Extension Class

Package:

com.azure.resourcemanager.security.models

Maven Artifact:

com.azure.resourcemanager:azure-resourcemanager-security:1.0.0

• java.lang.Object
• • com.azure.resourcemanager.security.models.Extension

Implements

JsonSerializable<Extension>

public final class Extension
implements JsonSerializable<Extension>

A plan's extension properties.

Constructor Summary

Constructor	Description
Extension()	Creates an instance of Extension class.

Method Summary

Modifier and Type	Method and Description
Map<String,Object>	additionalExtensionProperties() Get the additionalExtensionProperties property: Property values associated with the extension.
static Extension	fromJson(JsonReader jsonReader) Reads an instance of Extension from the JsonReader.
IsEnabled	isEnabled() Get the isEnabled property: Indicates whether the extension is enabled.
String	name() Get the name property: The extension name.
OperationStatus	operationStatus() Get the operationStatus property: Optional.
JsonWriter	toJson(JsonWriter jsonWriter)
void	validate() Validates the instance.
Extension	withAdditionalExtensionProperties(Map<String,Object> additionalExtensionProperties) Set the additionalExtensionProperties property: Property values associated with the extension.
Extension	withIsEnabled(IsEnabled isEnabled) Set the isEnabled property: Indicates whether the extension is enabled.
Extension	withName(String name) Set the name property: The extension name.

Methods inherited from java.lang.Object

clone equals finalize getClass hashCode notify notifyAll toString wait wait wait

Constructor Details

Extension

public Extension()

Creates an instance of Extension class.

Method Details

additionalExtensionProperties

public Map<String,Object> additionalExtensionProperties()

Get the additionalExtensionProperties property: Property values associated with the extension.

Returns:

the additionalExtensionProperties value.

fromJson

public static Extension fromJson(JsonReader jsonReader)

Reads an instance of Extension from the JsonReader.

Parameters:

jsonReader - The JsonReader being read.

Returns:

An instance of Extension if the JsonReader was pointing to an instance of it, or null if it was pointing to JSON null.

Throws:

IOException

- If the deserialized JSON object was missing any required properties.

isEnabled

public IsEnabled isEnabled()

Get the isEnabled property: Indicates whether the extension is enabled.

Returns:

the isEnabled value.

name

public String name()

Get the name property: The extension name. Supported values are:

**AgentlessDiscoveryForKubernetes** - Provides zero footprint, API-based discovery of Kubernetes clusters, their configurations and deployments. The collected data is used to create a contextualized security graph for Kubernetes clusters, provide risk hunting capabilities, and visualize risks and threats to Kubernetes environments and workloads.
Available for CloudPosture plan and Containers plan.

**OnUploadMalwareScanning** - Limits the GB to be scanned per month for each storage account within the subscription. Once this limit reached on a given storage account, Blobs won't be scanned during current calendar month.
Available for StorageAccounts plan (DefenderForStorageV2 sub plans).

**SensitiveDataDiscovery** - Sensitive data discovery identifies Blob storage container with sensitive data such as credentials, credit cards, and more, to help prioritize and investigate security events.
Available for StorageAccounts plan (DefenderForStorageV2 sub plan) and CloudPosture plan.

**ContainerRegistriesVulnerabilityAssessments** - Provides vulnerability management for images stored in your container registries.
Available for CloudPosture plan and Containers plan.

**MdeDesignatedSubscription** - Direct onboarding is a seamless integration between Defender for Endpoint and Defender for Cloud that doesn’t require extra software deployment on your servers. The onboarded resources will be presented under a designated Azure Subscription you configure
Available for VirtualMachines plan (P1 and P2 sub plans).

**AgentlessVmScanning** - Scans your machines for installed software, vulnerabilities, malware and secret scanning without relying on agents or impacting machine performance. Learn more here https://learn.microsoft.com/en-us/azure/defender-for-cloud/concept-agentless-data-collection.
Available for CloudPosture plan, VirtualMachines plan (P2 sub plan) and Containers plan.

**EntraPermissionsManagement** - Permissions Management provides Cloud Infrastructure Entitlement Management (CIEM) capabilities that helps organizations to manage and control user access and entitlements in their cloud infrastructure - important attack vector for cloud environments.
Permissions Management analyzes all permissions and active usage, and suggests recommendations to reduce permissions to enforce the principle of least privilege. Learn more here https://learn.microsoft.com/en-us/azure/defender-for-cloud/permissions-management.
Available for CloudPosture plan.

**FileIntegrityMonitoring** - File integrity monitoring (FIM), examines operating system files.
Windows registries, Linux system files, in real time, for changes that might indicate an attack.
Available for VirtualMachines plan (P2 sub plan).

**ContainerSensor** - The sensor is based on IG and provides a rich threat detection suite for Kubernetes clusters, nodes, and workloads, powered by Microsoft leading threat intelligence, provides mapping to MITRE ATT&CK framework.
Available for Containers plan.

**AIPromptEvidence** - Exposes the prompts passed between the user and the AI model as alert evidence. This helps classify and triage the alerts with relevant user context. The prompt snippets will include only segments of the user prompt or model response that were deemed suspicious and relevant for security classifications. The prompt evidence will be available through Defender portal as part of each alert.
Available for AI plan.

.

Returns:

the name value.

operationStatus

public OperationStatus operationStatus()

Get the operationStatus property: Optional. A status describing the success/failure of the extension's enablement/disablement operation.

Returns:

the operationStatus value.

toJson

public JsonWriter toJson(JsonWriter jsonWriter)

Parameters:

jsonWriter

Throws:

IOException

validate

public void validate()

Validates the instance.

withAdditionalExtensionProperties

public Extension withAdditionalExtensionProperties(Map<String,Object> additionalExtensionProperties)

Set the additionalExtensionProperties property: Property values associated with the extension.

Parameters:

additionalExtensionProperties - the additionalExtensionProperties value to set.

Returns:

the Extension object itself.

withIsEnabled

public Extension withIsEnabled(IsEnabled isEnabled)

Set the isEnabled property: Indicates whether the extension is enabled.

Parameters:

isEnabled - the isEnabled value to set.

Returns:

the Extension object itself.

withName

public Extension withName(String name)

Set the name property: The extension name. Supported values are:

**AgentlessDiscoveryForKubernetes** - Provides zero footprint, API-based discovery of Kubernetes clusters, their configurations and deployments. The collected data is used to create a contextualized security graph for Kubernetes clusters, provide risk hunting capabilities, and visualize risks and threats to Kubernetes environments and workloads.
Available for CloudPosture plan and Containers plan.

**OnUploadMalwareScanning** - Limits the GB to be scanned per month for each storage account within the subscription. Once this limit reached on a given storage account, Blobs won't be scanned during current calendar month.
Available for StorageAccounts plan (DefenderForStorageV2 sub plans).

**SensitiveDataDiscovery** - Sensitive data discovery identifies Blob storage container with sensitive data such as credentials, credit cards, and more, to help prioritize and investigate security events.
Available for StorageAccounts plan (DefenderForStorageV2 sub plan) and CloudPosture plan.

**ContainerRegistriesVulnerabilityAssessments** - Provides vulnerability management for images stored in your container registries.
Available for CloudPosture plan and Containers plan.

**MdeDesignatedSubscription** - Direct onboarding is a seamless integration between Defender for Endpoint and Defender for Cloud that doesn’t require extra software deployment on your servers. The onboarded resources will be presented under a designated Azure Subscription you configure
Available for VirtualMachines plan (P1 and P2 sub plans).

**AgentlessVmScanning** - Scans your machines for installed software, vulnerabilities, malware and secret scanning without relying on agents or impacting machine performance. Learn more here https://learn.microsoft.com/en-us/azure/defender-for-cloud/concept-agentless-data-collection.
Available for CloudPosture plan, VirtualMachines plan (P2 sub plan) and Containers plan.

**EntraPermissionsManagement** - Permissions Management provides Cloud Infrastructure Entitlement Management (CIEM) capabilities that helps organizations to manage and control user access and entitlements in their cloud infrastructure - important attack vector for cloud environments.
Permissions Management analyzes all permissions and active usage, and suggests recommendations to reduce permissions to enforce the principle of least privilege. Learn more here https://learn.microsoft.com/en-us/azure/defender-for-cloud/permissions-management.
Available for CloudPosture plan.

**FileIntegrityMonitoring** - File integrity monitoring (FIM), examines operating system files.
Windows registries, Linux system files, in real time, for changes that might indicate an attack.
Available for VirtualMachines plan (P2 sub plan).

**ContainerSensor** - The sensor is based on IG and provides a rich threat detection suite for Kubernetes clusters, nodes, and workloads, powered by Microsoft leading threat intelligence, provides mapping to MITRE ATT&CK framework.
Available for Containers plan.

**AIPromptEvidence** - Exposes the prompts passed between the user and the AI model as alert evidence. This helps classify and triage the alerts with relevant user context. The prompt snippets will include only segments of the user prompt or model response that were deemed suspicious and relevant for security classifications. The prompt evidence will be available through Defender portal as part of each alert.
Available for AI plan.

.

Parameters:

name - the name value to set.

Returns:

the Extension object itself.