2.0.0-beta.5 (2026-05-13)
Breaking Changes
- Function
*AutomationRulesClient.CreateOrUpdateparameter(s) have been changed from(ctx context.Context, resourceGroupName string, workspaceName string, automationRuleID string, options *AutomationRulesClientCreateOrUpdateOptions)to(ctx context.Context, resourceGroupName string, workspaceName string, automationRuleID string, automationRuleToUpsert AutomationRule, options *AutomationRulesClientCreateOrUpdateOptions) - Function
*SentinelOnboardingStatesClient.Createparameter(s) have been changed from(ctx context.Context, resourceGroupName string, workspaceName string, sentinelOnboardingStateName string, options *SentinelOnboardingStatesClientCreateOptions)to(ctx context.Context, resourceGroupName string, workspaceName string, sentinelOnboardingStateName string, sentinelOnboardingStateParameter SentinelOnboardingState, options *SentinelOnboardingStatesClientCreateOptions) - Function
*SourceControlClient.NewListRepositoriesPagerparameter(s) have been changed from(resourceGroupName string, workspaceName string, repoType RepoType, options *SourceControlClientListRepositoriesOptions)to(resourceGroupName string, workspaceName string, repositoryAccess RepositoryAccessProperties, options *SourceControlClientListRepositoriesOptions) - Function
*SourceControlsClient.Deleteparameter(s) have been changed from(ctx context.Context, resourceGroupName string, workspaceName string, sourceControlID string, options *SourceControlsClientDeleteOptions)to(ctx context.Context, resourceGroupName string, workspaceName string, sourceControlID string, repositoryAccess RepositoryAccessProperties, options *SourceControlsClientDeleteOptions) - Type of
AccountEntity.Kindhas been changed from*EntityKindto*EntityKindEnum - Type of
AzureResourceEntity.Kindhas been changed from*EntityKindto*EntityKindEnum - Type of
CloudApplicationEntity.Kindhas been changed from*EntityKindto*EntityKindEnum - Type of
DNSEntity.Kindhas been changed from*EntityKindto*EntityKindEnum - Type of
Entity.Kindhas been changed from*EntityKindto*EntityKindEnum - Type of
EntityQueriesClientListOptions.Kindhas been changed from*Enum13to*EntityQueryTemplateKind - Type of
EntityQueryTemplatesClientListOptions.Kindhas been changed from*Enum15to*EntityQueryTemplateKind - Type of
ExpansionResultAggregation.EntityKindhas been changed from*EntityKindto*EntityKindEnum - Type of
FileEntity.Kindhas been changed from*EntityKindto*EntityKindEnum - Type of
FileHashEntity.Kindhas been changed from*EntityKindto*EntityKindEnum - Type of
HostEntity.Kindhas been changed from*EntityKindto*EntityKindEnum - Type of
HuntingBookmark.Kindhas been changed from*EntityKindto*EntityKindEnum - Type of
IPEntity.Kindhas been changed from*EntityKindto*EntityKindEnum - Type of
IncidentEntitiesResultsMetadata.EntityKindhas been changed from*EntityKindto*EntityKindEnum - Type of
IoTDeviceEntity.Kindhas been changed from*EntityKindto*EntityKindEnum - Type of
MSTIDataConnectorDataTypesMicrosoftEmergingThreatFeed.LookbackPeriodhas been changed from*stringto*time.Time - Type of
MailClusterEntity.Kindhas been changed from*EntityKindto*EntityKindEnum - Type of
MailMessageEntity.Kindhas been changed from*EntityKindto*EntityKindEnum - Type of
MailboxEntity.Kindhas been changed from*EntityKindto*EntityKindEnum - Type of
MalwareEntity.Kindhas been changed from*EntityKindto*EntityKindEnum - Type of
MetadataProperties.Kindhas been changed from*Kindto*string - Type of
MetadataPropertiesPatch.Kindhas been changed from*Kindto*string - Type of
NicEntity.Kindhas been changed from*EntityKindto*EntityKindEnum - Type of
ProcessEntity.Kindhas been changed from*EntityKindto*EntityKindEnum - Type of
RegistryKeyEntity.Kindhas been changed from*EntityKindto*EntityKindEnum - Type of
RegistryValueEntity.Kindhas been changed from*EntityKindto*EntityKindEnum - Type of
SecurityAlert.Kindhas been changed from*EntityKindto*EntityKindEnum - Type of
SecurityGroupEntity.Kindhas been changed from*EntityKindto*EntityKindEnum - Type of
SubmissionMailEntity.Kindhas been changed from*EntityKindto*EntityKindEnum - Type of
ThreatIntelligenceIndicatorModel.Kindhas been changed from*ThreatIntelligenceResourceKindEnumto*ThreatIntelligenceResourceInnerKind - Type of
ThreatIntelligenceInformation.Kindhas been changed from*ThreatIntelligenceResourceKindEnumto*ThreatIntelligenceResourceInnerKind - Type of
ThreatIntelligenceSortingCriteria.SortOrderhas been changed from*ThreatIntelligenceSortingCriteriaEnumto*ThreatIntelligenceSortingOrder - Type of
URLEntity.Kindhas been changed from*EntityKindto*EntityKindEnum - Type of
Webhook.WebhookSecretUpdateTimehas been changed from*stringto*time.Time ContentTypeAnalyticRulefrom enumContentTypehas been removedOperatorAND,OperatorORfrom enumOperatorhas been removedRepoTypeDevOpsfrom enumRepoTypehas been removedSourceTypeLocalFile,SourceTypeRemoteStoragefrom enumSourceTypehas been removed- Enum
EntityKindhas been removed - Enum
Enum13has been removed - Enum
Enum15has been removed - Enum
ThreatIntelligenceResourceKindEnumhas been removed - Enum
ThreatIntelligenceSortingCriteriaEnumhas been removed - Function
*ClientFactory.NewDomainWhoisClienthas been removed - Function
*ClientFactory.NewIPGeodataClienthas been removed - Function
NewDomainWhoisClienthas been removed - Function
*DomainWhoisClient.Gethas been removed - Function
NewIPGeodataClienthas been removed - Function
*IPGeodataClient.Gethas been removed - Function
*IncidentsClient.CreateTeamhas been removed - Operation
*WatchlistsClient.CreateOrUpdatehas been changed to LRO, use*WatchlistsClient.BeginCreateOrUpdateinstead. - Operation
*WatchlistsClient.Deletehas been changed to LRO, use*WatchlistsClient.BeginDeleteinstead. - Operation
*EntitiesClient.Querieshas supported pagination, use*EntitiesClient.NewQueriesPagerinstead. - Operation
*ProductSettingsClient.Listhas supported pagination, use*ProductSettingsClient.NewListPagerinstead. - Struct
ContentPathMaphas been removed - Struct
MSTIDataConnectorDataTypesBingSafetyPhishingURLhas been removed - Struct
TeamPropertieshas been removed - Field
AutomationRuleToUpsertof structAutomationRulesClientCreateOrUpdateOptionshas been removed - Field
CityCf,CountryCf,StateCfof structEnrichmentIPGeodatahas been removed - Field
BingSafetyPhishingURLof structMSTIDataConnectorDataTypeshas been removed - Field
PathMappingof structRepositoryhas been removed - Field
SentinelOnboardingStateParameterof structSentinelOnboardingStatesClientCreateOptionshas been removed
Features Added
- Type of
WatchlistItemProperties.EntityMappinghas been changed frommap[string]anytoany - Type of
WatchlistItemProperties.ItemsKeyValuehas been changed frommap[string]anytoany - New value
ActionTypeAddIncidentTaskadded to enum typeActionType - New value
AutomationRulePropertyArrayConditionSupportedArrayConditionTypeAllItemsadded to enum typeAutomationRulePropertyArrayConditionSupportedArrayConditionType - New value
AutomationRulePropertyArrayConditionSupportedArrayTypeIncidentLabelsadded to enum typeAutomationRulePropertyArrayConditionSupportedArrayType - New value
AutomationRulePropertyConditionSupportedPropertyIncidentAlertTitle,AutomationRulePropertyConditionSupportedPropertyIncidentCustomDetectionRuleIDsadded to enum typeAutomationRulePropertyConditionSupportedProperty - New value
ContentTypeAnalyticsRule,ContentTypeAutomationRule,ContentTypeHuntingQuery,ContentTypeParser,ContentTypePlaybookadded to enum typeContentType - New value
DataConnectorKindGCP,DataConnectorKindMicrosoftPurviewInformationProtection,DataConnectorKindPremiumMicrosoftDefenderForThreatIntelligence,DataConnectorKindPurviewAudit,DataConnectorKindRestAPIPolleradded to enum typeDataConnectorKind - New value
EntityQueryTemplateKindAnomaly,EntityQueryTemplateKindBookmark,EntityQueryTemplateKindExpansion,EntityQueryTemplateKindGuidedInsight,EntityQueryTemplateKindInsight,EntityQueryTemplateKindSecurityAlertadded to enum typeEntityQueryTemplateKind - New value
KindCustomDetection,KindNotebook,KindResourcesDataConnector,KindStandalone,KindSummaryRuleadded to enum typeKind - New value
OperatorAfterAbsolute,OperatorAfterRelative,OperatorArrayContains,OperatorArrayNotContains,OperatorBeforeAbsolute,OperatorBeforeRelative,OperatorEquals,OperatorGreaterThan,OperatorGreaterThanEqual,OperatorIsFalse,OperatorIsNull,OperatorIsTrue,OperatorLessThan,OperatorLessThanEqual,OperatorNotEquals,OperatorOnOrAfterAbsolute,OperatorOnOrAfterRelative,OperatorOnOrBeforeAbsolute,OperatorOnOrBeforeRelative,OperatorStringContains,OperatorStringEndsWith,OperatorStringIsEmpty,OperatorStringNotContains,OperatorStringNotEndsWith,OperatorStringNotStartsWith,OperatorStringStartsWithadded to enum typeOperator - New value
RepoTypeAzureDevOpsadded to enum typeRepoType - New value
SourceTypeAzureStorage,SourceTypeLocaladded to enum typeSourceType - New enum type
AlertPropertywith valuesAlertPropertyAlertLink,AlertPropertyConfidenceLevel,AlertPropertyConfidenceScore,AlertPropertyExtendedLinks,AlertPropertyProductComponentName,AlertPropertyProductName,AlertPropertyProviderName,AlertPropertyRemediationSteps,AlertPropertySubTechniques,AlertPropertyTechniques - New enum type
BillingStatisticKindwith valuesBillingStatisticKindSapSolutionUsage - New enum type
CcpAuthTypewith valuesCcpAuthTypeAPIKey,CcpAuthTypeAWS,CcpAuthTypeBasic,CcpAuthTypeGCP,CcpAuthTypeGitHub,CcpAuthTypeJwtToken,CcpAuthTypeNone,CcpAuthTypeOAuth2,CcpAuthTypeOracle,CcpAuthTypeServiceBus,CcpAuthTypeSession - New enum type
Connectivewith valuesConnectiveAnd,ConnectiveOr - New enum type
DataConnectorDefinitionKindwith valuesDataConnectorDefinitionKindCustomizable - New enum type
EnrichmentTypewith valuesEnrichmentTypeMain - New enum type
EntityKindEnumwith valuesEntityKindEnumAccount,EntityKindEnumAzureResource,EntityKindEnumBookmark,EntityKindEnumCloudApplication,EntityKindEnumDNSResolution,EntityKindEnumFile,EntityKindEnumFileHash,EntityKindEnumHost,EntityKindEnumIP,EntityKindEnumIoTDevice,EntityKindEnumMailCluster,EntityKindEnumMailMessage,EntityKindEnumMailbox,EntityKindEnumMalware,EntityKindEnumNic,EntityKindEnumProcess,EntityKindEnumRegistryKey,EntityKindEnumRegistryValue,EntityKindEnumSecurityAlert,EntityKindEnumSecurityGroup,EntityKindEnumSubmissionMail,EntityKindEnumURL - New enum type
Flagwith valuesFlagFalse,FlagTrue - New enum type
HTTPMethodVerbwith valuesHTTPMethodVerbDELETE,HTTPMethodVerbGET,HTTPMethodVerbPOST,HTTPMethodVerbPUT - New enum type
HypothesisStatuswith valuesHypothesisStatusInvalidated,HypothesisStatusUnknown,HypothesisStatusValidated - New enum type
IncidentTaskStatuswith valuesIncidentTaskStatusCompleted,IncidentTaskStatusNew - New enum type
Modewith valuesModeDisabled,ModeEnabled - New enum type
MtpProviderwith valuesMtpProviderMicrosoftDefenderForCloudApps,MtpProviderMicrosoftDefenderForIdentity - New enum type
PackageKindwith valuesPackageKindSolution,PackageKindStandalone - New enum type
ProviderPermissionsScopewith valuesProviderPermissionsScopeResourceGroup,ProviderPermissionsScopeSubscription,ProviderPermissionsScopeWorkspace - New enum type
ProvisioningStatewith valuesProvisioningStateAccepted,ProvisioningStateCanceled,ProvisioningStateFailed,ProvisioningStateInProgress,ProvisioningStateSucceeded - New enum type
RepositoryAccessKindwith valuesRepositoryAccessKindApp,RepositoryAccessKindOAuth,RepositoryAccessKindPAT - New enum type
RestAPIPollerRequestPagingKindwith valuesRestAPIPollerRequestPagingKindCountBasedPaging,RestAPIPollerRequestPagingKindLinkHeader,RestAPIPollerRequestPagingKindNextPageToken,RestAPIPollerRequestPagingKindNextPageURL,RestAPIPollerRequestPagingKindOffset,RestAPIPollerRequestPagingKindPersistentLinkHeader,RestAPIPollerRequestPagingKindPersistentToken - New enum type
SortingDirectionwith valuesSortingDirectionASC,SortingDirectionDESC - New enum type
Statewith valuesStateActive,StateCompletedBySystem,StateCompletedByUser,StateDismissed,StateInProgress - New enum type
Statuswith valuesStatusActive,StatusApproved,StatusBacklog,StatusClosed,StatusFailed,StatusInProgress,StatusNew,StatusSucceeded - New enum type
TIObjectKindwith valuesTIObjectKindAttackPattern,TIObjectKindIdentity,TIObjectKindIndicator,TIObjectKindRelationship,TIObjectKindThreatActor - New enum type
ThreatIntelligenceResourceInnerKindwith valuesThreatIntelligenceResourceInnerKindIndicator - New enum type
ThreatIntelligenceSortingOrderwith valuesThreatIntelligenceSortingOrderAscending,ThreatIntelligenceSortingOrderDescending,ThreatIntelligenceSortingOrderUnsorted - New enum type
TiTypewith valuesTiTypeMain - New enum type
WarningCodewith valuesWarningCodeSourceControlDeletedWithWarnings,WarningCodeSourceControlWarningDeletePipelineFromAzureDevOps,WarningCodeSourceControlWarningDeleteRoleAssignment,WarningCodeSourceControlWarningDeleteServicePrincipal,WarningCodeSourceControlWarningDeleteWorkflowAndSecretFromGitHub - New function
*APIKeyAuthModel.GetCcpAuthConfig() *CcpAuthConfig - New function
*AWSAuthModel.GetCcpAuthConfig() *CcpAuthConfig - New function
NewAlertRuleClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*AlertRuleClient, error) - New function
*AlertRuleClient.BeginTriggerRuleRun(ctx context.Context, resourceGroupName string, workspaceName string, ruleID string, analyticsRuleRunTriggerParameter AnalyticsRuleRunTrigger, options *AlertRuleClientBeginTriggerRuleRunOptions) (*runtime.Poller[AlertRuleClientTriggerRuleRunResponse], error) - New function
*AttackPattern.GetTIObject() *TIObject - New function
*AutomationRuleAddIncidentTaskAction.GetAutomationRuleAction() *AutomationRuleAction - New function
*BasicAuthModel.GetCcpAuthConfig() *CcpAuthConfig - New function
*BillingStatistic.GetBillingStatistic() *BillingStatistic - New function
NewBillingStatisticsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*BillingStatisticsClient, error) - New function
*BillingStatisticsClient.Get(ctx context.Context, resourceGroupName string, workspaceName string, billingStatisticName string, options *BillingStatisticsClientGetOptions) (BillingStatisticsClientGetResponse, error) - New function
*BillingStatisticsClient.NewListPager(resourceGroupName string, workspaceName string, options *BillingStatisticsClientListOptions) *runtime.Pager[BillingStatisticsClientListResponse] - New function
*CcpAuthConfig.GetCcpAuthConfig() *CcpAuthConfig - New function
NewClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*Client, error) - New function
*Client.ListGeodataByIP(ctx context.Context, resourceGroupName string, workspaceName string, enrichmentType EnrichmentType, ipAddressBody EnrichmentIPAddressBody, options *ClientListGeodataByIPOptions) (ClientListGeodataByIPResponse, error) - New function
*Client.ListWhoisByDomain(ctx context.Context, resourceGroupName string, workspaceName string, enrichmentType EnrichmentType, domainBody EnrichmentDomainBody, options *ClientListWhoisByDomainOptions) (ClientListWhoisByDomainResponse, error) - New function
*ClientFactory.NewAlertRuleClient() *AlertRuleClient - New function
*ClientFactory.NewBillingStatisticsClient() *BillingStatisticsClient - New function
*ClientFactory.NewClient() *Client - New function
*ClientFactory.NewContentPackageClient() *ContentPackageClient - New function
*ClientFactory.NewContentPackagesClient() *ContentPackagesClient - New function
*ClientFactory.NewContentTemplateClient() *ContentTemplateClient - New function
*ClientFactory.NewContentTemplatesClient() *ContentTemplatesClient - New function
*ClientFactory.NewDataConnectorDefinitionsClient() *DataConnectorDefinitionsClient - New function
*ClientFactory.NewGetClient() *GetClient - New function
*ClientFactory.NewGetRecommendationsClient() *GetRecommendationsClient - New function
*ClientFactory.NewGetTriggeredAnalyticsRuleRunsClient() *GetTriggeredAnalyticsRuleRunsClient - New function
*ClientFactory.NewHuntCommentsClient() *HuntCommentsClient - New function
*ClientFactory.NewHuntRelationsClient() *HuntRelationsClient - New function
*ClientFactory.NewHuntsClient() *HuntsClient - New function
*ClientFactory.NewIncidentTasksClient() *IncidentTasksClient - New function
*ClientFactory.NewProductPackageClient() *ProductPackageClient - New function
*ClientFactory.NewProductPackagesClient() *ProductPackagesClient - New function
*ClientFactory.NewProductTemplateClient() *ProductTemplateClient - New function
*ClientFactory.NewProductTemplatesClient() *ProductTemplatesClient - New function
*ClientFactory.NewReevaluateClient() *ReevaluateClient - New function
*ClientFactory.NewThreatIntelligenceClient() *ThreatIntelligenceClient - New function
*ClientFactory.NewTriggeredAnalyticsRuleRunClient() *TriggeredAnalyticsRuleRunClient - New function
*ClientFactory.NewUpdateClient() *UpdateClient - New function
*ClientFactory.NewWorkspaceManagerAssignmentJobsClient() *WorkspaceManagerAssignmentJobsClient - New function
*ClientFactory.NewWorkspaceManagerAssignmentsClient() *WorkspaceManagerAssignmentsClient - New function
*ClientFactory.NewWorkspaceManagerConfigurationsClient() *WorkspaceManagerConfigurationsClient - New function
*ClientFactory.NewWorkspaceManagerGroupsClient() *WorkspaceManagerGroupsClient - New function
*ClientFactory.NewWorkspaceManagerMembersClient() *WorkspaceManagerMembersClient - New function
NewContentPackageClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*ContentPackageClient, error) - New function
*ContentPackageClient.Install(ctx context.Context, resourceGroupName string, workspaceName string, packageID string, packageInstallationProperties PackageModel, options *ContentPackageClientInstallOptions) (ContentPackageClientInstallResponse, error) - New function
*ContentPackageClient.Uninstall(ctx context.Context, resourceGroupName string, workspaceName string, packageID string, options *ContentPackageClientUninstallOptions) (ContentPackageClientUninstallResponse, error) - New function
NewContentPackagesClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*ContentPackagesClient, error) - New function
*ContentPackagesClient.Get(ctx context.Context, resourceGroupName string, workspaceName string, packageID string, options *ContentPackagesClientGetOptions) (ContentPackagesClientGetResponse, error) - New function
*ContentPackagesClient.NewListPager(resourceGroupName string, workspaceName string, options *ContentPackagesClientListOptions) *runtime.Pager[ContentPackagesClientListResponse] - New function
NewContentTemplateClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*ContentTemplateClient, error) - New function
*ContentTemplateClient.Delete(ctx context.Context, resourceGroupName string, workspaceName string, templateID string, options *ContentTemplateClientDeleteOptions) (ContentTemplateClientDeleteResponse, error) - New function
*ContentTemplateClient.Get(ctx context.Context, resourceGroupName string, workspaceName string, templateID string, options *ContentTemplateClientGetOptions) (ContentTemplateClientGetResponse, error) - New function
*ContentTemplateClient.Install(ctx context.Context, resourceGroupName string, workspaceName string, templateID string, templateInstallationProperties TemplateModel, options *ContentTemplateClientInstallOptions) (ContentTemplateClientInstallResponse, error) - New function
NewContentTemplatesClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*ContentTemplatesClient, error) - New function
*ContentTemplatesClient.NewListPager(resourceGroupName string, workspaceName string, options *ContentTemplatesClientListOptions) *runtime.Pager[ContentTemplatesClientListResponse] - New function
*CustomizableConnectorDefinition.GetDataConnectorDefinition() *DataConnectorDefinition - New function
*DataConnectorDefinition.GetDataConnectorDefinition() *DataConnectorDefinition - New function
NewDataConnectorDefinitionsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*DataConnectorDefinitionsClient, error) - New function
*DataConnectorDefinitionsClient.CreateOrUpdate(ctx context.Context, resourceGroupName string, workspaceName string, dataConnectorDefinitionName string, connectorDefinitionInput DataConnectorDefinitionClassification, options *DataConnectorDefinitionsClientCreateOrUpdateOptions) (DataConnectorDefinitionsClientCreateOrUpdateResponse, error) - New function
*DataConnectorDefinitionsClient.Delete(ctx context.Context, resourceGroupName string, workspaceName string, dataConnectorDefinitionName string, options *DataConnectorDefinitionsClientDeleteOptions) (DataConnectorDefinitionsClientDeleteResponse, error) - New function
*DataConnectorDefinitionsClient.Get(ctx context.Context, resourceGroupName string, workspaceName string, dataConnectorDefinitionName string, options *DataConnectorDefinitionsClientGetOptions) (DataConnectorDefinitionsClientGetResponse, error) - New function
*DataConnectorDefinitionsClient.NewListPager(resourceGroupName string, workspaceName string, options *DataConnectorDefinitionsClientListOptions) *runtime.Pager[DataConnectorDefinitionsClientListResponse] - New function
*EntitiesClient.RunPlaybook(ctx context.Context, resourceGroupName string, workspaceName string, entityIdentifier string, options *EntitiesClientRunPlaybookOptions) (EntitiesClientRunPlaybookResponse, error) - New function
*GCPAuthModel.GetCcpAuthConfig() *CcpAuthConfig - New function
*GCPDataConnector.GetDataConnector() *DataConnector - New function
*GenericBlobSbsAuthModel.GetCcpAuthConfig() *CcpAuthConfig - New function
NewGetClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*GetClient, error) - New function
*GetClient.SingleRecommendation(ctx context.Context, resourceGroupName string, workspaceName string, recommendationID string, options *GetClientSingleRecommendationOptions) (GetClientSingleRecommendationResponse, error) - New function
NewGetRecommendationsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*GetRecommendationsClient, error) - New function
*GetRecommendationsClient.NewListPager(resourceGroupName string, workspaceName string, options *GetRecommendationsClientListOptions) *runtime.Pager[GetRecommendationsClientListResponse] - New function
NewGetTriggeredAnalyticsRuleRunsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*GetTriggeredAnalyticsRuleRunsClient, error) - New function
*GetTriggeredAnalyticsRuleRunsClient.NewListPager(resourceGroupName string, workspaceName string, options *GetTriggeredAnalyticsRuleRunsClientListOptions) *runtime.Pager[GetTriggeredAnalyticsRuleRunsClientListResponse] - New function
*GitHubAuthModel.GetCcpAuthConfig() *CcpAuthConfig - New function
NewHuntCommentsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*HuntCommentsClient, error) - New function
*HuntCommentsClient.CreateOrUpdate(ctx context.Context, resourceGroupName string, workspaceName string, huntID string, huntCommentID string, huntComment HuntComment, options *HuntCommentsClientCreateOrUpdateOptions) (HuntCommentsClientCreateOrUpdateResponse, error) - New function
*HuntCommentsClient.Delete(ctx context.Context, resourceGroupName string, workspaceName string, huntID string, huntCommentID string, options *HuntCommentsClientDeleteOptions) (HuntCommentsClientDeleteResponse, error) - New function
*HuntCommentsClient.Get(ctx context.Context, resourceGroupName string, workspaceName string, huntID string, huntCommentID string, options *HuntCommentsClientGetOptions) (HuntCommentsClientGetResponse, error) - New function
*HuntCommentsClient.NewListPager(resourceGroupName string, workspaceName string, huntID string, options *HuntCommentsClientListOptions) *runtime.Pager[HuntCommentsClientListResponse] - New function
NewHuntRelationsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*HuntRelationsClient, error) - New function
*HuntRelationsClient.CreateOrUpdate(ctx context.Context, resourceGroupName string, workspaceName string, huntID string, huntRelationID string, huntRelation HuntRelation, options *HuntRelationsClientCreateOrUpdateOptions) (HuntRelationsClientCreateOrUpdateResponse, error) - New function
*HuntRelationsClient.Delete(ctx context.Context, resourceGroupName string, workspaceName string, huntID string, huntRelationID string, options *HuntRelationsClientDeleteOptions) (HuntRelationsClientDeleteResponse, error) - New function
*HuntRelationsClient.Get(ctx context.Context, resourceGroupName string, workspaceName string, huntID string, huntRelationID string, options *HuntRelationsClientGetOptions) (HuntRelationsClientGetResponse, error) - New function
*HuntRelationsClient.NewListPager(resourceGroupName string, workspaceName string, huntID string, options *HuntRelationsClientListOptions) *runtime.Pager[HuntRelationsClientListResponse] - New function
NewHuntsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*HuntsClient, error) - New function
*HuntsClient.CreateOrUpdate(ctx context.Context, resourceGroupName string, workspaceName string, huntID string, hunt Hunt, options *HuntsClientCreateOrUpdateOptions) (HuntsClientCreateOrUpdateResponse, error) - New function
*HuntsClient.Delete(ctx context.Context, resourceGroupName string, workspaceName string, huntID string, options *HuntsClientDeleteOptions) (HuntsClientDeleteResponse, error) - New function
*HuntsClient.Get(ctx context.Context, resourceGroupName string, workspaceName string, huntID string, options *HuntsClientGetOptions) (HuntsClientGetResponse, error) - New function
*HuntsClient.NewListPager(resourceGroupName string, workspaceName string, options *HuntsClientListOptions) *runtime.Pager[HuntsClientListResponse] - New function
*Identity.GetTIObject() *TIObject - New function
NewIncidentTasksClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*IncidentTasksClient, error) - New function
*IncidentTasksClient.CreateOrUpdate(ctx context.Context, resourceGroupName string, workspaceName string, incidentID string, incidentTaskID string, incidentTask IncidentTask, options *IncidentTasksClientCreateOrUpdateOptions) (IncidentTasksClientCreateOrUpdateResponse, error) - New function
*IncidentTasksClient.Delete(ctx context.Context, resourceGroupName string, workspaceName string, incidentID string, incidentTaskID string, options *IncidentTasksClientDeleteOptions) (IncidentTasksClientDeleteResponse, error) - New function
*IncidentTasksClient.Get(ctx context.Context, resourceGroupName string, workspaceName string, incidentID string, incidentTaskID string, options *IncidentTasksClientGetOptions) (IncidentTasksClientGetResponse, error) - New function
*IncidentTasksClient.NewListPager(resourceGroupName string, workspaceName string, incidentID string, options *IncidentTasksClientListOptions) *runtime.Pager[IncidentTasksClientListResponse] - New function
*Indicator.GetTIObject() *TIObject - New function
*JwtAuthModel.GetCcpAuthConfig() *CcpAuthConfig - New function
*MicrosoftPurviewInformationProtectionCheckRequirements.GetDataConnectorsCheckRequirements() *DataConnectorsCheckRequirements - New function
*MicrosoftPurviewInformationProtectionDataConnector.GetDataConnector() *DataConnector - New function
*OAuthModel.GetCcpAuthConfig() *CcpAuthConfig - New function
*OracleAuthModel.GetCcpAuthConfig() *CcpAuthConfig - New function
*PremiumMicrosoftDefenderForThreatIntelligence.GetDataConnector() *DataConnector - New function
NewProductPackageClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*ProductPackageClient, error) - New function
*ProductPackageClient.Get(ctx context.Context, resourceGroupName string, workspaceName string, packageID string, options *ProductPackageClientGetOptions) (ProductPackageClientGetResponse, error) - New function
NewProductPackagesClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*ProductPackagesClient, error) - New function
*ProductPackagesClient.NewListPager(resourceGroupName string, workspaceName string, options *ProductPackagesClientListOptions) *runtime.Pager[ProductPackagesClientListResponse] - New function
NewProductTemplateClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*ProductTemplateClient, error) - New function
*ProductTemplateClient.Get(ctx context.Context, resourceGroupName string, workspaceName string, templateID string, options *ProductTemplateClientGetOptions) (ProductTemplateClientGetResponse, error) - New function
NewProductTemplatesClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*ProductTemplatesClient, error) - New function
*ProductTemplatesClient.NewListPager(resourceGroupName string, workspaceName string, options *ProductTemplatesClientListOptions) *runtime.Pager[ProductTemplatesClientListResponse] - New function
*PurviewAuditCheckRequirements.GetDataConnectorsCheckRequirements() *DataConnectorsCheckRequirements - New function
*PurviewAuditDataConnector.GetDataConnector() *DataConnector - New function
NewReevaluateClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*ReevaluateClient, error) - New function
*ReevaluateClient.Recommendation(ctx context.Context, resourceGroupName string, workspaceName string, recommendationID string, options *ReevaluateClientRecommendationOptions) (ReevaluateClientRecommendationResponse, error) - New function
*Relationship.GetTIObject() *TIObject - New function
*RestAPIPollerDataConnector.GetDataConnector() *DataConnector - New function
*SapSolutionUsageStatistic.GetBillingStatistic() *BillingStatistic - New function
*SessionAuthModel.GetCcpAuthConfig() *CcpAuthConfig - New function
*TIObject.GetTIObject() *TIObject - New function
*ThreatActor.GetTIObject() *TIObject - New function
NewThreatIntelligenceClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*ThreatIntelligenceClient, error) - New function
*ThreatIntelligenceClient.Count(ctx context.Context, resourceGroupName string, workspaceName string, tiType TiType, options *ThreatIntelligenceClientCountOptions) (ThreatIntelligenceClientCountResponse, error) - New function
*ThreatIntelligenceClient.NewQueryPager(resourceGroupName string, workspaceName string, tiType TiType, options *ThreatIntelligenceClientQueryOptions) *runtime.Pager[ThreatIntelligenceClientQueryResponse] - New function
NewTriggeredAnalyticsRuleRunClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*TriggeredAnalyticsRuleRunClient, error) - New function
*TriggeredAnalyticsRuleRunClient.Get(ctx context.Context, resourceGroupName string, workspaceName string, ruleRunID string, options *TriggeredAnalyticsRuleRunClientGetOptions) (TriggeredAnalyticsRuleRunClientGetResponse, error) - New function
NewUpdateClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*UpdateClient, error) - New function
*UpdateClient.Recommendation(ctx context.Context, resourceGroupName string, workspaceName string, recommendationID string, recommendationPatch RecommendationPatch, options *UpdateClientRecommendationOptions) (UpdateClientRecommendationResponse, error) - New function
NewWorkspaceManagerAssignmentJobsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*WorkspaceManagerAssignmentJobsClient, error) - New function
*WorkspaceManagerAssignmentJobsClient.Create(ctx context.Context, resourceGroupName string, workspaceName string, workspaceManagerAssignmentName string, options *WorkspaceManagerAssignmentJobsClientCreateOptions) (WorkspaceManagerAssignmentJobsClientCreateResponse, error) - New function
*WorkspaceManagerAssignmentJobsClient.Delete(ctx context.Context, resourceGroupName string, workspaceName string, workspaceManagerAssignmentName string, jobName string, options *WorkspaceManagerAssignmentJobsClientDeleteOptions) (WorkspaceManagerAssignmentJobsClientDeleteResponse, error) - New function
*WorkspaceManagerAssignmentJobsClient.Get(ctx context.Context, resourceGroupName string, workspaceName string, workspaceManagerAssignmentName string, jobName string, options *WorkspaceManagerAssignmentJobsClientGetOptions) (WorkspaceManagerAssignmentJobsClientGetResponse, error) - New function
*WorkspaceManagerAssignmentJobsClient.NewListPager(resourceGroupName string, workspaceName string, workspaceManagerAssignmentName string, options *WorkspaceManagerAssignmentJobsClientListOptions) *runtime.Pager[WorkspaceManagerAssignmentJobsClientListResponse] - New function
NewWorkspaceManagerAssignmentsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*WorkspaceManagerAssignmentsClient, error) - New function
*WorkspaceManagerAssignmentsClient.CreateOrUpdate(ctx context.Context, resourceGroupName string, workspaceName string, workspaceManagerAssignmentName string, workspaceManagerAssignment WorkspaceManagerAssignment, options *WorkspaceManagerAssignmentsClientCreateOrUpdateOptions) (WorkspaceManagerAssignmentsClientCreateOrUpdateResponse, error) - New function
*WorkspaceManagerAssignmentsClient.Delete(ctx context.Context, resourceGroupName string, workspaceName string, workspaceManagerAssignmentName string, options *WorkspaceManagerAssignmentsClientDeleteOptions) (WorkspaceManagerAssignmentsClientDeleteResponse, error) - New function
*WorkspaceManagerAssignmentsClient.Get(ctx context.Context, resourceGroupName string, workspaceName string, workspaceManagerAssignmentName string, options *WorkspaceManagerAssignmentsClientGetOptions) (WorkspaceManagerAssignmentsClientGetResponse, error) - New function
*WorkspaceManagerAssignmentsClient.NewListPager(resourceGroupName string, workspaceName string, options *WorkspaceManagerAssignmentsClientListOptions) *runtime.Pager[WorkspaceManagerAssignmentsClientListResponse] - New function
NewWorkspaceManagerConfigurationsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*WorkspaceManagerConfigurationsClient, error) - New function
*WorkspaceManagerConfigurationsClient.CreateOrUpdate(ctx context.Context, resourceGroupName string, workspaceName string, workspaceManagerConfigurationName string, workspaceManagerConfiguration WorkspaceManagerConfiguration, options *WorkspaceManagerConfigurationsClientCreateOrUpdateOptions) (WorkspaceManagerConfigurationsClientCreateOrUpdateResponse, error) - New function
*WorkspaceManagerConfigurationsClient.Delete(ctx context.Context, resourceGroupName string, workspaceName string, workspaceManagerConfigurationName string, options *WorkspaceManagerConfigurationsClientDeleteOptions) (WorkspaceManagerConfigurationsClientDeleteResponse, error) - New function
*WorkspaceManagerConfigurationsClient.Get(ctx context.Context, resourceGroupName string, workspaceName string, workspaceManagerConfigurationName string, options *WorkspaceManagerConfigurationsClientGetOptions) (WorkspaceManagerConfigurationsClientGetResponse, error) - New function
*WorkspaceManagerConfigurationsClient.NewListPager(resourceGroupName string, workspaceName string, options *WorkspaceManagerConfigurationsClientListOptions) *runtime.Pager[WorkspaceManagerConfigurationsClientListResponse] - New function
NewWorkspaceManagerGroupsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*WorkspaceManagerGroupsClient, error) - New function
*WorkspaceManagerGroupsClient.CreateOrUpdate(ctx context.Context, resourceGroupName string, workspaceName string, workspaceManagerGroupName string, workspaceManagerGroup WorkspaceManagerGroup, options *WorkspaceManagerGroupsClientCreateOrUpdateOptions) (WorkspaceManagerGroupsClientCreateOrUpdateResponse, error) - New function
*WorkspaceManagerGroupsClient.Delete(ctx context.Context, resourceGroupName string, workspaceName string, workspaceManagerGroupName string, options *WorkspaceManagerGroupsClientDeleteOptions) (WorkspaceManagerGroupsClientDeleteResponse, error) - New function
*WorkspaceManagerGroupsClient.Get(ctx context.Context, resourceGroupName string, workspaceName string, workspaceManagerGroupName string, options *WorkspaceManagerGroupsClientGetOptions) (WorkspaceManagerGroupsClientGetResponse, error) - New function
*WorkspaceManagerGroupsClient.NewListPager(resourceGroupName string, workspaceName string, options *WorkspaceManagerGroupsClientListOptions) *runtime.Pager[WorkspaceManagerGroupsClientListResponse] - New function
NewWorkspaceManagerMembersClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*WorkspaceManagerMembersClient, error) - New function
*WorkspaceManagerMembersClient.CreateOrUpdate(ctx context.Context, resourceGroupName string, workspaceName string, workspaceManagerMemberName string, workspaceManagerMember WorkspaceManagerMember, options *WorkspaceManagerMembersClientCreateOrUpdateOptions) (WorkspaceManagerMembersClientCreateOrUpdateResponse, error) - New function
*WorkspaceManagerMembersClient.Delete(ctx context.Context, resourceGroupName string, workspaceName string, workspaceManagerMemberName string, options *WorkspaceManagerMembersClientDeleteOptions) (WorkspaceManagerMembersClientDeleteResponse, error) - New function
*WorkspaceManagerMembersClient.Get(ctx context.Context, resourceGroupName string, workspaceName string, workspaceManagerMemberName string, options *WorkspaceManagerMembersClientGetOptions) (WorkspaceManagerMembersClientGetResponse, error) - New function
*WorkspaceManagerMembersClient.NewListPager(resourceGroupName string, workspaceName string, options *WorkspaceManagerMembersClientListOptions) *runtime.Pager[WorkspaceManagerMembersClientListResponse] - New function
*NoneAuthModel.GetCcpAuthConfig() *CcpAuthConfig - New struct
APIKeyAuthModel - New struct
AWSAuthModel - New struct
AddIncidentTaskActionProperties - New struct
AlertPropertyMapping - New struct
AnalyticsRuleRunTrigger - New struct
AnalyticsRuleRunTriggerProperties - New struct
AssignmentItem - New struct
AttackPattern - New struct
AutomationRuleAddIncidentTaskAction - New struct
BasicAuthModel - New struct
BillingStatisticList - New struct
CcpResponseConfig - New struct
ConditionClause - New struct
ConditionProperties - New struct
ConnectivityCriterion - New struct
ConnectorDataType - New struct
ConnectorDefinitionsAvailability - New struct
ConnectorDefinitionsPermissions - New struct
ConnectorDefinitionsResourceProvider - New struct
CountQuery - New struct
CustomPermissionDetails - New struct
CustomizableConnectionsConfig - New struct
CustomizableConnectorDefinition - New struct
CustomizableConnectorDefinitionProperties - New struct
CustomizableConnectorUIConfig - New struct
DCRConfiguration - New struct
DataConnectorDefinitionArmCollectionWrapper - New struct
EnrichmentDomainBody - New struct
EnrichmentIPAddressBody - New struct
EntityManualTriggerRequestBody - New struct
Error - New struct
GCPAuthModel - New struct
GCPAuthProperties - New struct
GCPDataConnector - New struct
GCPDataConnectorProperties - New struct
GCPRequestProperties - New struct
GenericBlobSbsAuthModel - New struct
GitHubAuthModel - New struct
GraphQuery - New struct
Hunt - New struct
HuntComment - New struct
HuntCommentList - New struct
HuntCommentProperties - New struct
HuntList - New struct
HuntOwner - New struct
HuntProperties - New struct
HuntRelation - New struct
HuntRelationList - New struct
HuntRelationProperties - New struct
Identity - New struct
IncidentTask - New struct
IncidentTaskList - New struct
IncidentTaskProperties - New struct
Indicator - New struct
IndicatorObservablesItem - New struct
InstructionStep - New struct
InstructionStepDetails - New struct
Job - New struct
JobItem - New struct
JobList - New struct
JobProperties - New struct
JwtAuthModel - New struct
MTPDataConnectorDataTypesAlerts - New struct
MicrosoftPurviewInformationProtectionCheckRequirements - New struct
MicrosoftPurviewInformationProtectionCheckRequirementsProperties - New struct
MicrosoftPurviewInformationProtectionConnectorDataTypes - New struct
MicrosoftPurviewInformationProtectionConnectorDataTypesLogs - New struct
MicrosoftPurviewInformationProtectionDataConnector - New struct
MicrosoftPurviewInformationProtectionDataConnectorProperties - New struct
MtpFilteredProviders - New struct
NoneAuthModel - New struct
OAuthModel - New struct
OracleAuthModel - New struct
PackageList - New struct
PackageModel - New struct
PackageProperties - New struct
PremiumMdtiDataConnectorDataTypes - New struct
PremiumMdtiDataConnectorDataTypesConnector - New struct
PremiumMdtiDataConnectorProperties - New struct
PremiumMicrosoftDefenderForThreatIntelligence - New struct
ProductPackageList - New struct
ProductPackageModel - New struct
ProductPackageProperties - New struct
ProductTemplateList - New struct
ProductTemplateModel - New struct
ProductTemplateProperties - New struct
PullRequest - New struct
PurviewAuditCheckRequirements - New struct
PurviewAuditCheckRequirementsProperties - New struct
PurviewAuditConnectorDataTypes - New struct
PurviewAuditConnectorDataTypesLogs - New struct
PurviewAuditDataConnector - New struct
PurviewAuditDataConnectorProperties - New struct
Query - New struct
QueryCondition - New struct
QueryProperties - New struct
QuerySortBy - New struct
Recommendation - New struct
RecommendationList - New struct
RecommendationPatch - New struct
RecommendationPatchProperties - New struct
RecommendationProperties - New struct
RecommendedSuggestion - New struct
ReevaluateResponse - New struct
Relationship - New struct
RelationshipHint - New struct
RepositoryAccess - New struct
RepositoryAccessObject - New struct
RepositoryAccessProperties - New struct
ResourceProviderRequiredPermissions - New struct
RestAPIPollerDataConnector - New struct
RestAPIPollerDataConnectorProperties - New struct
RestAPIPollerRequestConfig - New struct
RestAPIPollerRequestPagingConfig - New struct
SapSolutionUsageStatistic - New struct
SapSolutionUsageStatisticProperties - New struct
SentinelEntityMapping - New struct
ServicePrincipal - New struct
SessionAuthModel - New struct
TIObjectCommonProperties - New struct
TemplateList - New struct
TemplateModel - New struct
TemplateProperties - New struct
ThreatActor - New struct
ThreatIntelligenceCount - New struct
ThreatIntelligenceList - New struct
TriggeredAnalyticsRuleRun - New struct
TriggeredAnalyticsRuleRunProperties - New struct
TriggeredAnalyticsRuleRuns - New struct
Warning - New struct
WarningBody - New struct
WorkloadIdentityFederation - New struct
WorkspaceManagerAssignment - New struct
WorkspaceManagerAssignmentList - New struct
WorkspaceManagerAssignmentProperties - New struct
WorkspaceManagerConfiguration - New struct
WorkspaceManagerConfigurationList - New struct
WorkspaceManagerConfigurationProperties - New struct
WorkspaceManagerGroup - New struct
WorkspaceManagerGroupList - New struct
WorkspaceManagerGroupProperties - New struct
WorkspaceManagerMember - New struct
WorkspaceManagerMemberProperties - New struct
WorkspaceManagerMembersList - New field
AlertDynamicPropertiesin structAlertDetailsOverride - New field
CityConfidenceFactor,CountryConfidenceFactor,StateConfidenceFactorin structEnrichmentIPGeodata - New field
SubTechniquesin structFusionAlertRuleProperties - New field
SubTechniquesin structFusionAlertRuleTemplateProperties - New field
NextLinkin structGetQueriesResponse - New field
MergedIncidentNumber,MergedIncidentURLin structIncidentAdditionalData - New field
SubTechniquesin structMLBehaviorAnalyticsAlertRuleProperties - New field
Alertsin structMTPDataConnectorDataTypes - New field
FilteredProvidersin structMTPDataConnectorProperties - New field
SentinelEntitiesMappings,SubTechniquesin structNrtAlertRuleProperties - New field
SentinelEntitiesMappingsin structNrtAlertRuleTemplateProperties - New field
InstallationIDin structRepo - New field
SentinelEntitiesMappings,SubTechniquesin structScheduledAlertRuleProperties - New field
SentinelEntitiesMappings,SubTechniquesin structScheduledAlertRuleTemplateProperties - New field
Intent,Techniquesin structSecurityAlertTimelineItem - New field
NextLinkin structSettingList - New field
PullRequest,RepositoryAccess,ServicePrincipal,WorkloadIdentityFederationin structSourceControlProperties - New anonymous field
Warningin structSourceControlsClientDeleteResponse - New field
SubTechniquesin structThreatIntelligenceAlertRuleProperties - New field
ProvisioningStatein structWatchlistProperties