2.0.0b3 (2026-05-27)
Features Added
- Enum
AlertPropertyadded memberSUB_TECHNIQUES - Enum
AutomationRulePropertyArrayConditionSupportedArrayConditionTypeadded memberALL_ITEMS - Enum
AutomationRulePropertyArrayConditionSupportedArrayTypeadded memberINCIDENT_LABELS - Enum
AutomationRulePropertyConditionSupportedPropertyadded memberINCIDENT_ALERT_TITLE - Enum
AutomationRulePropertyConditionSupportedPropertyadded memberINCIDENT_CUSTOM_DETECTION_RULE_IDS - Enum
ContentTypeadded memberANALYTICS_RULE - Enum
ContentTypeadded memberAUTOMATION_RULE - Enum
ContentTypeadded memberHUNTING_QUERY - Enum
ContentTypeadded memberPARSER - Enum
ContentTypeadded memberPLAYBOOK - Enum
DataConnectorKindadded memberGCP - Enum
DataConnectorKindadded memberMICROSOFT_PURVIEW_INFORMATION_PROTECTION - Enum
DataConnectorKindadded memberPREMIUM_MICROSOFT_DEFENDER_FOR_THREAT_INTELLIGENCE - Enum
DataConnectorKindadded memberPURVIEW_AUDIT - Enum
DataConnectorKindadded memberREST_API_POLLER - Enum
EntityQueryTemplateKindadded memberANOMALY - Enum
EntityQueryTemplateKindadded memberBOOKMARK - Enum
EntityQueryTemplateKindadded memberEXPANSION - Enum
EntityQueryTemplateKindadded memberGUIDED_INSIGHT - Enum
EntityQueryTemplateKindadded memberINSIGHT - Enum
EntityQueryTemplateKindadded memberSECURITY_ALERT - Model
IncidentAdditionalDataadded propertymerged_incident_number - Model
IncidentAdditionalDataadded propertymerged_incident_url - Enum
Kindadded memberCUSTOM_DETECTION - Enum
Kindadded memberNOTEBOOK - Enum
Kindadded memberRESOURCES_DATA_CONNECTOR - Enum
Kindadded memberSTANDALONE - Enum
Kindadded memberSUMMARY_RULE - Model
MTPDataConnectorDataTypesadded propertyalerts - Model
MTPDataConnectorPropertiesadded propertyfiltered_providers - Enum
Operatoradded memberAFTER_ABSOLUTE - Enum
Operatoradded memberAFTER_RELATIVE - Enum
Operatoradded memberARRAY_CONTAINS - Enum
Operatoradded memberARRAY_NOT_CONTAINS - Enum
Operatoradded memberBEFORE_ABSOLUTE - Enum
Operatoradded memberBEFORE_RELATIVE - Enum
Operatoradded memberEQUALS - Enum
Operatoradded memberGREATER_THAN - Enum
Operatoradded memberGREATER_THAN_EQUAL - Enum
Operatoradded memberIS_FALSE - Enum
Operatoradded memberIS_NULL - Enum
Operatoradded memberIS_TRUE - Enum
Operatoradded memberLESS_THAN - Enum
Operatoradded memberLESS_THAN_EQUAL - Enum
Operatoradded memberNOT_EQUALS - Enum
Operatoradded memberON_OR_AFTER_ABSOLUTE - Enum
Operatoradded memberON_OR_AFTER_RELATIVE - Enum
Operatoradded memberON_OR_BEFORE_ABSOLUTE - Enum
Operatoradded memberON_OR_BEFORE_RELATIVE - Enum
Operatoradded memberSTRING_CONTAINS - Enum
Operatoradded memberSTRING_ENDS_WITH - Enum
Operatoradded memberSTRING_IS_EMPTY - Enum
Operatoradded memberSTRING_NOT_CONTAINS - Enum
Operatoradded memberSTRING_NOT_ENDS_WITH - Enum
Operatoradded memberSTRING_NOT_STARTS_WITH - Enum
Operatoradded memberSTRING_STARTS_WITH - Model
Recommendationadded propertyetag - Model
Recommendationadded propertyname - Model
Recommendationadded propertytype - Model
Recommendationadded propertysystem_data - Model
Repoadded propertyinstallation_id - Enum
RepoTypeadded memberAZURE_DEV_OPS - Model
ScheduledAlertRulePropertiesadded propertysub_techniques - Enum
SourceTypeadded memberAZURE_STORAGE - Enum
SourceTypeadded memberLOCAL - Enum
Stateadded memberCOMPLETED_BY_SYSTEM - Enum
Stateadded memberDISMISSED - Enum
Stateadded memberIN_PROGRESS - Added model
AWSAuthModel - Added model
AnalyticsRuleRunTrigger - Added model
AnalyticsRuleRunTriggerProperties - Added model
ApiKeyAuthModel - Added model
AssignmentItem - Added model
AttackPattern - Added model
BasicAuthModel - Added model
BillingStatistic - Added enum
BillingStatisticKind - Added model
CcpAuthConfig - Added enum
CcpAuthType - Added model
CcpResponseConfig - Added model
CloudError - Added model
ConditionClause - Added model
ConditionProperties - Added enum
Connective - Added model
ConnectivityCriterion - Added model
ConnectorDataType - Added model
ConnectorDefinitionsAvailability - Added model
ConnectorDefinitionsPermissions - Added model
ConnectorDefinitionsResourceProvider - Added model
CountQuery - Added model
CustomPermissionDetails - Added model
CustomizableConnectionsConfig - Added model
CustomizableConnectorDefinition - Added model
CustomizableConnectorDefinitionProperties - Added model
CustomizableConnectorUiConfig - Added model
DCRConfiguration - Added model
DataConnectorDefinition - Added enum
DataConnectorDefinitionKind - Added model
EnrichmentDomainBody - Added model
EnrichmentIpAddressBody - Added enum
EnrichmentType - Added model
EntityManualTriggerRequestBody - Added model
Error - Added model
ErrorAdditionalInfo - Added model
ErrorDetail - Added model
ErrorResponse - Added enum
Flag - Added model
GCPAuthModel - Added model
GCPAuthProperties - Added model
GCPDataConnector - Added model
GCPDataConnectorProperties - Added model
GCPRequestProperties - Added model
GenericBlobSbsAuthModel - Added model
GitHubAuthModel - Added model
GraphQuery - Added enum
HttpMethodVerb - Added model
Hunt - Added model
HuntComment - Added model
HuntCommentProperties - Added model
HuntOwner - Added model
HuntProperties - Added model
HuntRelation - Added model
HuntRelationProperties - Added enum
HypothesisStatus - Added model
Identity - Added model
Indicator - Added model
IndicatorObservablesItem - Added model
InstructionStep - Added model
InstructionStepDetails - Added model
Job - Added model
JobItem - Added model
JobProperties - Added model
JwtAuthModel - Added model
MTPDataConnectorDataTypesAlerts - Added model
MicrosoftPurviewInformationProtectionCheckRequirements - Added model
MicrosoftPurviewInformationProtectionCheckRequirementsProperties - Added model
MicrosoftPurviewInformationProtectionConnectorDataTypes - Added model
MicrosoftPurviewInformationProtectionConnectorDataTypesLogs - Added model
MicrosoftPurviewInformationProtectionDataConnector - Added model
MicrosoftPurviewInformationProtectionDataConnectorProperties - Added enum
Mode - Added model
MtpFilteredProviders - Added enum
MtpProvider - Added model
NoneAuthModel - Added model
OAuthModel - Added model
OracleAuthModel - Added model
PackageBaseProperties - Added enum
PackageKind - Added model
PackageModel - Added model
PackageProperties - Added model
PremiumMdtiDataConnectorDataTypes - Added model
PremiumMdtiDataConnectorDataTypesConnector - Added model
PremiumMdtiDataConnectorProperties - Added model
PremiumMicrosoftDefenderForThreatIntelligence - Added model
ProductPackageModel - Added model
ProductPackageProperties - Added model
ProductTemplateModel - Added model
ProductTemplateProperties - Added enum
ProviderPermissionsScope - Added enum
ProvisioningState - Added model
ProxyResource - Added model
PullRequest - Added model
PurviewAuditCheckRequirements - Added model
PurviewAuditCheckRequirementsProperties - Added model
PurviewAuditConnectorDataTypes - Added model
PurviewAuditConnectorDataTypesLogs - Added model
PurviewAuditDataConnector - Added model
PurviewAuditDataConnectorProperties - Added model
Query - Added model
QueryCondition - Added model
QueryProperties - Added model
QuerySortBy - Added model
RecommendedSuggestion - Added model
ReevaluateResponse - Added model
Relationship - Added model
RelationshipHint - Added model
RepositoryAccess - Added enum
RepositoryAccessKind - Added model
RepositoryAccessObject - Added model
RepositoryAccessProperties - Added model
ResourceProviderRequiredPermissions - Added model
RestApiPollerDataConnector - Added model
RestApiPollerDataConnectorProperties - Added model
RestApiPollerRequestConfig - Added model
RestApiPollerRequestPagingConfig - Added enum
RestApiPollerRequestPagingKind - Added model
SapSolutionUsageStatistic - Added model
SapSolutionUsageStatisticProperties - Added model
ServicePrincipal - Added model
SessionAuthModel - Added enum
SortingDirection - Added enum
Status - Added model
TIObject - Added model
TIObjectCommonProperties - Added enum
TIObjectKind - Added model
TemplateModel - Added model
TemplateProperties - Added model
ThreatActor - Added model
ThreatIntelligenceCount - Added enum
TiType - Added model
TriggeredAnalyticsRuleRun - Added model
TriggeredAnalyticsRuleRunProperties - Added model
Warning - Added model
WarningBody - Added enum
WarningCode - Added model
WorkloadIdentityFederation - Added model
WorkspaceManagerAssignment - Added model
WorkspaceManagerAssignmentProperties - Added model
WorkspaceManagerConfiguration - Added model
WorkspaceManagerConfigurationProperties - Added model
WorkspaceManagerGroup - Added model
WorkspaceManagerGroupProperties - Added model
WorkspaceManagerMember - Added model
WorkspaceManagerMemberProperties - Operation group
EntitiesOperationsadded methodrun_playbook - Added operation group
AlertRuleOperations - Added operation group
BillingStatisticsOperations - Added operation group
ContentPackageOperations - Added operation group
ContentPackagesOperations - Added operation group
ContentTemplateOperations - Added operation group
ContentTemplatesOperations - Added operation group
DataConnectorDefinitionsOperations - Added operation group
GetTriggeredAnalyticsRuleRunsOperations - Added operation group
HuntCommentsOperations - Added operation group
HuntRelationsOperations - Added operation group
HuntsOperations - Added operation group
ProductPackageOperations - Added operation group
ProductPackagesOperations - Added operation group
ProductTemplateOperations - Added operation group
ProductTemplatesOperations - Added operation group
ReevaluateOperations - Added operation group
ThreatIntelligenceOperations - Added operation group
TriggeredAnalyticsRuleRunOperations - Added operation group
WorkspaceManagerAssignmentJobsOperations - Added operation group
WorkspaceManagerAssignmentsOperations - Added operation group
WorkspaceManagerConfigurationsOperations - Added operation group
WorkspaceManagerGroupsOperations - Added operation group
WorkspaceManagerMembersOperations
Breaking Changes
- This version introduces new hybrid models which have dual dictionary and model nature. Please follow https://aka.ms/azsdk/python/migrate/hybrid-models for migration.
- For the method breakings, please refer to https://aka.ms/azsdk/python/migrate/operations for migration.
- Renamed client
SecurityInsightstoSecurityInsightsMgmtClient - Model
AADCheckRequirementsmoved instance variabletenant_idunder propertypropertieswhose type isAADCheckRequirementsProperties - Model
AADDataConnectormoved instance variabletenant_idanddata_typesunder propertypropertieswhose type isAADDataConnectorProperties - Model
AATPCheckRequirementsmoved instance variabletenant_idunder propertypropertieswhose type isAATPCheckRequirementsProperties - Model
AATPDataConnectormoved instance variabletenant_idanddata_typesunder propertypropertieswhose type isAATPDataConnectorProperties - Model
ASCDataConnectormoved instance variabledata_typesandsubscription_idunder propertypropertieswhose type isASCDataConnectorProperties - Model
AccountEntitymoved instance variableadditional_data,friendly_name,aad_tenant_id,aad_user_id,account_name,display_name,host_entity_id,is_domain_joined,nt_domain,object_guid,puid,sid,upn_suffixanddns_domainunder propertypropertieswhose type isAccountEntityProperties - Model
ActionRequestmoved instance variablelogic_app_resource_idandtrigger_uriunder propertypropertieswhose type isActionRequestProperties - Model
ActionResponsemoved instance variablelogic_app_resource_idandworkflow_idunder propertypropertieswhose type isActionResponseProperties - Model
ActivityCustomEntityQuerymoved instance variabletitle,content,description,query_definitions,input_entity_type,required_input_fields_sets,entities_filter,template_name,enabled,created_time_utcandlast_modified_time_utcunder propertypropertieswhose type isActivityEntityQueriesProperties - Model
ActivityEntityQuerymoved instance variabletitle,content,description,query_definitions,input_entity_type,required_input_fields_sets,entities_filter,template_name,enabled,created_time_utcandlast_modified_time_utcunder propertypropertieswhose type isActivityEntityQueriesProperties - Model
Anomaliesmoved instance variableis_enabledunder propertypropertieswhose type isAnomaliesSettingsProperties - Model
AzureResourceEntitymoved instance variableadditional_data,friendly_name,resource_idandsubscription_idunder propertypropertieswhose type isAzureResourceEntityProperties - Model
CloudApplicationEntitymoved instance variableadditional_data,friendly_name,app_id,app_nameandinstance_nameunder propertypropertieswhose type isCloudApplicationEntityProperties - Model
CodelessApiPollingDataConnectormoved instance variableconnector_ui_configandpolling_configunder propertypropertieswhose type isApiPollingParameters - Model
CodelessUiDataConnectormoved instance variableconnector_ui_configunder propertypropertieswhose type isCodelessParameters - Deleted or renamed enum value
ContentType.ANALYTIC_RULE - Model
DnsEntitymoved instance variableadditional_data,friendly_name,dns_server_ip_entity_id,domain_name,host_ip_address_entity_idandip_address_entity_idsunder propertypropertieswhose type isDnsEntityProperties - Model
Dynamics365CheckRequirementsmoved instance variabletenant_idunder propertypropertieswhose type isDynamics365CheckRequirementsProperties - Model
Dynamics365DataConnectormoved instance variabletenant_idanddata_typesunder propertypropertieswhose type isDynamics365DataConnectorProperties - Model
EnrichmentIpGeodatarenamed propertycity_cftocity_confidence_factor - Model
EnrichmentIpGeodatarenamed propertycountry_cftocountry_confidence_factor - Model
EnrichmentIpGeodatarenamed propertystate_cftostate_confidence_factor - Model
ExpansionEntityQuerymoved instance variabledata_sources,display_name,input_entity_type,input_fields,output_entity_typesandquery_templateunder propertypropertieswhose type isExpansionEntityQueriesProperties - Model
EyesOnmoved instance variableis_enabledunder propertypropertieswhose type isEyesOnSettingsProperties - Model
FileEntitymoved instance variableadditional_data,friendly_name,directory,file_hash_entity_ids,file_nameandhost_entity_idunder propertypropertieswhose type isFileEntityProperties - Model
FileHashEntitymoved instance variableadditional_data,friendly_name,algorithmandhash_valueunder propertypropertieswhose type isFileHashEntityProperties - Model
HostEntitymoved instance variableadditional_data,friendly_name,azure_id,dns_domain,host_name,is_domain_joined,net_bios_name,nt_domain,oms_agent_id,os_familyandos_versionunder propertypropertieswhose type isHostEntityProperties - Model
HuntingBookmarkmoved instance variableadditional_data,friendly_name,created,created_by,display_name,event_time,labels,notes,query,query_result,updated,updated_byandincident_infounder propertypropertieswhose type isHuntingBookmarkProperties - Model
IoTDataConnectormoved instance variabledata_typesandsubscription_idunder propertypropertieswhose type isIoTDataConnectorProperties - Model
IoTDeviceEntitymoved instance variableadditional_data,friendly_name,device_id,device_name,source,iot_security_agent_id,device_type,vendor,edge_id,mac_address,model,serial_number,firmware_version,operating_system,iot_hub_entity_id,host_entity_id,ip_address_entity_id,threat_intelligence,protocols,owners,nic_entity_ids,site,zone,sensor,device_sub_type,importance,purdue_layer,is_authorized,is_programmingandis_scannerunder propertypropertieswhose type isIoTDeviceEntityProperties - Model
IpEntitymoved instance variableadditional_data,friendly_name,address,locationandthreat_intelligenceunder propertypropertieswhose type isIpEntityProperties - Model
MCASCheckRequirementsmoved instance variabletenant_idunder propertypropertieswhose type isMCASCheckRequirementsProperties - Model
MCASDataConnectormoved instance variabletenant_idanddata_typesunder propertypropertieswhose type isMCASDataConnectorProperties - Model
MDATPCheckRequirementsmoved instance variabletenant_idunder propertypropertieswhose type isMDATPCheckRequirementsProperties - Model
MDATPDataConnectormoved instance variabletenant_idanddata_typesunder propertypropertieswhose type isMDATPDataConnectorProperties - Model
MLBehaviorAnalyticsAlertRuleTemplatemoved instance variablealert_rules_created_by_template_count,last_updated_date_utc,created_date_utc,description,display_name,required_data_connectors,status,tactics,techniquesandseverityunder propertypropertieswhose type isMLBehaviorAnalyticsAlertRuleTemplateProperties - Model
MSTICheckRequirementsmoved instance variabletenant_idunder propertypropertieswhose type isMSTICheckRequirementsProperties - Model
MSTIDataConnectormoved instance variabletenant_idanddata_typesunder propertypropertieswhose type isMSTIDataConnectorProperties - Model
MSTIDataConnectorDataTypesdeleted or renamed its instance variablebing_safety_phishing_url - Model
MTPDataConnectormoved instance variabletenant_idanddata_typesunder propertypropertieswhose type isMTPDataConnectorProperties - Model
MailClusterEntitymoved instance variableadditional_data,friendly_name,network_message_ids,count_by_delivery_status,count_by_threat_type,count_by_protection_status,threats,query,query_time,mail_count,is_volume_anomaly,source,cluster_source_identifier,cluster_source_type,cluster_query_start_time,cluster_query_end_timeandcluster_groupunder propertypropertieswhose type isMailClusterEntityProperties - Model
MailMessageEntitymoved instance variableadditional_data,friendly_name,file_entity_ids,recipient,urls,threats,p1_sender,p1_sender_display_name,p1_sender_domain,sender_ip,p2_sender,p2_sender_display_name,p2_sender_domain,receive_date,network_message_id,internet_message_id,subject,language,threat_detection_methods,body_fingerprint_bin1,body_fingerprint_bin2,body_fingerprint_bin3,body_fingerprint_bin4,body_fingerprint_bin5,antispam_direction,delivery_actionanddelivery_locationunder propertypropertieswhose type isMailMessageEntityProperties - Model
MailboxEntitymoved instance variableadditional_data,friendly_name,mailbox_primary_address,display_name,upnandexternal_directory_object_idunder propertypropertieswhose type isMailboxEntityProperties - Model
MalwareEntitymoved instance variableadditional_data,friendly_name,category,file_entity_ids,malware_nameandprocess_entity_idsunder propertypropertieswhose type isMalwareEntityProperties - Model
MetadataModelmoved instance variablecontent_id,parent_id,version,kind,source,author,support,dependencies,categories,providers,first_publish_date,last_publish_date,custom_version,content_schema_version,icon,threat_analysis_tactics,threat_analysis_techniques,preview_imagesandpreview_images_darkunder propertypropertieswhose type isMetadataProperties - Model
MetadataPatchmoved instance variablecontent_id,parent_id,version,kind,source,author,support,dependencies,categories,providers,first_publish_date,last_publish_date,custom_version,content_schema_version,icon,threat_analysis_tactics,threat_analysis_techniques,preview_imagesandpreview_images_darkunder propertypropertieswhose type isMetadataPropertiesPatch - Model
MicrosoftSecurityIncidentCreationAlertRulemoved instance variabledisplay_names_filter,display_names_exclude_filter,product_filter,severities_filter,alert_rule_template_name,description,display_name,enabledandlast_modified_utcunder propertypropertieswhose type isMicrosoftSecurityIncidentCreationAlertRuleProperties - Model
MicrosoftSecurityIncidentCreationAlertRuleTemplatemoved instance variablealert_rules_created_by_template_count,last_updated_date_utc,created_date_utc,description,display_name,required_data_connectors,status,display_names_filter,display_names_exclude_filter,product_filterandseverities_filterunder propertypropertieswhose type isMicrosoftSecurityIncidentCreationAlertRuleTemplateProperties - Model
MtpCheckRequirementsmoved instance variabletenant_idunder propertypropertieswhose type isMTPCheckRequirementsProperties - Model
NicEntitymoved instance variableadditional_data,friendly_name,mac_address,ip_address_entity_idandvlansunder propertypropertieswhose type isNicEntityProperties - Model
NrtAlertRuleTemplatemoved instance variablealert_rules_created_by_template_count,last_updated_date_utc,created_date_utc,description,display_name,required_data_connectors,status,tactics,techniques,query,severity,version,custom_details,entity_mappings,alert_details_override,event_grouping_settingsandsentinel_entities_mappingsunder propertypropertieswhose type isNrtAlertRuleTemplateProperties - Model
Office365ProjectCheckRequirementsmoved instance variabletenant_idunder propertypropertieswhose type isOffice365ProjectCheckRequirementsProperties - Model
Office365ProjectDataConnectormoved instance variabletenant_idanddata_typesunder propertypropertieswhose type isOffice365ProjectDataConnectorProperties - Model
OfficeATPCheckRequirementsmoved instance variabletenant_idunder propertypropertieswhose type isOfficeATPCheckRequirementsProperties - Model
OfficeATPDataConnectormoved instance variabletenant_idanddata_typesunder propertypropertieswhose type isOfficeATPDataConnectorProperties - Model
OfficeDataConnectormoved instance variabletenant_idanddata_typesunder propertypropertieswhose type isOfficeDataConnectorProperties - Model
OfficeIRMCheckRequirementsmoved instance variabletenant_idunder propertypropertieswhose type isOfficeIRMCheckRequirementsProperties - Model
OfficeIRMDataConnectormoved instance variabletenant_idanddata_typesunder propertypropertieswhose type isOfficeIRMDataConnectorProperties - Model
OfficePowerBICheckRequirementsmoved instance variabletenant_idunder propertypropertieswhose type isOfficePowerBICheckRequirementsProperties - Model
OfficePowerBIDataConnectormoved instance variabletenant_idanddata_typesunder propertypropertieswhose type isOfficePowerBIDataConnectorProperties - Deleted or renamed enum value
Operator.AND - Deleted or renamed enum value
Operator.OR - Model
ProcessEntitymoved instance variableadditional_data,friendly_name,account_entity_id,command_line,creation_time_utc,elevation_token,host_entity_id,host_logon_session_entity_id,image_file_entity_id,parent_process_entity_idandprocess_idunder propertypropertieswhose type isProcessEntityProperties - Model
RecommendationPatchmoved its instance variablestateunder propertypropertieswhose type isRecommendationPatchProperties - Model
RecommendationPatchdeleted its instance variablehide_until_time_utc - Model
RegistryKeyEntitymoved instance variableadditional_data,friendly_name,hiveandkeyunder propertypropertieswhose type isRegistryKeyEntityProperties - Model
RegistryValueEntitymoved instance variableadditional_data,friendly_name,key_entity_id,value_data,value_nameandvalue_typeunder propertypropertieswhose type isRegistryValueEntityProperties - Deleted or renamed enum value
RepoType.DEV_OPS - Model
Repositorydeleted its instance variablepath_mapping - Model
ScheduledAlertRulemoved instance variablequery,query_frequency,query_period,severity,trigger_operator,trigger_threshold,event_grouping_settings,custom_details,entity_mappings,alert_details_override,sentinel_entities_mappings,alert_rule_template_name,template_version,description,display_name,enabled,last_modified_utc,suppression_duration,suppression_enabled,tactics,techniquesandincident_configurationunder propertypropertieswhose type isScheduledAlertRuleProperties - Model
SecurityAlertmoved instance variableadditional_data,friendly_name,alert_display_name,alert_type,compromised_entity,confidence_level,confidence_reasons,confidence_score,confidence_score_status,description,end_time_utc,intent,provider_alert_id,processing_end_time,product_component_name,product_name,product_version,remediation_steps,severity,start_time_utc,status,system_alert_id,tactics,time_generated,vendor_name,alert_linkandresource_identifiersunder propertypropertieswhose type isSecurityAlertProperties - Model
SecurityGroupEntitymoved instance variableadditional_data,friendly_name,distinguished_name,object_guidandsidunder propertypropertieswhose type isSecurityGroupEntityProperties - Deleted or renamed enum value
SourceType.LOCAL_FILE - Deleted or renamed enum value
SourceType.REMOTE_STORAGE - Deleted or renamed enum value
State.COMPLETED_BY_ACTION - Deleted or renamed enum value
State.DISABLED - Deleted or renamed enum value
State.HIDDEN - Model
SubmissionMailEntitymoved instance variableadditional_data,friendly_name,network_message_id,submission_id,submitter,submission_date,timestamp,recipient,sender,sender_ip,subjectandreport_typeunder propertypropertieswhose type isSubmissionMailEntityProperties - Model
TICheckRequirementsmoved instance variabletenant_idunder propertypropertieswhose type isTICheckRequirementsProperties - Model
TIDataConnectormoved instance variabletenant_id,tip_lookback_periodanddata_typesunder propertypropertieswhose type isTIDataConnectorProperties - Model
ThreatIntelligenceAlertRuleTemplatemoved instance variablealert_rules_created_by_template_count,last_updated_date_utc,created_date_utc,description,display_name,required_data_connectors,status,tactics,techniquesandseverityunder propertypropertieswhose type isThreatIntelligenceAlertRuleTemplateProperties - Model
ThreatIntelligenceIndicatorModelmoved instance variableadditional_data,friendly_name,threat_intelligence_tags,last_updated_time_utc,source,display_name,description,indicator_types,pattern,pattern_type,pattern_version,kill_chain_phases,parsed_pattern,external_id,created_by_ref,defanged,external_last_updated_time_utc,external_references,granular_markings,labels,revoked,confidence,object_marking_refs,language,threat_types,valid_from,valid_until,created,modifiedandextensionsunder propertypropertieswhose type isThreatIntelligenceIndicatorProperties - Deleted or renamed model
Category - Deleted or renamed model
Content - Deleted or renamed model
ContentPathMap - Deleted or renamed model
Context - Deleted or renamed model
Instructions - Deleted or renamed model
MSTIDataConnectorDataTypesBingSafetyPhishingURL - Deleted or renamed model
Priority - Deleted or renamed model
QueryBasedAlertRuleTemplateProperties - Deleted or renamed model
RecommendedAction - Model
TiTaxiiCheckRequirementsmoved instance variabletenant_idunder propertypropertieswhose type isTiTaxiiCheckRequirementsProperties - Model
TiTaxiiDataConnectormoved instance variabletenant_id,workspace_id,friendly_name,taxii_server,collection_id,user_name,password,taxii_lookback_period,polling_frequencyanddata_typesunder propertypropertieswhose type isTiTaxiiDataConnectorProperties - Model
UrlEntitymoved instance variableadditional_data,friendly_nameandurlunder propertypropertieswhose type isUrlEntityProperties - Method
BookmarkRelationsOperations.listchanged its parameterorderby/skip_tokenfrompositional_or_keywordtokeyword_only - Method
EntitiesOperations.querieschanged its parameterkindfrompositional_or_keywordtokeyword_only - Method
EntitiesRelationsOperations.listchanged its parameterorderby/skip_tokenfrompositional_or_keywordtokeyword_only - Method
EntityQueriesOperations.listchanged its parameterkindfrompositional_or_keywordtokeyword_only - Method
EntityQueryTemplatesOperations.listchanged its parameterkindfrompositional_or_keywordtokeyword_only - Method
FileImportsOperations.listchanged its parameterorderby/skip_tokenfrompositional_or_keywordtokeyword_only - Method
IncidentCommentsOperations.listchanged its parameterorderby/skip_tokenfrompositional_or_keywordtokeyword_only - Method
IncidentRelationsOperations.listchanged its parameterorderby/skip_tokenfrompositional_or_keywordtokeyword_only - Method
IncidentsOperations.listchanged its parameterorderby/skip_tokenfrompositional_or_keywordtokeyword_only - Deleted or renamed method
IncidentsOperations.create_team - Method
MetadataOperations.listchanged its parameterorderbyfrompositional_or_keywordtokeyword_only - Method
SourceControlOperations.list_repositoriesrenamed its parameterrepo_typetorepository_access - Method
SourceControlsOperations.deleteinserted apositional_or_keywordparameterrepository_access - Method
ThreatIntelligenceIndicatorsOperations.listchanged its parameterorderby/skip_tokenfrompositional_or_keywordtokeyword_only - Operation group
UpdateOperationsrenamed methodrecommendationtobegin_recommendation - Method
WatchlistItemsOperations.listchanged its parameterskip_tokenfrompositional_or_keywordtokeyword_only - Method
WatchlistsOperations.listchanged its parameterskip_tokenfrompositional_or_keywordtokeyword_only - Operation group
WatchlistsOperationsrenamed methodcreate_or_updatetobegin_create_or_update - Operation group
WatchlistsOperationsrenamed methoddeletetobegin_delete - Deleted operation group
DomainWhoisOperations/IPGeodataOperations - Method
EntitiesOperations.querieschanged return type fromGetQueriesResponsetoItemPaged[_models.EntityQueryItem] - Method
GetRecommendationsOperations.listchanged return type fromRecommendationListtoItemPaged[_models.Recommendation] - Method
ProductSettingsOperations.listchanged return type fromSettingListtoItemPaged[_models.Settings] - Method
SourceControlsOperations.deletechanged return type fromNonetoWarning - Deleted model
RecommendationList - Deleted model
SettingList
Other Changes
- Deleted model
ActionsList/AlertRuleTemplatesList/AlertRulesList/AutomationRulesList/BookmarkList/DataConnectorList/EntityList/EntityQueryList/EntityQueryTemplateList/FileImportList/GetQueriesResponse/IncidentCommentList/IncidentList/IncidentTaskList/MetadataList/OfficeConsentList/OperationsList/RelationList/RepoList/SecurityMLAnalyticsSettingsList/SourceControlList/ThreatIntelligenceInformationList/WatchlistItemList/WatchlistList/TeamPropertieswhich actually were not used by SDK users - Deleted enum
Enum13/Enum15which actually were not used by SDK users - Method
AutomationRulesOperations.deletechanged return type fromJSONtoAny - Method
IncidentsOperations.run_playbookchanged return type fromJSONtoAny