models Package

Classes

AdditionalData

Details of the sub-assessment.

You probably want to use the sub-classes and not this class directly. Known sub-classes are: ContainerRegistryVulnerabilityProperties, ServerVulnerabilityProperties, SqlServerVulnerabilityProperties

All required parameters must be populated in order to send to server.

AlertsSuppressionRule

Describes the suppression rule.

Variables are only populated by the server, and will be ignored when sending a request.

AlertsSuppressionRulesList

Suppression rules list for subscription.

Variables are only populated by the server, and will be ignored when sending a request.

All required parameters must be populated in order to send to server.

Automation

The security automation resource.

Variables are only populated by the server, and will be ignored when sending a request.

AutomationAction

The action that should be triggered.

You probably want to use the sub-classes and not this class directly. Known sub-classes are: AutomationActionEventHub, AutomationActionLogicApp, AutomationActionWorkspace

All required parameters must be populated in order to send to server.

AutomationActionEventHub

The target Event Hub to which event data will be exported. To learn more about Microsoft Defender for Cloud continuous export capabilities, visit https://aka.ms/ASCExportLearnMore.

Variables are only populated by the server, and will be ignored when sending a request.

All required parameters must be populated in order to send to server.

AutomationActionLogicApp

The logic app action that should be triggered. To learn more about Microsoft Defender for Cloud's Workflow Automation capabilities, visit https://aka.ms/ASCWorkflowAutomationLearnMore.

All required parameters must be populated in order to send to server.

AutomationActionWorkspace

The Log Analytics Workspace to which event data will be exported. Security alerts data will reside in the 'SecurityAlert' table and the assessments data will reside in the 'SecurityRecommendation' table (under the 'Security'/'SecurityCenterFree' solutions). Note that in order to view the data in the workspace, the Security Center Log Analytics free/standard solution needs to be enabled on that workspace. To learn more about Microsoft Defender for Cloud continuous export capabilities, visit https://aka.ms/ASCExportLearnMore.

All required parameters must be populated in order to send to server.

AutomationList

List of security automations response.

Variables are only populated by the server, and will be ignored when sending a request.

All required parameters must be populated in order to send to server.

AutomationRuleSet

A rule set which evaluates all its rules upon an event interception. Only when all the included rules in the rule set will be evaluated as 'true', will the event trigger the defined actions.

AutomationScope

A single automation scope.

AutomationSource

The source event types which evaluate the security automation set of rules. For example - security alerts and security assessments. To learn more about the supported security events data models schemas - please visit https://aka.ms/ASCAutomationSchemas.

AutomationTriggeringRule

A rule which is evaluated upon event interception. The rule is configured by comparing a specific value from the event model to an expected value. This comparison is done by using one of the supported operators set.

AutomationValidationStatus

The security automation model state property bag.

AzureResourceDetails

Details of the Azure resource that was assessed.

Variables are only populated by the server, and will be ignored when sending a request.

All required parameters must be populated in order to send to server.

AzureTrackedResourceLocation

Describes an Azure resource with location.

CVE

CVE details.

Variables are only populated by the server, and will be ignored when sending a request.

CVSS

CVSS details.

Variables are only populated by the server, and will be ignored when sending a request.

CloudErrorBody

The error detail.

Variables are only populated by the server, and will be ignored when sending a request.

ContainerRegistryVulnerabilityProperties

Additional context fields for container registry Vulnerability assessment.

Variables are only populated by the server, and will be ignored when sending a request.

All required parameters must be populated in order to send to server.

ETag

Entity tag is used for comparing two or more entities from the same requested resource.

ErrorAdditionalInfo

The resource management error additional info.

Variables are only populated by the server, and will be ignored when sending a request.

Kind

Describes an Azure resource with kind.

OnPremiseResourceDetails

Details of the On Premise resource that was assessed.

You probably want to use the sub-classes and not this class directly. Known sub-classes are: OnPremiseSqlResourceDetails

All required parameters must be populated in order to send to server.

OnPremiseSqlResourceDetails

Details of the On Premise Sql resource that was assessed.

All required parameters must be populated in order to send to server.

RegulatoryComplianceAssessment

Regulatory compliance assessment details and state.

Variables are only populated by the server, and will be ignored when sending a request.

RegulatoryComplianceAssessmentList

List of regulatory compliance assessment response.

Variables are only populated by the server, and will be ignored when sending a request.

All required parameters must be populated in order to send to server.

RegulatoryComplianceControl

Regulatory compliance control details and state.

Variables are only populated by the server, and will be ignored when sending a request.

RegulatoryComplianceControlList

List of regulatory compliance controls response.

Variables are only populated by the server, and will be ignored when sending a request.

All required parameters must be populated in order to send to server.

RegulatoryComplianceStandard

Regulatory compliance standard details and state.

Variables are only populated by the server, and will be ignored when sending a request.

RegulatoryComplianceStandardList

List of regulatory compliance standards response.

Variables are only populated by the server, and will be ignored when sending a request.

All required parameters must be populated in order to send to server.

Resource

Describes an Azure resource.

Variables are only populated by the server, and will be ignored when sending a request.

ResourceDetails

Details of the resource that was assessed.

You probably want to use the sub-classes and not this class directly. Known sub-classes are: AzureResourceDetails, OnPremiseResourceDetails

All required parameters must be populated in order to send to server.

ScopeElement

A more specific scope used to identify the alerts to suppress.

SecuritySubAssessment

Security sub-assessment on a resource.

Variables are only populated by the server, and will be ignored when sending a request.

SecuritySubAssessmentList

List of security sub-assessments.

Variables are only populated by the server, and will be ignored when sending a request.

ServerVulnerabilityProperties

Additional context fields for server vulnerability assessment.

Variables are only populated by the server, and will be ignored when sending a request.

All required parameters must be populated in order to send to server.

SqlServerVulnerabilityProperties

Details of the resource that was assessed.

Variables are only populated by the server, and will be ignored when sending a request.

All required parameters must be populated in order to send to server.

SubAssessmentStatus

Status of the sub-assessment.

Variables are only populated by the server, and will be ignored when sending a request.

SuppressionAlertsScope

SuppressionAlertsScope.

All required parameters must be populated in order to send to server.

Tags

A list of key value pairs that describe the resource.

TrackedResource

Describes an Azure tracked resource.

Variables are only populated by the server, and will be ignored when sending a request.

VendorReference

Vendor reference.

Variables are only populated by the server, and will be ignored when sending a request.

Enums

ActionType

The type of the action that will be triggered by the Automation.

AssessedResourceType

Sub-assessment resource type.

EventSource

A valid event source type.

Operator

A valid comparer operator to use. A case-insensitive comparison will be applied for String PropertyType.

PropertyType

The data type of the compared operands (string, integer, floating point number or a boolean [true/false]].

RuleState

Possible states of the rule.

Severity

The sub-assessment severity level.

Source

The platform where the assessed resource resides.

State

Aggregative state based on the standard's supported controls states.

SubAssessmentStatusCode

Programmatic code for the status of the assessment.