diff --git a/.generator/schemas/v2/openapi.yaml b/.generator/schemas/v2/openapi.yaml index e1fcef0a81a5..422aab5ad800 100644 --- a/.generator/schemas/v2/openapi.yaml +++ b/.generator/schemas/v2/openapi.yaml @@ -89430,6 +89430,57 @@ components: - NEVER_ACTIVATED - ACTIVATED - DEACTIVATED + SecurityMonitoringContentPackAppSecDetails: + description: Details for an Application Security content pack. + properties: + type: + $ref: "#/components/schemas/SecurityMonitoringContentPackAppSecDetailsType" + required: + - type + type: object + SecurityMonitoringContentPackAppSecDetailsType: + description: Type for Application Security content pack details. + enum: + - appsec + example: appsec + type: string + x-enum-varnames: + - APPSEC + SecurityMonitoringContentPackAuditDetails: + description: Details for an audit trail content pack. + properties: + type: + $ref: "#/components/schemas/SecurityMonitoringContentPackAuditDetailsType" + required: + - type + type: object + SecurityMonitoringContentPackAuditDetailsType: + description: Type for audit trail content pack details. + enum: + - audit + example: audit + type: string + x-enum-varnames: + - AUDIT + SecurityMonitoringContentPackEntityDetails: + description: Details for an entity or identity content pack. + properties: + cp_activation: + $ref: "#/components/schemas/SecurityMonitoringContentPackActivation" + type: + $ref: "#/components/schemas/SecurityMonitoringContentPackEntityDetailsType" + required: + - type + - cp_activation + type: object + SecurityMonitoringContentPackEntityDetailsType: + description: Type for entity content pack details. + enum: + - entity + example: entity + type: string + x-enum-varnames: + - ENTITY SecurityMonitoringContentPackIntegrationStatus: description: The installation status of the related integration. enum: @@ -89452,16 +89503,14 @@ components: - PARTIALLY_INSTALLED - DETECTED - ERROR - SecurityMonitoringContentPackStateAttributes: - description: Attributes of a content pack state + SecurityMonitoringContentPackLogsDetails: + description: Details for a logs-based content pack. properties: - cloud_siem_index_incorrect: - description: Whether the cloud SIEM index configuration is incorrect (only applies to certain pricing models) - example: false - type: boolean cp_activation: $ref: "#/components/schemas/SecurityMonitoringContentPackActivation" - filters_configured_for_logs: + data_last_seen: + $ref: "#/components/schemas/SecurityMonitoringContentPackTimestampBucket" + filters_configured: description: |- Whether filters (Security Filters or Index Query depending on the pricing model) are present and correctly configured to route logs into Cloud SIEM. @@ -89469,21 +89518,59 @@ components: type: boolean integration_installed_status: $ref: "#/components/schemas/SecurityMonitoringContentPackIntegrationStatus" - logs_last_collected: - $ref: "#/components/schemas/SecurityMonitoringContentPackTimestampBucket" logs_seen_from_any_index: - description: Whether logs for this content pack have been seen in any Datadog index within the last 72 hours. + description: Whether logs for this content pack have been seen in any Datadog index in the last 72 hours. example: true type: boolean - state: - $ref: "#/components/schemas/SecurityMonitoringContentPackStatus" + siem_index_incorrect: + description: Whether the Cloud SIEM index configuration is incorrect (only applies to certain pricing models). + example: false + type: boolean + type: + $ref: "#/components/schemas/SecurityFilterFilteredDataType" required: - - state + - type - cp_activation + - data_last_seen + - integration_installed_status + - filters_configured - logs_seen_from_any_index - - logs_last_collected - - cloud_siem_index_incorrect - - filters_configured_for_logs + - siem_index_incorrect + type: object + SecurityMonitoringContentPackOnboardingDetails: + description: |- + Content pack details returned when Cloud SIEM is inactive for the requesting organization. + properties: + integration_installed_status: + $ref: "#/components/schemas/SecurityMonitoringContentPackIntegrationStatus" + logs_seen_from_any_index: + description: Whether logs for this content pack have been seen in any Datadog index in the last 72 hours. + example: true + type: boolean + type: + $ref: "#/components/schemas/SecurityMonitoringContentPackOnboardingDetailsType" + required: + - type + - logs_seen_from_any_index + type: object + SecurityMonitoringContentPackOnboardingDetailsType: + description: Type for onboarding content pack details. + enum: + - onboarding + example: onboarding + type: string + x-enum-varnames: + - ONBOARDING + SecurityMonitoringContentPackStateAttributes: + description: Attributes of a content pack state. + properties: + details: + $ref: "#/components/schemas/SecurityMonitoringContentPackStateDetails" + status: + $ref: "#/components/schemas/SecurityMonitoringContentPackStatus" + required: + - status + - details type: object SecurityMonitoringContentPackStateData: description: Content pack state data. @@ -89501,13 +89588,42 @@ components: - type - attributes type: object + SecurityMonitoringContentPackStateDetails: + description: |- + Type-specific details for a content pack state. The set of fields present depends + on the content pack's `type`. When Cloud SIEM is inactive for the requesting organization, `onboarding` is returned instead of the content pack's usual type, such as `logs` or `vulnerability`.` + discriminator: + mapping: + appsec: "#/components/schemas/SecurityMonitoringContentPackAppSecDetails" + audit: "#/components/schemas/SecurityMonitoringContentPackAuditDetails" + entity: "#/components/schemas/SecurityMonitoringContentPackEntityDetails" + logs: "#/components/schemas/SecurityMonitoringContentPackLogsDetails" + onboarding: "#/components/schemas/SecurityMonitoringContentPackOnboardingDetails" + threat_intel: "#/components/schemas/SecurityMonitoringContentPackThreatIntelDetails" + vulnerability: "#/components/schemas/SecurityMonitoringContentPackVulnerabilityDetails" + propertyName: type + oneOf: + - $ref: "#/components/schemas/SecurityMonitoringContentPackLogsDetails" + - $ref: "#/components/schemas/SecurityMonitoringContentPackThreatIntelDetails" + - $ref: "#/components/schemas/SecurityMonitoringContentPackEntityDetails" + - $ref: "#/components/schemas/SecurityMonitoringContentPackAuditDetails" + - $ref: "#/components/schemas/SecurityMonitoringContentPackAppSecDetails" + - $ref: "#/components/schemas/SecurityMonitoringContentPackVulnerabilityDetails" + - $ref: "#/components/schemas/SecurityMonitoringContentPackOnboardingDetails" SecurityMonitoringContentPackStateMeta: - description: Metadata for content pack states + description: Metadata for content pack states. properties: cloud_siem_index_incorrect: - description: Whether the cloud SIEM index configuration is incorrect at the organization level + description: Whether the Cloud SIEM index configuration is incorrect for the organization. example: false type: boolean + retention_months: + description: |- + The number of months that standard logs are retained for organizations on the standalone_indexed` pricing model. This field is omitted for other pricing models. + example: 15 + format: int32 + maximum: 60 + type: integer sku: $ref: "#/components/schemas/SecurityMonitoringSKU" required: @@ -89545,6 +89661,7 @@ components: - active - warning - broken + - not_configured example: active type: string x-enum-descriptions: @@ -89554,6 +89671,7 @@ components: - Activated; logs received within the last 24 hours. - Activated; integration not installed or logs last seen 24 to 72 hours ago. - Activated; no logs for over 72 hours, filter missing, or Cloud SIEM index incorrectly ordered. + - Activated, but no credentials are configured (entity content packs only). x-enum-varnames: - INSTALL - ACTIVATE @@ -89561,6 +89679,32 @@ components: - ACTIVE - WARNING - BROKEN + - NOT_CONFIGURED + SecurityMonitoringContentPackThreatIntelDetails: + description: Details for a threat intelligence content pack. + properties: + cp_activation: + $ref: "#/components/schemas/SecurityMonitoringContentPackActivation" + data_last_seen: + $ref: "#/components/schemas/SecurityMonitoringContentPackTimestampBucket" + integration_installed_status: + $ref: "#/components/schemas/SecurityMonitoringContentPackIntegrationStatus" + type: + $ref: "#/components/schemas/SecurityMonitoringContentPackThreatIntelDetailsType" + required: + - type + - cp_activation + - data_last_seen + - integration_installed_status + type: object + SecurityMonitoringContentPackThreatIntelDetailsType: + description: Type for threat intelligence content pack details. + enum: + - threat_intel + example: threat_intel + type: string + x-enum-varnames: + - THREAT_INTEL SecurityMonitoringContentPackTimestampBucket: description: Timestamp bucket indicating when logs were last collected. enum: @@ -89583,6 +89727,31 @@ components: - WITHIN_24_TO_72_HOURS - OVER_72H_TO_30D - OVER_30D + SecurityMonitoringContentPackVulnerabilityDetails: + description: Details for a vulnerability content pack. + properties: + cp_activation: + $ref: "#/components/schemas/SecurityMonitoringContentPackActivation" + data_last_seen: + $ref: "#/components/schemas/SecurityMonitoringContentPackTimestampBucket" + integration_installed_status: + $ref: "#/components/schemas/SecurityMonitoringContentPackIntegrationStatus" + type: + $ref: "#/components/schemas/SecurityMonitoringContentPackVulnerabilityDetailsType" + required: + - type + - cp_activation + - data_last_seen + - integration_installed_status + type: object + SecurityMonitoringContentPackVulnerabilityDetailsType: + description: Type for vulnerability content pack details. + enum: + - vulnerability + example: vulnerability + type: string + x-enum-varnames: + - VULNERABILITY SecurityMonitoringCriticalAsset: description: The critical asset's properties. properties: @@ -91954,12 +92123,16 @@ components: - per_gb_analyzed - per_event_in_siem_index_2023 - add_on_2024 + - standalone_indexed + - unknown example: add_on_2024 type: string x-enum-varnames: - PER_GB_ANALYZED - PER_EVENT_IN_SIEM_INDEX_2023 - ADD_ON_2024 + - STANDALONE_INDEXED + - UNKNOWN SecurityMonitoringSchedulingOptions: description: Options for scheduled rules. When this field is present, the rule runs based on the schedule. When absent, it runs real-time on ingested logs. nullable: true @@ -183928,12 +184101,15 @@ paths: value: data: - attributes: - cloud_siem_index_incorrect: false - cp_activation: activated - filters_configured_for_logs: true - logs_last_collected: within_24_hours - logs_seen_from_any_index: true - state: active + details: + cp_activation: activated + data_last_seen: within_24_hours + filters_configured: true + integration_installed_status: installed + logs_seen_from_any_index: true + siem_index_incorrect: false + type: logs + status: active id: aws-cloudtrail type: content_pack_state meta: diff --git a/services/security_monitoring/src/v2/index.ts b/services/security_monitoring/src/v2/index.ts index c2ac0866b836..01ba68abfef7 100644 --- a/services/security_monitoring/src/v2/index.ts +++ b/services/security_monitoring/src/v2/index.ts @@ -559,14 +559,28 @@ export { SecurityFindingsStatus } from "./models/SecurityFindingsStatus"; export { SecurityFindingType } from "./models/SecurityFindingType"; export { SecurityMonitoringAzureAppRegistration } from "./models/SecurityMonitoringAzureAppRegistration"; export { SecurityMonitoringContentPackActivation } from "./models/SecurityMonitoringContentPackActivation"; +export { SecurityMonitoringContentPackAppSecDetails } from "./models/SecurityMonitoringContentPackAppSecDetails"; +export { SecurityMonitoringContentPackAppSecDetailsType } from "./models/SecurityMonitoringContentPackAppSecDetailsType"; +export { SecurityMonitoringContentPackAuditDetails } from "./models/SecurityMonitoringContentPackAuditDetails"; +export { SecurityMonitoringContentPackAuditDetailsType } from "./models/SecurityMonitoringContentPackAuditDetailsType"; +export { SecurityMonitoringContentPackEntityDetails } from "./models/SecurityMonitoringContentPackEntityDetails"; +export { SecurityMonitoringContentPackEntityDetailsType } from "./models/SecurityMonitoringContentPackEntityDetailsType"; export { SecurityMonitoringContentPackIntegrationStatus } from "./models/SecurityMonitoringContentPackIntegrationStatus"; +export { SecurityMonitoringContentPackLogsDetails } from "./models/SecurityMonitoringContentPackLogsDetails"; +export { SecurityMonitoringContentPackOnboardingDetails } from "./models/SecurityMonitoringContentPackOnboardingDetails"; +export { SecurityMonitoringContentPackOnboardingDetailsType } from "./models/SecurityMonitoringContentPackOnboardingDetailsType"; export { SecurityMonitoringContentPackStateAttributes } from "./models/SecurityMonitoringContentPackStateAttributes"; export { SecurityMonitoringContentPackStateData } from "./models/SecurityMonitoringContentPackStateData"; +export { SecurityMonitoringContentPackStateDetails } from "./models/SecurityMonitoringContentPackStateDetails"; export { SecurityMonitoringContentPackStateMeta } from "./models/SecurityMonitoringContentPackStateMeta"; export { SecurityMonitoringContentPackStatesResponse } from "./models/SecurityMonitoringContentPackStatesResponse"; export { SecurityMonitoringContentPackStateType } from "./models/SecurityMonitoringContentPackStateType"; export { SecurityMonitoringContentPackStatus } from "./models/SecurityMonitoringContentPackStatus"; +export { SecurityMonitoringContentPackThreatIntelDetails } from "./models/SecurityMonitoringContentPackThreatIntelDetails"; +export { SecurityMonitoringContentPackThreatIntelDetailsType } from "./models/SecurityMonitoringContentPackThreatIntelDetailsType"; export { SecurityMonitoringContentPackTimestampBucket } from "./models/SecurityMonitoringContentPackTimestampBucket"; +export { SecurityMonitoringContentPackVulnerabilityDetails } from "./models/SecurityMonitoringContentPackVulnerabilityDetails"; +export { SecurityMonitoringContentPackVulnerabilityDetailsType } from "./models/SecurityMonitoringContentPackVulnerabilityDetailsType"; export { SecurityMonitoringCriticalAsset } from "./models/SecurityMonitoringCriticalAsset"; export { SecurityMonitoringCriticalAssetAttributes } from "./models/SecurityMonitoringCriticalAssetAttributes"; export { SecurityMonitoringCriticalAssetCreateAttributes } from "./models/SecurityMonitoringCriticalAssetCreateAttributes"; diff --git a/services/security_monitoring/src/v2/models/SecurityMonitoringContentPackAppSecDetails.ts b/services/security_monitoring/src/v2/models/SecurityMonitoringContentPackAppSecDetails.ts new file mode 100644 index 000000000000..a05aba573e17 --- /dev/null +++ b/services/security_monitoring/src/v2/models/SecurityMonitoringContentPackAppSecDetails.ts @@ -0,0 +1,47 @@ +import { AttributeTypeMap } from "@datadog/datadog-api-client"; + +import { SecurityMonitoringContentPackAppSecDetailsType } from "./SecurityMonitoringContentPackAppSecDetailsType"; + +/** + * Details for an Application Security content pack. + */ +export class SecurityMonitoringContentPackAppSecDetails { + /** + * Type for Application Security content pack details. + */ + "type": SecurityMonitoringContentPackAppSecDetailsType; + /** + * A container for additional, undeclared properties. + * This is a holder for any undeclared properties as specified with + * the 'additionalProperties' keyword in the OAS document. + */ + "additionalProperties"?: { [key: string]: any }; + /** + * @ignore + */ + "_unparsed"?: boolean; + + /** + * @ignore + */ + static readonly attributeTypeMap: AttributeTypeMap = { + type: { + baseName: "type", + type: "SecurityMonitoringContentPackAppSecDetailsType", + required: true, + }, + additionalProperties: { + baseName: "additionalProperties", + type: "{ [key: string]: any; }", + }, + }; + + /** + * @ignore + */ + static getAttributeTypeMap(): AttributeTypeMap { + return SecurityMonitoringContentPackAppSecDetails.attributeTypeMap; + } + + public constructor() {} +} diff --git a/services/security_monitoring/src/v2/models/SecurityMonitoringContentPackAppSecDetailsType.ts b/services/security_monitoring/src/v2/models/SecurityMonitoringContentPackAppSecDetailsType.ts new file mode 100644 index 000000000000..4e8f7da2ea38 --- /dev/null +++ b/services/security_monitoring/src/v2/models/SecurityMonitoringContentPackAppSecDetailsType.ts @@ -0,0 +1,9 @@ +import { UnparsedObject } from "@datadog/datadog-api-client"; + +/** + * Type for Application Security content pack details. + */ +export type SecurityMonitoringContentPackAppSecDetailsType = + | typeof APPSEC + | UnparsedObject; +export const APPSEC = "appsec"; diff --git a/services/security_monitoring/src/v2/models/SecurityMonitoringContentPackAuditDetails.ts b/services/security_monitoring/src/v2/models/SecurityMonitoringContentPackAuditDetails.ts new file mode 100644 index 000000000000..e0b505012c19 --- /dev/null +++ b/services/security_monitoring/src/v2/models/SecurityMonitoringContentPackAuditDetails.ts @@ -0,0 +1,47 @@ +import { AttributeTypeMap } from "@datadog/datadog-api-client"; + +import { SecurityMonitoringContentPackAuditDetailsType } from "./SecurityMonitoringContentPackAuditDetailsType"; + +/** + * Details for an audit trail content pack. + */ +export class SecurityMonitoringContentPackAuditDetails { + /** + * Type for audit trail content pack details. + */ + "type": SecurityMonitoringContentPackAuditDetailsType; + /** + * A container for additional, undeclared properties. + * This is a holder for any undeclared properties as specified with + * the 'additionalProperties' keyword in the OAS document. + */ + "additionalProperties"?: { [key: string]: any }; + /** + * @ignore + */ + "_unparsed"?: boolean; + + /** + * @ignore + */ + static readonly attributeTypeMap: AttributeTypeMap = { + type: { + baseName: "type", + type: "SecurityMonitoringContentPackAuditDetailsType", + required: true, + }, + additionalProperties: { + baseName: "additionalProperties", + type: "{ [key: string]: any; }", + }, + }; + + /** + * @ignore + */ + static getAttributeTypeMap(): AttributeTypeMap { + return SecurityMonitoringContentPackAuditDetails.attributeTypeMap; + } + + public constructor() {} +} diff --git a/services/security_monitoring/src/v2/models/SecurityMonitoringContentPackAuditDetailsType.ts b/services/security_monitoring/src/v2/models/SecurityMonitoringContentPackAuditDetailsType.ts new file mode 100644 index 000000000000..78582486382b --- /dev/null +++ b/services/security_monitoring/src/v2/models/SecurityMonitoringContentPackAuditDetailsType.ts @@ -0,0 +1,9 @@ +import { UnparsedObject } from "@datadog/datadog-api-client"; + +/** + * Type for audit trail content pack details. + */ +export type SecurityMonitoringContentPackAuditDetailsType = + | typeof AUDIT + | UnparsedObject; +export const AUDIT = "audit"; diff --git a/services/security_monitoring/src/v2/models/SecurityMonitoringContentPackEntityDetails.ts b/services/security_monitoring/src/v2/models/SecurityMonitoringContentPackEntityDetails.ts new file mode 100644 index 000000000000..7844fbb2c039 --- /dev/null +++ b/services/security_monitoring/src/v2/models/SecurityMonitoringContentPackEntityDetails.ts @@ -0,0 +1,57 @@ +import { AttributeTypeMap } from "@datadog/datadog-api-client"; + +import { SecurityMonitoringContentPackActivation } from "./SecurityMonitoringContentPackActivation"; +import { SecurityMonitoringContentPackEntityDetailsType } from "./SecurityMonitoringContentPackEntityDetailsType"; + +/** + * Details for an entity or identity content pack. + */ +export class SecurityMonitoringContentPackEntityDetails { + /** + * The activation status of a content pack. + */ + "cpActivation": SecurityMonitoringContentPackActivation; + /** + * Type for entity content pack details. + */ + "type": SecurityMonitoringContentPackEntityDetailsType; + /** + * A container for additional, undeclared properties. + * This is a holder for any undeclared properties as specified with + * the 'additionalProperties' keyword in the OAS document. + */ + "additionalProperties"?: { [key: string]: any }; + /** + * @ignore + */ + "_unparsed"?: boolean; + + /** + * @ignore + */ + static readonly attributeTypeMap: AttributeTypeMap = { + cpActivation: { + baseName: "cp_activation", + type: "SecurityMonitoringContentPackActivation", + required: true, + }, + type: { + baseName: "type", + type: "SecurityMonitoringContentPackEntityDetailsType", + required: true, + }, + additionalProperties: { + baseName: "additionalProperties", + type: "{ [key: string]: any; }", + }, + }; + + /** + * @ignore + */ + static getAttributeTypeMap(): AttributeTypeMap { + return SecurityMonitoringContentPackEntityDetails.attributeTypeMap; + } + + public constructor() {} +} diff --git a/services/security_monitoring/src/v2/models/SecurityMonitoringContentPackEntityDetailsType.ts b/services/security_monitoring/src/v2/models/SecurityMonitoringContentPackEntityDetailsType.ts new file mode 100644 index 000000000000..31a60fbbaf34 --- /dev/null +++ b/services/security_monitoring/src/v2/models/SecurityMonitoringContentPackEntityDetailsType.ts @@ -0,0 +1,9 @@ +import { UnparsedObject } from "@datadog/datadog-api-client"; + +/** + * Type for entity content pack details. + */ +export type SecurityMonitoringContentPackEntityDetailsType = + | typeof ENTITY + | UnparsedObject; +export const ENTITY = "entity"; diff --git a/services/security_monitoring/src/v2/models/SecurityMonitoringContentPackLogsDetails.ts b/services/security_monitoring/src/v2/models/SecurityMonitoringContentPackLogsDetails.ts new file mode 100644 index 000000000000..042b861722dc --- /dev/null +++ b/services/security_monitoring/src/v2/models/SecurityMonitoringContentPackLogsDetails.ts @@ -0,0 +1,105 @@ +import { AttributeTypeMap } from "@datadog/datadog-api-client"; + +import { SecurityFilterFilteredDataType } from "./SecurityFilterFilteredDataType"; +import { SecurityMonitoringContentPackActivation } from "./SecurityMonitoringContentPackActivation"; +import { SecurityMonitoringContentPackIntegrationStatus } from "./SecurityMonitoringContentPackIntegrationStatus"; +import { SecurityMonitoringContentPackTimestampBucket } from "./SecurityMonitoringContentPackTimestampBucket"; + +/** + * Details for a logs-based content pack. + */ +export class SecurityMonitoringContentPackLogsDetails { + /** + * The activation status of a content pack. + */ + "cpActivation": SecurityMonitoringContentPackActivation; + /** + * Timestamp bucket indicating when logs were last collected. + */ + "dataLastSeen": SecurityMonitoringContentPackTimestampBucket; + /** + * Whether filters (Security Filters or Index Query depending on the pricing model) are + * present and correctly configured to route logs into Cloud SIEM. + */ + "filtersConfigured": boolean; + /** + * The installation status of the related integration. + */ + "integrationInstalledStatus": SecurityMonitoringContentPackIntegrationStatus; + /** + * Whether logs for this content pack have been seen in any Datadog index in the last 72 hours. + */ + "logsSeenFromAnyIndex": boolean; + /** + * Whether the Cloud SIEM index configuration is incorrect (only applies to certain pricing models). + */ + "siemIndexIncorrect": boolean; + /** + * The filtered data type. + */ + "type": SecurityFilterFilteredDataType; + /** + * A container for additional, undeclared properties. + * This is a holder for any undeclared properties as specified with + * the 'additionalProperties' keyword in the OAS document. + */ + "additionalProperties"?: { [key: string]: any }; + /** + * @ignore + */ + "_unparsed"?: boolean; + + /** + * @ignore + */ + static readonly attributeTypeMap: AttributeTypeMap = { + cpActivation: { + baseName: "cp_activation", + type: "SecurityMonitoringContentPackActivation", + required: true, + }, + dataLastSeen: { + baseName: "data_last_seen", + type: "SecurityMonitoringContentPackTimestampBucket", + required: true, + }, + filtersConfigured: { + baseName: "filters_configured", + type: "boolean", + required: true, + }, + integrationInstalledStatus: { + baseName: "integration_installed_status", + type: "SecurityMonitoringContentPackIntegrationStatus", + required: true, + }, + logsSeenFromAnyIndex: { + baseName: "logs_seen_from_any_index", + type: "boolean", + required: true, + }, + siemIndexIncorrect: { + baseName: "siem_index_incorrect", + type: "boolean", + required: true, + }, + type: { + baseName: "type", + type: "SecurityFilterFilteredDataType", + required: true, + }, + additionalProperties: { + baseName: "additionalProperties", + type: "{ [key: string]: any; }", + }, + }; + + /** + * @ignore + */ + static getAttributeTypeMap(): AttributeTypeMap { + return SecurityMonitoringContentPackLogsDetails.attributeTypeMap; + } + + public constructor() {} +} diff --git a/services/security_monitoring/src/v2/models/SecurityMonitoringContentPackOnboardingDetails.ts b/services/security_monitoring/src/v2/models/SecurityMonitoringContentPackOnboardingDetails.ts new file mode 100644 index 000000000000..140a03d08795 --- /dev/null +++ b/services/security_monitoring/src/v2/models/SecurityMonitoringContentPackOnboardingDetails.ts @@ -0,0 +1,65 @@ +import { AttributeTypeMap } from "@datadog/datadog-api-client"; + +import { SecurityMonitoringContentPackIntegrationStatus } from "./SecurityMonitoringContentPackIntegrationStatus"; +import { SecurityMonitoringContentPackOnboardingDetailsType } from "./SecurityMonitoringContentPackOnboardingDetailsType"; + +/** + * Content pack details returned when Cloud SIEM is inactive for the requesting organization. + */ +export class SecurityMonitoringContentPackOnboardingDetails { + /** + * The installation status of the related integration. + */ + "integrationInstalledStatus"?: SecurityMonitoringContentPackIntegrationStatus; + /** + * Whether logs for this content pack have been seen in any Datadog index in the last 72 hours. + */ + "logsSeenFromAnyIndex": boolean; + /** + * Type for onboarding content pack details. + */ + "type": SecurityMonitoringContentPackOnboardingDetailsType; + /** + * A container for additional, undeclared properties. + * This is a holder for any undeclared properties as specified with + * the 'additionalProperties' keyword in the OAS document. + */ + "additionalProperties"?: { [key: string]: any }; + /** + * @ignore + */ + "_unparsed"?: boolean; + + /** + * @ignore + */ + static readonly attributeTypeMap: AttributeTypeMap = { + integrationInstalledStatus: { + baseName: "integration_installed_status", + type: "SecurityMonitoringContentPackIntegrationStatus", + }, + logsSeenFromAnyIndex: { + baseName: "logs_seen_from_any_index", + type: "boolean", + required: true, + }, + type: { + baseName: "type", + type: "SecurityMonitoringContentPackOnboardingDetailsType", + required: true, + }, + additionalProperties: { + baseName: "additionalProperties", + type: "{ [key: string]: any; }", + }, + }; + + /** + * @ignore + */ + static getAttributeTypeMap(): AttributeTypeMap { + return SecurityMonitoringContentPackOnboardingDetails.attributeTypeMap; + } + + public constructor() {} +} diff --git a/services/security_monitoring/src/v2/models/SecurityMonitoringContentPackOnboardingDetailsType.ts b/services/security_monitoring/src/v2/models/SecurityMonitoringContentPackOnboardingDetailsType.ts new file mode 100644 index 000000000000..16102780cdd3 --- /dev/null +++ b/services/security_monitoring/src/v2/models/SecurityMonitoringContentPackOnboardingDetailsType.ts @@ -0,0 +1,9 @@ +import { UnparsedObject } from "@datadog/datadog-api-client"; + +/** + * Type for onboarding content pack details. + */ +export type SecurityMonitoringContentPackOnboardingDetailsType = + | typeof ONBOARDING + | UnparsedObject; +export const ONBOARDING = "onboarding"; diff --git a/services/security_monitoring/src/v2/models/SecurityMonitoringContentPackStateAttributes.ts b/services/security_monitoring/src/v2/models/SecurityMonitoringContentPackStateAttributes.ts index bc1c618c9a7d..884e67b1cad2 100644 --- a/services/security_monitoring/src/v2/models/SecurityMonitoringContentPackStateAttributes.ts +++ b/services/security_monitoring/src/v2/models/SecurityMonitoringContentPackStateAttributes.ts @@ -1,43 +1,21 @@ import { AttributeTypeMap } from "@datadog/datadog-api-client"; -import { SecurityMonitoringContentPackActivation } from "./SecurityMonitoringContentPackActivation"; -import { SecurityMonitoringContentPackIntegrationStatus } from "./SecurityMonitoringContentPackIntegrationStatus"; +import { SecurityMonitoringContentPackStateDetails } from "./SecurityMonitoringContentPackStateDetails"; import { SecurityMonitoringContentPackStatus } from "./SecurityMonitoringContentPackStatus"; -import { SecurityMonitoringContentPackTimestampBucket } from "./SecurityMonitoringContentPackTimestampBucket"; /** - * Attributes of a content pack state + * Attributes of a content pack state. */ export class SecurityMonitoringContentPackStateAttributes { /** - * Whether the cloud SIEM index configuration is incorrect (only applies to certain pricing models) + * Type-specific details for a content pack state. The set of fields present depends + * on the content pack's `type`. When Cloud SIEM is inactive for the requesting organization, `onboarding` is returned instead of the content pack's usual type, such as `logs` or `vulnerability`.` */ - "cloudSiemIndexIncorrect": boolean; - /** - * The activation status of a content pack. - */ - "cpActivation": SecurityMonitoringContentPackActivation; - /** - * Whether filters (Security Filters or Index Query depending on the pricing model) are - * present and correctly configured to route logs into Cloud SIEM. - */ - "filtersConfiguredForLogs": boolean; - /** - * The installation status of the related integration. - */ - "integrationInstalledStatus"?: SecurityMonitoringContentPackIntegrationStatus; - /** - * Timestamp bucket indicating when logs were last collected. - */ - "logsLastCollected": SecurityMonitoringContentPackTimestampBucket; - /** - * Whether logs for this content pack have been seen in any Datadog index within the last 72 hours. - */ - "logsSeenFromAnyIndex": boolean; + "details": SecurityMonitoringContentPackStateDetails; /** * The current operational status of a content pack. */ - "state": SecurityMonitoringContentPackStatus; + "status": SecurityMonitoringContentPackStatus; /** * A container for additional, undeclared properties. * This is a holder for any undeclared properties as specified with @@ -53,37 +31,13 @@ export class SecurityMonitoringContentPackStateAttributes { * @ignore */ static readonly attributeTypeMap: AttributeTypeMap = { - cloudSiemIndexIncorrect: { - baseName: "cloud_siem_index_incorrect", - type: "boolean", - required: true, - }, - cpActivation: { - baseName: "cp_activation", - type: "SecurityMonitoringContentPackActivation", - required: true, - }, - filtersConfiguredForLogs: { - baseName: "filters_configured_for_logs", - type: "boolean", - required: true, - }, - integrationInstalledStatus: { - baseName: "integration_installed_status", - type: "SecurityMonitoringContentPackIntegrationStatus", - }, - logsLastCollected: { - baseName: "logs_last_collected", - type: "SecurityMonitoringContentPackTimestampBucket", - required: true, - }, - logsSeenFromAnyIndex: { - baseName: "logs_seen_from_any_index", - type: "boolean", + details: { + baseName: "details", + type: "SecurityMonitoringContentPackStateDetails", required: true, }, - state: { - baseName: "state", + status: { + baseName: "status", type: "SecurityMonitoringContentPackStatus", required: true, }, diff --git a/services/security_monitoring/src/v2/models/SecurityMonitoringContentPackStateData.ts b/services/security_monitoring/src/v2/models/SecurityMonitoringContentPackStateData.ts index 731864ab74cc..7e9bd279d6cc 100644 --- a/services/security_monitoring/src/v2/models/SecurityMonitoringContentPackStateData.ts +++ b/services/security_monitoring/src/v2/models/SecurityMonitoringContentPackStateData.ts @@ -8,7 +8,7 @@ import { SecurityMonitoringContentPackStateType } from "./SecurityMonitoringCont */ export class SecurityMonitoringContentPackStateData { /** - * Attributes of a content pack state + * Attributes of a content pack state. */ "attributes": SecurityMonitoringContentPackStateAttributes; /** diff --git a/services/security_monitoring/src/v2/models/SecurityMonitoringContentPackStateDetails.ts b/services/security_monitoring/src/v2/models/SecurityMonitoringContentPackStateDetails.ts new file mode 100644 index 000000000000..f928aa2bcf95 --- /dev/null +++ b/services/security_monitoring/src/v2/models/SecurityMonitoringContentPackStateDetails.ts @@ -0,0 +1,23 @@ +import { UnparsedObject } from "@datadog/datadog-api-client"; + +import { SecurityMonitoringContentPackAppSecDetails } from "./SecurityMonitoringContentPackAppSecDetails"; +import { SecurityMonitoringContentPackAuditDetails } from "./SecurityMonitoringContentPackAuditDetails"; +import { SecurityMonitoringContentPackEntityDetails } from "./SecurityMonitoringContentPackEntityDetails"; +import { SecurityMonitoringContentPackLogsDetails } from "./SecurityMonitoringContentPackLogsDetails"; +import { SecurityMonitoringContentPackOnboardingDetails } from "./SecurityMonitoringContentPackOnboardingDetails"; +import { SecurityMonitoringContentPackThreatIntelDetails } from "./SecurityMonitoringContentPackThreatIntelDetails"; +import { SecurityMonitoringContentPackVulnerabilityDetails } from "./SecurityMonitoringContentPackVulnerabilityDetails"; + +/** + * Type-specific details for a content pack state. The set of fields present depends + * on the content pack's `type`. When Cloud SIEM is inactive for the requesting organization, `onboarding` is returned instead of the content pack's usual type, such as `logs` or `vulnerability`.` + */ +export type SecurityMonitoringContentPackStateDetails = + | SecurityMonitoringContentPackLogsDetails + | SecurityMonitoringContentPackThreatIntelDetails + | SecurityMonitoringContentPackEntityDetails + | SecurityMonitoringContentPackAuditDetails + | SecurityMonitoringContentPackAppSecDetails + | SecurityMonitoringContentPackVulnerabilityDetails + | SecurityMonitoringContentPackOnboardingDetails + | UnparsedObject; diff --git a/services/security_monitoring/src/v2/models/SecurityMonitoringContentPackStateMeta.ts b/services/security_monitoring/src/v2/models/SecurityMonitoringContentPackStateMeta.ts index f64853c43097..0e588596c3c4 100644 --- a/services/security_monitoring/src/v2/models/SecurityMonitoringContentPackStateMeta.ts +++ b/services/security_monitoring/src/v2/models/SecurityMonitoringContentPackStateMeta.ts @@ -3,13 +3,17 @@ import { AttributeTypeMap } from "@datadog/datadog-api-client"; import { SecurityMonitoringSKU } from "./SecurityMonitoringSKU"; /** - * Metadata for content pack states + * Metadata for content pack states. */ export class SecurityMonitoringContentPackStateMeta { /** - * Whether the cloud SIEM index configuration is incorrect at the organization level + * Whether the Cloud SIEM index configuration is incorrect for the organization. */ "cloudSiemIndexIncorrect": boolean; + /** + * The number of months that standard logs are retained for organizations on the standalone_indexed` pricing model. This field is omitted for other pricing models. + */ + "retentionMonths"?: number; /** * The Cloud SIEM pricing model (SKU) for the organization. */ @@ -34,6 +38,11 @@ export class SecurityMonitoringContentPackStateMeta { type: "boolean", required: true, }, + retentionMonths: { + baseName: "retention_months", + type: "number", + format: "int32", + }, sku: { baseName: "sku", type: "SecurityMonitoringSKU", diff --git a/services/security_monitoring/src/v2/models/SecurityMonitoringContentPackStatesResponse.ts b/services/security_monitoring/src/v2/models/SecurityMonitoringContentPackStatesResponse.ts index c90798cb1503..adca6411fc7e 100644 --- a/services/security_monitoring/src/v2/models/SecurityMonitoringContentPackStatesResponse.ts +++ b/services/security_monitoring/src/v2/models/SecurityMonitoringContentPackStatesResponse.ts @@ -12,7 +12,7 @@ export class SecurityMonitoringContentPackStatesResponse { */ "data": Array; /** - * Metadata for content pack states + * Metadata for content pack states. */ "meta": SecurityMonitoringContentPackStateMeta; /** diff --git a/services/security_monitoring/src/v2/models/SecurityMonitoringContentPackStatus.ts b/services/security_monitoring/src/v2/models/SecurityMonitoringContentPackStatus.ts index da1e91e5dce9..e47666cc1996 100644 --- a/services/security_monitoring/src/v2/models/SecurityMonitoringContentPackStatus.ts +++ b/services/security_monitoring/src/v2/models/SecurityMonitoringContentPackStatus.ts @@ -10,6 +10,7 @@ export type SecurityMonitoringContentPackStatus = | typeof ACTIVE | typeof WARNING | typeof BROKEN + | typeof NOT_CONFIGURED | UnparsedObject; export const INSTALL = "install"; export const ACTIVATE = "activate"; @@ -17,3 +18,4 @@ export const INITIALIZING = "initializing"; export const ACTIVE = "active"; export const WARNING = "warning"; export const BROKEN = "broken"; +export const NOT_CONFIGURED = "not_configured"; diff --git a/services/security_monitoring/src/v2/models/SecurityMonitoringContentPackThreatIntelDetails.ts b/services/security_monitoring/src/v2/models/SecurityMonitoringContentPackThreatIntelDetails.ts new file mode 100644 index 000000000000..d897d8a87ff4 --- /dev/null +++ b/services/security_monitoring/src/v2/models/SecurityMonitoringContentPackThreatIntelDetails.ts @@ -0,0 +1,77 @@ +import { AttributeTypeMap } from "@datadog/datadog-api-client"; + +import { SecurityMonitoringContentPackActivation } from "./SecurityMonitoringContentPackActivation"; +import { SecurityMonitoringContentPackIntegrationStatus } from "./SecurityMonitoringContentPackIntegrationStatus"; +import { SecurityMonitoringContentPackThreatIntelDetailsType } from "./SecurityMonitoringContentPackThreatIntelDetailsType"; +import { SecurityMonitoringContentPackTimestampBucket } from "./SecurityMonitoringContentPackTimestampBucket"; + +/** + * Details for a threat intelligence content pack. + */ +export class SecurityMonitoringContentPackThreatIntelDetails { + /** + * The activation status of a content pack. + */ + "cpActivation": SecurityMonitoringContentPackActivation; + /** + * Timestamp bucket indicating when logs were last collected. + */ + "dataLastSeen": SecurityMonitoringContentPackTimestampBucket; + /** + * The installation status of the related integration. + */ + "integrationInstalledStatus": SecurityMonitoringContentPackIntegrationStatus; + /** + * Type for threat intelligence content pack details. + */ + "type": SecurityMonitoringContentPackThreatIntelDetailsType; + /** + * A container for additional, undeclared properties. + * This is a holder for any undeclared properties as specified with + * the 'additionalProperties' keyword in the OAS document. + */ + "additionalProperties"?: { [key: string]: any }; + /** + * @ignore + */ + "_unparsed"?: boolean; + + /** + * @ignore + */ + static readonly attributeTypeMap: AttributeTypeMap = { + cpActivation: { + baseName: "cp_activation", + type: "SecurityMonitoringContentPackActivation", + required: true, + }, + dataLastSeen: { + baseName: "data_last_seen", + type: "SecurityMonitoringContentPackTimestampBucket", + required: true, + }, + integrationInstalledStatus: { + baseName: "integration_installed_status", + type: "SecurityMonitoringContentPackIntegrationStatus", + required: true, + }, + type: { + baseName: "type", + type: "SecurityMonitoringContentPackThreatIntelDetailsType", + required: true, + }, + additionalProperties: { + baseName: "additionalProperties", + type: "{ [key: string]: any; }", + }, + }; + + /** + * @ignore + */ + static getAttributeTypeMap(): AttributeTypeMap { + return SecurityMonitoringContentPackThreatIntelDetails.attributeTypeMap; + } + + public constructor() {} +} diff --git a/services/security_monitoring/src/v2/models/SecurityMonitoringContentPackThreatIntelDetailsType.ts b/services/security_monitoring/src/v2/models/SecurityMonitoringContentPackThreatIntelDetailsType.ts new file mode 100644 index 000000000000..186c1bbac5c0 --- /dev/null +++ b/services/security_monitoring/src/v2/models/SecurityMonitoringContentPackThreatIntelDetailsType.ts @@ -0,0 +1,9 @@ +import { UnparsedObject } from "@datadog/datadog-api-client"; + +/** + * Type for threat intelligence content pack details. + */ +export type SecurityMonitoringContentPackThreatIntelDetailsType = + | typeof THREAT_INTEL + | UnparsedObject; +export const THREAT_INTEL = "threat_intel"; diff --git a/services/security_monitoring/src/v2/models/SecurityMonitoringContentPackVulnerabilityDetails.ts b/services/security_monitoring/src/v2/models/SecurityMonitoringContentPackVulnerabilityDetails.ts new file mode 100644 index 000000000000..9a069d16d68b --- /dev/null +++ b/services/security_monitoring/src/v2/models/SecurityMonitoringContentPackVulnerabilityDetails.ts @@ -0,0 +1,77 @@ +import { AttributeTypeMap } from "@datadog/datadog-api-client"; + +import { SecurityMonitoringContentPackActivation } from "./SecurityMonitoringContentPackActivation"; +import { SecurityMonitoringContentPackIntegrationStatus } from "./SecurityMonitoringContentPackIntegrationStatus"; +import { SecurityMonitoringContentPackTimestampBucket } from "./SecurityMonitoringContentPackTimestampBucket"; +import { SecurityMonitoringContentPackVulnerabilityDetailsType } from "./SecurityMonitoringContentPackVulnerabilityDetailsType"; + +/** + * Details for a vulnerability content pack. + */ +export class SecurityMonitoringContentPackVulnerabilityDetails { + /** + * The activation status of a content pack. + */ + "cpActivation": SecurityMonitoringContentPackActivation; + /** + * Timestamp bucket indicating when logs were last collected. + */ + "dataLastSeen": SecurityMonitoringContentPackTimestampBucket; + /** + * The installation status of the related integration. + */ + "integrationInstalledStatus": SecurityMonitoringContentPackIntegrationStatus; + /** + * Type for vulnerability content pack details. + */ + "type": SecurityMonitoringContentPackVulnerabilityDetailsType; + /** + * A container for additional, undeclared properties. + * This is a holder for any undeclared properties as specified with + * the 'additionalProperties' keyword in the OAS document. + */ + "additionalProperties"?: { [key: string]: any }; + /** + * @ignore + */ + "_unparsed"?: boolean; + + /** + * @ignore + */ + static readonly attributeTypeMap: AttributeTypeMap = { + cpActivation: { + baseName: "cp_activation", + type: "SecurityMonitoringContentPackActivation", + required: true, + }, + dataLastSeen: { + baseName: "data_last_seen", + type: "SecurityMonitoringContentPackTimestampBucket", + required: true, + }, + integrationInstalledStatus: { + baseName: "integration_installed_status", + type: "SecurityMonitoringContentPackIntegrationStatus", + required: true, + }, + type: { + baseName: "type", + type: "SecurityMonitoringContentPackVulnerabilityDetailsType", + required: true, + }, + additionalProperties: { + baseName: "additionalProperties", + type: "{ [key: string]: any; }", + }, + }; + + /** + * @ignore + */ + static getAttributeTypeMap(): AttributeTypeMap { + return SecurityMonitoringContentPackVulnerabilityDetails.attributeTypeMap; + } + + public constructor() {} +} diff --git a/services/security_monitoring/src/v2/models/SecurityMonitoringContentPackVulnerabilityDetailsType.ts b/services/security_monitoring/src/v2/models/SecurityMonitoringContentPackVulnerabilityDetailsType.ts new file mode 100644 index 000000000000..f98fd234c0de --- /dev/null +++ b/services/security_monitoring/src/v2/models/SecurityMonitoringContentPackVulnerabilityDetailsType.ts @@ -0,0 +1,9 @@ +import { UnparsedObject } from "@datadog/datadog-api-client"; + +/** + * Type for vulnerability content pack details. + */ +export type SecurityMonitoringContentPackVulnerabilityDetailsType = + | typeof VULNERABILITY + | UnparsedObject; +export const VULNERABILITY = "vulnerability"; diff --git a/services/security_monitoring/src/v2/models/SecurityMonitoringSKU.ts b/services/security_monitoring/src/v2/models/SecurityMonitoringSKU.ts index 4d6205df8642..e5d2f7daf87a 100644 --- a/services/security_monitoring/src/v2/models/SecurityMonitoringSKU.ts +++ b/services/security_monitoring/src/v2/models/SecurityMonitoringSKU.ts @@ -7,7 +7,11 @@ export type SecurityMonitoringSKU = | typeof PER_GB_ANALYZED | typeof PER_EVENT_IN_SIEM_INDEX_2023 | typeof ADD_ON_2024 + | typeof STANDALONE_INDEXED + | typeof UNKNOWN | UnparsedObject; export const PER_GB_ANALYZED = "per_gb_analyzed"; export const PER_EVENT_IN_SIEM_INDEX_2023 = "per_event_in_siem_index_2023"; export const ADD_ON_2024 = "add_on_2024"; +export const STANDALONE_INDEXED = "standalone_indexed"; +export const UNKNOWN = "unknown"; diff --git a/services/security_monitoring/src/v2/models/TypingInfo.ts b/services/security_monitoring/src/v2/models/TypingInfo.ts index 405cfa100fdd..4bc875b41ed7 100644 --- a/services/security_monitoring/src/v2/models/TypingInfo.ts +++ b/services/security_monitoring/src/v2/models/TypingInfo.ts @@ -338,10 +338,17 @@ import { SecurityFindingsSearchRequestData } from "./SecurityFindingsSearchReque import { SecurityFindingsSearchRequestDataAttributes } from "./SecurityFindingsSearchRequestDataAttributes"; import { SecurityFindingsSearchRequestPage } from "./SecurityFindingsSearchRequestPage"; import { SecurityMonitoringAzureAppRegistration } from "./SecurityMonitoringAzureAppRegistration"; +import { SecurityMonitoringContentPackAppSecDetails } from "./SecurityMonitoringContentPackAppSecDetails"; +import { SecurityMonitoringContentPackAuditDetails } from "./SecurityMonitoringContentPackAuditDetails"; +import { SecurityMonitoringContentPackEntityDetails } from "./SecurityMonitoringContentPackEntityDetails"; +import { SecurityMonitoringContentPackLogsDetails } from "./SecurityMonitoringContentPackLogsDetails"; +import { SecurityMonitoringContentPackOnboardingDetails } from "./SecurityMonitoringContentPackOnboardingDetails"; import { SecurityMonitoringContentPackStateAttributes } from "./SecurityMonitoringContentPackStateAttributes"; import { SecurityMonitoringContentPackStateData } from "./SecurityMonitoringContentPackStateData"; import { SecurityMonitoringContentPackStateMeta } from "./SecurityMonitoringContentPackStateMeta"; import { SecurityMonitoringContentPackStatesResponse } from "./SecurityMonitoringContentPackStatesResponse"; +import { SecurityMonitoringContentPackThreatIntelDetails } from "./SecurityMonitoringContentPackThreatIntelDetails"; +import { SecurityMonitoringContentPackVulnerabilityDetails } from "./SecurityMonitoringContentPackVulnerabilityDetails"; import { SecurityMonitoringCriticalAsset } from "./SecurityMonitoringCriticalAsset"; import { SecurityMonitoringCriticalAssetAttributes } from "./SecurityMonitoringCriticalAssetAttributes"; import { SecurityMonitoringCriticalAssetCreateAttributes } from "./SecurityMonitoringCriticalAssetCreateAttributes"; @@ -750,6 +757,9 @@ export const TypingInfo: ModelTypingInfo = { "activated", "deactivated", ], + SecurityMonitoringContentPackAppSecDetailsType: ["appsec"], + SecurityMonitoringContentPackAuditDetailsType: ["audit"], + SecurityMonitoringContentPackEntityDetailsType: ["entity"], SecurityMonitoringContentPackIntegrationStatus: [ "installed", "available", @@ -757,6 +767,7 @@ export const TypingInfo: ModelTypingInfo = { "detected", "error", ], + SecurityMonitoringContentPackOnboardingDetailsType: ["onboarding"], SecurityMonitoringContentPackStateType: ["content_pack_state"], SecurityMonitoringContentPackStatus: [ "install", @@ -765,7 +776,9 @@ export const TypingInfo: ModelTypingInfo = { "active", "warning", "broken", + "not_configured", ], + SecurityMonitoringContentPackThreatIntelDetailsType: ["threat_intel"], SecurityMonitoringContentPackTimestampBucket: [ "not_seen", "within_24_hours", @@ -773,6 +786,7 @@ export const TypingInfo: ModelTypingInfo = { "over_72h_to_30d", "over_30d", ], + SecurityMonitoringContentPackVulnerabilityDetailsType: ["vulnerability"], SecurityMonitoringCriticalAssetSeverity: [ "info", "low", @@ -919,6 +933,8 @@ export const TypingInfo: ModelTypingInfo = { "per_gb_analyzed", "per_event_in_siem_index_2023", "add_on_2024", + "standalone_indexed", + "unknown", ], SecurityMonitoringSignalArchiveReason: [ "none", @@ -1058,6 +1074,15 @@ export const TypingInfo: ModelTypingInfo = { ], }, oneOfMap: { + SecurityMonitoringContentPackStateDetails: [ + "SecurityMonitoringContentPackLogsDetails", + "SecurityMonitoringContentPackThreatIntelDetails", + "SecurityMonitoringContentPackEntityDetails", + "SecurityMonitoringContentPackAuditDetails", + "SecurityMonitoringContentPackAppSecDetails", + "SecurityMonitoringContentPackVulnerabilityDetails", + "SecurityMonitoringContentPackOnboardingDetails", + ], SecurityMonitoringIntegrationConfigCreateAttributes: [ "SecurityMonitoringGoogleWorkspaceIntegrationConfigCreateAttributes", "SecurityMonitoringOktaIntegrationConfigCreateAttributes", @@ -1490,6 +1515,16 @@ export const TypingInfo: ModelTypingInfo = { SecurityFindingsSearchRequestPage: SecurityFindingsSearchRequestPage, SecurityMonitoringAzureAppRegistration: SecurityMonitoringAzureAppRegistration, + SecurityMonitoringContentPackAppSecDetails: + SecurityMonitoringContentPackAppSecDetails, + SecurityMonitoringContentPackAuditDetails: + SecurityMonitoringContentPackAuditDetails, + SecurityMonitoringContentPackEntityDetails: + SecurityMonitoringContentPackEntityDetails, + SecurityMonitoringContentPackLogsDetails: + SecurityMonitoringContentPackLogsDetails, + SecurityMonitoringContentPackOnboardingDetails: + SecurityMonitoringContentPackOnboardingDetails, SecurityMonitoringContentPackStateAttributes: SecurityMonitoringContentPackStateAttributes, SecurityMonitoringContentPackStateData: @@ -1498,6 +1533,10 @@ export const TypingInfo: ModelTypingInfo = { SecurityMonitoringContentPackStateMeta, SecurityMonitoringContentPackStatesResponse: SecurityMonitoringContentPackStatesResponse, + SecurityMonitoringContentPackThreatIntelDetails: + SecurityMonitoringContentPackThreatIntelDetails, + SecurityMonitoringContentPackVulnerabilityDetails: + SecurityMonitoringContentPackVulnerabilityDetails, SecurityMonitoringCriticalAsset: SecurityMonitoringCriticalAsset, SecurityMonitoringCriticalAssetAttributes: SecurityMonitoringCriticalAssetAttributes,