxPrimaryAddress: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.mailboxPrimaryAddress"

type

type: object

name

name: string = "String"

upn

upn: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.upn"

type

type: object

name

name: string = "String"

Const MailboxEntityProperties

MailboxEntityProperties: object

type

type: object

className

className: string = "MailboxEntityProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

displayName

displayName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "displayName"

type

type: object

name

name: string = "String"

externalDirectoryObjectId

externalDirectoryObjectId: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "externalDirectoryObjectId"

type

type: object

name

name: string = "Uuid"

mailboxPrimaryAddress

mailboxPrimaryAddress: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "mailboxPrimaryAddress"

type

type: object

name

name: string = "String"

upn

upn: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "upn"

type

type: object

name

name: string = "String"

Const MalwareEntity

MalwareEntity: object

serializedName

serializedName: string = "Malware"

type

type: object

className

className: string = "MalwareEntity"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = Resource.type.polymorphicDiscriminator

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

additionalData

additionalData: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.additionalData"

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "any"

category

category: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.category"

type

type: object

name

name: string = "String"

fileEntityIds

fileEntityIds: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.fileEntityIds"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

friendlyName

friendlyName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.friendlyName"

type

type: object

name

name: string = "String"

malwareName

malwareName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.malwareName"

type

type: object

name

name: string = "String"

processEntityIds

processEntityIds: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.processEntityIds"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

Const MalwareEntityProperties

MalwareEntityProperties: object

type

type: object

className

className: string = "MalwareEntityProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

category

category: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "category"

type

type: object

name

name: string = "String"

fileEntityIds

fileEntityIds: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "fileEntityIds"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

malwareName

malwareName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "malwareName"

type

type: object

name

name: string = "String"

processEntityIds

processEntityIds: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "processEntityIds"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

Const ManualTriggerRequestBody

ManualTriggerRequestBody: object

type

type: object

className

className: string = "ManualTriggerRequestBody"

name

name: string = "Composite"

modelProperties

modelProperties: object

logicAppsResourceId

logicAppsResourceId: object

serializedName

serializedName: string = "logicAppsResourceId"

type

type: object

name

name: string = "String"

tenantId

tenantId: object

serializedName

serializedName: string = "tenantId"

type

type: object

name

name: string = "Uuid"

Const McasCheckRequirements

McasCheckRequirements: object

serializedName

serializedName: string = "MicrosoftCloudAppSecurity"

type

type: object

className

className: string = "McasCheckRequirements"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = DataConnectorsCheckRequirements.type.polymorphicDiscriminator

uberParent

uberParent: string = "DataConnectorsCheckRequirements"

modelProperties

modelProperties: object

tenantId

tenantId: object

serializedName

serializedName: string = "properties.tenantId"

type

type: object

name

name: string = "String"

Const McasCheckRequirementsProperties

McasCheckRequirementsProperties: object

type

type: object

className

className: string = "McasCheckRequirementsProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

Const McasDataConnector

McasDataConnector: object

serializedName

serializedName: string = "MicrosoftCloudAppSecurity"

type

type: object

className

className: string = "McasDataConnector"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = Resource.type.polymorphicDiscriminator

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

dataTypes

dataTypes: object

serializedName

serializedName: string = "properties.dataTypes"

type

type: object

className

className: string = "McasDataConnectorDataTypes"

name

name: string = "Composite"

tenantId

tenantId: object

serializedName

serializedName: string = "properties.tenantId"

type

type: object

name

name: string = "String"

Const McasDataConnectorDataTypes

McasDataConnectorDataTypes: object

type

type: object

className

className: string = "McasDataConnectorDataTypes"

name

name: string = "Composite"

modelProperties

modelProperties: object

discoveryLogs

discoveryLogs: object

serializedName

serializedName: string = "discoveryLogs"

type

type: object

className

className: string = "DataConnectorDataTypeCommon"

name

name: string = "Composite"

Const McasDataConnectorProperties

McasDataConnectorProperties: object

type

type: object

className

className: string = "McasDataConnectorProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

dataTypes

dataTypes: object

serializedName

serializedName: string = "dataTypes"

type

type: object

className

className: string = "McasDataConnectorDataTypes"

name

name: string = "Composite"

Const MdatpCheckRequirements

MdatpCheckRequirements: object

serializedName

serializedName: string = "MicrosoftDefenderAdvancedThreatProtection"

type

type: object

className

className: string = "MdatpCheckRequirements"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = DataConnectorsCheckRequirements.type.polymorphicDiscriminator

uberParent

uberParent: string = "DataConnectorsCheckRequirements"

modelProperties

modelProperties: object

tenantId

tenantId: object

serializedName

serializedName: string = "properties.tenantId"

type

type: object

name

name: string = "String"

Const MdatpCheckRequirementsProperties

MdatpCheckRequirementsProperties: object

type

type: object

className

className: string = "MdatpCheckRequirementsProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

Const MdatpDataConnector

MdatpDataConnector: object

serializedName

serializedName: string = "MicrosoftDefenderAdvancedThreatProtection"

type

type: object

className

className: string = "MdatpDataConnector"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = Resource.type.polymorphicDiscriminator

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

dataTypes

dataTypes: object

serializedName

serializedName: string = "properties.dataTypes"

type

type: object

className

className: string = "AlertsDataTypeOfDataConnector"

name

name: string = "Composite"

tenantId

tenantId: object

serializedName

serializedName: string = "properties.tenantId"

type

type: object

name

name: string = "String"

Const MdatpDataConnectorProperties

MdatpDataConnectorProperties: object

type

type: object

className

className: string = "MdatpDataConnectorProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

Const MetadataAuthor

MetadataAuthor: object

type

type: object

className

className: string = "MetadataAuthor"

name

name: string = "Composite"

modelProperties

modelProperties: object

email

email: object

serializedName

serializedName: string = "email"

type

type: object

name

name: string = "String"

link

link: object

serializedName

serializedName: string = "link"

type

type: object

name

name: string = "String"

name

name: object

serializedName

serializedName: string = "name"

type

type: object

name

name: string = "String"

Const MetadataCategories

MetadataCategories: object

type

type: object

className

className: string = "MetadataCategories"

name

name: string = "Composite"

modelProperties

modelProperties: object

domains

domains: object

serializedName

serializedName: string = "domains"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

verticals

verticals: object

serializedName

serializedName: string = "verticals"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

Const MetadataDependencies

MetadataDependencies: object

type

type: object

className

className: string = "MetadataDependencies"

name

name: string = "Composite"

modelProperties

modelProperties: object

contentId

contentId: object

serializedName

serializedName: string = "contentId"

type

type: object

name

name: string = "String"

criteria

criteria: object

serializedName

serializedName: string = "criteria"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "MetadataDependencies"

name

name: string = "Composite"

kind

kind: object

serializedName

serializedName: string = "kind"

type

type: object

name

name: string = "String"

name

name: object

serializedName

serializedName: string = "name"

type

type: object

name

name: string = "String"

operator

operator: object

serializedName

serializedName: string = "operator"

type

type: object

name

name: string = "String"

version

version: object

serializedName

serializedName: string = "version"

type

type: object

name

name: string = "String"

Const MetadataList

MetadataList: object

type

type: object

className

className: string = "MetadataList"

name

name: string = "Composite"

modelProperties

modelProperties: object

nextLink

nextLink: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "nextLink"

type

type: object

name

name: string = "String"

value

value: object

required

required: boolean = true

serializedName

serializedName: string = "value"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "MetadataModel"

name

name: string = "Composite"

Const MetadataModel

MetadataModel: object

type

type: object

className

className: string = "MetadataModel"

name

name: string = "Composite"

modelProperties

modelProperties: object

author

author: object

serializedName

serializedName: string = "properties.author"

type

type: object

className

className: string = "MetadataAuthor"

name

name: string = "Composite"

categories

categories: object

serializedName

serializedName: string = "properties.categories"

type

type: object

className

className: string = "MetadataCategories"

name

name: string = "Composite"

contentId

contentId: object

serializedName

serializedName: string = "properties.contentId"

type

type: object

name

name: string = "String"

contentSchemaVersion

contentSchemaVersion: object

serializedName

serializedName: string = "properties.contentSchemaVersion"

type

type: object

name

name: string = "String"

customVersion

customVersion: object

serializedName

serializedName: string = "properties.customVersion"

type

type: object

name

name: string = "String"

dependencies

dependencies: object

serializedName

serializedName: string = "properties.dependencies"

type

type: object

className

className: string = "MetadataDependencies"

name

name: string = "Composite"

firstPublishDate

firstPublishDate: object

serializedName

serializedName: string = "properties.firstPublishDate"

type

type: object

name

name: string = "Date"

icon

icon: object

serializedName

serializedName: string = "properties.icon"

type

type: object

name

name: string = "String"

kind

kind: object

serializedName

serializedName: string = "properties.kind"

type

type: object

name

name: string = "String"

lastPublishDate

lastPublishDate: object

serializedName

serializedName: string = "properties.lastPublishDate"

type

type: object

name

name: string = "Date"

parentId

parentId: object

serializedName

serializedName: string = "properties.parentId"

type

type: object

name

name: string = "String"

previewImages

previewImages: object

serializedName

serializedName: string = "properties.previewImages"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

previewImagesDark

previewImagesDark: object

serializedName

serializedName: string = "properties.previewImagesDark"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

providers

providers: object

serializedName

serializedName: string = "properties.providers"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

source

source: object

serializedName

serializedName: string = "properties.source"

type

type: object

className

className: string = "MetadataSource"

name

name: string = "Composite"

support

support: object

serializedName

serializedName: string = "properties.support"

type

type: object

className

className: string = "MetadataSupport"

name

name: string = "Composite"

threatAnalysisTactics

threatAnalysisTactics: object

serializedName

serializedName: string = "properties.threatAnalysisTactics"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

threatAnalysisTechniques

threatAnalysisTechniques: object

serializedName

serializedName: string = "properties.threatAnalysisTechniques"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

version

version: object

serializedName

serializedName: string = "properties.version"

type

type: object

name

name: string = "String"

Const MetadataPatch

MetadataPatch: object

type

type: object

className

className: string = "MetadataPatch"

name

name: string = "Composite"

modelProperties

modelProperties: object

author

author: object

serializedName

serializedName: string = "properties.author"

type

type: object

className

className: string = "MetadataAuthor"

name

name: string = "Composite"

categories

categories: object

serializedName

serializedName: string = "properties.categories"

type

type: object

className

className: string = "MetadataCategories"

name

name: string = "Composite"

contentId

contentId: object

serializedName

serializedName: string = "properties.contentId"

type

type: object

name

name: string = "String"

contentSchemaVersion

contentSchemaVersion: object

serializedName

serializedName: string = "properties.contentSchemaVersion"

type

type: object

name

name: string = "String"

customVersion

customVersion: object

serializedName

serializedName: string = "properties.customVersion"

type

type: object

name

name: string = "String"

dependencies

dependencies: object

serializedName

serializedName: string = "properties.dependencies"

type

type: object

className

className: string = "MetadataDependencies"

name

name: string = "Composite"

firstPublishDate

firstPublishDate: object

serializedName

serializedName: string = "properties.firstPublishDate"

type

type: object

name

name: string = "Date"

icon

icon: object

serializedName

serializedName: string = "properties.icon"

type

type: object

name

name: string = "String"

kind

kind: object

serializedName

serializedName: string = "properties.kind"

type

type: object

name

name: string = "String"

lastPublishDate

lastPublishDate: object

serializedName

serializedName: string = "properties.lastPublishDate"

type

type: object

name

name: string = "Date"

parentId

parentId: object

serializedName

serializedName: string = "properties.parentId"

type

type: object

name

name: string = "String"

previewImages

previewImages: object

serializedName

serializedName: string = "properties.previewImages"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

previewImagesDark

previewImagesDark: object

serializedName

serializedName: string = "properties.previewImagesDark"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

providers

providers: object

serializedName

serializedName: string = "properties.providers"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

source

source: object

serializedName

serializedName: string = "properties.source"

type

type: object

className

className: string = "MetadataSource"

name

name: string = "Composite"

support

support: object

serializedName

serializedName: string = "properties.support"

type

type: object

className

className: string = "MetadataSupport"

name

name: string = "Composite"

threatAnalysisTactics

threatAnalysisTactics: object

serializedName

serializedName: string = "properties.threatAnalysisTactics"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

threatAnalysisTechniques

threatAnalysisTechniques: object

serializedName

serializedName: string = "properties.threatAnalysisTechniques"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

version

version: object

serializedName

serializedName: string = "properties.version"

type

type: object

name

name: string = "String"

Const MetadataSource

MetadataSource: object

type

type: object

className

className: string = "MetadataSource"

name

name: string = "Composite"

modelProperties

modelProperties: object

kind

kind: object

required

required: boolean = true

serializedName

serializedName: string = "kind"

type

type: object

name

name: string = "String"

name

name: object

serializedName

serializedName: string = "name"

type

type: object

name

name: string = "String"

sourceId

sourceId: object

serializedName

serializedName: string = "sourceId"

type

type: object

name

name: string = "String"

Const MetadataSupport

MetadataSupport: object

type

type: object

className

className: string = "MetadataSupport"

name

name: string = "Composite"

modelProperties

modelProperties: object

email

email: object

serializedName

serializedName: string = "email"

type

type: object

name

name: string = "String"

link

link: object

serializedName

serializedName: string = "link"

type

type: object

name

name: string = "String"

name

name: object

serializedName

serializedName: string = "name"

type

type: object

name

name: string = "String"

tier

tier: object

required

required: boolean = true

serializedName

serializedName: string = "tier"

type

type: object

name

name: string = "String"

Const MicrosoftSecurityIncidentCreationAlertRule

MicrosoftSecurityIncidentCreationAlertRule: object

serializedName

serializedName: string = "MicrosoftSecurityIncidentCreation"

type

type: object

className

className: string = "MicrosoftSecurityIncidentCreationAlertRule"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = Resource.type.polymorphicDiscriminator

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

alertRuleTemplateName

alertRuleTemplateName: object

serializedName

serializedName: string = "properties.alertRuleTemplateName"

type

type: object

name

name: string = "String"

description

description: object

serializedName

serializedName: string = "properties.description"

type

type: object

name

name: string = "String"

displayName

displayName: object

serializedName

serializedName: string = "properties.displayName"

type

type: object

name

name: string = "String"

displayNamesExcludeFilter

displayNamesExcludeFilter: object

serializedName

serializedName: string = "properties.displayNamesExcludeFilter"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

displayNamesFilter

displayNamesFilter: object

serializedName

serializedName: string = "properties.displayNamesFilter"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

enabled

enabled: object

serializedName

serializedName: string = "properties.enabled"

type

type: object

name

name: string = "Boolean"

lastModifiedUtc

lastModifiedUtc: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.lastModifiedUtc"

type

type: object

name

name: string = "DateTime"

productFilter

productFilter: object

serializedName

serializedName: string = "properties.productFilter"

type

type: object

name

name: string = "String"

severitiesFilter

severitiesFilter: object

serializedName

serializedName: string = "properties.severitiesFilter"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

Const MicrosoftSecurityIncidentCreationAlertRuleCommonProperties

MicrosoftSecurityIncidentCreationAlertRuleCommonProperties: object

type

type: object

className

className: string = "MicrosoftSecurityIncidentCreationAlertRuleCommonProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

displayNamesExcludeFilter

displayNamesExcludeFilter: object

serializedName

serializedName: string = "displayNamesExcludeFilter"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

displayNamesFilter

displayNamesFilter: object

serializedName

serializedName: string = "displayNamesFilter"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

productFilter

productFilter: object

required

required: boolean = true

serializedName

serializedName: string = "productFilter"

type

type: object

name

name: string = "String"

severitiesFilter

severitiesFilter: object

serializedName

serializedName: string = "severitiesFilter"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

Const MicrosoftSecurityIncidentCreationAlertRuleProperties

MicrosoftSecurityIncidentCreationAlertRuleProperties: object

type

type: object

className

className: string = "MicrosoftSecurityIncidentCreationAlertRuleProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

alertRuleTemplateName

alertRuleTemplateName: object

serializedName

serializedName: string = "alertRuleTemplateName"

type

type: object

name

name: string = "String"

description

description: object

serializedName

serializedName: string = "description"

type

type: object

name

name: string = "String"

displayName

displayName: object

required

required: boolean = true

serializedName

serializedName: string = "displayName"

type

type: object

name

name: string = "String"

enabled

enabled: object

required

required: boolean = true

serializedName

serializedName: string = "enabled"

type

type: object

name

name: string = "Boolean"

lastModifiedUtc

lastModifiedUtc: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "lastModifiedUtc"

type

type: object

name

name: string = "DateTime"

Const MicrosoftSecurityIncidentCreationAlertRuleTemplate

MicrosoftSecurityIncidentCreationAlertRuleTemplate: object

serializedName

serializedName: string = "MicrosoftSecurityIncidentCreation"

type

type: object

className

className: string = "MicrosoftSecurityIncidentCreationAlertRuleTemplate"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = Resource.type.polymorphicDiscriminator

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

alertRulesCreatedByTemplateCount

alertRulesCreatedByTemplateCount: object

serializedName

serializedName: string = "properties.alertRulesCreatedByTemplateCount"

type

type: object

name

name: string = "Number"

createdDateUTC

createdDateUTC: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.createdDateUTC"

type

type: object

name

name: string = "DateTime"

description

description: object

serializedName

serializedName: string = "properties.description"

type

type: object

name

name: string = "String"

displayName

displayName: object

serializedName

serializedName: string = "properties.displayName"

type

type: object

name

name: string = "String"

displayNamesExcludeFilter

displayNamesExcludeFilter: object

serializedName

serializedName: string = "properties.displayNamesExcludeFilter"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

displayNamesFilter

displayNamesFilter: object

serializedName

serializedName: string = "properties.displayNamesFilter"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

lastUpdatedDateUTC

lastUpdatedDateUTC: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.lastUpdatedDateUTC"

type

type: object

name

name: string = "DateTime"

productFilter

productFilter: object

serializedName

serializedName: string = "properties.productFilter"

type

type: object

name

name: string = "String"

requiredDataConnectors

requiredDataConnectors: object

serializedName

serializedName: string = "properties.requiredDataConnectors"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "AlertRuleTemplateDataSource"

name

name: string = "Composite"

severitiesFilter

severitiesFilter: object

serializedName

serializedName: string = "properties.severitiesFilter"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

status

status: object

serializedName

serializedName: string = "properties.status"

type

type: object

name

name: string = "String"

Const MicrosoftSecurityIncidentCreationAlertRuleTemplateProperties

MicrosoftSecurityIncidentCreationAlertRuleTemplateProperties: object

type

type: object

className

className: string = "MicrosoftSecurityIncidentCreationAlertRuleTemplateProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

displayNamesExcludeFilter

displayNamesExcludeFilter: object

serializedName

serializedName: string = "displayNamesExcludeFilter"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

displayNamesFilter

displayNamesFilter: object

serializedName

serializedName: string = "displayNamesFilter"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

productFilter

productFilter: object

serializedName

serializedName: string = "productFilter"

type

type: object

name

name: string = "String"

severitiesFilter

severitiesFilter: object

serializedName

serializedName: string = "severitiesFilter"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

Const MstiCheckRequirements

MstiCheckRequirements: object

serializedName

serializedName: string = "MicrosoftThreatIntelligence"

type

type: object

className

className: string = "MstiCheckRequirements"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = DataConnectorsCheckRequirements.type.polymorphicDiscriminator

uberParent

uberParent: string = "DataConnectorsCheckRequirements"

modelProperties

modelProperties: object

tenantId

tenantId: object

serializedName

serializedName: string = "properties.tenantId"

type

type: object

name

name: string = "String"

Const MstiCheckRequirementsProperties

MstiCheckRequirementsProperties: object

type

type: object

className

className: string = "MstiCheckRequirementsProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

Const MstiDataConnector

MstiDataConnector: object

serializedName

serializedName: string = "MicrosoftThreatIntelligence"

type

type: object

className

className: string = "MstiDataConnector"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = Resource.type.polymorphicDiscriminator

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

dataTypes

dataTypes: object

serializedName

serializedName: string = "properties.dataTypes"

type

type: object

className

className: string = "MstiDataConnectorDataTypes"

name

name: string = "Composite"

tenantId

tenantId: object

serializedName

serializedName: string = "properties.tenantId"

type

type: object

name

name: string = "String"

Const MstiDataConnectorDataTypes

MstiDataConnectorDataTypes: object

type

type: object

className

className: string = "MstiDataConnectorDataTypes"

name

name: string = "Composite"

modelProperties

modelProperties: object

bingSafetyPhishingURL

bingSafetyPhishingURL: object

serializedName

serializedName: string = "bingSafetyPhishingURL"

type

type: object

className

className: string = "MstiDataConnectorDataTypesBingSafetyPhishingURL"

name

name: string = "Composite"

microsoftEmergingThreatFeed

microsoftEmergingThreatFeed: object

serializedName

serializedName: string = "microsoftEmergingThreatFeed"

type

type: object

className

className: string = "MstiDataConnectorDataTypesMicrosoftEmergingThreatFeed"

name

name: string = "Composite"

Const MstiDataConnectorDataTypesBingSafetyPhishingURL

MstiDataConnectorDataTypesBingSafetyPhishingURL: object

type

type: object

className

className: string = "MstiDataConnectorDataTypesBingSafetyPhishingURL"

name

name: string = "Composite"

modelProperties

modelProperties: object

lookbackPeriod

lookbackPeriod: object

required

required: boolean = true

serializedName

serializedName: string = "lookbackPeriod"

type

type: object

name

name: string = "String"

Const MstiDataConnectorDataTypesMicrosoftEmergingThreatFeed

MstiDataConnectorDataTypesMicrosoftEmergingThreatFeed: object

type

type: object

className

className: string = "MstiDataConnectorDataTypesMicrosoftEmergingThreatFeed"

name

name: string = "Composite"

modelProperties

modelProperties: object

lookbackPeriod

lookbackPeriod: object

required

required: boolean = true

serializedName

serializedName: string = "lookbackPeriod"

type

type: object

name

name: string = "String"

Const MstiDataConnectorProperties

MstiDataConnectorProperties: object

type

type: object

className

className: string = "MstiDataConnectorProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

dataTypes

dataTypes: object

serializedName

serializedName: string = "dataTypes"

type

type: object

className

className: string = "MstiDataConnectorDataTypes"

name

name: string = "Composite"

Const MtpCheckRequirements

MtpCheckRequirements: object

serializedName

serializedName: string = "MicrosoftThreatProtection"

type

type: object

className

className: string = "MtpCheckRequirements"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = DataConnectorsCheckRequirements.type.polymorphicDiscriminator

uberParent

uberParent: string = "DataConnectorsCheckRequirements"

modelProperties

modelProperties: object

tenantId

tenantId: object

serializedName

serializedName: string = "properties.tenantId"

type

type: object

name

name: string = "String"

Const NrtAlertRule

NrtAlertRule: object

serializedName

serializedName: string = "NRT"

type

type: object

className

className: string = "NrtAlertRule"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = Resource.type.polymorphicDiscriminator

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

alertDetailsOverride

alertDetailsOverride: object

serializedName

serializedName: string = "properties.alertDetailsOverride"

type

type: object

className

className: string = "AlertDetailsOverride"

name

name: string = "Composite"

alertRuleTemplateName

alertRuleTemplateName: object

serializedName

serializedName: string = "properties.alertRuleTemplateName"

type

type: object

name

name: string = "String"

customDetails

customDetails: object

serializedName

serializedName: string = "properties.customDetails"

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "String"

description

description: object

serializedName

serializedName: string = "properties.description"

type

type: object

name

name: string = "String"

displayName

displayName: object

serializedName

serializedName: string = "properties.displayName"

type

type: object

name

name: string = "String"

enabled

enabled: object

serializedName

serializedName: string = "properties.enabled"

type

type: object

name

name: string = "Boolean"

entityMappings

entityMappings: object

serializedName

serializedName: string = "properties.entityMappings"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "EntityMapping"

name

name: string = "Composite"

incidentConfiguration

incidentConfiguration: object

serializedName

serializedName: string = "properties.incidentConfiguration"

type

type: object

className

className: string = "IncidentConfiguration"

name

name: string = "Composite"

lastModifiedUtc

lastModifiedUtc: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.lastModifiedUtc"

type

type: object

name

name: string = "DateTime"

query

query: object

serializedName

serializedName: string = "properties.query"

type

type: object

name

name: string = "String"

severity

severity: object

serializedName

serializedName: string = "properties.severity"

type

type: object

name

name: string = "String"

suppressionDuration

suppressionDuration: object

serializedName

serializedName: string = "properties.suppressionDuration"

type

type: object

name

name: string = "TimeSpan"

suppressionEnabled

suppressionEnabled: object

serializedName

serializedName: string = "properties.suppressionEnabled"

type

type: object

name

name: string = "Boolean"

tactics

tactics: object

serializedName

serializedName: string = "properties.tactics"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

techniques

techniques: object

serializedName

serializedName: string = "properties.techniques"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

templateVersion

templateVersion: object

serializedName

serializedName: string = "properties.templateVersion"

type

type: object

name

name: string = "String"

Const NrtAlertRuleTemplate

NrtAlertRuleTemplate: object

serializedName

serializedName: string = "NRT"

type

type: object

className

className: string = "NrtAlertRuleTemplate"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = Resource.type.polymorphicDiscriminator

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

alertDetailsOverride

alertDetailsOverride: object

serializedName

serializedName: string = "properties.alertDetailsOverride"

type

type: object

className

className: string = "AlertDetailsOverride"

name

name: string = "Composite"

alertRulesCreatedByTemplateCount

alertRulesCreatedByTemplateCount: object

serializedName

serializedName: string = "properties.alertRulesCreatedByTemplateCount"

type

type: object

name

name: string = "Number"

createdDateUTC

createdDateUTC: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.createdDateUTC"

type

type: object

name

name: string = "DateTime"

customDetails

customDetails: object

serializedName

serializedName: string = "properties.customDetails"

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "String"

description

description: object

serializedName

serializedName: string = "properties.description"

type

type: object

name

name: string = "String"

displayName

displayName: object

serializedName

serializedName: string = "properties.displayName"

type

type: object

name

name: string = "String"

entityMappings

entityMappings: object

serializedName

serializedName: string = "properties.entityMappings"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "EntityMapping"

name

name: string = "Composite"

lastUpdatedDateUTC

lastUpdatedDateUTC: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.lastUpdatedDateUTC"

type

type: object

name

name: string = "DateTime"

query

query: object

serializedName

serializedName: string = "properties.query"

type

type: object

name

name: string = "String"

requiredDataConnectors

requiredDataConnectors: object

serializedName

serializedName: string = "properties.requiredDataConnectors"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "AlertRuleTemplateDataSource"

name

name: string = "Composite"

severity

severity: object

serializedName

serializedName: string = "properties.severity"

type

type: object

name

name: string = "String"

status

status: object

serializedName

serializedName: string = "properties.status"

type

type: object

name

name: string = "String"

tactics

tactics: object

serializedName

serializedName: string = "properties.tactics"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

techniques

techniques: object

serializedName

serializedName: string = "properties.techniques"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

version

version: object

serializedName

serializedName: string = "properties.version"

type

type: object

name

name: string = "String"

Const NrtAlertRuleTemplateProperties

NrtAlertRuleTemplateProperties: object

type

type: object

className

className: string = "NrtAlertRuleTemplateProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

Const Office365ProjectCheckRequirements

Office365ProjectCheckRequirements: object

serializedName

serializedName: string = "Office365Project"

type

type: object

className

className: string = "Office365ProjectCheckRequirements"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = DataConnectorsCheckRequirements.type.polymorphicDiscriminator

uberParent

uberParent: string = "DataConnectorsCheckRequirements"

modelProperties

modelProperties: object

tenantId

tenantId: object

serializedName

serializedName: string = "properties.tenantId"

type

type: object

name

name: string = "String"

Const Office365ProjectCheckRequirementsProperties

Office365ProjectCheckRequirementsProperties: object

type

type: object

className

className: string = "Office365ProjectCheckRequirementsProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

Const Office365ProjectConnectorDataTypes

Office365ProjectConnectorDataTypes: object

type

type: object

className

className: string = "Office365ProjectConnectorDataTypes"

name

name: string = "Composite"

modelProperties

modelProperties: object

logs

logs: object

serializedName

serializedName: string = "logs"

type

type: object

className

className: string = "Office365ProjectConnectorDataTypesLogs"

name

name: string = "Composite"

Const Office365ProjectConnectorDataTypesLogs

Office365ProjectConnectorDataTypesLogs: object

type

type: object

className

className: string = "Office365ProjectConnectorDataTypesLogs"

name

name: string = "Composite"

modelProperties

modelProperties: object

Const Office365ProjectDataConnector

Office365ProjectDataConnector: object

serializedName

serializedName: string = "Office365Project"

type

type: object

className

className: string = "Office365ProjectDataConnector"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = Resource.type.polymorphicDiscriminator

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

dataTypes

dataTypes: object

serializedName

serializedName: string = "properties.dataTypes"

type

type: object

className

className: string = "Office365ProjectConnectorDataTypes"

name

name: string = "Composite"

tenantId

tenantId: object

serializedName

serializedName: string = "properties.tenantId"

type

type: object

name

name: string = "String"

Const Office365ProjectDataConnectorProperties

Office365ProjectDataConnectorProperties: object

type

type: object

className

className: string = "Office365ProjectDataConnectorProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

dataTypes

dataTypes: object

serializedName

serializedName: string = "dataTypes"

type

type: object

className

className: string = "Office365ProjectConnectorDataTypes"

name

name: string = "Composite"

Const OfficeATPCheckRequirements

OfficeATPCheckRequirements: object

serializedName

serializedName: string = "OfficeATP"

type

type: object

className

className: string = "OfficeATPCheckRequirements"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = DataConnectorsCheckRequirements.type.polymorphicDiscriminator

uberParent

uberParent: string = "DataConnectorsCheckRequirements"

modelProperties

modelProperties: object

tenantId

tenantId: object

serializedName

serializedName: string = "properties.tenantId"

type

type: object

name

name: string = "String"

Const OfficeATPCheckRequirementsProperties

OfficeATPCheckRequirementsProperties: object

type

type: object

className

className: string = "OfficeATPCheckRequirementsProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

Const OfficeATPDataConnector

OfficeATPDataConnector: object

serializedName

serializedName: string = "OfficeATP"

type

type: object

className

className: string = "OfficeATPDataConnector"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = Resource.type.polymorphicDiscriminator

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

dataTypes

dataTypes: object

serializedName

serializedName: string = "properties.dataTypes"

type

type: object

className

className: string = "AlertsDataTypeOfDataConnector"

name

name: string = "Composite"

tenantId

tenantId: object

serializedName

serializedName: string = "properties.tenantId"

type

type: object

name

name: string = "String"

Const OfficeATPDataConnectorProperties

OfficeATPDataConnectorProperties: object

type

type: object

className

className: string = "OfficeATPDataConnectorProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

Const OfficeConsent

OfficeConsent: object

type

type: object

className

className: string = "OfficeConsent"

name

name: string = "Composite"

modelProperties

modelProperties: object

consentId

consentId: object

serializedName

serializedName: string = "properties.consentId"

type

type: object

name

name: string = "String"

tenantId

tenantId: object

serializedName

serializedName: string = "properties.tenantId"

type

type: object

name

name: string = "String"

Const OfficeConsentList

OfficeConsentList: object

type

type: object

className

className: string = "OfficeConsentList"

name

name: string = "Composite"

modelProperties

modelProperties: object

nextLink

nextLink: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "nextLink"

type

type: object

name

name: string = "String"

value

value: object

required

required: boolean = true

serializedName

serializedName: string = "value"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "OfficeConsent"

name

name: string = "Composite"

Const OfficeDataConnector

OfficeDataConnector: object

serializedName

serializedName: string = "Office365"

type

type: object

className

className: string = "OfficeDataConnector"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = Resource.type.polymorphicDiscriminator

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

dataTypes

dataTypes: object

serializedName

serializedName: string = "properties.dataTypes"

type

type: object

className

className: string = "OfficeDataConnectorDataTypes"

name

name: string = "Composite"

tenantId

tenantId: object

serializedName

serializedName: string = "properties.tenantId"

type

type: object

name

name: string = "String"

Const OfficeDataConnectorDataTypes

OfficeDataConnectorDataTypes: object

type

type: object

className

className: string = "OfficeDataConnectorDataTypes"

name

name: string = "Composite"

modelProperties

modelProperties: object

exchange

exchange: object

serializedName

serializedName: string = "exchange"

type

type: object

className

className: string = "OfficeDataConnectorDataTypesExchange"

name

name: string = "Composite"

sharePoint

sharePoint: object

serializedName

serializedName: string = "sharePoint"

type

type: object

className

className: string = "OfficeDataConnectorDataTypesSharePoint"

name

name: string = "Composite"

teams

teams: object

serializedName

serializedName: string = "teams"

type

type: object

className

className: string = "OfficeDataConnectorDataTypesTeams"

name

name: string = "Composite"

Const OfficeDataConnectorDataTypesExchange

OfficeDataConnectorDataTypesExchange: object

type

type: object

className

className: string = "OfficeDataConnectorDataTypesExchange"

name

name: string = "Composite"

modelProperties

modelProperties: object

Const OfficeDataConnectorDataTypesSharePoint

OfficeDataConnectorDataTypesSharePoint: object

type

type: object

className

className: string = "OfficeDataConnectorDataTypesSharePoint"

name

name: string = "Composite"

modelProperties

modelProperties: object

Const OfficeDataConnectorDataTypesTeams

OfficeDataConnectorDataTypesTeams: object

type

type: object

className

className: string = "OfficeDataConnectorDataTypesTeams"

name

name: string = "Composite"

modelProperties

modelProperties: object

Const OfficeDataConnectorProperties

OfficeDataConnectorProperties: object

type

type: object

className

className: string = "OfficeDataConnectorProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

dataTypes

dataTypes: object

serializedName

serializedName: string = "dataTypes"

type

type: object

className

className: string = "OfficeDataConnectorDataTypes"

name

name: string = "Composite"

Const OfficeIRMCheckRequirements

OfficeIRMCheckRequirements: object

serializedName

serializedName: string = "OfficeIRM"

type

type: object

className

className: string = "OfficeIRMCheckRequirements"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = DataConnectorsCheckRequirements.type.polymorphicDiscriminator

uberParent

uberParent: string = "DataConnectorsCheckRequirements"

modelProperties

modelProperties: object

tenantId

tenantId: object

serializedName

serializedName: string = "properties.tenantId"

type

type: object

name

name: string = "String"

Const OfficeIRMCheckRequirementsProperties

OfficeIRMCheckRequirementsProperties: object

type

type: object

className

className: string = "OfficeIRMCheckRequirementsProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

Const OfficeIRMDataConnector

OfficeIRMDataConnector: object

serializedName

serializedName: string = "OfficeIRM"

type

type: object

className

className: string = "OfficeIRMDataConnector"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = Resource.type.polymorphicDiscriminator

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

dataTypes

dataTypes: object

serializedName

serializedName: string = "properties.dataTypes"

type

type: object

className

className: string = "AlertsDataTypeOfDataConnector"

name

name: string = "Composite"

tenantId

tenantId: object

serializedName

serializedName: string = "properties.tenantId"

type

type: object

name

name: string = "String"

Const OfficeIRMDataConnectorProperties

OfficeIRMDataConnectorProperties: object

type

type: object

className

className: string = "OfficeIRMDataConnectorProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

Const OfficePowerBICheckRequirements

OfficePowerBICheckRequirements: object

serializedName

serializedName: string = "OfficePowerBI"

type

type: object

className

className: string = "OfficePowerBICheckRequirements"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = DataConnectorsCheckRequirements.type.polymorphicDiscriminator

uberParent

uberParent: string = "DataConnectorsCheckRequirements"

modelProperties

modelProperties: object

tenantId

tenantId: object

serializedName

serializedName: string = "properties.tenantId"

type

type: object

name

name: string = "String"

Const OfficePowerBICheckRequirementsProperties

OfficePowerBICheckRequirementsProperties: object

type

type: object

className

className: string = "OfficePowerBICheckRequirementsProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

Const OfficePowerBIConnectorDataTypes

OfficePowerBIConnectorDataTypes: object

type

type: object

className

className: string = "OfficePowerBIConnectorDataTypes"

name

name: string = "Composite"

modelProperties

modelProperties: object

logs

logs: object

serializedName

serializedName: string = "logs"

type

type: object

className

className: string = "OfficePowerBIConnectorDataTypesLogs"

name

name: string = "Composite"

Const OfficePowerBIConnectorDataTypesLogs

OfficePowerBIConnectorDataTypesLogs: object

type

type: object

className

className: string = "OfficePowerBIConnectorDataTypesLogs"

name

name: string = "Composite"

modelProperties

modelProperties: object

Const OfficePowerBIDataConnector

OfficePowerBIDataConnector: object

serializedName

serializedName: string = "OfficePowerBI"

type

type: object

className

className: string = "OfficePowerBIDataConnector"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = Resource.type.polymorphicDiscriminator

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

dataTypes

dataTypes: object

serializedName

serializedName: string = "properties.dataTypes"

type

type: object

className

className: string = "OfficePowerBIConnectorDataTypes"

name

name: string = "Composite"

tenantId

tenantId: object

serializedName

serializedName: string = "properties.tenantId"

type

type: object

name

name: string = "String"

Const OfficePowerBIDataConnectorProperties

OfficePowerBIDataConnectorProperties: object

type

type: object

className

className: string = "OfficePowerBIDataConnectorProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

dataTypes

dataTypes: object

serializedName

serializedName: string = "dataTypes"

type

type: object

className

className: string = "OfficePowerBIConnectorDataTypes"

name

name: string = "Composite"

Const Operation

Operation: object

type

type: object

className

className: string = "Operation"

name

name: string = "Composite"

modelProperties

modelProperties: object

display

display: object

serializedName

serializedName: string = "display"

type

type: object

className

className: string = "OperationDisplay"

name

name: string = "Composite"

isDataAction

isDataAction: object

serializedName

serializedName: string = "isDataAction"

type

type: object

name

name: string = "Boolean"

name

name: object

serializedName

serializedName: string = "name"

type

type: object

name

name: string = "String"

origin

origin: object

serializedName

serializedName: string = "origin"

type

type: object

name

name: string = "String"

Const OperationDisplay

OperationDisplay: object

type

type: object

className

className: string = "OperationDisplay"

name

name: string = "Composite"

modelProperties

modelProperties: object

description

description: object

serializedName

serializedName: string = "description"

type

type: object

name

name: string = "String"

operation

operation: object

serializedName

serializedName: string = "operation"

type

type: object

name

name: string = "String"

provider

provider: object

serializedName

serializedName: string = "provider"

type

type: object

name

name: string = "String"

resource

resource: object

serializedName

serializedName: string = "resource"

type

type: object

name

name: string = "String"

Const OperationsList

OperationsList: object

type

type: object

className

className: string = "OperationsList"

name

name: string = "Composite"

modelProperties

modelProperties: object

nextLink

nextLink: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "nextLink"

type

type: object

name

name: string = "String"

value

value: object

required

required: boolean = true

serializedName

serializedName: string = "value"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "Operation"

name

name: string = "Composite"

Const Permissions

Permissions: object

type

type: object

className

className: string = "Permissions"

name

name: string = "Composite"

modelProperties

modelProperties: object

customs

customs: object

serializedName

serializedName: string = "customs"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "PermissionsCustomsItem"

name

name: string = "Composite"

resourceProvider

resourceProvider: object

serializedName

serializedName: string = "resourceProvider"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "PermissionsResourceProviderItem"

name

name: string = "Composite"

Const PermissionsCustomsItem

PermissionsCustomsItem: object

type

type: object

className

className: string = "PermissionsCustomsItem"

name

name: string = "Composite"

modelProperties

modelProperties: object

Const PermissionsResourceProviderItem

PermissionsResourceProviderItem: object

type

type: object

className

className: string = "PermissionsResourceProviderItem"

name

name: string = "Composite"

modelProperties

modelProperties: object

Const PlaybookActionProperties

PlaybookActionProperties: object

type

type: object

className

className: string = "PlaybookActionProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

logicAppResourceId

logicAppResourceId: object

serializedName

serializedName: string = "logicAppResourceId"

type

type: object

name

name: string = "String"

tenantId

tenantId: object

serializedName

serializedName: string = "tenantId"

type

type: object

name

name: string = "Uuid"

Const ProcessEntity

ProcessEntity: object

serializedName

serializedName: string = "Process"

type

type: object

className

className: string = "ProcessEntity"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = Resource.type.polymorphicDiscriminator

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

accountEntityId

accountEntityId: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.accountEntityId"

type

type: object

name

name: string = "String"

additionalData

additionalData: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.additionalData"

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "any"

commandLine

commandLine: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.commandLine"

type

type: object

name

name: string = "String"

creationTimeUtc

creationTimeUtc: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.creationTimeUtc"

type

type: object

name

name: string = "DateTime"

elevationToken

elevationToken: object

serializedName

serializedName: string = "properties.elevationToken"

type

type: object

allowedValues

allowedValues: string[] = ["Default", "Full", "Limited"]

name

name: string = "Enum"

friendlyName

friendlyName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.friendlyName"

type

type: object

name

name: string = "String"

hostEntityId

hostEntityId: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.hostEntityId"

type

type: object

name

name: string = "String"

hostLogonSessionEntityId

hostLogonSessionEntityId: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.hostLogonSessionEntityId"

type

type: object

name

name: string = "String"

imageFileEntityId

imageFileEntityId: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.imageFileEntityId"

type

type: object

name

name: string = "String"

parentProcessEntityId

parentProcessEntityId: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.parentProcessEntityId"

type

type: object

name

name: string = "String"

processId

processId: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.processId"

type

type: object

name

name: string = "String"

Const ProcessEntityProperties

ProcessEntityProperties: object

type

type: object

className

className: string = "ProcessEntityProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

accountEntityId

accountEntityId: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "accountEntityId"

type

type: object

name

name: string = "String"

commandLine

commandLine: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "commandLine"

type

type: object

name

name: string = "String"

creationTimeUtc

creationTimeUtc: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "creationTimeUtc"

type

type: object

name

name: string = "DateTime"

elevationToken

elevationToken: object

serializedName

serializedName: string = "elevationToken"

type

type: object

allowedValues

allowedValues: string[] = ["Default", "Full", "Limited"]

name

name: string = "Enum"

hostEntityId

hostEntityId: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "hostEntityId"

type

type: object

name

name: string = "String"

hostLogonSessionEntityId

hostLogonSessionEntityId: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "hostLogonSessionEntityId"

type

type: object

name

name: string = "String"

imageFileEntityId

imageFileEntityId: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "imageFileEntityId"

type

type: object

name

name: string = "String"

parentProcessEntityId

parentProcessEntityId: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "parentProcessEntityId"

type

type: object

name

name: string = "String"

processId

processId: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "processId"

type

type: object

name

name: string = "String"

Const PropertyConditionProperties

PropertyConditionProperties: object

serializedName

serializedName: string = "Property"

type

type: object

className

className: string = "PropertyConditionProperties"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = AutomationRuleCondition.type.polymorphicDiscriminator

uberParent

uberParent: string = "AutomationRuleCondition"

modelProperties

modelProperties: object

conditionProperties

conditionProperties: object

serializedName

serializedName: string = "conditionProperties"

type

type: object

className

className: string = "AutomationRulePropertyValuesCondition"

name

name: string = "Composite"

Const QueryBasedAlertRuleTemplateProperties

QueryBasedAlertRuleTemplateProperties: object

type

type: object

className

className: string = "QueryBasedAlertRuleTemplateProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

alertDetailsOverride

alertDetailsOverride: object

serializedName

serializedName: string = "alertDetailsOverride"

type

type: object

className

className: string = "AlertDetailsOverride"

name

name: string = "Composite"

customDetails

customDetails: object

serializedName

serializedName: string = "customDetails"

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "String"

entityMappings

entityMappings: object

serializedName

serializedName: string = "entityMappings"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "EntityMapping"

name

name: string = "Composite"

query

query: object

serializedName

serializedName: string = "query"

type

type: object

name

name: string = "String"

severity

severity: object

serializedName

serializedName: string = "severity"

type

type: object

name

name: string = "String"

version

version: object

serializedName

serializedName: string = "version"

type

type: object

name

name: string = "String"

Const RegistryKeyEntity

RegistryKeyEntity: object

serializedName

serializedName: string = "RegistryKey"

type

type: object

className

className: string = "RegistryKeyEntity"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = Resource.type.polymorphicDiscriminator

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

additionalData

additionalData: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.additionalData"

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "any"

friendlyName

friendlyName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.friendlyName"

type

type: object

name

name: string = "String"

hive

hive: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.hive"

type

type: object

name

name: string = "String"

key

key: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.key"

type

type: object

name

name: string = "String"

Const RegistryKeyEntityProperties

RegistryKeyEntityProperties: object

type

type: object

className

className: string = "RegistryKeyEntityProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

hive

hive: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "hive"

type

type: object

name

name: string = "String"

key

key: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "key"

type

type: object

name

name: string = "String"

Const RegistryValueEntity

RegistryValueEntity: object

serializedName

serializedName: string = "RegistryValue"

type

type: object

className

className: string = "RegistryValueEntity"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = Resource.type.polymorphicDiscriminator

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

additionalData

additionalData: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.additionalData"

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "any"

friendlyName

friendlyName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.friendlyName"

type

type: object

name

name: string = "String"

keyEntityId

keyEntityId: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.keyEntityId"

type

type: object

name

name: string = "String"

valueData

valueData: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.valueData"

type

type: object

name

name: string = "String"

valueName

valueName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.valueName"

type

type: object

name

name: string = "String"

valueType

valueType: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.valueType"

type

type: object

name

name: string = "String"

Const RegistryValueEntityProperties

RegistryValueEntityProperties: object

type

type: object

className

className: string = "RegistryValueEntityProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

keyEntityId

keyEntityId: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "keyEntityId"

type

type: object

name

name: string = "String"

valueData

valueData: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "valueData"

type

type: object

name

name: string = "String"

valueName

valueName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "valueName"

type

type: object

name

name: string = "String"

valueType

valueType: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "valueType"

type

type: object

name

name: string = "String"

Const Relation

Relation: object

type

type: object

className

className: string = "Relation"

name

name: string = "Composite"

modelProperties

modelProperties: object

relatedResourceId

relatedResourceId: object

serializedName

serializedName: string = "properties.relatedResourceId"

type

type: object

name

name: string = "String"

relatedResourceKind

relatedResourceKind: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.relatedResourceKind"

type

type: object

name

name: string = "String"

relatedResourceName

relatedResourceName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.relatedResourceName"

type

type: object

name

name: string = "String"

relatedResourceType

relatedResourceType: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.relatedResourceType"

type

type: object

name

name: string = "String"

Const RelationList

RelationList: object

type

type: object

className

className: string = "RelationList"

name

name: string = "Composite"

modelProperties

modelProperties: object

nextLink

nextLink: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "nextLink"

type

type: object

name

name: string = "String"

value

value: object

required

required: boolean = true

serializedName

serializedName: string = "value"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "Relation"

name

name: string = "Composite"

Const Repo

Repo: object

type

type: object

className

className: string = "Repo"

name

name: string = "Composite"

modelProperties

modelProperties: object

branches

branches: object

serializedName

serializedName: string = "branches"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

fullName

fullName: object

serializedName

serializedName: string = "fullName"

type

type: object

name

name: string = "String"

url

url: object

serializedName

serializedName: string = "url"

type

type: object

name

name: string = "String"

Const RepoList

RepoList: object

type

type: object

className

className: string = "RepoList"

name

name: string = "Composite"

modelProperties

modelProperties: object

nextLink

nextLink: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "nextLink"

type

type: object

name

name: string = "String"

value

value: object

required

required: boolean = true

serializedName

serializedName: string = "value"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "Repo"

name

name: string = "Composite"

Const Repository

Repository: object

type

type: object

className

className: string = "Repository"

name

name: string = "Composite"

modelProperties

modelProperties: object

branch

branch: object

serializedName

serializedName: string = "branch"

type

type: object

name

name: string = "String"

deploymentLogsUrl

deploymentLogsUrl: object

serializedName

serializedName: string = "deploymentLogsUrl"

type

type: object

name

name: string = "String"

displayUrl

displayUrl: object

serializedName

serializedName: string = "displayUrl"

type

type: object

name

name: string = "String"

pathMapping

pathMapping: object

serializedName

serializedName: string = "pathMapping"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "ContentPathMap"

name

name: string = "Composite"

url

url: object

serializedName

serializedName: string = "url"

type

type: object

name

name: string = "String"

Const RepositoryResourceInfo

RepositoryResourceInfo: object

type

type: object

className

className: string = "RepositoryResourceInfo"

name

name: string = "Composite"

modelProperties

modelProperties: object

azureDevOpsResourceInfo

azureDevOpsResourceInfo: object

serializedName

serializedName: string = "azureDevOpsResourceInfo"

type

type: object

className

className: string = "AzureDevOpsResourceInfo"

name

name: string = "Composite"

gitHubResourceInfo

gitHubResourceInfo: object

serializedName

serializedName: string = "gitHubResourceInfo"

type

type: object

className

className: string = "GitHubResourceInfo"

name

name: string = "Composite"

webhook

webhook: object

serializedName

serializedName: string = "webhook"

type

type: object

className

className: string = "Webhook"

name

name: string = "Composite"

Const RequiredPermissions

RequiredPermissions: object

type

type: object

className

className: string = "RequiredPermissions"

name

name: string = "Composite"

modelProperties

modelProperties: object

action

action: object

serializedName

serializedName: string = "action"

type

type: object

name

name: string = "Boolean"

delete

delete: object

serializedName

serializedName: string = "delete"

type

type: object

name

name: string = "Boolean"

read

read: object

serializedName

serializedName: string = "read"

type

type: object

name

name: string = "Boolean"

write

write: object

serializedName

serializedName: string = "write"

type

type: object

name

name: string = "Boolean"

Const Resource

Resource: object

type

type: object

className

className: string = "Resource"

name

name: string = "Composite"

modelProperties

modelProperties: object

id

id: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "id"

type

type: object

name

name: string = "String"

name

name: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "name"

type

type: object

name

name: string = "String"

systemData

systemData: object

serializedName

serializedName: string = "systemData"

type

type: object

className

className: string = "SystemData"

name

name: string = "Composite"

type

type: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "type"

type

type: object

name

name: string = "String"

Const ResourceProvider

ResourceProvider: object

type

type: object

className

className: string = "ResourceProvider"

name

name: string = "Composite"

modelProperties

modelProperties: object

permissionsDisplayText

permissionsDisplayText: object

serializedName

serializedName: string = "permissionsDisplayText"

type

type: object

name

name: string = "String"

provider

provider: object

serializedName

serializedName: string = "provider"

type

type: object

name

name: string = "String"

providerDisplayName

providerDisplayName: object

serializedName

serializedName: string = "providerDisplayName"

type

type: object

name

name: string = "String"

requiredPermissions

requiredPermissions: object

serializedName

serializedName: string = "requiredPermissions"

type

type: object

className

className: string = "RequiredPermissions"

name

name: string = "Composite"

scope

scope: object

serializedName

serializedName: string = "scope"

type

type: object

name

name: string = "String"

Const ResourceWithEtag

ResourceWithEtag: object

type

type: object

className

className: string = "ResourceWithEtag"

name

name: string = "Composite"

modelProperties

modelProperties: object

etag

etag: object

serializedName

serializedName: string = "etag"

type

type: object

name

name: string = "String"

Const SampleQueries

SampleQueries: object

type

type: object

className

className: string = "SampleQueries"

name

name: string = "Composite"

modelProperties

modelProperties: object

description

description: object

serializedName

serializedName: string = "description"

type

type: object

name

name: string = "String"

query

query: object

serializedName

serializedName: string = "query"

type

type: object

name

name: string = "String"

Const ScheduledAlertRule

ScheduledAlertRule: object

serializedName

serializedName: string = "Scheduled"

type

type: object

className

className: string = "ScheduledAlertRule"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = Resource.type.polymorphicDiscriminator

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

alertDetailsOverride

alertDetailsOverride: object

serializedName

serializedName: string = "properties.alertDetailsOverride"

type

type: object

className

className: string = "AlertDetailsOverride"

name

name: string = "Composite"

alertRuleTemplateName

alertRuleTemplateName: object

serializedName

serializedName: string = "properties.alertRuleTemplateName"

type

type: object

name

name: string = "String"

customDetails

customDetails: object

serializedName

serializedName: string = "properties.customDetails"

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "String"

description

description: object

serializedName

serializedName: string = "properties.description"

type

type: object

name

name: string = "String"

displayName

displayName: object

serializedName

serializedName: string = "properties.displayName"

type

type: object

name

name: string = "String"

enabled

enabled: object

serializedName

serializedName: string = "properties.enabled"

type

type: object

name

name: string = "Boolean"

entityMappings

entityMappings: object

serializedName

serializedName: string = "properties.entityMappings"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "EntityMapping"

name

name: string = "Composite"

eventGroupingSettings

eventGroupingSettings: object

serializedName

serializedName: string = "properties.eventGroupingSettings"

type

type: object

className

className: string = "EventGroupingSettings"

name

name: string = "Composite"

incidentConfiguration

incidentConfiguration: object

serializedName

serializedName: string = "properties.incidentConfiguration"

type

type: object

className

className: string = "IncidentConfiguration"

name

name: string = "Composite"

lastModifiedUtc

lastModifiedUtc: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.lastModifiedUtc"

type

type: object

name

name: string = "DateTime"

query

query: object

serializedName

serializedName: string = "properties.query"

type

type: object

name

name: string = "String"

queryFrequency

queryFrequency: object

serializedName

serializedName: string = "properties.queryFrequency"

type

type: object

name

name: string = "TimeSpan"

queryPeriod

queryPeriod: object

serializedName

serializedName: string = "properties.queryPeriod"

type

type: object

name

name: string = "TimeSpan"

severity

severity: object

serializedName

serializedName: string = "properties.severity"

type

type: object

name

name: string = "String"

suppressionDuration

suppressionDuration: object

serializedName

serializedName: string = "properties.suppressionDuration"

type

type: object

name

name: string = "TimeSpan"

suppressionEnabled

suppressionEnabled: object

serializedName

serializedName: string = "properties.suppressionEnabled"

type

type: object

name

name: string = "Boolean"

tactics

tactics: object

serializedName

serializedName: string = "properties.tactics"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

techniques

techniques: object

serializedName

serializedName: string = "properties.techniques"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

templateVersion

templateVersion: object

serializedName

serializedName: string = "properties.templateVersion"

type

type: object

name

name: string = "String"

triggerOperator

triggerOperator: object

serializedName

serializedName: string = "properties.triggerOperator"

type

type: object

allowedValues

allowedValues: string[] = ["GreaterThan", "LessThan", "Equal", "NotEqual"]

name

name: string = "Enum"

triggerThreshold

triggerThreshold: object

serializedName

serializedName: string = "properties.triggerThreshold"

type

type: object

name

name: string = "Number"

Const ScheduledAlertRuleCommonProperties

ScheduledAlertRuleCommonProperties: object

type

type: object

className

className: string = "ScheduledAlertRuleCommonProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

alertDetailsOverride

alertDetailsOverride: object

serializedName

serializedName: string = "alertDetailsOverride"

type

type: object

className

className: string = "AlertDetailsOverride"

name

name: string = "Composite"

customDetails

customDetails: object

serializedName

serializedName: string = "customDetails"

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "String"

entityMappings

entityMappings: object

serializedName

serializedName: string = "entityMappings"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "EntityMapping"

name

name: string = "Composite"

eventGroupingSettings

eventGroupingSettings: object

serializedName

serializedName: string = "eventGroupingSettings"

type

type: object

className

className: string = "EventGroupingSettings"

name

name: string = "Composite"

query

query: object

serializedName

serializedName: string = "query"

type

type: object

name

name: string = "String"

queryFrequency

queryFrequency: object

serializedName

serializedName: string = "queryFrequency"

type

type: object

name

name: string = "TimeSpan"

queryPeriod

queryPeriod: object

serializedName

serializedName: string = "queryPeriod"

type

type: object

name

name: string = "TimeSpan"

severity

severity: object

serializedName

serializedName: string = "severity"

type

type: object

name

name: string = "String"

triggerOperator

triggerOperator: object

serializedName

serializedName: string = "triggerOperator"

type

type: object

allowedValues

allowedValues: string[] = ["GreaterThan", "LessThan", "Equal", "NotEqual"]

name

name: string = "Enum"

triggerThreshold

triggerThreshold: object

serializedName

serializedName: string = "triggerThreshold"

type

type: object

name

name: string = "Number"

Const ScheduledAlertRuleProperties

ScheduledAlertRuleProperties: object

type

type: object

className

className: string = "ScheduledAlertRuleProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

alertRuleTemplateName

alertRuleTemplateName: object

serializedName

serializedName: string = "alertRuleTemplateName"

type

type: object

name

name: string = "String"

description

description: object

serializedName

serializedName: string = "description"

type

type: object

name

name: string = "String"

displayName

displayName: object

required

required: boolean = true

serializedName

serializedName: string = "displayName"

type

type: object

name

name: string = "String"

enabled

enabled: object

required

required: boolean = true

serializedName

serializedName: string = "enabled"

type

type: object

name

name: string = "Boolean"

incidentConfiguration

incidentConfiguration: object

serializedName

serializedName: string = "incidentConfiguration"

type

type: object

className

className: string = "IncidentConfiguration"

name

name: string = "Composite"

lastModifiedUtc

lastModifiedUtc: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "lastModifiedUtc"

type

type: object

name

name: string = "DateTime"

suppressionDuration

suppressionDuration: object

required

required: boolean = true

serializedName

serializedName: string = "suppressionDuration"

type

type: object

name

name: string = "TimeSpan"

suppressionEnabled

suppressionEnabled: object

required

required: boolean = true

serializedName

serializedName: string = "suppressionEnabled"

type

type: object

name

name: string = "Boolean"

tactics

tactics: object

serializedName

serializedName: string = "tactics"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

techniques

techniques: object

serializedName

serializedName: string = "techniques"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

templateVersion

templateVersion: object

serializedName

serializedName: string = "templateVersion"

type

type: object

name

name: string = "String"

Const ScheduledAlertRuleTemplate

ScheduledAlertRuleTemplate: object

serializedName

serializedName: string = "Scheduled"

type

type: object

className

className: string = "ScheduledAlertRuleTemplate"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = Resource.type.polymorphicDiscriminator

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

alertDetailsOverride

alertDetailsOverride: object

serializedName

serializedName: string = "properties.alertDetailsOverride"

type

type: object

className

className: string = "AlertDetailsOverride"

name

name: string = "Composite"

alertRulesCreatedByTemplateCount

alertRulesCreatedByTemplateCount: object

serializedName

serializedName: string = "properties.alertRulesCreatedByTemplateCount"

type

type: object

name

name: string = "Number"

createdDateUTC

createdDateUTC: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.createdDateUTC"

type

type: object

name

name: string = "DateTime"

customDetails

customDetails: object

serializedName

serializedName: string = "properties.customDetails"

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "String"

description

description: object

serializedName

serializedName: string = "properties.description"

type

type: object

name

name: string = "String"

displayName

displayName: object

serializedName

serializedName: string = "properties.displayName"

type

type: object

name

name: string = "String"

entityMappings

entityMappings: object

serializedName

serializedName: string = "properties.entityMappings"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "EntityMapping"

name

name: string = "Composite"

eventGroupingSettings

eventGroupingSettings: object

serializedName

serializedName: string = "properties.eventGroupingSettings"

type

type: object

className

className: string = "EventGroupingSettings"

name

name: string = "Composite"

lastUpdatedDateUTC

lastUpdatedDateUTC: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.lastUpdatedDateUTC"

type

type: object

name

name: string = "DateTime"

query

query: object

serializedName

serializedName: string = "properties.query"

type

type: object

name

name: string = "String"

queryFrequency

queryFrequency: object

serializedName

serializedName: string = "properties.queryFrequency"

type

type: object

name

name: string = "TimeSpan"

queryPeriod

queryPeriod: object

serializedName

serializedName: string = "properties.queryPeriod"

type

type: object

name

name: string = "TimeSpan"

requiredDataConnectors

requiredDataConnectors: object

serializedName

serializedName: string = "properties.requiredDataConnectors"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "AlertRuleTemplateDataSource"

name

name: string = "Composite"

severity

severity: object

serializedName

serializedName: string = "properties.severity"

type

type: object

name

name: string = "String"

status

status: object

serializedName

serializedName: string = "properties.status"

type

type: object

name

name: string = "String"

tactics

tactics: object

serializedName

serializedName: string = "properties.tactics"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

techniques

techniques: object

serializedName

serializedName: string = "properties.techniques"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

triggerOperator

triggerOperator: object

serializedName

serializedName: string = "properties.triggerOperator"

type

type: object

allowedValues

allowedValues: string[] = ["GreaterThan", "LessThan", "Equal", "NotEqual"]

name

name: string = "Enum"

triggerThreshold

triggerThreshold: object

serializedName

serializedName: string = "properties.triggerThreshold"

type

type: object

name

name: string = "Number"

version

version: object

serializedName

serializedName: string = "properties.version"

type

type: object

name

name: string = "String"

Const SecurityAlert

SecurityAlert: object

serializedName

serializedName: string = "SecurityAlert"

type

type: object

className

className: string = "SecurityAlert"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = Resource.type.polymorphicDiscriminator

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

additionalData

additionalData: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.additionalData"

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "any"

alertDisplayName

alertDisplayName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.alertDisplayName"

type

type: object

name

name: string = "String"

alertLink

alertLink: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.alertLink"

type

type: object

name

name: string = "String"

alertType

alertType: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.alertType"

type

type: object

name

name: string = "String"

compromisedEntity

compromisedEntity: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.compromisedEntity"

type

type: object

name

name: string = "String"

confidenceLevel

confidenceLevel: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.confidenceLevel"

type

type: object

name

name: string = "String"

confidenceReasons

confidenceReasons: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.confidenceReasons"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "SecurityAlertPropertiesConfidenceReasonsItem"

name

name: string = "Composite"

confidenceScore

confidenceScore: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.confidenceScore"

type

type: object

name

name: string = "Number"

confidenceScoreStatus

confidenceScoreStatus: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.confidenceScoreStatus"

type

type: object

name

name: string = "String"

description

description: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.description"

type

type: object

name

name: string = "String"

endTimeUtc

endTimeUtc: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.endTimeUtc"

type

type: object

name

name: string = "DateTime"

friendlyName

friendlyName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.friendlyName"

type

type: object

name

name: string = "String"

intent

intent: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.intent"

type

type: object

name

name: string = "String"

processingEndTime

processingEndTime: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.processingEndTime"

type

type: object

name

name: string = "DateTime"

productComponentName

productComponentName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.productComponentName"

type

type: object

name

name: string = "String"

productName

productName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.productName"

type

type: object

name

name: string = "String"

productVersion

productVersion: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.productVersion"

type

type: object

name

name: string = "String"

providerAlertId

providerAlertId: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.providerAlertId"

type

type: object

name

name: string = "String"

remediationSteps

remediationSteps: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.remediationSteps"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

resourceIdentifiers

resourceIdentifiers: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.resourceIdentifiers"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "any"

severity

severity: object

serializedName

serializedName: string = "properties.severity"

type

type: object

name

name: string = "String"

startTimeUtc

startTimeUtc: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.startTimeUtc"

type

type: object

name

name: string = "DateTime"

status

status: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.status"

type

type: object

name

name: string = "String"

systemAlertId

systemAlertId: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.systemAlertId"

type

type: object

name

name: string = "String"

tactics

tactics: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.tactics"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

timeGenerated

timeGenerated: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.timeGenerated"

type

type: object

name

name: string = "DateTime"

vendorName

vendorName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.vendorName"

type

type: object

name

name: string = "String"

Const SecurityAlertProperties

SecurityAlertProperties: object

type

type: object

className

className: string = "SecurityAlertProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

alertDisplayName

alertDisplayName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "alertDisplayName"

type

type: object

name

name: string = "String"

alertLink

alertLink: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "alertLink"

type

type: object

name

name: string = "String"

alertType

alertType: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "alertType"

type

type: object

name

name: string = "String"

compromisedEntity

compromisedEntity: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "compromisedEntity"

type

type: object

name

name: string = "String"

confidenceLevel

confidenceLevel: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "confidenceLevel"

type

type: object

name

name: string = "String"

confidenceReasons

confidenceReasons: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "confidenceReasons"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "SecurityAlertPropertiesConfidenceReasonsItem"

name

name: string = "Composite"

confidenceScore

confidenceScore: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "confidenceScore"

type

type: object

name

name: string = "Number"

confidenceScoreStatus

confidenceScoreStatus: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "confidenceScoreStatus"

type

type: object

name

name: string = "String"

description

description: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "description"

type

type: object

name

name: string = "String"

endTimeUtc

endTimeUtc: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "endTimeUtc"

type

type: object

name

name: string = "DateTime"

intent

intent: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "intent"

type

type: object

name

name: string = "String"

processingEndTime

processingEndTime: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "processingEndTime"

type

type: object

name

name: string = "DateTime"

productComponentName

productComponentName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "productComponentName"

type

type: object

name

name: string = "String"

productName

productName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "productName"

type

type: object

name

name: string = "String"

productVersion

productVersion: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "productVersion"

type

type: object

name

name: string = "String"

providerAlertId

providerAlertId: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "providerAlertId"

type

type: object

name

name: string = "String"

remediationSteps

remediationSteps: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "remediationSteps"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

resourceIdentifiers

resourceIdentifiers: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "resourceIdentifiers"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "any"

severity

severity: object

serializedName

serializedName: string = "severity"

type

type: object

name

name: string = "String"

startTimeUtc

startTimeUtc: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "startTimeUtc"

type

type: object

name

name: string = "DateTime"

status

status: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "status"

type

type: object

name

name: string = "String"

systemAlertId

systemAlertId: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "systemAlertId"

type

type: object

name

name: string = "String"

tactics

tactics: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "tactics"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

timeGenerated

timeGenerated: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "timeGenerated"

type

type: object

name

name: string = "DateTime"

vendorName

vendorName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "vendorName"

type

type: object

name

name: string = "String"

Const SecurityAlertPropertiesConfidenceReasonsItem

SecurityAlertPropertiesConfidenceReasonsItem: object

type

type: object

className

className: string = "SecurityAlertPropertiesConfidenceReasonsItem"

name

name: string = "Composite"

modelProperties

modelProperties: object

reason

reason: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "reason"

type

type: object

name

name: string = "String"

reasonType

reasonType: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "reasonType"

type

type: object

name

name: string = "String"

Const SecurityAlertTimelineItem

SecurityAlertTimelineItem: object

serializedName

serializedName: string = "SecurityAlert"

type

type: object

className

className: string = "SecurityAlertTimelineItem"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = EntityTimelineItem.type.polymorphicDiscriminator

uberParent

uberParent: string = "EntityTimelineItem"

modelProperties

modelProperties: object

alertType

alertType: object

required

required: boolean = true

serializedName

serializedName: string = "alertType"

type

type: object

name

name: string = "String"

azureResourceId

azureResourceId: object

required

required: boolean = true

serializedName

serializedName: string = "azureResourceId"

type

type: object

name

name: string = "String"

description

description: object

serializedName

serializedName: string = "description"

type

type: object

name

name: string = "String"

displayName

displayName: object

required

required: boolean = true

serializedName

serializedName: string = "displayName"

type

type: object

name

name: string = "String"

endTimeUtc

endTimeUtc: object

required

required: boolean = true

serializedName

serializedName: string = "endTimeUtc"

type

type: object

name

name: string = "DateTime"

productName

productName: object

serializedName

serializedName: string = "productName"

type

type: object

name

name: string = "String"

severity

severity: object

required

required: boolean = true

serializedName

serializedName: string = "severity"

type

type: object

name

name: string = "String"

startTimeUtc

startTimeUtc: object

required

required: boolean = true

serializedName

serializedName: string = "startTimeUtc"

type

type: object

name

name: string = "DateTime"

timeGenerated

timeGenerated: object

required

required: boolean = true

serializedName

serializedName: string = "timeGenerated"

type

type: object

name

name: string = "DateTime"

Const SecurityGroupEntity

SecurityGroupEntity: object

serializedName

serializedName: string = "SecurityGroup"

type

type: object

className

className: string = "SecurityGroupEntity"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = Resource.type.polymorphicDiscriminator

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

additionalData

additionalData: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.additionalData"

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "any"

distinguishedName

distinguishedName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.distinguishedName"

type

type: object

name

name: string = "String"

friendlyName

friendlyName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.friendlyName"

type

type: object

name

name: string = "String"

objectGuid

objectGuid: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.objectGuid"

type

type: object

name

name: string = "Uuid"

sid

sid: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.sid"

type

type: object

name

name: string = "String"

Const SecurityGroupEntityProperties

SecurityGroupEntityProperties: object

type

type: object

className

className: string = "SecurityGroupEntityProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

distinguishedName

distinguishedName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "distinguishedName"

type

type: object

name

name: string = "String"

objectGuid

objectGuid: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "objectGuid"

type

type: object

name

name: string = "Uuid"

sid

sid: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "sid"

type

type: object

name

name: string = "String"

Const SentinelOnboardingState

SentinelOnboardingState: object

type

type: object

className

className: string = "SentinelOnboardingState"

name

name: string = "Composite"

modelProperties

modelProperties: object

customerManagedKey

customerManagedKey: object

serializedName

serializedName: string = "properties.customerManagedKey"

type

type: object

name

name: string = "Boolean"

Const SentinelOnboardingStatesList

SentinelOnboardingStatesList: object

type

type: object

className

className: string = "SentinelOnboardingStatesList"

name

name: string = "Composite"

modelProperties

modelProperties: object

value

value: object

required

required: boolean = true

serializedName

serializedName: string = "value"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "SentinelOnboardingState"

name

name: string = "Composite"

Const SettingList

SettingList: object

type

type: object

className

className: string = "SettingList"

name

name: string = "Composite"

modelProperties

modelProperties: object

value

value: object

required

required: boolean = true

serializedName

serializedName: string = "value"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "Settings"

name

name: string = "Composite"

Const Settings

Settings: object

serializedName

serializedName: string = "Settings"

type

type: object

className

className: string = "Settings"

name

name: string = "Composite"

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

kind

kind: object

required

required: boolean = true

serializedName

serializedName: string = "kind"

type

type: object

name

name: string = "String"

polymorphicDiscriminator

polymorphicDiscriminator: object

clientName

clientName: string = "kind"

serializedName

serializedName: string = "kind"

Const Sku

Sku: object

type

type: object

className

className: string = "Sku"

name

name: string = "Composite"

modelProperties

modelProperties: object

capacityReservationLevel

capacityReservationLevel: object

serializedName

serializedName: string = "capacityReservationLevel"

type

type: object

name

name: string = "Number"

name

name: object

serializedName

serializedName: string = "name"

type

type: object

name

name: string = "String"

Const SourceControl

SourceControl: object

type

type: object

className

className: string = "SourceControl"

name

name: string = "Composite"

modelProperties

modelProperties: object

contentTypes

contentTypes: object

serializedName

serializedName: string = "properties.contentTypes"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

description

description: object

serializedName

serializedName: string = "properties.description"

type

type: object

name

name: string = "String"

displayName

displayName: object

serializedName

serializedName: string = "properties.displayName"

type

type: object

name

name: string = "String"

idPropertiesId

idPropertiesId: object

serializedName

serializedName: string = "properties.id"

type

type: object

name

name: string = "String"

lastDeploymentInfo

lastDeploymentInfo: object

serializedName

serializedName: string = "properties.lastDeploymentInfo"

type

type: object

className

className: string = "DeploymentInfo"

name

name: string = "Composite"

repoType

repoType: object

serializedName

serializedName: string = "properties.repoType"

type

type: object

name

name: string = "String"

repository

repository: object

serializedName

serializedName: string = "properties.repository"

type

type: object

className

className: string = "Repository"

name

name: string = "Composite"

repositoryResourceInfo

repositoryResourceInfo: object

serializedName

serializedName: string = "properties.repositoryResourceInfo"

type

type: object

className

className: string = "RepositoryResourceInfo"

name

name: string = "Composite"

version

version: object

serializedName

serializedName: string = "properties.version"

type

type: object

name

name: string = "String"

Const SourceControlList

SourceControlList: object

type

type: object

className

className: string = "SourceControlList"

name

name: string = "Composite"

modelProperties

modelProperties: object

nextLink

nextLink: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "nextLink"

type

type: object

name

name: string = "String"

value

value: object

required

required: boolean = true

serializedName

serializedName: string = "value"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "SourceControl"

name

name: string = "Composite"

Const SubmissionMailEntity

SubmissionMailEntity: object

serializedName

serializedName: string = "SubmissionMail"

type

type: object

className

className: string = "SubmissionMailEntity"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = Resource.type.polymorphicDiscriminator

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

additionalData

additionalData: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.additionalData"

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "any"

friendlyName

friendlyName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.friendlyName"

type

type: object

name

name: string = "String"

networkMessageId

networkMessageId: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.networkMessageId"

type

type: object

name

name: string = "Uuid"

recipient

recipient: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.recipient"

type

type: object

name

name: string = "String"

reportType

reportType: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.reportType"

type

type: object

name

name: string = "String"

sender

sender: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.sender"

type

type: object

name

name: string = "String"

senderIp

senderIp: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.senderIp"

type

type: object

name

name: string = "String"

subject

subject: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.subject"

type

type: object

name

name: string = "String"

submissionDate

submissionDate: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.submissionDate"

type

type: object

name

name: string = "DateTime"

submissionId

submissionId: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.submissionId"

type

type: object

name

name: string = "Uuid"

submitter

submitter: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.submitter"

type

type: object

name

name: string = "String"

timestamp

timestamp: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.timestamp"

type

type: object

name

name: string = "DateTime"

Const SubmissionMailEntityProperties

SubmissionMailEntityProperties: object

type

type: object

className

className: string = "SubmissionMailEntityProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

networkMessageId

networkMessageId: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "networkMessageId"

type

type: object

name

name: string = "Uuid"

recipient

recipient: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "recipient"

type

type: object

name

name: string = "String"

reportType

reportType: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "reportType"

type

type: object

name

name: string = "String"

sender

sender: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "sender"

type

type: object

name

name: string = "String"

senderIp

senderIp: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "senderIp"

type

type: object

name

name: string = "String"

subject

subject: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "subject"

type

type: object

name

name: string = "String"

submissionDate

submissionDate: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "submissionDate"

type

type: object

name

name: string = "DateTime"

submissionId

submissionId: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "submissionId"

type

type: object

name

name: string = "Uuid"

submitter

submitter: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "submitter"

type

type: object

name

name: string = "String"

timestamp

timestamp: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "timestamp"

type

type: object

name

name: string = "DateTime"

Const SystemData

SystemData: object

type

type: object

className

className: string = "SystemData"

name

name: string = "Composite"

modelProperties

modelProperties: object

createdAt

createdAt: object

serializedName

serializedName: string = "createdAt"

type

type: object

name

name: string = "DateTime"

createdBy

createdBy: object

serializedName

serializedName: string = "createdBy"

type

type: object

name

name: string = "String"

createdByType

createdByType: object

serializedName

serializedName: string = "createdByType"

type

type: object

name

name: string = "String"

lastModifiedAt

lastModifiedAt: object

serializedName

serializedName: string = "lastModifiedAt"

type

type: object

name

name: string = "DateTime"

lastModifiedBy

lastModifiedBy: object

serializedName

serializedName: string = "lastModifiedBy"

type

type: object

name

name: string = "String"

lastModifiedByType

lastModifiedByType: object

serializedName

serializedName: string = "lastModifiedByType"

type

type: object

name

name: string = "String"

Const TICheckRequirements

TICheckRequirements: object

serializedName

serializedName: string = "ThreatIntelligence"

type

type: object

className

className: string = "TICheckRequirements"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = DataConnectorsCheckRequirements.type.polymorphicDiscriminator

uberParent

uberParent: string = "DataConnectorsCheckRequirements"

modelProperties

modelProperties: object

tenantId

tenantId: object

serializedName

serializedName: string = "properties.tenantId"

type

type: object

name

name: string = "String"

Const TICheckRequirementsProperties

TICheckRequirementsProperties: object

type

type: object

className

className: string = "TICheckRequirementsProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

Const TIDataConnector

TIDataConnector: object

serializedName

serializedName: string = "ThreatIntelligence"

type

type: object

className

className: string = "TIDataConnector"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = Resource.type.polymorphicDiscriminator

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

dataTypes

dataTypes: object

serializedName

serializedName: string = "properties.dataTypes"

type

type: object

className

className: string = "TIDataConnectorDataTypes"

name

name: string = "Composite"

tenantId

tenantId: object

serializedName

serializedName: string = "properties.tenantId"

type

type: object

name

name: string = "String"

tipLookbackPeriod

tipLookbackPeriod: object

nullable

nullable: boolean = true

serializedName

serializedName: string = "properties.tipLookbackPeriod"

type

type: object

name

name: string = "DateTime"

Const TIDataConnectorDataTypes

TIDataConnectorDataTypes: object

type

type: object

className

className: string = "TIDataConnectorDataTypes"

name

name: string = "Composite"

modelProperties

modelProperties: object

indicators

indicators: object

serializedName

serializedName: string = "indicators"

type

type: object

className

className: string = "TIDataConnectorDataTypesIndicators"

name

name: string = "Composite"

Const TIDataConnectorDataTypesIndicators

TIDataConnectorDataTypesIndicators: object

type

type: object

className

className: string = "TIDataConnectorDataTypesIndicators"

name

name: string = "Composite"

modelProperties

modelProperties: object

Const TIDataConnectorProperties

TIDataConnectorProperties: object

type

type: object

className

className: string = "TIDataConnectorProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

dataTypes

dataTypes: object

serializedName

serializedName: string = "dataTypes"

type

type: object

className

className: string = "TIDataConnectorDataTypes"

name

name: string = "Composite"

tipLookbackPeriod

tipLookbackPeriod: object

nullable

nullable: boolean = true

serializedName

serializedName: string = "tipLookbackPeriod"

type

type: object

name

name: string = "DateTime"

Const TeamInformation

TeamInformation: object

type

type: object

className

className: string = "TeamInformation"

name

name: string = "Composite"

modelProperties

modelProperties: object

description

description: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "description"

type

type: object

name

name: string = "String"

name

name: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "name"

type

type: object

name

name: string = "String"

primaryChannelUrl

primaryChannelUrl: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "primaryChannelUrl"

type

type: object

name

name: string = "String"

teamCreationTimeUtc

teamCreationTimeUtc: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "teamCreationTimeUtc"

type

type: object

name

name: string = "DateTime"

teamId

teamId: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "teamId"

type

type: object

name

name: string = "String"

Const TeamProperties

TeamProperties: object

type

type: object

className

className: string = "TeamProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

groupIds

groupIds: object

serializedName

serializedName: string = "groupIds"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "Uuid"

memberIds

memberIds: object

serializedName

serializedName: string = "memberIds"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "Uuid"

teamDescription

teamDescription: object

serializedName

serializedName: string = "teamDescription"

type

type: object

name

name: string = "String"

teamName

teamName: object

required

required: boolean = true

serializedName

serializedName: string = "teamName"

type

type: object

name

name: string = "String"

Const ThreatIntelligence

ThreatIntelligence: object

type

type: object

className

className: string = "ThreatIntelligence"

name

name: string = "Composite"

modelProperties

modelProperties: object

confidence

confidence: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "confidence"

type

type: object

name

name: string = "Number"

providerName

providerName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "providerName"

type

type: object

name

name: string = "String"

reportLink

reportLink: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "reportLink"

type

type: object

name

name: string = "String"

threatDescription

threatDescription: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "threatDescription"

type

type: object

name

name: string = "String"

threatName

threatName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "threatName"

type

type: object

name

name: string = "String"

threatType

threatType: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "threatType"

type

type: object

name

name: string = "String"

Const ThreatIntelligenceAlertRule

ThreatIntelligenceAlertRule: object

serializedName

serializedName: string = "ThreatIntelligence"

type

type: object

className

className: string = "ThreatIntelligenceAlertRule"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = Resource.type.polymorphicDiscriminator

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

alertRuleTemplateName

alertRuleTemplateName: object

serializedName

serializedName: string = "properties.alertRuleTemplateName"

type

type: object

name

name: string = "String"

description

description: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.description"

type

type: object

name

name: string = "String"

displayName

displayName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.displayName"

type

type: object

name

name: string = "String"

enabled

enabled: object

serializedName

serializedName: string = "properties.enabled"

type

type: object

name

name: string = "Boolean"

lastModifiedUtc

lastModifiedUtc: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.lastModifiedUtc"

type

type: object

name

name: string = "DateTime"

severity

severity: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.severity"

type

type: object

name

name: string = "String"

tactics

tactics: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.tactics"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

techniques

techniques: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.techniques"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

Const ThreatIntelligenceAlertRuleTemplate

ThreatIntelligenceAlertRuleTemplate: object

serializedName

serializedName: string = "ThreatIntelligence"

type

type: object

className

className: string = "ThreatIntelligenceAlertRuleTemplate"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = Resource.type.polymorphicDiscriminator

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

alertRulesCreatedByTemplateCount

alertRulesCreatedByTemplateCount: object

serializedName

serializedName: string = "properties.alertRulesCreatedByTemplateCount"

type

type: object

name

name: string = "Number"

createdDateUTC

createdDateUTC: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.createdDateUTC"

type

type: object

name

name: string = "DateTime"

description

description: object

serializedName

serializedName: string = "properties.description"

type

type: object

name

name: string = "String"

displayName

displayName: object

serializedName

serializedName: string = "properties.displayName"

type

type: object

name

name: string = "String"

lastUpdatedDateUTC

lastUpdatedDateUTC: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.lastUpdatedDateUTC"

type

type: object

name

name: string = "DateTime"

requiredDataConnectors

requiredDataConnectors: object

serializedName

serializedName: string = "properties.requiredDataConnectors"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "AlertRuleTemplateDataSource"

name

name: string = "Composite"

severity

severity: object

serializedName

serializedName: string = "properties.severity"

type

type: object

name

name: string = "String"

status

status: object

serializedName

serializedName: string = "properties.status"

type

type: object

name

name: string = "String"

tactics

tactics: object

serializedName

serializedName: string = "properties.tactics"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

techniques

techniques: object

serializedName

serializedName: string = "properties.techniques"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

Const ThreatIntelligenceAlertRuleTemplateProperties

ThreatIntelligenceAlertRuleTemplateProperties: object

type

type: object

className

className: string = "ThreatIntelligenceAlertRuleTemplateProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

severity

severity: object

required

required: boolean = true

serializedName

serializedName: string = "severity"

type

type: object

name

name: string = "String"

Const ThreatIntelligenceAppendTags

ThreatIntelligenceAppendTags: object

type

type: object

className

className: string = "ThreatIntelligenceAppendTags"

name

name: string = "Composite"

modelProperties

modelProperties: object

threatIntelligenceTags

threatIntelligenceTags: object

serializedName

serializedName: string = "threatIntelligenceTags"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

Const ThreatIntelligenceExternalReference

ThreatIntelligenceExternalReference: object

type

type: object

className

className: string = "ThreatIntelligenceExternalReference"

name

name: string = "Composite"

modelProperties

modelProperties: object

description

description: object

serializedName

serializedName: string = "description"

type

type: object

name

name: string = "String"

externalId

externalId: object

serializedName

serializedName: string = "externalId"

type

type: object

name

name: string = "String"

hashes

hashes: object

serializedName

serializedName: string = "hashes"

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "String"

sourceName

sourceName: object

serializedName

serializedName: string = "sourceName"

type

type: object

name

name: string = "String"

url

url: object

serializedName

serializedName: string = "url"

type

type: object

name

name: string = "String"

Const ThreatIntelligenceFilteringCriteria

ThreatIntelligenceFilteringCriteria: object

type

type: object

className

className: string = "ThreatIntelligenceFilteringCriteria"

name

name: string = "Composite"

modelProperties

modelProperties: object

ids

ids: object

serializedName

serializedName: string = "ids"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

includeDisabled

includeDisabled: object

serializedName

serializedName: string = "includeDisabled"

type

type: object

name

name: string = "Boolean"

keywords

keywords: object

serializedName

serializedName: string = "keywords"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

maxConfidence

maxConfidence: object

serializedName

serializedName: string = "maxConfidence"

type

type: object

name

name: string = "Number"

maxValidUntil

maxValidUntil: object

serializedName

serializedName: string = "maxValidUntil"

type

type: object

name

name: string = "String"

minConfidence

minConfidence: object

serializedName

serializedName: string = "minConfidence"

type

type: object

name

name: string = "Number"

minValidUntil

minValidUntil: object

serializedName

serializedName: string = "minValidUntil"

type

type: object

name

name: string = "String"

pageSize

pageSize: object

serializedName

serializedName: string = "pageSize"

type

type: object

name

name: string = "Number"

patternTypes

patternTypes: object

serializedName

serializedName: string = "patternTypes"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

skipToken

skipToken: object

serializedName

serializedName: string = "skipToken"

type

type: object

name

name: string = "String"

sortBy

sortBy: object

serializedName

serializedName: string = "sortBy"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "ThreatIntelligenceSortingCriteria"

name

name: string = "Composite"

sources

sources: object

serializedName

serializedName: string = "sources"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

threatTypes

threatTypes: object

serializedName

serializedName: string = "threatTypes"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

Const ThreatIntelligenceGranularMarkingModel

ThreatIntelligenceGranularMarkingModel: object

type

type: object

className

className: string = "ThreatIntelligenceGranularMarkingModel"

name

name: string = "Composite"

modelProperties

modelProperties: object

language

language: object

serializedName

serializedName: string = "language"

type

type: object

name

name: string = "String"

markingRef

markingRef: object

serializedName

serializedName: string = "markingRef"

type

type: object

name

name: string = "Number"

selectors

selectors: object

serializedName

serializedName: string = "selectors"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

Const ThreatIntelligenceIndicatorModel

ThreatIntelligenceIndicatorModel: object

serializedName

serializedName: string = "indicator"

type

type: object

className

className: string = "ThreatIntelligenceIndicatorModel"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = Resource.type.polymorphicDiscriminator

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

additionalData

additionalData: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.additionalData"

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "any"

confidence

confidence: object

serializedName

serializedName: string = "properties.confidence"

type

type: object

name

name: string = "Number"

created

created: object

serializedName

serializedName: string = "properties.created"

type

type: object

name

name: string = "String"

createdByRef

createdByRef: object

serializedName

serializedName: string = "properties.createdByRef"

type

type: object

name

name: string = "String"

defanged

defanged: object

serializedName

serializedName: string = "properties.defanged"

type

type: object

name

name: string = "Boolean"

description

description: object

serializedName

serializedName: string = "properties.description"

type

type: object

name

name: string = "String"

displayName

displayName: object

serializedName

serializedName: string = "properties.displayName"

type

type: object

name

name: string = "String"

extensions

extensions: object

serializedName

serializedName: string = "properties.extensions"

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "any"

externalId

externalId: object

serializedName

serializedName: string = "properties.externalId"

type

type: object

name

name: string = "String"

externalLastUpdatedTimeUtc

externalLastUpdatedTimeUtc: object

serializedName

serializedName: string = "properties.externalLastUpdatedTimeUtc"

type

type: object

name

name: string = "String"

externalReferences

externalReferences: object

serializedName

serializedName: string = "properties.externalReferences"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "ThreatIntelligenceExternalReference"

name

name: string = "Composite"

friendlyName

friendlyName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.friendlyName"

type

type: object

name

name: string = "String"

granularMarkings

granularMarkings: object

serializedName

serializedName: string = "properties.granularMarkings"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "ThreatIntelligenceGranularMarkingModel"

name

name: string = "Composite"

indicatorTypes

indicatorTypes: object

serializedName

serializedName: string = "properties.indicatorTypes"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

killChainPhases

killChainPhases: object

serializedName

serializedName: string = "properties.killChainPhases"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "ThreatIntelligenceKillChainPhase"

name

name: string = "Composite"

labels

labels: object

serializedName

serializedName: string = "properties.labels"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

language

language: object

serializedName

serializedName: string = "properties.language"

type

type: object

name

name: string = "String"

lastUpdatedTimeUtc

lastUpdatedTimeUtc: object

serializedName

serializedName: string = "properties.lastUpdatedTimeUtc"

type

type: object

name

name: string = "String"

modified

modified: object

serializedName

serializedName: string = "properties.modified"

type

type: object

name

name: string = "String"

objectMarkingRefs

objectMarkingRefs: object

serializedName

serializedName: string = "properties.objectMarkingRefs"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

parsedPattern

parsedPattern: object

serializedName

serializedName: string = "properties.parsedPattern"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "ThreatIntelligenceParsedPattern"

name

name: string = "Composite"

pattern

pattern: object

serializedName

serializedName: string = "properties.pattern"

type

type: object

name

name: string = "String"

patternType

patternType: object

serializedName

serializedName: string = "properties.patternType"

type

type: object

name

name: string = "String"

patternVersion

patternVersion: object

serializedName

serializedName: string = "properties.patternVersion"

type

type: object

name

name: string = "String"

revoked

revoked: object

serializedName

serializedName: string = "properties.revoked"

type

type: object

name

name: string = "Boolean"

source

source: object

serializedName

serializedName: string = "properties.source"

type

type: object

name

name: string = "String"

threatIntelligenceTags

threatIntelligenceTags: object

serializedName

serializedName: string = "properties.threatIntelligenceTags"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

threatTypes

threatTypes: object

serializedName

serializedName: string = "properties.threatTypes"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

validFrom

validFrom: object

serializedName

serializedName: string = "properties.validFrom"

type

type: object

name

name: string = "String"

validUntil

validUntil: object

serializedName

serializedName: string = "properties.validUntil"

type

type: object

name

name: string = "String"

Const ThreatIntelligenceIndicatorProperties

ThreatIntelligenceIndicatorProperties: object

type

type: object

className

className: string = "ThreatIntelligenceIndicatorProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

confidence

confidence: object

serializedName

serializedName: string = "confidence"

type

type: object

name

name: string = "Number"

created

created: object

serializedName

serializedName: string = "created"

type

type: object

name

name: string = "String"

createdByRef

createdByRef: object

serializedName

serializedName: string = "createdByRef"

type

type: object

name

name: string = "String"

defanged

defanged: object

serializedName

serializedName: string = "defanged"

type

type: object

name

name: string = "Boolean"

description

description: object

serializedName

serializedName: string = "description"

type

type: object

name

name: string = "String"

displayName

displayName: object

serializedName

serializedName: string = "displayName"

type

type: object

name

name: string = "String"

extensions

extensions: object

serializedName

serializedName: string = "extensions"

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "any"

externalId

externalId: object

serializedName

serializedName: string = "externalId"

type

type: object

name

name: string = "String"

externalLastUpdatedTimeUtc

externalLastUpdatedTimeUtc: object

serializedName

serializedName: string = "externalLastUpdatedTimeUtc"

type

type: object

name

name: string = "String"

externalReferences

externalReferences: object

serializedName

serializedName: string = "externalReferences"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "ThreatIntelligenceExternalReference"

name

name: string = "Composite"

granularMarkings

granularMarkings: object

serializedName

serializedName: string = "granularMarkings"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "ThreatIntelligenceGranularMarkingModel"

name

name: string = "Composite"

indicatorTypes

indicatorTypes: object

serializedName

serializedName: string = "indicatorTypes"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

killChainPhases

killChainPhases: object

serializedName

serializedName: string = "killChainPhases"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "ThreatIntelligenceKillChainPhase"

name

name: string = "Composite"

labels

labels: object

serializedName

serializedName: string = "labels"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

language

language: object

serializedName

serializedName: string = "language"

type

type: object

name

name: string = "String"

lastUpdatedTimeUtc

lastUpdatedTimeUtc: object

serializedName

serializedName: string = "lastUpdatedTimeUtc"

type

type: object

name

name: string = "String"

modified

modified: object

serializedName

serializedName: string = "modified"

type

type: object

name

name: string = "String"

objectMarkingRefs

objectMarkingRefs: object

serializedName

serializedName: string = "objectMarkingRefs"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

parsedPattern

parsedPattern: object

serializedName

serializedName: string = "parsedPattern"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "ThreatIntelligenceParsedPattern"

name

name: string = "Composite"

pattern

pattern: object

serializedName

serializedName: string = "pattern"

type

type: object

name

name: string = "String"

patternType

patternType: object

serializedName

serializedName: string = "patternType"

type

type: object

name

name: string = "String"

patternVersion

patternVersion: object

serializedName

serializedName: string = "patternVersion"

type

type: object

name

name: string = "String"

revoked

revoked: object

serializedName

serializedName: string = "revoked"

type

type: object

name

name: string = "Boolean"

source

source: object

serializedName

serializedName: string = "source"

type

type: object

name

name: string = "String"

threatIntelligenceTags

threatIntelligenceTags: object

serializedName

serializedName: string = "threatIntelligenceTags"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

threatTypes

threatTypes: object

serializedName

serializedName: string = "threatTypes"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

validFrom

validFrom: object

serializedName

serializedName: string = "validFrom"

type

type: object

name

name: string = "String"

validUntil

validUntil: object

serializedName

serializedName: string = "validUntil"

type

type: object

name

name: string = "String"

Const ThreatIntelligenceInformation

ThreatIntelligenceInformation: object

serializedName

serializedName: string = "ThreatIntelligenceInformation"

type

type: object

className

className: string = "ThreatIntelligenceInformation"

name

name: string = "Composite"

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

kind

kind: object

required

required: boolean = true

serializedName

serializedName: string = "kind"

type

type: object

name

name: string = "String"

polymorphicDiscriminator

polymorphicDiscriminator: object

clientName

clientName: string = "kind"

serializedName

serializedName: string = "kind"

Const ThreatIntelligenceInformationList

ThreatIntelligenceInformationList: object

type

type: object

className

className: string = "ThreatIntelligenceInformationList"

name

name: string = "Composite"

modelProperties

modelProperties: object

nextLink

nextLink: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "nextLink"

type

type: object

name

name: string = "String"

value

value: object

required

required: boolean = true

serializedName

serializedName: string = "value"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "ThreatIntelligenceInformation"

name

name: string = "Composite"

Const ThreatIntelligenceKillChainPhase

ThreatIntelligenceKillChainPhase: object

type

type: object

className

className: string = "ThreatIntelligenceKillChainPhase"

name

name: string = "Composite"

modelProperties

modelProperties: object

killChainName

killChainName: object

serializedName

serializedName: string = "killChainName"

type

type: object

name

name: string = "String"

phaseName

phaseName: object

serializedName

serializedName: string = "phaseName"

type

type: object

name

name: string = "String"

Const ThreatIntelligenceMetric

ThreatIntelligenceMetric: object

type

type: object

className

className: string = "ThreatIntelligenceMetric"

name

name: string = "Composite"

modelProperties

modelProperties: object

lastUpdatedTimeUtc

lastUpdatedTimeUtc: object

serializedName

serializedName: string = "lastUpdatedTimeUtc"

type

type: object

name

name: string = "String"

patternTypeMetrics

patternTypeMetrics: object

serializedName

serializedName: string = "patternTypeMetrics"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "ThreatIntelligenceMetricEntity"

name

name: string = "Composite"

sourceMetrics

sourceMetrics: object

serializedName

serializedName: string = "sourceMetrics"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "ThreatIntelligenceMetricEntity"

name

name: string = "Composite"

threatTypeMetrics

threatTypeMetrics: object

serializedName

serializedName: string = "threatTypeMetrics"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "ThreatIntelligenceMetricEntity"

name

name: string = "Composite"

Const ThreatIntelligenceMetricEntity

ThreatIntelligenceMetricEntity: object

type

type: object

className

className: string = "ThreatIntelligenceMetricEntity"

name

name: string = "Composite"

modelProperties

modelProperties: object

metricName

metricName: object

serializedName

serializedName: string = "metricName"

type

type: object

name

name: string = "String"

metricValue

metricValue: object

serializedName

serializedName: string = "metricValue"

type

type: object

name

name: string = "Number"

Const ThreatIntelligenceMetrics

ThreatIntelligenceMetrics: object

type

type: object

className

className: string = "ThreatIntelligenceMetrics"

name

name: string = "Composite"

modelProperties

modelProperties: object

properties

properties: object

serializedName

serializedName: string = "properties"

type

type: object

className

className: string = "ThreatIntelligenceMetric"

name

name: string = "Composite"

Const ThreatIntelligenceMetricsList

ThreatIntelligenceMetricsList: object

type

type: object

className

className: string = "ThreatIntelligenceMetricsList"

name

name: string = "Composite"

modelProperties

modelProperties: object

value

value: object

required

required: boolean = true

serializedName

serializedName: string = "value"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "ThreatIntelligenceMetrics"

name

name: string = "Composite"

Const ThreatIntelligenceParsedPattern

ThreatIntelligenceParsedPattern: object

type

type: object

className

className: string = "ThreatIntelligenceParsedPattern"

name

name: string = "Composite"

modelProperties

modelProperties: object

patternTypeKey

patternTypeKey: object

serializedName

serializedName: string = "patternTypeKey"

type

type: object

name

name: string = "String"

patternTypeValues

patternTypeValues: object

serializedName

serializedName: string = "patternTypeValues"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "ThreatIntelligenceParsedPatternTypeValue"

name

name: string = "Composite"

Const ThreatIntelligenceParsedPatternTypeValue

ThreatIntelligenceParsedPatternTypeValue: object

type

type: object

className

className: string = "ThreatIntelligenceParsedPatternTypeValue"

name

name: string = "Composite"

modelProperties

modelProperties: object

value

value: object

serializedName

serializedName: string = "value"

type

type: object

name

name: string = "String"

valueType

valueType: object

serializedName

serializedName: string = "valueType"

type

type: object

name

name: string = "String"

Const ThreatIntelligenceSortingCriteria

ThreatIntelligenceSortingCriteria: object

type

type: object

className

className: string = "ThreatIntelligenceSortingCriteria"

name

name: string = "Composite"

modelProperties

modelProperties: object

itemKey

itemKey: object

serializedName

serializedName: string = "itemKey"

type

type: object

name

name: string = "String"

sortOrder

sortOrder: object

serializedName

serializedName: string = "sortOrder"

type

type: object

name

name: string = "String"

Const TiTaxiiCheckRequirements

TiTaxiiCheckRequirements: object

serializedName

serializedName: string = "ThreatIntelligenceTaxii"

type

type: object

className

className: string = "TiTaxiiCheckRequirements"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = DataConnectorsCheckRequirements.type.polymorphicDiscriminator

uberParent

uberParent: string = "DataConnectorsCheckRequirements"

modelProperties

modelProperties: object

tenantId

tenantId: object

serializedName

serializedName: string = "properties.tenantId"

type

type: object

name

name: string = "String"

Const TiTaxiiCheckRequirementsProperties

TiTaxiiCheckRequirementsProperties: object

type

type: object

className

className: string = "TiTaxiiCheckRequirementsProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

Const TiTaxiiDataConnector

TiTaxiiDataConnector: object

serializedName

serializedName: string = "ThreatIntelligenceTaxii"

type

type: object

className

className: string = "TiTaxiiDataConnector"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = Resource.type.polymorphicDiscriminator

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

collectionId

collectionId: object

serializedName

serializedName: string = "properties.collectionId"

type

type: object

name

name: string = "String"

dataTypes

dataTypes: object

serializedName

serializedName: string = "properties.dataTypes"

type

type: object

className

className: string = "TiTaxiiDataConnectorDataTypes"

name

name: string = "Composite"

friendlyName

friendlyName: object

serializedName

serializedName: string = "properties.friendlyName"

type

type: object

name

name: string = "String"

password

password: object

serializedName

serializedName: string = "properties.password"

type

type: object

name

name: string = "String"

pollingFrequency

pollingFrequency: object

nullable

nullable: boolean = true

serializedName

serializedName: string = "properties.pollingFrequency"

type

type: object

name

name: string = "String"

taxiiLookbackPeriod

taxiiLookbackPeriod: object

nullable

nullable: boolean = true

serializedName

serializedName: string = "properties.taxiiLookbackPeriod"

type

type: object

name

name: string = "DateTime"

taxiiServer

taxiiServer: object

serializedName

serializedName: string = "properties.taxiiServer"

type

type: object

name

name: string = "String"

tenantId

tenantId: object

serializedName

serializedName: string = "properties.tenantId"

type

type: object

name

name: string = "String"

userName

userName: object

serializedName

serializedName: string = "properties.userName"

type

type: object

name

name: string = "String"

workspaceId

workspaceId: object

serializedName

serializedName: string = "properties.workspaceId"

type

type: object

name

name: string = "String"

Const TiTaxiiDataConnectorDataTypes

TiTaxiiDataConnectorDataTypes: object

type

type: object

className

className: string = "TiTaxiiDataConnectorDataTypes"

name

name: string = "Composite"

modelProperties

modelProperties: object

taxiiClient

taxiiClient: object

serializedName

serializedName: string = "taxiiClient"

type

type: object

className

className: string = "TiTaxiiDataConnectorDataTypesTaxiiClient"

name

name: string = "Composite"

Const TiTaxiiDataConnectorDataTypesTaxiiClient

TiTaxiiDataConnectorDataTypesTaxiiClient: object

type

type: object

className

className: string = "TiTaxiiDataConnectorDataTypesTaxiiClient"

name

name: string = "Composite"

modelProperties

modelProperties: object

Const TiTaxiiDataConnectorProperties

TiTaxiiDataConnectorProperties: object

type

type: object

className

className: string = "TiTaxiiDataConnectorProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

collectionId

collectionId: object

serializedName

serializedName: string = "collectionId"

type

type: object

name

name: string = "String"

dataTypes

dataTypes: object

serializedName

serializedName: string = "dataTypes"

type

type: object

className

className: string = "TiTaxiiDataConnectorDataTypes"

name

name: string = "Composite"

friendlyName

friendlyName: object

serializedName

serializedName: string = "friendlyName"

type

type: object

name

name: string = "String"

password

password: object

serializedName

serializedName: string = "password"

type

type: object

name

name: string = "String"

pollingFrequency

pollingFrequency: object

nullable

nullable: boolean = true

required

required: boolean = true

serializedName

serializedName: string = "pollingFrequency"

type

type: object

name

name: string = "String"

taxiiLookbackPeriod

taxiiLookbackPeriod: object

nullable

nullable: boolean = true

serializedName

serializedName: string = "taxiiLookbackPeriod"

type

type: object

name

name: string = "DateTime"

taxiiServer

taxiiServer: object

serializedName

serializedName: string = "taxiiServer"

type

type: object

name

name: string = "String"

userName

userName: object

serializedName

serializedName: string = "userName"

type

type: object

name

name: string = "String"

workspaceId

workspaceId: object

serializedName

serializedName: string = "workspaceId"

type

type: object

name

name: string = "String"

Const TimelineAggregation

TimelineAggregation: object

type

type: object

className

className: string = "TimelineAggregation"

name

name: string = "Composite"

modelProperties

modelProperties: object

count

count: object

required

required: boolean = true

serializedName

serializedName: string = "count"

type

type: object

name

name: string = "Number"

kind

kind: object

required

required: boolean = true

serializedName

serializedName: string = "kind"

type

type: object

name

name: string = "String"

Const TimelineError

TimelineError: object

type

type: object

className

className: string = "TimelineError"

name

name: string = "Composite"

modelProperties

modelProperties: object

errorMessage

errorMessage: object

required

required: boolean = true

serializedName

serializedName: string = "errorMessage"

type

type: object

name

name: string = "String"

kind

kind: object

required

required: boolean = true

serializedName

serializedName: string = "kind"

type

type: object

name

name: string = "String"

queryId

queryId: object

serializedName

serializedName: string = "queryId"

type

type: object

name

name: string = "String"

Const TimelineResultsMetadata

TimelineResultsMetadata: object

type

type: object

className

className: string = "TimelineResultsMetadata"

name

name: string = "Composite"

modelProperties

modelProperties: object

aggregations

aggregations: object

required

required: boolean = true

serializedName

serializedName: string = "aggregations"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "TimelineAggregation"

name

name: string = "Composite"

errors

errors: object

serializedName

serializedName: string = "errors"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "TimelineError"

name

name: string = "Composite"

totalCount

totalCount: object

required

required: boolean = true

serializedName

serializedName: string = "totalCount"

type

type: object

name

name: string = "Number"

Const Ueba

Ueba: object

serializedName

serializedName: string = "Ueba"

type

type: object

className

className: string = "Ueba"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = Resource.type.polymorphicDiscriminator

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

dataSources

dataSources: object

serializedName

serializedName: string = "properties.dataSources"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

Const UrlEntity

UrlEntity: object

serializedName

serializedName: string = "Url"

type

type: object

className

className: string = "UrlEntity"

name

name: string = "Composite"

polymorphicDiscriminator

polymorphicDiscriminator: any = Resource.type.polymorphicDiscriminator

uberParent

uberParent: string = "Resource"

modelProperties

modelProperties: object

additionalData

additionalData: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.additionalData"

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "any"

friendlyName

friendlyName: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.friendlyName"

type

type: object

name

name: string = "String"

url

url: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.url"

type

type: object

name

name: string = "String"

Const UrlEntityProperties

UrlEntityProperties: object

type

type: object

className

className: string = "UrlEntityProperties"

name

name: string = "Composite"

modelProperties

modelProperties: object

url

url: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "url"

type

type: object

name

name: string = "String"

Const UserInfo

UserInfo: object

type

type: object

className

className: string = "UserInfo"

name

name: string = "Composite"

modelProperties

modelProperties: object

email

email: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "email"

type

type: object

name

name: string = "String"

name

name: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "name"

type

type: object

name

name: string = "String"

objectId

objectId: object

nullable

nullable: boolean = true

serializedName

serializedName: string = "objectId"

type

type: object

name

name: string = "Uuid"

Const Watchlist

Watchlist: object

type

type: object

className

className: string = "Watchlist"

name

name: string = "Composite"

modelProperties

modelProperties: object

contentType

contentType: object

serializedName

serializedName: string = "properties.contentType"

type

type: object

name

name: string = "String"

created

created: object

serializedName

serializedName: string = "properties.created"

type

type: object

name

name: string = "DateTime"

createdBy

createdBy: object

serializedName

serializedName: string = "properties.createdBy"

type

type: object

className

className: string = "UserInfo"

name

name: string = "Composite"

defaultDuration

defaultDuration: object

serializedName

serializedName: string = "properties.defaultDuration"

type

type: object

name

name: string = "TimeSpan"

description

description: object

serializedName

serializedName: string = "properties.description"

type

type: object

name

name: string = "String"

displayName

displayName: object

serializedName

serializedName: string = "properties.displayName"

type

type: object

name

name: string = "String"

isDeleted

isDeleted: object

serializedName

serializedName: string = "properties.isDeleted"

type

type: object

name

name: string = "Boolean"

itemsSearchKey

itemsSearchKey: object

serializedName

serializedName: string = "properties.itemsSearchKey"

type

type: object

name

name: string = "String"

labels

labels: object

serializedName

serializedName: string = "properties.labels"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

name

name: string = "String"

numberOfLinesToSkip

numberOfLinesToSkip: object

serializedName

serializedName: string = "properties.numberOfLinesToSkip"

type

type: object

name

name: string = "Number"

provider

provider: object

serializedName

serializedName: string = "properties.provider"

type

type: object

name

name: string = "String"

provisioningState

provisioningState: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "properties.provisioningState"

type

type: object

name

name: string = "String"

rawContent

rawContent: object

serializedName

serializedName: string = "properties.rawContent"

type

type: object

name

name: string = "String"

sasUri

sasUri: object

serializedName

serializedName: string = "properties.sasUri"

type

type: object

name

name: string = "String"

source

source: object

serializedName

serializedName: string = "properties.source"

type

type: object

name

name: string = "String"

sourceType

sourceType: object

serializedName

serializedName: string = "properties.sourceType"

type

type: object

name

name: string = "String"

tenantId

tenantId: object

serializedName

serializedName: string = "properties.tenantId"

type

type: object

name

name: string = "String"

updated

updated: object

serializedName

serializedName: string = "properties.updated"

type

type: object

name

name: string = "DateTime"

updatedBy

updatedBy: object

serializedName

serializedName: string = "properties.updatedBy"

type

type: object

className

className: string = "UserInfo"

name

name: string = "Composite"

uploadStatus

uploadStatus: object

serializedName

serializedName: string = "properties.uploadStatus"

type

type: object

name

name: string = "String"

watchlistAlias

watchlistAlias: object

serializedName

serializedName: string = "properties.watchlistAlias"

type

type: object

name

name: string = "String"

watchlistId

watchlistId: object

serializedName

serializedName: string = "properties.watchlistId"

type

type: object

name

name: string = "String"

watchlistType

watchlistType: object

serializedName

serializedName: string = "properties.watchlistType"

type

type: object

name

name: string = "String"

Const WatchlistItem

WatchlistItem: object

type

type: object

className

className: string = "WatchlistItem"

name

name: string = "Composite"

modelProperties

modelProperties: object

created

created: object

serializedName

serializedName: string = "properties.created"

type

type: object

name

name: string = "DateTime"

createdBy

createdBy: object

serializedName

serializedName: string = "properties.createdBy"

type

type: object

className

className: string = "UserInfo"

name

name: string = "Composite"

entityMapping

entityMapping: object

serializedName

serializedName: string = "properties.entityMapping"

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "any"

isDeleted

isDeleted: object

serializedName

serializedName: string = "properties.isDeleted"

type

type: object

name

name: string = "Boolean"

itemsKeyValue

itemsKeyValue: object

serializedName

serializedName: string = "properties.itemsKeyValue"

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "any"

tenantId

tenantId: object

serializedName

serializedName: string = "properties.tenantId"

type

type: object

name

name: string = "String"

updated

updated: object

serializedName

serializedName: string = "properties.updated"

type

type: object

name

name: string = "DateTime"

updatedBy

updatedBy: object

serializedName

serializedName: string = "properties.updatedBy"

type

type: object

className

className: string = "UserInfo"

name

name: string = "Composite"

watchlistItemId

watchlistItemId: object

serializedName

serializedName: string = "properties.watchlistItemId"

type

type: object

name

name: string = "String"

watchlistItemType

watchlistItemType: object

serializedName

serializedName: string = "properties.watchlistItemType"

type

type: object

name

name: string = "String"

Const WatchlistItemList

WatchlistItemList: object

type

type: object

className

className: string = "WatchlistItemList"

name

name: string = "Composite"

modelProperties

modelProperties: object

nextLink

nextLink: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "nextLink"

type

type: object

name

name: string = "String"

value

value: object

required

required: boolean = true

serializedName

serializedName: string = "value"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "WatchlistItem"

name

name: string = "Composite"

Const WatchlistList

WatchlistList: object

type

type: object

className

className: string = "WatchlistList"

name

name: string = "Composite"

modelProperties

modelProperties: object

nextLink

nextLink: object

readOnly

readOnly: boolean = true

serializedName

serializedName: string = "nextLink"

type

type: object

name

name: string = "String"

value

value: object

required

required: boolean = true

serializedName

serializedName: string = "value"

type

type: object

name

name: string = "Sequence"

element

element: object

type

type: object

className

className: string = "Watchlist"

name

name: string = "Composite"

Const WatchlistsCreateOrUpdateHeaders

WatchlistsCreateOrUpdateHeaders: object

type

type: object

className

className: string = "WatchlistsCreateOrUpdateHeaders"

name

name: string = "Composite"

modelProperties

modelProperties: object

azureAsyncOperation

azureAsyncOperation: object

serializedName

serializedName: string = "azure-asyncoperation"

type

type: object

name

name: string = "String"

Const WatchlistsDeleteHeaders

WatchlistsDeleteHeaders: object

type

type: object

className

className: string = "WatchlistsDeleteHeaders"

name

name: string = "Composite"

modelProperties

modelProperties: object

azureAsyncOperation

azureAsyncOperation: object

serializedName

serializedName: string = "azure-asyncoperation"

type

type: object

name

name: string = "String"

Const Webhook

Webhook: object

type

type: object

className

className: string = "Webhook"

name

name: string = "Composite"

modelProperties

modelProperties: object

rotateWebhookSecret

rotateWebhookSecret: object

serializedName

serializedName: string = "rotateWebhookSecret"

type

type: object

name

name: string = "Boolean"

webhookId

webhookId: object

serializedName

serializedName: string = "webhookId"

type

type: object

name

name: string = "String"

webhookSecretUpdateTime

webhookSecretUpdateTime: object

serializedName

serializedName: string = "webhookSecretUpdateTime"

type

type: object

name

name: string = "String"

webhookUrl

webhookUrl: object

serializedName

serializedName: string = "webhookUrl"

type

type: object

name

name: string = "String"

Const accept

accept: object

parameterPath

parameterPath: string = "accept"

mapper

mapper: object

defaultValue

defaultValue: string = "application/json"

isConstant

isConstant: boolean = true

serializedName

serializedName: string = "Accept"

type

type: object

name

name: string = "String"

Const action

action: object

mapper

mapper: any = ActionRequestMapper

parameterPath

parameterPath: string = "action"

Const actionId

actionId: object

parameterPath

parameterPath: string = "actionId"

mapper

mapper: object

required

required: boolean = true

serializedName

serializedName: string = "actionId"

type

type: object

name

name: string = "String"

Const alertRule

alertRule: object

mapper

mapper: any = AlertRuleMapper

parameterPath

parameterPath: string = "alertRule"

Const alertRuleTemplateId

alertRuleTemplateId: object

parameterPath

parameterPath: string = "alertRuleTemplateId"

mapper

mapper: object

required

required: boolean = true

serializedName

serializedName: string = "alertRuleTemplateId"

type

type: object

name

name: string = "String"

Const apiVersion

apiVersion: object

parameterPath

parameterPath: string = "apiVersion"

mapper

mapper: object

defaultValue

defaultValue: string = "2022-01-01-preview"

isConstant

isConstant: boolean = true

serializedName

serializedName: string = "api-version"

type

type: object

name

name: string = "String"

Const appendTagsOperationSpec

appendTagsOperationSpec: object

headerParameters

headerParameters: any[] = [Parameters.accept, Parameters.contentType]

httpMethod

httpMethod: string = "POST"

mediaType

mediaType: string = "json"

path

path: string = "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/threatIntelligence/main/indicators/{name}/appendTags"

queryParameters

queryParameters: any[] = [Parameters.apiVersion]

requestBody

requestBody: any = Parameters.threatIntelligenceAppendTags

serializer

serializer: any

urlParameters

urlParameters: any[] = [Parameters.$host,Parameters.subscriptionId,Parameters.resourceGroupName,Parameters.workspaceName,Parameters.name]

responses

responses: object

200

200: {}

Type declaration

default

default: object

bodyMapper

bodyMapper: any = Mappers.CloudError

Const automationRuleId

automationRuleId: object

parameterPath

parameterPath: string = "automationRuleId"

mapper

mapper: object

required

required: boolean = true

serializedName

serializedName: string = "automationRuleId"

type

type: object

name

name: string = "String"

Const automationRuleToUpsert

automationRuleToUpsert: object

mapper

mapper: any = AutomationRuleMapper

parameterPath

parameterPath: string[] = ["options", "automationRuleToUpsert"]

Const bookmark

bookmark: object

mapper

mapper: any = BookmarkMapper

parameterPath

parameterPath: string = "bookmark"

Const bookmarkId

bookmarkId: object

parameterPath

parameterPath: string = "bookmarkId"

mapper

mapper: object

required

required: boolean = true

serializedName

serializedName: string = "bookmarkId"

type

type: object

name

name: string = "String"

Const connectBody

connectBody: object

mapper

mapper: any = DataConnectorConnectBodyMapper

parameterPath

parameterPath: string = "connectBody"

Const connectOperationSpec

connectOperationSpec: object

headerParameters

headerParameters: any[] = [Parameters.accept, Parameters.contentType]

httpMethod

httpMethod: string = "POST"

mediaType

mediaType: string = "json"

path

path: string = "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/dataConnectors/{dataConnectorId}/connect"

queryParameters

queryParameters: any[] = [Parameters.apiVersion]

requestBody

requestBody: any = Parameters.connectBody

serializer

serializer: any

urlParameters

urlParameters: any[] = [Parameters.$host,Parameters.subscriptionId,Parameters.resourceGroupName,Parameters.workspaceName,Parameters.dataConnectorId]

responses

responses: object

200

200: {}

Type declaration

default

default: object

bodyMapper

bodyMapper: any = Mappers.CloudError

Const consentId

consentId: object

parameterPath

parameterPath: string = "consentId"

mapper

mapper: object

required

required: boolean = true

serializedName

serializedName: string = "consentId"

type

type: object

name

name: string = "String"

Const contentType

contentType: object

parameterPath

parameterPath: string[] = ["options", "contentType"]

mapper

mapper: object

defaultValue

defaultValue: string = "application/json"

isConstant

isConstant: boolean = true

serializedName

serializedName: string = "Content-Type"

type

type: object

name

name: string = "String"

Const createIndicatorOperationSpec

createIndicatorOperationSpec: object

headerParameters

headerParameters: any[] = [Parameters.accept, Parameters.contentType]

httpMethod

httpMethod: string = "POST"

mediaType

mediaType: string = "json"

path

path: string = "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/threatIntelligence/main/createIndicator"

queryParameters

queryParameters: any[] = [Parameters.apiVersion]

requestBody

requestBody: any = Parameters.threatIntelligenceProperties

serializer

serializer: any

urlParameters

urlParameters: any[] = [Parameters.$host,Parameters.subscriptionId,Parameters.resourceGroupName,Parameters.workspaceName]

responses

responses: object

200

200: object

bodyMapper

bodyMapper: any = Mappers.ThreatIntelligenceInformation

201

201: object

bodyMapper

bodyMapper: any = Mappers.ThreatIntelligenceInformation

default

default: object

bodyMapper

bodyMapper: any = Mappers.CloudError

Const createOperationSpec

createOperationSpec: object

headerParameters

headerParameters: any[] = [Parameters.accept, Parameters.contentType]

httpMethod

httpMethod: string = "PUT"

mediaType

mediaType: string = "json"

path

path: string = "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/threatIntelligence/main/indicators/{name}"

queryParameters

queryParameters: any[] = [Parameters.apiVersion]

requestBody

requestBody: any = Parameters.threatIntelligenceProperties

serializer

serializer: any

urlParameters

urlParameters: any[] = [Parameters.$host,Parameters.subscriptionId,Parameters.resourceGroupName,Parameters.workspaceName,Parameters.name]

responses

responses: object

200

200: object

bodyMapper

bodyMapper: any = Mappers.ThreatIntelligenceInformation

201

201: object

bodyMapper

bodyMapper: any = Mappers.ThreatIntelligenceInformation

default

default: object

bodyMapper

bodyMapper: any = Mappers.CloudError

Const createOrUpdateOperationSpec

createOrUpdateOperationSpec: object

headerParameters

headerParameters: any[] = [Parameters.accept, Parameters.contentType]

httpMethod

httpMethod: string = "PUT"

mediaType

mediaType: string = "json"

path

path: string = "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/dataConnectors/{dataConnectorId}"

queryParameters

queryParameters: any[] = [Parameters.apiVersion]

requestBody

requestBody: any = Parameters.dataConnector

serializer

serializer: any

urlParameters

urlParameters: any[] = [Parameters.$host,Parameters.subscriptionId,Parameters.resourceGroupName,Parameters.workspaceName,Parameters.dataConnectorId]

responses

responses: object

200

200: object

bodyMapper

bodyMapper: any = Mappers.DataConnector

201

201: object

bodyMapper

bodyMapper: any = Mappers.DataConnector

headersMapper

headersMapper: any = Mappers.WatchlistsCreateOrUpdateHeaders

default

default: object

bodyMapper

bodyMapper: any = Mappers.CloudError

Const createTeamOperationSpec

createTeamOperationSpec: object

headerParameters

headerParameters: any[] = [Parameters.accept, Parameters.contentType]

httpMethod

httpMethod: string = "POST"

mediaType

mediaType: string = "json"

path

path: string = "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/incidents/{incidentId}/createTeam"

queryParameters

queryParameters: any[] = [Parameters.apiVersion]

requestBody

requestBody: any = Parameters.teamProperties

serializer

serializer: any

urlParameters

urlParameters: any[] = [Parameters.$host,Parameters.subscriptionId,Parameters.resourceGroupName,Parameters.workspaceName,Parameters.incidentId]

responses

responses: object

200

200: object

bodyMapper

bodyMapper: any = Mappers.TeamInformation

default

default: object

bodyMapper

bodyMapper: any = Mappers.CloudError

Const dataConnector

dataConnector: object

mapper

mapper: any = DataConnectorMapper

parameterPath

parameterPath: string = "dataConnector"

Const dataConnectorId

dataConnectorId: object

parameterPath

parameterPath: string = "dataConnectorId"

mapper

mapper: object

required

required: boolean = true

serializedName

serializedName: string = "dataConnectorId"

type

type: object

name

name: string = "String"

Const dataConnectorsCheckRequirements

dataConnectorsCheckRequirements: object

mapper

mapper: any = DataConnectorsCheckRequirementsMapper

parameterPath

parameterPath: string = "dataConnectorsCheckRequirements"

Const deleteOperationSpec

deleteOperationSpec: object

headerParameters

headerParameters: any[] = [Parameters.accept]

httpMethod

httpMethod: string = "DELETE"

path

path: string = "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/dataConnectors/{dataConnectorId}"

queryParameters

queryParameters: any[] = [Parameters.apiVersion]

serializer

serializer: any

urlParameters

urlParameters: any[] = [Parameters.$host,Parameters.subscriptionId,Parameters.resourceGroupName,Parameters.workspaceName,Parameters.dataConnectorId]

responses

responses: object

200

200: object

headersMapper

headersMapper: any = Mappers.WatchlistsDeleteHeaders

bodyMapper

bodyMapper: object

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "any"

204

204: object

bodyMapper

bodyMapper: object

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "any"

default

default: object

bodyMapper

bodyMapper: any = Mappers.CloudError

Const disconnectOperationSpec

disconnectOperationSpec: object

headerParameters

headerParameters: any[] = [Parameters.accept]

httpMethod

httpMethod: string = "POST"

path

path: string = "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/dataConnectors/{dataConnectorId}/disconnect"

queryParameters

queryParameters: any[] = [Parameters.apiVersion]

serializer

serializer: any

urlParameters

urlParameters: any[] = [Parameters.$host,Parameters.subscriptionId,Parameters.resourceGroupName,Parameters.workspaceName,Parameters.dataConnectorId]

responses

responses: object

200

200: {}

Type declaration

default

default: object

bodyMapper

bodyMapper: any = Mappers.CloudError

Let discriminators

discriminators: object

AutomationRuleAction

AutomationRuleAction: any = AutomationRuleAction

AutomationRuleAction.ModifyProperties

AutomationRuleAction.ModifyProperties: any = AutomationRuleModifyPropertiesAction

AutomationRuleAction.RunPlaybook

AutomationRuleAction.RunPlaybook: any = AutomationRuleRunPlaybookAction

AutomationRuleCondition

AutomationRuleCondition: any = AutomationRuleCondition

AutomationRuleCondition.Property

AutomationRuleCondition.Property: any = PropertyConditionProperties

DataConnectorsCheckRequirements

DataConnectorsCheckRequirements: any = DataConnectorsCheckRequirements

DataConnectorsCheckRequirements.AmazonWebServicesCloudTrail

DataConnectorsCheckRequirements.AmazonWebServicesCloudTrail: any = AwsCloudTrailCheckRequirements

DataConnectorsCheckRequirements.AmazonWebServicesS3

DataConnectorsCheckRequirements.AmazonWebServicesS3: any = AwsS3CheckRequirements

DataConnectorsCheckRequirements.AzureActiveDirectory

DataConnectorsCheckRequirements.AzureActiveDirectory: any = AADCheckRequirements

DataConnectorsCheckRequirements.AzureAdvancedThreatProtection

DataConnectorsCheckRequirements.AzureAdvancedThreatProtection: any = AatpCheckRequirements

DataConnectorsCheckRequirements.AzureSecurityCenter

DataConnectorsCheckRequirements.AzureSecurityCenter: any = ASCCheckRequirements

DataConnectorsCheckRequirements.Dynamics365

DataConnectorsCheckRequirements.Dynamics365: any = Dynamics365CheckRequirements

DataConnectorsCheckRequirements.IOT

DataConnectorsCheckRequirements.IOT: any = IoTCheckRequirements

DataConnectorsCheckRequirements.MicrosoftCloudAppSecurity

DataConnectorsCheckRequirements.MicrosoftCloudAppSecurity: any = McasCheckRequirements

DataConnectorsCheckRequirements.MicrosoftDefenderAdvancedThreatProtection

DataConnectorsCheckRequirements.MicrosoftDefenderAdvancedThreatProtection: any = MdatpCheckRequirements

DataConnectorsCheckRequirements.MicrosoftThreatIntelligence

DataConnectorsCheckRequirements.MicrosoftThreatIntelligence: any = MstiCheckRequirements

DataConnectorsCheckRequirements.MicrosoftThreatProtection

DataConnectorsCheckRequirements.MicrosoftThreatProtection: any = MtpCheckRequirements

DataConnectorsCheckRequirements.Office365Project

DataConnectorsCheckRequirements.Office365Project: any = Office365ProjectCheckRequirements

DataConnectorsCheckRequirements.OfficeATP

DataConnectorsCheckRequirements.OfficeATP: any = OfficeATPCheckRequirements

DataConnectorsCheckRequirements.OfficeIRM

DataConnectorsCheckRequirements.OfficeIRM: any = OfficeIRMCheckRequirements

DataConnectorsCheckRequirements.OfficePowerBI

DataConnectorsCheckRequirements.OfficePowerBI: any = OfficePowerBICheckRequirements

DataConnectorsCheckRequirements.ThreatIntelligence

DataConnectorsCheckRequirements.ThreatIntelligence: any = TICheckRequirements

DataConnectorsCheckRequirements.ThreatIntelligenceTaxii

DataConnectorsCheckRequirements.ThreatIntelligenceTaxii: any = TiTaxiiCheckRequirements

EntityQueryItem

EntityQueryItem: any = EntityQueryItem

EntityQueryItem.Insight

EntityQueryItem.Insight: any = InsightQueryItem

EntityTimelineItem

EntityTimelineItem: any = EntityTimelineItem

EntityTimelineItem.Activity

EntityTimelineItem.Activity: any = ActivityTimelineItem

EntityTimelineItem.Bookmark

EntityTimelineItem.Bookmark: any = BookmarkTimelineItem

EntityTimelineItem.SecurityAlert

EntityTimelineItem.SecurityAlert: any = SecurityAlertTimelineItem

Resource.APIPolling

Resource.APIPolling: any = CodelessApiPollingDataConnector

Resource.Account

Resource.Account: any = AccountEntity

Resource.Activity

Resource.Activity: any = ActivityCustomEntityQuery

Resource.AlertRule

Resource.AlertRule: any = AlertRule

Resource.AlertRuleTemplate

Resource.AlertRuleTemplate: any = AlertRuleTemplate

Resource.AmazonWebServicesCloudTrail

Resource.AmazonWebServicesCloudTrail: any = AwsCloudTrailDataConnector

Resource.AmazonWebServicesS3

Resource.AmazonWebServicesS3: any = AwsS3DataConnector

Resource.Anomalies

Resource.Anomalies: any = Anomalies

Resource.AzureActiveDirectory

Resource.AzureActiveDirectory: any = AADDataConnector

Resource.AzureAdvancedThreatProtection

Resource.AzureAdvancedThreatProtection: any = AatpDataConnector

Resource.AzureResource

Resource.AzureResource: any = AzureResourceEntity

Resource.AzureSecurityCenter

Resource.AzureSecurityCenter: any = ASCDataConnector

Resource.Bookmark

Resource.Bookmark: any = HuntingBookmark

Resource.CloudApplication

Resource.CloudApplication: any = CloudApplicationEntity

Resource.CustomEntityQuery

Resource.CustomEntityQuery: any = CustomEntityQuery

Resource.DataConnector

Resource.DataConnector: any = DataConnector

Resource.DnsResolution

Resource.DnsResolution: any = DnsEntity

Resource.Dynamics365

Resource.Dynamics365: any = Dynamics365DataConnector

Resource.Entity

Resource.Entity: any = Entity

Resource.EntityAnalytics

Resource.EntityAnalytics: any = EntityAnalytics

Resource.EntityQuery

Resource.EntityQuery: any = EntityQuery

Resource.EntityQueryTemplate

Resource.EntityQueryTemplate: any = EntityQueryTemplate

Resource.Expansion

Resource.Expansion: any = ExpansionEntityQuery

Resource.EyesOn

Resource.EyesOn: any = EyesOn

Resource.File

Resource.File: any = FileEntity

Resource.FileHash

Resource.FileHash: any = FileHashEntity

Resource.Fusion

Resource.Fusion: any = FusionAlertRule

Resource.GenericUI

Resource.GenericUI: any = CodelessUiDataConnector

Resource.Host

Resource.Host: any = HostEntity

Resource.IOT

Resource.IOT: any = IoTDataConnector

Resource.IoTDevice

Resource.IoTDevice: any = IoTDeviceEntity

Resource.Ip

Resource.Ip: any = IpEntity

Resource.MLBehaviorAnalytics

Resource.MLBehaviorAnalytics: any = MLBehaviorAnalyticsAlertRule

Resource.MailCluster

Resource.MailCluster: any = MailClusterEntity

Resource.MailMessage

Resource.MailMessage: any = MailMessageEntity

Resource.Mailbox

Resource.Mailbox: any = MailboxEntity

Resource.Malware

Resource.Malware: any = MalwareEntity

Resource.MicrosoftCloudAppSecurity

Resource.MicrosoftCloudAppSecurity: any = McasDataConnector

Resource.MicrosoftDefenderAdvancedThreatProtection

Resource.MicrosoftDefenderAdvancedThreatProtection: any = MdatpDataConnector

Resource.MicrosoftSecurityIncidentCreation

Resource.MicrosoftSecurityIncidentCreation: any = MicrosoftSecurityIncidentCreationAlertRule

Resource.MicrosoftThreatIntelligence

Resource.MicrosoftThreatIntelligence: any = MstiDataConnector

Resource.MicrosoftThreatProtection

Resource.MicrosoftThreatProtection: any = MTPDataConnector

Resource.NRT

Resource.NRT: any = NrtAlertRule

Resource.Office365

Resource.Office365: any = OfficeDataConnector

Resource.Office365Project

Resource.Office365Project: any = Office365ProjectDataConnector

Resource.OfficeATP

Resource.OfficeATP: any = OfficeATPDataConnector

Resource.OfficeIRM

Resource.OfficeIRM: any = OfficeIRMDataConnector

Resource.OfficePowerBI

Resource.OfficePowerBI: any = OfficePowerBIDataConnector

Resource.Process

Resource.Process: any = ProcessEntity

Resource.RegistryKey

Resource.RegistryKey: any = RegistryKeyEntity

Resource.RegistryValue

Resource.RegistryValue: any = RegistryValueEntity

Resource.Scheduled

Resource.Scheduled: any = ScheduledAlertRule

Resource.SecurityAlert

Resource.SecurityAlert: any = SecurityAlert

Resource.SecurityGroup

Resource.SecurityGroup: any = SecurityGroupEntity

Resource.Settings

Resource.Settings: any = Settings

Resource.SubmissionMail

Resource.SubmissionMail: any = SubmissionMailEntity

Resource.ThreatIntelligence

Resource.ThreatIntelligence: any = TIDataConnector

Resource.ThreatIntelligenceInformation

Resource.ThreatIntelligenceInformation: any = ThreatIntelligenceInformation

Resource.ThreatIntelligenceTaxii

Resource.ThreatIntelligenceTaxii: any = TiTaxiiDataConnector

Resource.Ueba

Resource.Ueba: any = Ueba

Resource.Url

Resource.Url: any = UrlEntity

Resource.indicator

Resource.indicator: any = ThreatIntelligenceIndicatorModel

Const domain

domain: object

parameterPath

parameterPath: string = "domain"

mapper

mapper: object

required

required: boolean = true

serializedName

serializedName: string = "domain"

type

type: object

name

name: string = "String"

Const entityId

entityId: object

parameterPath

parameterPath: string = "entityId"

mapper

mapper: object

required

required: boolean = true

serializedName

serializedName: string = "entityId"

type

type: object

name

name: string = "String"

Const entityQuery

entityQuery: object

mapper

mapper: any = CustomEntityQueryMapper

parameterPath

parameterPath: string = "entityQuery"

Const entityQueryId

entityQueryId: object

parameterPath

parameterPath: string = "entityQueryId"

mapper

mapper: object

required

required: boolean = true

serializedName

serializedName: string = "entityQueryId"

type

type: object

name

name: string = "String"

Const entityQueryTemplateId

entityQueryTemplateId: object

parameterPath

parameterPath: string = "entityQueryTemplateId"

mapper

mapper: object

required

required: boolean = true

serializedName

serializedName: string = "entityQueryTemplateId"

type

type: object

name

name: string = "String"

Const expandOperationSpec

expandOperationSpec: object

headerParameters

headerParameters: any[] = [Parameters.accept, Parameters.contentType]

httpMethod

httpMethod: string = "POST"

mediaType

mediaType: string = "json"

path

path: string = "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/entities/{entityId}/expand"

queryParameters

queryParameters: any[] = [Parameters.apiVersion]

requestBody

requestBody: any = Parameters.parameters1

serializer

serializer: any

urlParameters

urlParameters: any[] = [Parameters.$host,Parameters.subscriptionId,Parameters.resourceGroupName,Parameters.workspaceName,Parameters.entityId]

responses

responses: object

200

200: object

bodyMapper

bodyMapper: any = Mappers.EntityExpandResponse

default

default: object

bodyMapper

bodyMapper: any = Mappers.CloudError

Const filter

filter: object

parameterPath

parameterPath: string[] = ["options", "filter"]

mapper

mapper: object

serializedName

serializedName: string = "$filter"

type

type: object

name

name: string = "String"

Const getInsightsOperationSpec

getInsightsOperationSpec: object

headerParameters

headerParameters: any[] = [Parameters.accept, Parameters.contentType]

httpMethod

httpMethod: string = "POST"

mediaType

mediaType: string = "json"

path

path: string = "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/entities/{entityId}/getInsights"

queryParameters

queryParameters: any[] = [Parameters.apiVersion]

requestBody

requestBody: any = Parameters.parameters2

serializer

serializer: any

urlParameters

urlParameters: any[] = [Parameters.$host,Parameters.subscriptionId,Parameters.resourceGroupName,Parameters.workspaceName,Parameters.entityId]

responses

responses: object

200

200: object

bodyMapper

bodyMapper: any = Mappers.EntityGetInsightsResponse

default

default: object

bodyMapper

bodyMapper: any = Mappers.CloudError

Const getOperationSpec

getOperationSpec: object

headerParameters

headerParameters: any[] = [Parameters.accept]

httpMethod

httpMethod: string = "GET"

path

path: string = "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/dataConnectors/{dataConnectorId}"

queryParameters

queryParameters: any[] = [Parameters.apiVersion]

serializer

serializer: any

urlParameters

urlParameters: any[] = [Parameters.$host,Parameters.subscriptionId,Parameters.resourceGroupName,Parameters.workspaceName,Parameters.dataConnectorId]

responses

responses: object

200

200: object

bodyMapper

bodyMapper: any = Mappers.DataConnector

default

default: object

bodyMapper

bodyMapper: any = Mappers.CloudError

Const getRelationOperationSpec

getRelationOperationSpec: object

headerParameters

headerParameters: any[] = [Parameters.accept]

httpMethod

httpMethod: string = "GET"

path

path: string = "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/entities/{entityId}/relations/{relationName}"

queryParameters

queryParameters: any[] = [Parameters.apiVersion]

serializer

serializer: any

urlParameters

urlParameters: any[] = [Parameters.$host,Parameters.subscriptionId,Parameters.resourceGroupName,Parameters.workspaceName,Parameters.relationName,Parameters.entityId]

responses

responses: object

200

200: object

bodyMapper

bodyMapper: any = Mappers.Relation

default

default: object

bodyMapper

bodyMapper: any = Mappers.CloudError

Const incident

incident: object

mapper

mapper: any = IncidentMapper

parameterPath

parameterPath: string = "incident"

Const incidentComment

incidentComment: object

mapper

mapper: any = IncidentCommentMapper

parameterPath

parameterPath: string = "incidentComment"

Const incidentCommentId

incidentCommentId: object

parameterPath

parameterPath: string = "incidentCommentId"

mapper

mapper: object

required

required: boolean = true

serializedName

serializedName: string = "incidentCommentId"

type

type: object

name

name: string = "String"

Const incidentId

incidentId: object

parameterPath

parameterPath: string = "incidentId"

mapper

mapper: object

required

required: boolean = true

serializedName

serializedName: string = "incidentId"

type

type: object

name

name: string = "String"

Const incidentIdentifier

incidentIdentifier: object

parameterPath

parameterPath: string = "incidentIdentifier"

mapper

mapper: object

required

required: boolean = true

serializedName

serializedName: string = "incidentIdentifier"

type

type: object

name

name: string = "String"

Const ipAddress

ipAddress: object

parameterPath

parameterPath: string = "ipAddress"

mapper

mapper: object

required

required: boolean = true

serializedName

serializedName: string = "ipAddress"

type

type: object

name

name: string = "String"

Const kind

kind: object

parameterPath

parameterPath: string = "kind"

mapper

mapper: object

required

required: boolean = true

serializedName

serializedName: string = "kind"

type

type: object

name

name: string = "String"

Const kind1

kind1: object

parameterPath

parameterPath: string[] = ["options", "kind"]

mapper

mapper: object

serializedName

serializedName: string = "kind"

type

type: object

name

name: string = "String"

Const kind2

kind2: object

parameterPath

parameterPath: string[] = ["options", "kind"]

mapper

mapper: object

defaultValue

defaultValue: string = "Activity"

isConstant

isConstant: boolean = true

serializedName

serializedName: string = "kind"

type

type: object

name

name: string = "String"

Const listAlertsOperationSpec

listAlertsOperationSpec: object

headerParameters

headerParameters: any[] = [Parameters.accept]

httpMethod

httpMethod: string = "POST"

path

path: string = "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/incidents/{incidentId}/alerts"

queryParameters

queryParameters: any[] = [Parameters.apiVersion]

serializer

serializer: any

urlParameters

urlParameters: any[] = [Parameters.$host,Parameters.subscriptionId,Parameters.resourceGroupName,Parameters.workspaceName,Parameters.incidentId]

responses

responses: object

200

200: object

bodyMapper

bodyMapper: any = Mappers.IncidentAlertList

default

default: object

bodyMapper

bodyMapper: any = Mappers.CloudError

Const listBookmarksOperationSpec

listBookmarksOperationSpec: object

headerParameters

headerParameters: any[] = [Parameters.accept]

httpMethod

httpMethod: string = "POST"

path

path: string = "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/incidents/{incidentId}/bookmarks"

queryParameters

queryParameters: any[] = [Parameters.apiVersion]

serializer

serializer: any

urlParameters

urlParameters: any[] = [Parameters.$host,Parameters.subscriptionId,Parameters.resourceGroupName,Parameters.workspaceName,Parameters.incidentId]

responses

responses: object

200

200: object

bodyMapper

bodyMapper: any = Mappers.IncidentBookmarkList

default

default: object

bodyMapper

bodyMapper: any = Mappers.CloudError

Const listByAlertRuleNextOperationSpec

listByAlertRuleNextOperationSpec: object

headerParameters

headerParameters: any[] = [Parameters.accept]

httpMethod

httpMethod: string = "GET"

path

path: string = "{nextLink}"

queryParameters

queryParameters: any[] = [Parameters.apiVersion]

serializer

serializer: any

urlParameters

urlParameters: any[] = [Parameters.$host,Parameters.subscriptionId,Parameters.resourceGroupName,Parameters.workspaceName,Parameters.ruleId,Parameters.nextLink]

responses

responses: object

200

200: object

bodyMapper

bodyMapper: any = Mappers.ActionsList

default

default: object

bodyMapper

bodyMapper: any = Mappers.CloudError

Const listByAlertRuleOperationSpec

listByAlertRuleOperationSpec: object

headerParameters

headerParameters: any[] = [Parameters.accept]

httpMethod

httpMethod: string = "GET"

path

path: string = "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/alertRules/{ruleId}/actions"

queryParameters

queryParameters: any[] = [Parameters.apiVersion]

serializer

serializer: any

urlParameters

urlParameters: any[] = [Parameters.$host,Parameters.subscriptionId,Parameters.resourceGroupName,Parameters.workspaceName,Parameters.ruleId]

responses

responses: object

200

200: object

bodyMapper

bodyMapper: any = Mappers.ActionsList

default

default: object

bodyMapper

bodyMapper: any = Mappers.CloudError

Const listEntitiesOperationSpec

listEntitiesOperationSpec: object

headerParameters

headerParameters: any[] = [Parameters.accept]

httpMethod

httpMethod: string = "POST"

path

path: string = "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/incidents/{incidentId}/entities"

queryParameters

queryParameters: any[] = [Parameters.apiVersion]

serializer

serializer: any

urlParameters

urlParameters: any[] = [Parameters.$host,Parameters.subscriptionId,Parameters.resourceGroupName,Parameters.workspaceName,Parameters.incidentId]

responses

responses: object

200

200: object

bodyMapper

bodyMapper: any = Mappers.IncidentEntitiesResponse

default

default: object

bodyMapper

bodyMapper: any = Mappers.CloudError

Const listNextOperationSpec

listNextOperationSpec: object

headerParameters

headerParameters: any[] = [Parameters.accept]

httpMethod

httpMethod: string = "GET"

path

path: string = "{nextLink}"

queryParameters

queryParameters: any[] = [Parameters.apiVersion]

serializer

serializer: any

urlParameters

urlParameters: any[] = [Parameters.$host, Parameters.nextLink]

responses

responses: object

200

200: object

bodyMapper

bodyMapper: any = Mappers.OperationsList

default

default: object

bodyMapper

bodyMapper: any = Mappers.CloudError

Const listOperationSpec

listOperationSpec: object

headerParameters

headerParameters: any[] = [Parameters.accept]

httpMethod

httpMethod: string = "GET"

mediaType

mediaType: string = "json"

path

path: string = "/providers/Microsoft.SecurityInsights/operations"

queryParameters

queryParameters: any[] = [Parameters.apiVersion]

requestBody

requestBody: any = Parameters.parameters3

serializer

serializer: any

urlParameters

urlParameters: any[] = [Parameters.$host]

responses

responses: object

200

200: object

bodyMapper

bodyMapper: any = Mappers.OperationsList

default

default: object

bodyMapper

bodyMapper: any = Mappers.CloudError

Const listRepositoriesNextOperationSpec

listRepositoriesNextOperationSpec: object

headerParameters

headerParameters: any[] = [Parameters.accept, Parameters.contentType]

httpMethod

httpMethod: string = "GET"

mediaType

mediaType: string = "json"

path

path: string = "{nextLink}"

queryParameters

queryParameters: any[] = [Parameters.apiVersion]

serializer

serializer: any

urlParameters

urlParameters: any[] = [Parameters.$host,Parameters.subscriptionId,Parameters.resourceGroupName,Parameters.workspaceName,Parameters.nextLink]

responses

responses: object

200

200: object

bodyMapper

bodyMapper: any = Mappers.RepoList

default

default: object

bodyMapper

bodyMapper: any = Mappers.CloudError

Const listRepositoriesOperationSpec

listRepositoriesOperationSpec: object

headerParameters

headerParameters: any[] = [Parameters.accept, Parameters.contentType]

httpMethod

httpMethod: string = "POST"

mediaType

mediaType: string = "json"

path

path: string = "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/listRepositories"

queryParameters

queryParameters: any[] = [Parameters.apiVersion]

requestBody

requestBody: any = Parameters.repoType

serializer

serializer: any

urlParameters

urlParameters: any[] = [Parameters.$host,Parameters.subscriptionId,Parameters.resourceGroupName,Parameters.workspaceName]

responses

responses: object

200

200: object

bodyMapper

bodyMapper: any = Mappers.RepoList

default

default: object

bodyMapper

bodyMapper: any = Mappers.CloudError

Const metadata

metadata: object

mapper

mapper: any = MetadataModelMapper

parameterPath

parameterPath: string = "metadata"

Const metadataName

metadataName: object

parameterPath

parameterPath: string = "metadataName"

mapper

mapper: object

required

required: boolean = true

serializedName

serializedName: string = "metadataName"

type

type: object

name

name: string = "String"

Const metadataPatch

metadataPatch: object

mapper

mapper: any = MetadataPatchMapper

parameterPath

parameterPath: string = "metadataPatch"

Const name

name: object

parameterPath

parameterPath: string = "name"

mapper

mapper: object

required

required: boolean = true

serializedName

serializedName: string = "name"

type

type: object

name

name: string = "String"

Const nextLink

nextLink: object

parameterPath

parameterPath: string = "nextLink"

skipEncoding

skipEncoding: boolean = true

mapper

mapper: object

required

required: boolean = true

serializedName

serializedName: string = "nextLink"

type

type: object

name

name: string = "String"

Const orderby

orderby: object

parameterPath

parameterPath: string[] = ["options", "orderby"]

mapper

mapper: object

serializedName

serializedName: string = "$orderby"

type

type: object

name

name: string = "String"

Const parameters

parameters: object

mapper

mapper: any = BookmarkExpandParametersMapper

parameterPath

parameterPath: string = "parameters"

Const parameters1

parameters1: object

mapper

mapper: any = EntityExpandParametersMapper

parameterPath

parameterPath: string = "parameters"

Const parameters2

parameters2: object

mapper

mapper: any = EntityGetInsightsParametersMapper

parameterPath

parameterPath: string = "parameters"

Const parameters3

parameters3: object

mapper

mapper: any = EntityTimelineParametersMapper

parameterPath

parameterPath: string = "parameters"

Const postOperationSpec

postOperationSpec: object

headerParameters

headerParameters: any[] = [Parameters.accept, Parameters.contentType]

httpMethod

httpMethod: string = "POST"

mediaType

mediaType: string = "json"

path

path: string = "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/dataConnectorsCheckRequirements"

queryParameters

queryParameters: any[] = [Parameters.apiVersion]

requestBody

requestBody: any = Parameters.dataConnectorsCheckRequirements

serializer

serializer: any

urlParameters

urlParameters: any[] = [Parameters.$host,Parameters.subscriptionId,Parameters.resourceGroupName,Parameters.workspaceName]

responses

responses: object

200

200: object

bodyMapper

bodyMapper: any = Mappers.DataConnectorRequirementsState

default

default: object

bodyMapper

bodyMapper: any = Mappers.CloudError

Const queriesOperationSpec

queriesOperationSpec: object

headerParameters

headerParameters: any[] = [Parameters.accept]

httpMethod

httpMethod: string = "GET"

path

path: string = "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/entities/{entityId}/queries"

queryParameters

queryParameters: any[] = [Parameters.apiVersion, Parameters.kind]

serializer

serializer: any

urlParameters

urlParameters: any[] = [Parameters.$host,Parameters.subscriptionId,Parameters.resourceGroupName,Parameters.workspaceName,Parameters.entityId]

responses

responses: object

200

200: object

bodyMapper

bodyMapper: any = Mappers.GetQueriesResponse

default

default: object

bodyMapper

bodyMapper: any = Mappers.CloudError

Const queryIndicatorsNextOperationSpec

queryIndicatorsNextOperationSpec: object

headerParameters

headerParameters: any[] = [Parameters.accept, Parameters.contentType]

httpMethod

httpMethod: string = "GET"

mediaType

mediaType: string = "json"

path

path: string = "{nextLink}"

queryParameters

queryParameters: any[] = [Parameters.apiVersion]

serializer

serializer: any

urlParameters

urlParameters: any[] = [Parameters.$host,Parameters.subscriptionId,Parameters.resourceGroupName,Parameters.workspaceName,Parameters.nextLink]

responses

responses: object

200

200: object

bodyMapper

bodyMapper: any = Mappers.ThreatIntelligenceInformationList

default

default: object

bodyMapper

bodyMapper: any = Mappers.CloudError

Const queryIndicatorsOperationSpec

queryIndicatorsOperationSpec: object

headerParameters

headerParameters: any[] = [Parameters.accept, Parameters.contentType]

httpMethod

httpMethod: string = "POST"

mediaType

mediaType: string = "json"

path

path: string = "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/threatIntelligence/main/queryIndicators"

queryParameters

queryParameters: any[] = [Parameters.apiVersion]

requestBody

requestBody: any = Parameters.threatIntelligenceFilteringCriteria

serializer

serializer: any

urlParameters

urlParameters: any[] = [Parameters.$host,Parameters.subscriptionId,Parameters.resourceGroupName,Parameters.workspaceName]

responses

responses: object

200

200: object

bodyMapper

bodyMapper: any = Mappers.ThreatIntelligenceInformationList

default

default: object

bodyMapper

bodyMapper: any = Mappers.CloudError

Const relation

relation: object

mapper

mapper: any = RelationMapper

parameterPath

parameterPath: string = "relation"

Const relationName

relationName: object

parameterPath

parameterPath: string = "relationName"

mapper

mapper: object

required

required: boolean = true

serializedName

serializedName: string = "relationName"

type

type: object

name

name: string = "String"

Const replaceTagsOperationSpec

replaceTagsOperationSpec: object

headerParameters

headerParameters: any[] = [Parameters.accept, Parameters.contentType]

httpMethod

httpMethod: string = "POST"

mediaType

mediaType: string = "json"

path

path: string = "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/threatIntelligence/main/indicators/{name}/replaceTags"

queryParameters

queryParameters: any[] = [Parameters.apiVersion]

requestBody

requestBody: any = Parameters.threatIntelligenceReplaceTags

serializer

serializer: any

urlParameters

urlParameters: any[] = [Parameters.$host,Parameters.subscriptionId,Parameters.resourceGroupName,Parameters.workspaceName,Parameters.name]

responses

responses: object

200

200: object

bodyMapper

bodyMapper: any = Mappers.ThreatIntelligenceInformation

default

default: object

bodyMapper

bodyMapper: any = Mappers.CloudError

Const repoType

repoType: object

parameterPath

parameterPath: string = "repoType"

mapper

mapper: object

required

required: boolean = true

serializedName

serializedName: string = "repoType"

type

type: object

name

name: string = "String"

Const requestBody

requestBody: object

mapper

mapper: any = ManualTriggerRequestBodyMapper

parameterPath

parameterPath: string[] = ["options", "requestBody"]

Const resourceGroupName

resourceGroupName: object

parameterPath

parameterPath: string = "resourceGroupName"

mapper

mapper: object

required

required: boolean = true

serializedName

serializedName: string = "resourceGroupName"

constraints

constraints: object

MaxLength

MaxLength: number = 90

MinLength

MinLength: number = 1

type

type: object

name

name: string = "String"

Const ruleId

ruleId: object

parameterPath

parameterPath: string = "ruleId"

mapper

mapper: object

required

required: boolean = true

serializedName

serializedName: string = "ruleId"

type

type: object

name

name: string = "String"

Const runPlaybookOperationSpec

runPlaybookOperationSpec: object

headerParameters

headerParameters: any[] = [Parameters.accept, Parameters.contentType]

httpMethod

httpMethod: string = "POST"

mediaType

mediaType: string = "json"

path

path: string = "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/incidents/{incidentIdentifier}/runPlaybook"

queryParameters

queryParameters: any[] = [Parameters.apiVersion]

requestBody

requestBody: any = Parameters.requestBody

serializer

serializer: any

urlParameters

urlParameters: any[] = [Parameters.$host,Parameters.subscriptionId,Parameters.resourceGroupName,Parameters.workspaceName,Parameters.incidentIdentifier]

responses

responses: object

204

204: object

bodyMapper

bodyMapper: object

type

type: object

name

name: string = "Dictionary"

value

value: object

type

type: object

name

name: string = "any"

default

default: object

bodyMapper

bodyMapper: any = Mappers.CloudError

Const sentinelOnboardingStateName

sentinelOnboardingStateName: object

parameterPath

parameterPath: string = "sentinelOnboardingStateName"

mapper

mapper: object

required

required: boolean = true

serializedName

serializedName: string = "sentinelOnboardingStateName"

type

type: object

name

name: string = "String"

Const sentinelOnboardingStateParameter

sentinelOnboardingStateParameter: object

mapper

mapper: any = SentinelOnboardingStateMapper

parameterPath

parameterPath: string[] = ["options", "sentinelOnboardingStateParameter"]

Const settings

settings: object

mapper

mapper: any = SettingsMapper

parameterPath

parameterPath: string = "settings"

Const settingsName

settingsName: object

parameterPath

parameterPath: string = "settingsName"

mapper

mapper: object

required

required: boolean = true

serializedName

serializedName: string = "settingsName"

type

type: object

name

name: string = "String"

Const skip

skip: object

parameterPath

parameterPath: string[] = ["options", "skip"]

mapper

mapper: object

serializedName

serializedName: string = "$skip"

type

type: object

name

name: string = "Number"

Const skipToken

skipToken: object

parameterPath

parameterPath: string[] = ["options", "skipToken"]

mapper

mapper: object

serializedName

serializedName: string = "$skipToken"

type

type: object

name

name: string = "String"

Const sourceControl

sourceControl: object

mapper

mapper: any = SourceControlMapper

parameterPath

parameterPath: string = "sourceControl"

Const sourceControlId

sourceControlId: object

parameterPath

parameterPath: string = "sourceControlId"

mapper

mapper: object

required

required: boolean = true

serializedName

serializedName: string = "sourceControlId"

type

type: object

name

name: string = "String"

Const subscriptionId

subscriptionId: object

parameterPath

parameterPath: string = "subscriptionId"

mapper

mapper: object

required

required: boolean = true

serializedName

serializedName: string = "subscriptionId"

constraints

constraints: object

MinLength

MinLength: number = 1

type

type: object

name

name: string = "String"

Const teamProperties

teamProperties: object

mapper

mapper: any = TeamPropertiesMapper

parameterPath

parameterPath: string = "teamProperties"

Const threatIntelligenceAppendTags

threatIntelligenceAppendTags: object

mapper

mapper: any = ThreatIntelligenceAppendTagsMapper

parameterPath

parameterPath: string = "threatIntelligenceAppendTags"

Const threatIntelligenceFilteringCriteria

threatIntelligenceFilteringCriteria: object

mapper

mapper: any = ThreatIntelligenceFilteringCriteriaMapper

parameterPath

parameterPath: string = "threatIntelligenceFilteringCriteria"

Const threatIntelligenceProperties

threatIntelligenceProperties: object

mapper

mapper: any = ThreatIntelligenceIndicatorModelMapper

parameterPath

parameterPath: string = "threatIntelligenceProperties"

Const threatIntelligenceReplaceTags

threatIntelligenceReplaceTags: object

mapper

mapper: any = ThreatIntelligenceIndicatorModelMapper

parameterPath

parameterPath: string = "threatIntelligenceReplaceTags"

Const top

top: object

parameterPath

parameterPath: string[] = ["options", "top"]

mapper

mapper: object

serializedName

serializedName: string = "$top"

type

type: object

name

name: string = "Number"

Const updateOperationSpec

updateOperationSpec: object

headerParameters

headerParameters: any[] = [Parameters.accept, Parameters.contentType]

httpMethod

httpMethod: string = "PUT"

mediaType

mediaType: string = "json"

path

path: string = "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/settings/{settingsName}"

queryParameters

queryParameters: any[] = [Parameters.apiVersion]

requestBody

requestBody: any = Parameters.settings

serializer

serializer: any

urlParameters

urlParameters: any[] = [Parameters.$host,Parameters.subscriptionId,Parameters.resourceGroupName,Parameters.workspaceName,Parameters.settingsName]

responses

responses: object

200

200: object

bodyMapper

bodyMapper: any = Mappers.Settings

default

default: object

bodyMapper

bodyMapper: any = Mappers.CloudError

Const watchlist

watchlist: object

mapper

mapper: any = WatchlistMapper

parameterPath

parameterPath: string = "watchlist"

Const watchlistAlias

watchlistAlias: object

parameterPath

parameterPath: string = "watchlistAlias"

mapper

mapper: object

required

required: boolean = true

serializedName

serializedName: string = "watchlistAlias"

type

type: object

name

name: string = "String"

Const watchlistItem

watchlistItem: object

mapper

mapper: any = WatchlistItemMapper

parameterPath

parameterPath: string = "watchlistItem"

Const watchlistItemId

watchlistItemId: object

parameterPath

parameterPath: string = "watchlistItemId"

mapper

mapper: object

required

required: boolean = true

serializedName

serializedName: string = "watchlistItemId"

type

type: object

name

name: string = "String"

Const workspaceName

workspaceName: object

parameterPath

parameterPath: string = "workspaceName"

mapper

mapper: object

required

required: boolean = true

serializedName

serializedName: string = "workspaceName"

constraints

constraints: object

MaxLength

MaxLength: number = 90

MinLength

MinLength: number = 1

type

type: object

name

name: string = "String"

Generated using TypeDoc