From 5bb8a8f0afa8aea0df68afb141266ebd7ad8abcd Mon Sep 17 00:00:00 2001
From: David <1511024+marabooy@users.noreply.github.com>
Date: Fri, 3 Jul 2026 04:51:35 +0300
Subject: [PATCH] Schema sync 2026-07-03 from 1.4.642.0

---
 schemas/beta-Bleu.csdl     |    3 -
 schemas/beta-Delos.csdl    |   19 +-
 schemas/beta-Fairfax.csdl  |    7 -
 schemas/beta-Mooncake.csdl |    3 -
 schemas/beta-Prod.csdl     |   89 +-
 schemas/v1.0-Delos.csdl    |  489 ++++-
 schemas/v1.0-Fairfax.csdl  |    4 -
 schemas/v1.0-Prod.csdl     | 3439 ++++++++++++++++++++++++++++++------
 8 files changed, 3413 insertions(+), 640 deletions(-)

diff --git a/schemas/beta-Bleu.csdl b/schemas/beta-Bleu.csdl
index ecd3d42b..55895d1f 100644
--- a/schemas/beta-Bleu.csdl
+++ b/schemas/beta-Bleu.csdl
@@ -42906,9 +42906,6 @@
       <Annotations Target="microsoft.graph.deviceLogCollectionTemplateType/unknownFutureValue">
         <Annotation Term="Org.OData.Core.V1.Description" String="Evolvable enumeration sentinel value. Do not use." />
       </Annotations>
-      <Annotations Target="microsoft.graph.deviceManagement">
-        <Annotation Term="Org.OData.Core.V1.Description" String="Singleton that acts as container for a collection of Resource Access entities." />
-      </Annotations>
       <Annotations Target="microsoft.graph.deviceManagement/accountMoveCompletionDateTime">
         <Annotation Term="Org.OData.Core.V1.Description" String="The date &amp; time when tenant data moved between scaleunits." />
       </Annotations>
diff --git a/schemas/beta-Delos.csdl b/schemas/beta-Delos.csdl
index 864333df..0d35700c 100644
--- a/schemas/beta-Delos.csdl
+++ b/schemas/beta-Delos.csdl
@@ -7046,6 +7046,10 @@
         <Property Name="authenticationStrengthResult" Type="graph.authenticationStrengthResult" />
         <Property Name="displayName" Type="Edm.String" />
       </ComplexType>
+      <ComplexType Name="authenticationStrengthUsage">
+        <NavigationProperty Name="mfa" Type="Collection(graph.conditionalAccessPolicy)" />
+        <NavigationProperty Name="none" Type="Collection(graph.conditionalAccessPolicy)" />
+      </ComplexType>
       <ComplexType Name="authorizationInfo">
         <Property Name="certificateUserIds" Type="Collection(Edm.String)" />
       </ComplexType>
@@ -7277,6 +7281,9 @@
         <Property Name="deviceStates" Type="graph.conditionalAccessDeviceStates" />
         <Property Name="locations" Type="graph.conditionalAccessLocations" />
         <Property Name="platforms" Type="graph.conditionalAccessPlatforms" />
+        <Property Name="servicePrincipalRiskLevels" Type="Collection(graph.riskLevel)" Nullable="false" />
+        <Property Name="signInRiskLevels" Type="Collection(graph.riskLevel)" Nullable="false" />
+        <Property Name="userRiskLevels" Type="Collection(graph.riskLevel)" Nullable="false" />
         <Property Name="users" Type="graph.conditionalAccessUsers" />
       </ComplexType>
       <ComplexType Name="conditionalAccessDevices">
@@ -7305,6 +7312,7 @@
         <Property Name="customAuthenticationFactors" Type="Collection(Edm.String)" Nullable="false" />
         <Property Name="operator" Type="Edm.String" />
         <Property Name="termsOfUse" Type="Collection(Edm.String)" Nullable="false" />
+        <NavigationProperty Name="authenticationStrength" Type="graph.authenticationStrengthPolicy" ContainsTarget="true" />
       </ComplexType>
       <ComplexType Name="conditionalAccessGuestsOrExternalUsers">
         <Property Name="externalTenants" Type="graph.conditionalAccessExternalTenants" />
@@ -26682,6 +26690,10 @@
         <Parameter Name="bindingParameter" Type="Collection(graph.recommendation)" />
         <ReturnType Type="Collection(graph.tenantSecureScore)" />
       </Function>
+      <Function Name="usage" IsBound="true">
+        <Parameter Name="bindingParameter" Type="graph.authenticationStrengthPolicy" />
+        <ReturnType Type="graph.authenticationStrengthUsage" />
+      </Function>
       <Function Name="userExperienceAnalyticsSummarizedDeviceScopes" IsBound="true">
         <Parameter Name="bindingParameter" Type="graph.deviceManagement" />
         <ReturnType Type="graph.userExperienceAnalyticsDeviceScopeSummary" />
@@ -26862,7 +26874,9 @@
         </Singleton>
         <Singleton Name="policies" Type="microsoft.graph.policyRoot" />
         <Singleton Name="reports" Type="microsoft.graph.reportRoot" />
-        <Singleton Name="roleManagement" Type="microsoft.graph.roleManagement" />
+        <Singleton Name="roleManagement" Type="microsoft.graph.roleManagement">
+          <NavigationPropertyBinding Path="directory/resourceNamespaces/resourceActions/authenticationContext" Target="identity/microsoft.graph.conditionalAccessRoot/conditionalAccess/authenticationContextClassReferences" />
+        </Singleton>
         <Singleton Name="storage" Type="microsoft.graph.storage" />
         <Singleton Name="tenantRelationships" Type="microsoft.graph.tenantRelationship" />
         <Singleton Name="termStore" Type="microsoft.graph.termStore.store" />
@@ -38351,9 +38365,6 @@
       <Annotations Target="microsoft.graph.deviceLogCollectionTemplateType/unknownFutureValue">
         <Annotation Term="Org.OData.Core.V1.Description" String="Evolvable enumeration sentinel value. Do not use." />
       </Annotations>
-      <Annotations Target="microsoft.graph.deviceManagement">
-        <Annotation Term="Org.OData.Core.V1.Description" String="Singleton that acts as container for a collection of Resource Access entities." />
-      </Annotations>
       <Annotations Target="microsoft.graph.deviceManagement/accountMoveCompletionDateTime">
         <Annotation Term="Org.OData.Core.V1.Description" String="The date &amp; time when tenant data moved between scaleunits." />
       </Annotations>
diff --git a/schemas/beta-Fairfax.csdl b/schemas/beta-Fairfax.csdl
index b5ea01f4..f12e6254 100644
--- a/schemas/beta-Fairfax.csdl
+++ b/schemas/beta-Fairfax.csdl
@@ -54549,9 +54549,6 @@
       <Annotations Target="microsoft.graph.deviceLogCollectionTemplateType/unknownFutureValue">
         <Annotation Term="Org.OData.Core.V1.Description" String="Evolvable enumeration sentinel value. Do not use." />
       </Annotations>
-      <Annotations Target="microsoft.graph.deviceManagement">
-        <Annotation Term="Org.OData.Core.V1.Description" String="Singleton that acts as container for a collection of Resource Access entities." />
-      </Annotations>
       <Annotations Target="microsoft.graph.deviceManagement.alertRule/threshold">
         <Annotation Term="Org.OData.Core.V1.Revisions">
           <Collection>
@@ -75751,10 +75748,6 @@
       <Annotations Target="microsoft.graph.softwareUpdateStatusSummary/unknownUserCount">
         <Annotation Term="Org.OData.Core.V1.Description" String="Number of unknown users." />
       </Annotations>
-      <Annotations Target="microsoft.graph.solutionsRoot">
-        <Annotation Term="Org.OData.Capabilities.V1.BatchContinueOnErrorSupported" Bool="true" />
-        <Annotation Term="Org.OData.Capabilities.V1.BatchSupported" Bool="true" />
-      </Annotations>
       <Annotations Target="microsoft.graph.specifiedCaptiveNetworkPlugins">
         <Annotation Term="Org.OData.Core.V1.Description" String="Specifies all the Captive network plugins allowed during the IKEv2 AlwaysOn VPN connection" />
       </Annotations>
diff --git a/schemas/beta-Mooncake.csdl b/schemas/beta-Mooncake.csdl
index a71b56b9..1f8f7945 100644
--- a/schemas/beta-Mooncake.csdl
+++ b/schemas/beta-Mooncake.csdl
@@ -43609,9 +43609,6 @@
       <Annotations Target="microsoft.graph.deviceLogCollectionTemplateType/unknownFutureValue">
         <Annotation Term="Org.OData.Core.V1.Description" String="Evolvable enumeration sentinel value. Do not use." />
       </Annotations>
-      <Annotations Target="microsoft.graph.deviceManagement">
-        <Annotation Term="Org.OData.Core.V1.Description" String="Singleton that acts as container for a collection of Resource Access entities." />
-      </Annotations>
       <Annotations Target="microsoft.graph.deviceManagement/accountMoveCompletionDateTime">
         <Annotation Term="Org.OData.Core.V1.Description" String="The date &amp; time when tenant data moved between scaleunits." />
       </Annotations>
diff --git a/schemas/beta-Prod.csdl b/schemas/beta-Prod.csdl
index 4c798ca1..1b7aaa7b 100644
--- a/schemas/beta-Prod.csdl
+++ b/schemas/beta-Prod.csdl
@@ -9958,6 +9958,12 @@
         <Member Name="enabled" Value="1" />
         <Member Name="unknownFutureValue" Value="2" />
       </EnumType>
+      <EnumType Name="servicePrincipalLockScope">
+        <Member Name="notConfigured" Value="0" />
+        <Member Name="foreignTenantOnly" Value="1" />
+        <Member Name="everywhere" Value="2" />
+        <Member Name="unknownFutureValue" Value="3" />
+      </EnumType>
       <EnumType Name="serviceStartType">
         <Member Name="manual" Value="0" />
         <Member Name="automatic" Value="1" />
@@ -16840,6 +16846,9 @@
         <Property Name="type" Type="graph.externalItemContentType" Nullable="false" />
         <Property Name="value" Type="Edm.String" />
       </ComplexType>
+      <ComplexType Name="externalItemInformationProtectionLabel">
+        <Property Name="sensitivityLabelId" Type="Edm.String" />
+      </ComplexType>
       <ComplexType Name="externalLink">
         <Property Name="href" Type="Edm.String" />
       </ComplexType>
@@ -21057,6 +21066,7 @@
         <Property Name="allProperties" Type="Edm.Boolean" />
         <Property Name="credentialsWithUsageSign" Type="Edm.Boolean" />
         <Property Name="credentialsWithUsageVerify" Type="Edm.Boolean" />
+        <Property Name="enforcementScope" Type="graph.servicePrincipalLockScope" Nullable="false" />
         <Property Name="isEnabled" Type="Edm.Boolean" Nullable="false" />
         <Property Name="tokenEncryptionKeyId" Type="Edm.Boolean" />
       </ComplexType>
@@ -30780,6 +30790,7 @@
       <EntityType Name="externalItem" BaseType="graph.entity">
         <Property Name="acl" Type="Collection(graph.acl)" />
         <Property Name="content" Type="graph.externalItemContent" />
+        <Property Name="informationProtectionLabel" Type="graph.externalItemInformationProtectionLabel" />
         <Property Name="properties" Type="graph.properties" />
       </EntityType>
       <EntityType Name="externallyAccessibleAwsStorageBucketFinding" BaseType="graph.finding">
@@ -40241,6 +40252,7 @@
         <NavigationProperty Name="role" Type="graph.awsRole" Nullable="false" />
       </EntityType>
       <EntityType Name="voiceAuthenticationMethodConfiguration" BaseType="graph.authenticationMethodConfiguration">
+        <Property Name="callerIdNumber" Type="Edm.String" />
         <Property Name="isOfficePhoneAllowed" Type="Edm.Boolean" />
         <NavigationProperty Name="includeTargets" Type="Collection(graph.voiceAuthenticationMethodTarget)" ContainsTarget="true" />
       </EntityType>
@@ -49936,17 +49948,6 @@
         <Parameter Name="decimals" Type="graph.Json" />
         <ReturnType Type="graph.workbookFunctionResult" />
       </Action>
-      <Action Name="validate" IsBound="true">
-        <Parameter Name="bindingParameter" Type="Collection(graph.crossTenantMigrationJob)" />
-        <Parameter Name="displayName" Type="Edm.String" Unicode="false" />
-        <Parameter Name="completeAfterDateTime" Type="Edm.String" Unicode="false" />
-        <Parameter Name="sourceTenantId" Type="Edm.String" Unicode="false" />
-        <Parameter Name="exchangeSettings" Type="graph.exchangeOnlineCrossTenantMigrationSettings" />
-        <Parameter Name="workloads" Type="Collection(Edm.String)" Unicode="false" />
-        <Parameter Name="resourceType" Type="Edm.String" Unicode="false" />
-        <Parameter Name="resources" Type="Collection(Edm.String)" Unicode="false" />
-        <ReturnType Type="graph.crossTenantMigrationJob" />
-      </Action>
       <Action Name="validate" EntitySetPath="bindingParameter" IsBound="true">
         <Parameter Name="bindingParameter" Type="graph.crossTenantMigrationJob" />
         <ReturnType Type="graph.crossTenantMigrationJob" />
@@ -53753,6 +53754,7 @@
         <Property Name="allottedUnits" Type="Edm.Int32" Nullable="false" />
         <Property Name="assignableTo" Type="microsoft.graph.cloudLicensing.assigneeTypes" Nullable="false" />
         <Property Name="consumedUnits" Type="Edm.Int32" Nullable="false" />
+        <Property Name="externalServiceIdentifier" Type="Edm.String" />
         <Property Name="services" Type="Collection(microsoft.graph.cloudLicensing.service)" Nullable="false" />
         <Property Name="skuId" Type="Edm.Guid" />
         <Property Name="skuPartNumber" Type="Edm.String" />
@@ -53774,6 +53776,7 @@
         <NavigationProperty Name="usageRight" Type="microsoft.graph.cloudLicensing.usageRight" />
       </EntityType>
       <EntityType Name="usageRight" BaseType="graph.entity">
+        <Property Name="externalServiceIdentifier" Type="Edm.String" />
         <Property Name="services" Type="Collection(microsoft.graph.cloudLicensing.service)" Nullable="false" />
         <Property Name="skuId" Type="Edm.Guid" />
         <Property Name="skuPartNumber" Type="Edm.String" />
@@ -54603,6 +54606,9 @@
         <Property Name="type" Type="microsoft.graph.externalConnectors.externalItemContentType" Nullable="false" />
         <Property Name="value" Type="Edm.String" />
       </ComplexType>
+      <ComplexType Name="externalItemInformationProtectionLabel">
+        <Property Name="sensitivityLabelId" Type="Edm.String" />
+      </ComplexType>
       <ComplexType Name="itemIdResolver" BaseType="microsoft.graph.externalConnectors.urlToItemResolverBase">
         <Property Name="itemId" Type="Edm.String" Nullable="false" />
         <Property Name="urlMatchInfo" Type="microsoft.graph.externalConnectors.urlMatchInfo" />
@@ -54695,6 +54701,7 @@
       <EntityType Name="externalItem" BaseType="graph.entity">
         <Property Name="acl" Type="Collection(microsoft.graph.externalConnectors.acl)" />
         <Property Name="content" Type="microsoft.graph.externalConnectors.externalItemContent" />
+        <Property Name="informationProtectionLabel" Type="microsoft.graph.externalConnectors.externalItemInformationProtectionLabel" />
         <Property Name="properties" Type="microsoft.graph.externalConnectors.properties" />
         <NavigationProperty Name="activities" Type="Collection(microsoft.graph.externalConnectors.externalActivity)" ContainsTarget="true" />
       </EntityType>
@@ -70334,9 +70341,6 @@
       <Annotations Target="microsoft.graph.deviceLogCollectionTemplateType/unknownFutureValue">
         <Annotation Term="Org.OData.Core.V1.Description" String="Evolvable enumeration sentinel value. Do not use." />
       </Annotations>
-      <Annotations Target="microsoft.graph.deviceManagement">
-        <Annotation Term="Org.OData.Core.V1.Description" String="Singleton that acts as container for a collection of Resource Access entities." />
-      </Annotations>
       <Annotations Target="microsoft.graph.deviceManagement.alertRule/threshold">
         <Annotation Term="Org.OData.Core.V1.Revisions">
           <Collection>
@@ -75435,9 +75439,6 @@
           </Record>
         </Annotation>
       </Annotations>
-      <Annotations Target="microsoft.graph.employeeExperience">
-        <Annotation Term="Org.OData.Core.V1.Description" String="Represents a container that exposes navigation properties for employee experience resources." />
-      </Annotations>
       <Annotations Target="microsoft.graph.employeeExperience/communities">
         <Annotation Term="Org.OData.Core.V1.Description" String="A collection of communities in Viva Engage." />
       </Annotations>
@@ -75447,9 +75448,6 @@
       <Annotations Target="microsoft.graph.employeeExperience/roles">
         <Annotation Term="Org.OData.Core.V1.Description" String="Viva Engage roles and their membership." />
       </Annotations>
-      <Annotations Target="microsoft.graph.employeeExperienceUser">
-        <Annotation Term="Org.OData.Core.V1.Description" String="Represents a container that exposes navigation properties for employee experience user resources." />
-      </Annotations>
       <Annotations Target="microsoft.graph.employeeExperienceUser/assignedRoles">
         <Annotation Term="Org.OData.Core.V1.Description" String="Viva Engage roles assigned to the user." />
       </Annotations>
@@ -77170,11 +77168,6 @@
       <Annotations Target="microsoft.graph.fileVaultState/userDeferredEncryption">
         <Annotation Term="Org.OData.Core.V1.Description" String="FileVault policy is successfully installed but user has not started encryption" />
       </Annotations>
-      <Annotations Target="microsoft.graph.financials">
-        <Annotation Term="Org.OData.Capabilities.V1.AsynchronousRequestsSupported" Bool="false" />
-        <Annotation Term="Org.OData.Capabilities.V1.BatchContinueOnErrorSupported" Bool="false" />
-        <Annotation Term="Org.OData.Capabilities.V1.BatchSupported" Bool="false" />
-      </Annotations>
       <Annotations Target="microsoft.graph.findByMethodMode(Collection(microsoft.graph.authenticationStrengthPolicy), Collection(microsoft.graph.authenticationMethodModes))">
         <Annotation Term="Org.OData.Core.V1.Revisions">
           <Collection>
@@ -77991,7 +77984,6 @@
             <PropertyValue Property="Supported" Bool="true" />
           </Record>
         </Annotation>
-        <Annotation Term="Org.OData.Core.V1.Description" String="Represents a Microsoft Entra group." />
       </Annotations>
       <Annotations Target="microsoft.graph.group/acceptedSenders">
         <Annotation Term="Org.OData.Capabilities.V1.ChangeTracking">
@@ -90649,9 +90641,6 @@
       <Annotations Target="microsoft.graph.oneDriveDataSourceConfiguration/resourceMetadataNames">
         <Annotation Term="Org.OData.Core.V1.Description" String="List of metadata field names to return for OneDrive results (if available and marked retrievable in the schema). For example, title, author, lastModifiedTime, etc. can be requested to enrich the search hits." />
       </Annotations>
-      <Annotations Target="microsoft.graph.onlineMeeting">
-        <Annotation Term="Org.OData.Core.V1.Description" String="Represents a Microsoft online meeting." />
-      </Annotations>
       <Annotations Target="microsoft.graph.onlineMeetingEngagementConversation">
         <Annotation Term="Org.OData.Core.V1.Description" String="A conversation for Teams QA online meeting." />
       </Annotations>
@@ -94712,21 +94701,6 @@
       <Annotations Target="microsoft.graph.roleDefinition/roleScopeTagIds">
         <Annotation Term="Org.OData.Core.V1.Description" String="List of Scope Tags for this Entity instance." />
       </Annotations>
-      <Annotations Target="microsoft.graph.roleManagement">
-        <Annotation Term="Org.OData.Core.V1.Revisions">
-          <Collection>
-            <Record>
-              <PropertyValue Property="Date" Date="2025-01-01" />
-              <PropertyValue Property="Description" String="This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date." />
-              <PropertyValue Property="Kind">
-                <EnumMember>Org.OData.Core.V1.RevisionKind/Deprecated</EnumMember>
-              </PropertyValue>
-              <PropertyValue Property="RemovalDate" Date="2025-12-01" />
-              <PropertyValue Property="Version" String="2025-01/PrivatePreview:microsoft.applicationAuthorization" />
-            </Record>
-          </Collection>
-        </Annotation>
-      </Annotations>
       <Annotations Target="microsoft.graph.roleManagement/deviceManagement">
         <Annotation Term="Org.OData.Core.V1.Description" String="The RbacApplication for Device Management" />
       </Annotations>
@@ -98256,6 +98230,9 @@
       <Annotations Target="microsoft.graph.servicePrincipal/createdByAppId">
         <Annotation Term="Org.OData.Core.V1.Immutable" Bool="true" />
       </Annotations>
+      <Annotations Target="microsoft.graph.servicePrincipalLockConfiguration/enforcementScope">
+        <Annotation Term="Org.OData.Core.V1.Computed" Bool="true" />
+      </Annotations>
       <Annotations Target="microsoft.graph.servicePrincipalRiskDetection">
         <Annotation Term="Org.OData.Capabilities.V1.CountRestrictions">
           <Record>
@@ -98803,10 +98780,6 @@
       <Annotations Target="microsoft.graph.softwareUpdateStatusSummary/unknownUserCount">
         <Annotation Term="Org.OData.Core.V1.Description" String="Number of unknown users." />
       </Annotations>
-      <Annotations Target="microsoft.graph.solutionsRoot">
-        <Annotation Term="Org.OData.Capabilities.V1.BatchContinueOnErrorSupported" Bool="true" />
-        <Annotation Term="Org.OData.Capabilities.V1.BatchSupported" Bool="true" />
-      </Annotations>
       <Annotations Target="microsoft.graph.specifiedCaptiveNetworkPlugins">
         <Annotation Term="Org.OData.Core.V1.Description" String="Specifies all the Captive network plugins allowed during the IKEv2 AlwaysOn VPN connection" />
       </Annotations>
@@ -99477,9 +99450,6 @@
       <Annotations Target="microsoft.graph.termsAndConditionsGroupAssignment/termsAndConditions">
         <Annotation Term="Org.OData.Core.V1.Description" String="Navigation link to the terms and conditions that are assigned." />
       </Annotations>
-      <Annotations Target="microsoft.graph.thumbnailSet">
-        <Annotation Term="Org.OData.Core.V1.Description" String="The ThumbnailSet resource is a keyed collection of thumbnail resources." />
-      </Annotations>
       <Annotations Target="microsoft.graph.tiAction">
         <Annotation Term="Org.OData.Core.V1.Revisions">
           <Collection>
@@ -102311,20 +102281,6 @@
       <Annotations Target="microsoft.graph.userTeamwork/sections">
         <Annotation Term="Org.OData.Core.V1.Description" String="User's teamwork sections for organizing chats and channels. The collection response may include @microsoft.graph.sectionsOrder and @microsoft.graph.sectionsVersion instance annotations for ordering and optimistic concurrency control." />
       </Annotations>
-      <Annotations Target="microsoft.graph.validate(Collection(microsoft.graph.crossTenantMigrationJob), Edm.String, Edm.String, Edm.String, microsoft.graph.exchangeOnlineCrossTenantMigrationSettings, Collection(Edm.String), Edm.String, Collection(Edm.String))">
-        <Annotation Term="Org.OData.Core.V1.Revisions">
-          <Collection>
-            <Record>
-              <PropertyValue Property="Date" Date="2025-07-09" />
-              <PropertyValue Property="Kind">
-                <EnumMember>Org.OData.Core.V1.RevisionKind/Deprecated</EnumMember>
-              </PropertyValue>
-              <PropertyValue Property="RemovalDate" Date="2026-07-09" />
-              <PropertyValue Property="Version" String="2025-07/PrivatePreview:CrossTenantContentMigrationAPI" />
-            </Record>
-          </Collection>
-        </Annotation>
-      </Annotations>
       <Annotations Target="microsoft.graph.validateCredentials(Collection(microsoft.graph.synchronizationJob), Edm.String, Edm.String, Edm.Boolean, Collection(microsoft.graph.synchronizationSecretKeyStringValuePair))">
         <Annotation Term="Org.OData.Core.V1.Revisions">
           <Collection>
@@ -112379,7 +112335,8 @@
       <EnumType Name="clientFallbackAction">
         <Member Name="bypass" Value="0" />
         <Member Name="block" Value="1" />
-        <Member Name="unknownFutureValue" Value="2" />
+        <Member Name="default" Value="2" />
+        <Member Name="unknownFutureValue" Value="3" />
       </EnumType>
       <EnumType Name="cloudFirewallAction">
         <Member Name="allow" Value="0" />
diff --git a/schemas/v1.0-Delos.csdl b/schemas/v1.0-Delos.csdl
index cefab2b1..4ef1f844 100644
--- a/schemas/v1.0-Delos.csdl
+++ b/schemas/v1.0-Delos.csdl
@@ -371,6 +371,12 @@
         <Member Name="updated" Value="1" />
         <Member Name="deleted" Value="2" />
       </EnumType>
+      <EnumType Name="cloudAppSecuritySessionControlType">
+        <Member Name="mcasConfigured" Value="0" />
+        <Member Name="monitorOnly" Value="1" />
+        <Member Name="blockDownloads" Value="2" />
+        <Member Name="unknownFutureValue" Value="3" />
+      </EnumType>
       <EnumType Name="columnTypes">
         <Member Name="note" Value="0" />
         <Member Name="text" Value="1" />
@@ -411,12 +417,73 @@
         <Member Name="conflict" Value="6" />
         <Member Name="notAssigned" Value="7" />
       </EnumType>
+      <EnumType Name="conditionalAccessClientApp">
+        <Member Name="all" Value="0" />
+        <Member Name="browser" Value="1" />
+        <Member Name="mobileAppsAndDesktopClients" Value="2" />
+        <Member Name="exchangeActiveSync" Value="3" />
+        <Member Name="easSupported" Value="4" />
+        <Member Name="other" Value="5" />
+        <Member Name="unknownFutureValue" Value="6" />
+      </EnumType>
+      <EnumType Name="conditionalAccessDevicePlatform">
+        <Member Name="android" Value="0" />
+        <Member Name="iOS" Value="1" />
+        <Member Name="windows" Value="2" />
+        <Member Name="windowsPhone" Value="3" />
+        <Member Name="macOS" Value="4" />
+        <Member Name="all" Value="5" />
+        <Member Name="unknownFutureValue" Value="6" />
+        <Member Name="linux" Value="7" />
+      </EnumType>
+      <EnumType Name="conditionalAccessExternalTenantsMembershipKind">
+        <Member Name="all" Value="0" />
+        <Member Name="enumerated" Value="1" />
+        <Member Name="unknownFutureValue" Value="2" />
+      </EnumType>
+      <EnumType Name="conditionalAccessGrantControl">
+        <Member Name="block" Value="0" />
+        <Member Name="mfa" Value="1" />
+        <Member Name="compliantDevice" Value="2" />
+        <Member Name="domainJoinedDevice" Value="3" />
+        <Member Name="approvedApplication" Value="4" />
+        <Member Name="compliantApplication" Value="5" />
+        <Member Name="passwordChange" Value="6" />
+        <Member Name="unknownFutureValue" Value="7" />
+        <Member Name="riskRemediation" Value="8" />
+      </EnumType>
+      <EnumType Name="conditionalAccessGuestOrExternalUserTypes" IsFlags="true">
+        <Member Name="none" Value="0" />
+        <Member Name="internalGuest" Value="1" />
+        <Member Name="b2bCollaborationGuest" Value="2" />
+        <Member Name="b2bCollaborationMember" Value="4" />
+        <Member Name="b2bDirectConnectUser" Value="8" />
+        <Member Name="otherExternalUser" Value="16" />
+        <Member Name="serviceProvider" Value="32" />
+        <Member Name="unknownFutureValue" Value="64" />
+      </EnumType>
+      <EnumType Name="conditionalAccessPolicyState">
+        <Member Name="enabled" Value="0" />
+        <Member Name="disabled" Value="1" />
+        <Member Name="enabledForReportingButNotEnforced" Value="2" />
+      </EnumType>
       <EnumType Name="conditionalAccessStatus">
         <Member Name="success" Value="0" />
         <Member Name="failure" Value="1" />
         <Member Name="notApplied" Value="2" />
         <Member Name="unknownFutureValue" Value="3" />
       </EnumType>
+      <EnumType Name="conditionalAccessTransferMethods" IsFlags="true">
+        <Member Name="none" Value="0" />
+        <Member Name="deviceCodeFlow" Value="1" />
+        <Member Name="authenticationTransfer" Value="2" />
+        <Member Name="unknownFutureValue" Value="4" />
+      </EnumType>
+      <EnumType Name="countryLookupMethodType">
+        <Member Name="clientIpAddress" Value="0" />
+        <Member Name="authenticatorAppGps" Value="1" />
+        <Member Name="unknownFutureValue" Value="2" />
+      </EnumType>
       <EnumType Name="crossTenantAccessPolicyTargetConfigurationAccessType">
         <Member Name="allowed" Value="1" />
         <Member Name="blocked" Value="2" />
@@ -781,6 +848,10 @@
         <Member Name="maxStoragePerContainerInBytes" Value="5" />
         <Member Name="unknownFutureValue" Value="6" />
       </EnumType>
+      <EnumType Name="filterMode">
+        <Member Name="include" Value="0" />
+        <Member Name="exclude" Value="1" />
+      </EnumType>
       <EnumType Name="firewallCertificateRevocationListCheckMethodType">
         <Member Name="deviceDefault" Value="0" />
         <Member Name="none" Value="1" />
@@ -1266,6 +1337,10 @@
         <Member Name="delegated" Value="2" />
         <Member Name="application" Value="3" />
       </EnumType>
+      <EnumType Name="persistentBrowserSessionMode">
+        <Member Name="always" Value="0" />
+        <Member Name="never" Value="1" />
+      </EnumType>
       <EnumType Name="phoneType">
         <Member Name="home" Value="0" />
         <Member Name="business" Value="1" />
@@ -1688,6 +1763,20 @@
         <Member Name="blockList" Value="2" />
         <Member Name="unknownFutureValue" Value="3" />
       </EnumType>
+      <EnumType Name="signInFrequencyAuthenticationType">
+        <Member Name="primaryAndSecondaryAuthentication" Value="0" />
+        <Member Name="secondaryAuthentication" Value="1" />
+        <Member Name="unknownFutureValue" Value="2" />
+      </EnumType>
+      <EnumType Name="signInFrequencyInterval">
+        <Member Name="timeBased" Value="0" />
+        <Member Name="everyTime" Value="1" />
+        <Member Name="unknownFutureValue" Value="2" />
+      </EnumType>
+      <EnumType Name="signinFrequencyType">
+        <Member Name="days" Value="0" />
+        <Member Name="hours" Value="1" />
+      </EnumType>
       <EnumType Name="signInUserType">
         <Member Name="member" Value="0" />
         <Member Name="guest" Value="1" />
@@ -1734,6 +1823,15 @@
         <Member Name="allMicrosoftApps" Value="2" />
         <Member Name="allApps" Value="4" />
       </EnumType>
+      <EnumType Name="templateScenarios" IsFlags="true">
+        <Member Name="new" Value="0" />
+        <Member Name="secureFoundation" Value="1" />
+        <Member Name="zeroTrust" Value="2" />
+        <Member Name="remoteWork" Value="4" />
+        <Member Name="protectAdmins" Value="8" />
+        <Member Name="emergingThreats" Value="16" />
+        <Member Name="unknownFutureValue" Value="32" />
+      </EnumType>
       <EnumType Name="timeZoneStandard">
         <Member Name="windows" Value="0" />
         <Member Name="iana" Value="1" />
@@ -1758,6 +1856,11 @@
         <Member Name="ADFederationServicesMFAAdapter" Value="4" />
         <Member Name="NPSExtension" Value="5" />
       </EnumType>
+      <EnumType Name="userAction">
+        <Member Name="registerSecurityInformation" Value="0" />
+        <Member Name="registerOrJoinDevices" Value="1" />
+        <Member Name="unknownFutureValue" Value="2" />
+      </EnumType>
       <EnumType Name="userDefaultAuthenticationMethod">
         <Member Name="push" Value="0" />
         <Member Name="oath" Value="1" />
@@ -1872,6 +1975,29 @@
         <Member Name="showOrganizerAndTimeOnly" Value="1" />
         <Member Name="showOrganizerAndTimeAndSubject" Value="2" />
       </EnumType>
+      <EnumType Name="whatIfAnalysisReasons" IsFlags="true">
+        <Member Name="notSet" Value="0" />
+        <Member Name="notEnoughInformation" Value="1" />
+        <Member Name="invalidCondition" Value="2" />
+        <Member Name="users" Value="4" />
+        <Member Name="workloadIdentities" Value="8" />
+        <Member Name="application" Value="16" />
+        <Member Name="userActions" Value="32" />
+        <Member Name="authenticationContext" Value="64" />
+        <Member Name="devicePlatform" Value="128" />
+        <Member Name="devices" Value="256" />
+        <Member Name="clientApps" Value="512" />
+        <Member Name="location" Value="1024" />
+        <Member Name="signInRisk" Value="2048" />
+        <Member Name="emptyPolicy" Value="4096" />
+        <Member Name="invalidPolicy" Value="8192" />
+        <Member Name="policyNotEnabled" Value="16384" />
+        <Member Name="userRisk" Value="32768" />
+        <Member Name="time" Value="65536" />
+        <Member Name="insiderRisk" Value="131072" />
+        <Member Name="authenticationFlow" Value="262144" />
+        <Member Name="unknownFutureValue" Value="524288" />
+      </EnumType>
       <EnumType Name="win32LobAppDeliveryOptimizationPriority">
         <Member Name="notConfigured" Value="0" />
         <Member Name="foreground" Value="1" />
@@ -2266,6 +2392,10 @@
         <Property Name="servicePrincipalId" Type="Edm.String" />
         <Property Name="servicePrincipalName" Type="Edm.String" />
       </ComplexType>
+      <ComplexType Name="applicationContext" BaseType="graph.signInContext">
+        <Property Name="includeApplications" Type="Collection(Edm.String)" Nullable="false" />
+      </ComplexType>
+      <ComplexType Name="applicationEnforcedRestrictionsSessionControl" BaseType="graph.conditionalAccessSessionControl" />
       <ComplexType Name="applicationServicePrincipal">
         <NavigationProperty Name="application" Type="graph.application" />
         <NavigationProperty Name="servicePrincipal" Type="graph.servicePrincipal" />
@@ -2383,6 +2513,12 @@
         <Property Name="modifiedProperties" Type="Collection(graph.auditProperty)" />
         <Property Name="resourceId" Type="Edm.String" />
       </ComplexType>
+      <ComplexType Name="authContext" BaseType="graph.signInContext">
+        <Property Name="authenticationContextValue" Type="Edm.String" />
+      </ComplexType>
+      <ComplexType Name="authenticationFlow">
+        <Property Name="transferMethod" Type="graph.conditionalAccessTransferMethods" />
+      </ComplexType>
       <ComplexType Name="authenticationMethodFeatureConfiguration">
         <Property Name="excludeTarget" Type="graph.featureTarget" />
         <Property Name="includeTarget" Type="graph.featureTarget" />
@@ -2481,6 +2617,9 @@
         <Property Name="choices" Type="Collection(Edm.String)" />
         <Property Name="displayAs" Type="Edm.String" />
       </ComplexType>
+      <ComplexType Name="cloudAppSecuritySessionControl" BaseType="graph.conditionalAccessSessionControl">
+        <Property Name="cloudAppSecurityType" Type="graph.cloudAppSecuritySessionControlType" />
+      </ComplexType>
       <ComplexType Name="columnValidation">
         <Property Name="defaultLanguage" Type="Edm.String" />
         <Property Name="descriptions" Type="Collection(graph.displayNameLocalization)" />
@@ -2495,6 +2634,92 @@
       <ComplexType Name="complianceManagementPartnerAssignment">
         <Property Name="target" Type="graph.deviceAndAppManagementAssignmentTarget" />
       </ComplexType>
+      <ComplexType Name="conditionalAccessAllExternalTenants" BaseType="graph.conditionalAccessExternalTenants" />
+      <ComplexType Name="conditionalAccessApplications">
+        <Property Name="applicationFilter" Type="graph.conditionalAccessFilter" />
+        <Property Name="excludeApplications" Type="Collection(Edm.String)" Nullable="false" />
+        <Property Name="includeApplications" Type="Collection(Edm.String)" Nullable="false" />
+        <Property Name="includeAuthenticationContextClassReferences" Type="Collection(Edm.String)" Nullable="false" />
+        <Property Name="includeUserActions" Type="Collection(Edm.String)" Nullable="false" />
+      </ComplexType>
+      <ComplexType Name="conditionalAccessAuthenticationFlows">
+        <Property Name="transferMethods" Type="graph.conditionalAccessTransferMethods" Nullable="false" />
+      </ComplexType>
+      <ComplexType Name="conditionalAccessClientApplications">
+        <Property Name="excludeServicePrincipals" Type="Collection(Edm.String)" Nullable="false" />
+        <Property Name="includeServicePrincipals" Type="Collection(Edm.String)" Nullable="false" />
+        <Property Name="servicePrincipalFilter" Type="graph.conditionalAccessFilter" />
+      </ComplexType>
+      <ComplexType Name="conditionalAccessConditionSet">
+        <Property Name="applications" Type="graph.conditionalAccessApplications" />
+        <Property Name="authenticationFlows" Type="graph.conditionalAccessAuthenticationFlows" />
+        <Property Name="clientApplications" Type="graph.conditionalAccessClientApplications" />
+        <Property Name="clientAppTypes" Type="Collection(graph.conditionalAccessClientApp)" Nullable="false" />
+        <Property Name="devices" Type="graph.conditionalAccessDevices" />
+        <Property Name="locations" Type="graph.conditionalAccessLocations" />
+        <Property Name="platforms" Type="graph.conditionalAccessPlatforms" />
+        <Property Name="servicePrincipalRiskLevels" Type="Collection(graph.riskLevel)" Nullable="false" />
+        <Property Name="signInRiskLevels" Type="Collection(graph.riskLevel)" Nullable="false" />
+        <Property Name="userRiskLevels" Type="Collection(graph.riskLevel)" Nullable="false" />
+        <Property Name="users" Type="graph.conditionalAccessUsers" />
+      </ComplexType>
+      <ComplexType Name="conditionalAccessDevices">
+        <Property Name="deviceFilter" Type="graph.conditionalAccessFilter" />
+      </ComplexType>
+      <ComplexType Name="conditionalAccessEnumeratedExternalTenants" BaseType="graph.conditionalAccessExternalTenants">
+        <Property Name="members" Type="Collection(Edm.String)" Nullable="false" />
+      </ComplexType>
+      <ComplexType Name="conditionalAccessExternalTenants" Abstract="true">
+        <Property Name="membershipKind" Type="graph.conditionalAccessExternalTenantsMembershipKind" />
+      </ComplexType>
+      <ComplexType Name="conditionalAccessFilter">
+        <Property Name="mode" Type="graph.filterMode" Nullable="false" />
+        <Property Name="rule" Type="Edm.String" Nullable="false" />
+      </ComplexType>
+      <ComplexType Name="conditionalAccessGrantControls">
+        <Property Name="builtInControls" Type="Collection(graph.conditionalAccessGrantControl)" Nullable="false" />
+        <Property Name="customAuthenticationFactors" Type="Collection(Edm.String)" Nullable="false" />
+        <Property Name="operator" Type="Edm.String" />
+        <Property Name="termsOfUse" Type="Collection(Edm.String)" Nullable="false" />
+      </ComplexType>
+      <ComplexType Name="conditionalAccessGuestsOrExternalUsers">
+        <Property Name="externalTenants" Type="graph.conditionalAccessExternalTenants" />
+        <Property Name="guestOrExternalUserTypes" Type="graph.conditionalAccessGuestOrExternalUserTypes" Nullable="false" />
+      </ComplexType>
+      <ComplexType Name="conditionalAccessLocations">
+        <Property Name="excludeLocations" Type="Collection(Edm.String)" Nullable="false" />
+        <Property Name="includeLocations" Type="Collection(Edm.String)" Nullable="false" />
+      </ComplexType>
+      <ComplexType Name="conditionalAccessPlatforms">
+        <Property Name="excludePlatforms" Type="Collection(graph.conditionalAccessDevicePlatform)" Nullable="false" />
+        <Property Name="includePlatforms" Type="Collection(graph.conditionalAccessDevicePlatform)" Nullable="false" />
+      </ComplexType>
+      <ComplexType Name="conditionalAccessPolicyDetail">
+        <Property Name="conditions" Type="graph.conditionalAccessConditionSet" Nullable="false" />
+        <Property Name="grantControls" Type="graph.conditionalAccessGrantControls" />
+        <Property Name="sessionControls" Type="graph.conditionalAccessSessionControls" />
+      </ComplexType>
+      <ComplexType Name="conditionalAccessSessionControl" Abstract="true">
+        <Property Name="isEnabled" Type="Edm.Boolean" />
+      </ComplexType>
+      <ComplexType Name="conditionalAccessSessionControls">
+        <Property Name="applicationEnforcedRestrictions" Type="graph.applicationEnforcedRestrictionsSessionControl" />
+        <Property Name="cloudAppSecurity" Type="graph.cloudAppSecuritySessionControl" />
+        <Property Name="disableResilienceDefaults" Type="Edm.Boolean" />
+        <Property Name="persistentBrowser" Type="graph.persistentBrowserSessionControl" />
+        <Property Name="secureSignInSession" Type="graph.secureSignInSessionControl" />
+        <Property Name="signInFrequency" Type="graph.signInFrequencySessionControl" />
+      </ComplexType>
+      <ComplexType Name="conditionalAccessUsers">
+        <Property Name="excludeGroups" Type="Collection(Edm.String)" Nullable="false" />
+        <Property Name="excludeGuestsOrExternalUsers" Type="graph.conditionalAccessGuestsOrExternalUsers" />
+        <Property Name="excludeRoles" Type="Collection(Edm.String)" Nullable="false" />
+        <Property Name="excludeUsers" Type="Collection(Edm.String)" Nullable="false" />
+        <Property Name="includeGroups" Type="Collection(Edm.String)" Nullable="false" />
+        <Property Name="includeGuestsOrExternalUsers" Type="graph.conditionalAccessGuestsOrExternalUsers" />
+        <Property Name="includeRoles" Type="Collection(Edm.String)" Nullable="false" />
+        <Property Name="includeUsers" Type="Collection(Edm.String)" Nullable="false" />
+      </ComplexType>
       <ComplexType Name="configurationManagerClientEnabledFeatures">
         <Property Name="compliancePolicy" Type="Edm.Boolean" Nullable="false" />
         <Property Name="deviceConfiguration" Type="Edm.Boolean" Nullable="false" />
@@ -2714,6 +2939,37 @@
         <Property Name="virtualSecureMode" Type="Edm.String" />
         <Property Name="windowsPE" Type="Edm.String" />
       </ComplexType>
+      <ComplexType Name="deviceInfo">
+        <Property Name="deviceId" Type="Edm.String" />
+        <Property Name="displayName" Type="Edm.String" />
+        <Property Name="enrollmentProfileName" Type="Edm.String" />
+        <Property Name="extensionAttribute1" Type="Edm.String" />
+        <Property Name="extensionAttribute10" Type="Edm.String" />
+        <Property Name="extensionAttribute11" Type="Edm.String" />
+        <Property Name="extensionAttribute12" Type="Edm.String" />
+        <Property Name="extensionAttribute13" Type="Edm.String" />
+        <Property Name="extensionAttribute14" Type="Edm.String" />
+        <Property Name="extensionAttribute15" Type="Edm.String" />
+        <Property Name="extensionAttribute2" Type="Edm.String" />
+        <Property Name="extensionAttribute3" Type="Edm.String" />
+        <Property Name="extensionAttribute4" Type="Edm.String" />
+        <Property Name="extensionAttribute5" Type="Edm.String" />
+        <Property Name="extensionAttribute6" Type="Edm.String" />
+        <Property Name="extensionAttribute7" Type="Edm.String" />
+        <Property Name="extensionAttribute8" Type="Edm.String" />
+        <Property Name="extensionAttribute9" Type="Edm.String" />
+        <Property Name="isCompliant" Type="Edm.Boolean" />
+        <Property Name="manufacturer" Type="Edm.String" />
+        <Property Name="mdmAppId" Type="Edm.String" />
+        <Property Name="model" Type="Edm.String" />
+        <Property Name="operatingSystem" Type="Edm.String" />
+        <Property Name="operatingSystemVersion" Type="Edm.String" />
+        <Property Name="ownership" Type="Edm.String" />
+        <Property Name="physicalIds" Type="Collection(Edm.String)" />
+        <Property Name="profileType" Type="Edm.String" />
+        <Property Name="systemLabels" Type="Collection(Edm.String)" />
+        <Property Name="trustType" Type="Edm.String" />
+      </ComplexType>
       <ComplexType Name="deviceLocalCredential">
         <Property Name="accountName" Type="Edm.String" Nullable="false" />
         <Property Name="accountSid" Type="Edm.String" Nullable="false" />
@@ -3634,6 +3890,9 @@
         <Property Name="userConsentDisplayName" Type="Edm.String" />
         <Property Name="value" Type="Edm.String" />
       </ComplexType>
+      <ComplexType Name="persistentBrowserSessionControl" BaseType="graph.conditionalAccessSessionControl">
+        <Property Name="mode" Type="graph.persistentBrowserSessionMode" />
+      </ComplexType>
       <ComplexType Name="personOrGroupColumn">
         <Property Name="allowMultipleSelection" Type="Edm.Boolean" />
         <Property Name="chooseFromType" Type="Edm.String" />
@@ -3927,6 +4186,7 @@
       <ComplexType Name="searchResult">
         <Property Name="onClickTelemetryUrl" Type="Edm.String" />
       </ComplexType>
+      <ComplexType Name="secureSignInSessionControl" BaseType="graph.conditionalAccessSessionControl" />
       <ComplexType Name="sensitivityLabelAssignment">
         <Property Name="assignmentMethod" Type="graph.sensitivityLabelAssignmentMethod" Nullable="false" />
         <Property Name="sensitivityLabelId" Type="Edm.String" Nullable="false" />
@@ -3951,6 +4211,9 @@
         <Property Name="isEnabled" Type="Edm.Boolean" Nullable="false" />
         <Property Name="tokenEncryptionKeyId" Type="Edm.Boolean" />
       </ComplexType>
+      <ComplexType Name="servicePrincipalSignIn" BaseType="graph.signInIdentity">
+        <Property Name="servicePrincipalId" Type="Edm.String" />
+      </ComplexType>
       <ComplexType Name="settingSource">
         <Property Name="displayName" Type="Edm.String" />
         <Property Name="id" Type="Edm.String" />
@@ -4030,10 +4293,29 @@
         <Property Name="lastSuccessfulSignInDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="lastSuccessfulSignInRequestId" Type="Edm.String" />
       </ComplexType>
+      <ComplexType Name="signInConditions">
+        <Property Name="authenticationFlow" Type="graph.authenticationFlow" />
+        <Property Name="clientAppType" Type="graph.conditionalAccessClientApp" />
+        <Property Name="country" Type="Edm.String" />
+        <Property Name="deviceInfo" Type="graph.deviceInfo" />
+        <Property Name="devicePlatform" Type="graph.conditionalAccessDevicePlatform" />
+        <Property Name="ipAddress" Type="Edm.String" />
+        <Property Name="servicePrincipalRiskLevel" Type="graph.riskLevel" />
+        <Property Name="signInRiskLevel" Type="graph.riskLevel" />
+        <Property Name="userRiskLevel" Type="graph.riskLevel" />
+      </ComplexType>
+      <ComplexType Name="signInContext" Abstract="true" />
+      <ComplexType Name="signInFrequencySessionControl" BaseType="graph.conditionalAccessSessionControl">
+        <Property Name="authenticationType" Type="graph.signInFrequencyAuthenticationType" />
+        <Property Name="frequencyInterval" Type="graph.signInFrequencyInterval" />
+        <Property Name="type" Type="graph.signinFrequencyType" />
+        <Property Name="value" Type="Edm.Int32" />
+      </ComplexType>
       <ComplexType Name="signingCertificateUpdateStatus">
         <Property Name="certificateUpdateResult" Type="Edm.String" />
         <Property Name="lastRunDateTime" Type="Edm.DateTimeOffset" />
       </ComplexType>
+      <ComplexType Name="signInIdentity" Abstract="true" />
       <ComplexType Name="signInLocation">
         <Property Name="city" Type="Edm.String" />
         <Property Name="countryOrRegion" Type="Edm.String" />
@@ -4161,6 +4443,9 @@
         <Property Name="nextExpectedRanges" Type="Collection(Edm.String)" />
         <Property Name="uploadUrl" Type="Edm.String" />
       </ComplexType>
+      <ComplexType Name="userActionContext" BaseType="graph.signInContext">
+        <Property Name="userAction" Type="graph.userAction" />
+      </ComplexType>
       <ComplexType Name="userExperienceAnalyticsAutopilotDevicesSummary">
         <Property Name="devicesNotAutopilotRegistered" Type="Edm.Int32" Nullable="false" />
         <Property Name="devicesWithoutAutopilotProfileAssigned" Type="Edm.Int32" Nullable="false" />
@@ -4227,6 +4512,11 @@
         <Property Name="userRoles" Type="graph.includedUserRoles" />
         <Property Name="userTypes" Type="graph.includedUserTypes" />
       </ComplexType>
+      <ComplexType Name="userSignIn" BaseType="graph.signInIdentity">
+        <Property Name="externalTenantId" Type="Edm.String" />
+        <Property Name="externalUserType" Type="graph.conditionalAccessGuestOrExternalUserTypes" Nullable="false" />
+        <Property Name="userId" Type="Edm.String" />
+      </ComplexType>
       <ComplexType Name="verifiedDomain">
         <Property Name="capabilities" Type="Edm.String" />
         <Property Name="isDefault" Type="Edm.Boolean" />
@@ -4895,6 +5185,11 @@
       <EntityType Name="authenticationCombinationConfiguration" BaseType="graph.entity" Abstract="true">
         <Property Name="appliesToCombinations" Type="Collection(graph.authenticationMethodModes)" Nullable="false" />
       </EntityType>
+      <EntityType Name="authenticationContextClassReference" BaseType="graph.entity">
+        <Property Name="description" Type="Edm.String" />
+        <Property Name="displayName" Type="Edm.String" />
+        <Property Name="isAvailable" Type="Edm.Boolean" />
+      </EntityType>
       <EntityType Name="authenticationMethodModeDetail" BaseType="graph.entity">
         <Property Name="authenticationMethod" Type="graph.baseAuthenticationMethod" Nullable="false" />
         <Property Name="displayName" Type="Edm.String" Nullable="false" />
@@ -5081,6 +5376,33 @@
         <Property Name="macOsOnboarded" Type="Edm.Boolean" Nullable="false" />
         <Property Name="partnerState" Type="graph.deviceManagementPartnerTenantState" Nullable="false" />
       </EntityType>
+      <EntityType Name="conditionalAccessPolicy" BaseType="graph.policyDeletableItem">
+        <Key>
+          <PropertyRef Name="id" />
+        </Key>
+        <Property Name="conditions" Type="graph.conditionalAccessConditionSet" Nullable="false" />
+        <Property Name="createdDateTime" Type="Edm.DateTimeOffset" />
+        <Property Name="description" Type="Edm.String" />
+        <Property Name="displayName" Type="Edm.String" Nullable="false" />
+        <Property Name="grantControls" Type="graph.conditionalAccessGrantControls" />
+        <Property Name="id" Type="Edm.String" Nullable="false" />
+        <Property Name="modifiedDateTime" Type="Edm.DateTimeOffset" />
+        <Property Name="sessionControls" Type="graph.conditionalAccessSessionControls" />
+        <Property Name="state" Type="graph.conditionalAccessPolicyState" Nullable="false" />
+        <Property Name="templateId" Type="Edm.String" />
+      </EntityType>
+      <EntityType Name="conditionalAccessRoot" BaseType="graph.entity">
+        <NavigationProperty Name="authenticationContextClassReferences" Type="Collection(graph.authenticationContextClassReference)" ContainsTarget="true" />
+        <NavigationProperty Name="namedLocations" Type="Collection(graph.namedLocation)" ContainsTarget="true" />
+        <NavigationProperty Name="policies" Type="Collection(graph.conditionalAccessPolicy)" ContainsTarget="true" />
+        <NavigationProperty Name="templates" Type="Collection(graph.conditionalAccessTemplate)" ContainsTarget="true" />
+      </EntityType>
+      <EntityType Name="conditionalAccessTemplate" BaseType="graph.entity">
+        <Property Name="description" Type="Edm.String" Nullable="false" />
+        <Property Name="details" Type="graph.conditionalAccessPolicyDetail" Nullable="false" />
+        <Property Name="name" Type="Edm.String" Nullable="false" />
+        <Property Name="scenarios" Type="graph.templateScenarios" Nullable="false" />
+      </EntityType>
       <EntityType Name="contact" BaseType="graph.outlookItem" OpenType="true">
         <Property Name="assistantName" Type="Edm.String" />
         <Property Name="birthday" Type="Edm.DateTimeOffset" />
@@ -5174,6 +5496,11 @@
         <Property Name="uniqueSenders" Type="Collection(Edm.String)" Nullable="false" />
         <NavigationProperty Name="posts" Type="Collection(graph.post)" ContainsTarget="true" />
       </EntityType>
+      <EntityType Name="countryNamedLocation" BaseType="graph.namedLocation">
+        <Property Name="countriesAndRegions" Type="Collection(Edm.String)" Nullable="false" />
+        <Property Name="countryLookupMethod" Type="graph.countryLookupMethodType" />
+        <Property Name="includeUnknownCountriesAndRegions" Type="Edm.Boolean" Nullable="false" />
+      </EntityType>
       <EntityType Name="crossTenantAccessPolicy" BaseType="graph.policyBase">
         <NavigationProperty Name="default" Type="graph.crossTenantAccessPolicyConfigurationDefault" ContainsTarget="true" />
         <NavigationProperty Name="partners" Type="Collection(graph.crossTenantAccessPolicyConfigurationPartner)" ContainsTarget="true" />
@@ -6168,7 +6495,9 @@
         <Property Name="width" Type="Edm.Int32" />
         <NavigationProperty Name="webparts" Type="Collection(graph.webPart)" ContainsTarget="true" />
       </EntityType>
-      <EntityType Name="identityContainer" />
+      <EntityType Name="identityContainer">
+        <NavigationProperty Name="conditionalAccess" Type="graph.conditionalAccessRoot" ContainsTarget="true" />
+      </EntityType>
       <EntityType Name="identityProtectionRoot">
         <NavigationProperty Name="riskDetections" Type="Collection(graph.riskDetection)" ContainsTarget="true" />
         <NavigationProperty Name="riskyServicePrincipals" Type="Collection(graph.riskyServicePrincipal)" ContainsTarget="true" />
@@ -6178,6 +6507,9 @@
       <EntityType Name="identityProviderBase" BaseType="graph.entity" Abstract="true">
         <Property Name="displayName" Type="Edm.String" />
       </EntityType>
+      <EntityType Name="identitySecurityDefaultsEnforcementPolicy" BaseType="graph.policyBase">
+        <Property Name="isEnabled" Type="Edm.Boolean" Nullable="false" />
+      </EntityType>
       <EntityType Name="importedWindowsAutopilotDeviceIdentity" BaseType="graph.entity">
         <Property Name="assignedUserPrincipalName" Type="Edm.String" />
         <Property Name="groupTag" Type="Edm.String" />
@@ -6474,6 +6806,10 @@
         <Property Name="vppTokenId" Type="Edm.Guid" Nullable="false" />
       </EntityType>
       <EntityType Name="iosVppEBookAssignment" BaseType="graph.managedEBookAssignment" />
+      <EntityType Name="ipNamedLocation" BaseType="graph.namedLocation">
+        <Property Name="ipRanges" Type="Collection(graph.ipRange)" Nullable="false" />
+        <Property Name="isTrusted" Type="Edm.Boolean" Nullable="false" />
+      </EntityType>
       <EntityType Name="itemActivity" BaseType="graph.entity" OpenType="true">
         <Property Name="access" Type="graph.accessAction" />
         <Property Name="activityDateTime" Type="Edm.DateTimeOffset" />
@@ -7025,6 +7361,15 @@
       <EntityType Name="multiValueLegacyExtendedProperty" BaseType="graph.entity">
         <Property Name="value" Type="Collection(Edm.String)" />
       </EntityType>
+      <EntityType Name="namedLocation" BaseType="graph.policyDeletableItem">
+        <Key>
+          <PropertyRef Name="id" />
+        </Key>
+        <Property Name="createdDateTime" Type="Edm.DateTimeOffset" />
+        <Property Name="displayName" Type="Edm.String" Nullable="false" />
+        <Property Name="id" Type="Edm.String" Nullable="false" />
+        <Property Name="modifiedDateTime" Type="Edm.DateTimeOffset" />
+      </EntityType>
       <EntityType Name="notificationMessageTemplate" BaseType="graph.entity">
         <Property Name="brandingOptions" Type="graph.notificationTemplateBrandingOptions" Nullable="false" />
         <Property Name="defaultLocale" Type="Edm.String" />
@@ -7217,16 +7562,21 @@
         <Property Name="description" Type="Edm.String" />
         <Property Name="displayName" Type="Edm.String" />
       </EntityType>
-      <EntityType Name="policyRoot">
+      <EntityType Name="policyDeletableItem" Abstract="true">
+        <Property Name="deletedDateTime" Type="Edm.DateTimeOffset" />
+      </EntityType>
+      <EntityType Name="policyRoot" BaseType="graph.entity">
         <NavigationProperty Name="activityBasedTimeoutPolicies" Type="Collection(graph.activityBasedTimeoutPolicy)" ContainsTarget="true" />
         <NavigationProperty Name="appManagementPolicies" Type="Collection(graph.appManagementPolicy)" ContainsTarget="true" />
         <NavigationProperty Name="authorizationPolicy" Type="graph.authorizationPolicy" ContainsTarget="true" />
         <NavigationProperty Name="claimsMappingPolicies" Type="Collection(graph.claimsMappingPolicy)" ContainsTarget="true" />
+        <NavigationProperty Name="conditionalAccessPolicies" Type="Collection(graph.conditionalAccessPolicy)" ContainsTarget="true" />
         <NavigationProperty Name="crossTenantAccessPolicy" Type="graph.crossTenantAccessPolicy" ContainsTarget="true" />
         <NavigationProperty Name="defaultAppManagementPolicy" Type="graph.tenantAppManagementPolicy" ContainsTarget="true" />
         <NavigationProperty Name="deviceRegistrationPolicy" Type="graph.deviceRegistrationPolicy" ContainsTarget="true" />
         <NavigationProperty Name="featureRolloutPolicies" Type="Collection(graph.featureRolloutPolicy)" ContainsTarget="true" />
         <NavigationProperty Name="homeRealmDiscoveryPolicies" Type="Collection(graph.homeRealmDiscoveryPolicy)" ContainsTarget="true" />
+        <NavigationProperty Name="identitySecurityDefaultsEnforcementPolicy" Type="graph.identitySecurityDefaultsEnforcementPolicy" ContainsTarget="true" />
         <NavigationProperty Name="permissionGrantPolicies" Type="Collection(graph.permissionGrantPolicy)" ContainsTarget="true" />
         <NavigationProperty Name="tokenIssuancePolicies" Type="Collection(graph.tokenIssuancePolicy)" ContainsTarget="true" />
         <NavigationProperty Name="tokenLifetimePolicies" Type="Collection(graph.tokenLifetimePolicy)" ContainsTarget="true" />
@@ -8304,6 +8654,10 @@
         <Property Name="useManagedBrowser" Type="Edm.Boolean" Nullable="false" />
       </EntityType>
       <EntityType Name="webPart" BaseType="graph.entity" Abstract="true" />
+      <EntityType Name="whatIfAnalysisResult" BaseType="graph.conditionalAccessPolicy">
+        <Property Name="analysisReasons" Type="graph.whatIfAnalysisReasons" Nullable="false" />
+        <Property Name="policyApplies" Type="Edm.Boolean" Nullable="false" />
+      </EntityType>
       <EntityType Name="win32LobApp" BaseType="graph.mobileLobApp">
         <Property Name="allowedArchitectures" Type="graph.windowsArchitecture" />
         <Property Name="applicableArchitectures" Type="graph.windowsArchitecture" Nullable="false" />
@@ -9270,6 +9624,14 @@
         <Parameter Name="bindingParameter" Type="graph.win32LobApp" />
         <Parameter Name="applicableArchitectures" Type="graph.windowsArchitecture" Nullable="false" />
       </Action>
+      <Action Name="evaluate" IsBound="true">
+        <Parameter Name="bindingParameter" Type="graph.conditionalAccessRoot" />
+        <Parameter Name="signInIdentity" Type="graph.signInIdentity" />
+        <Parameter Name="signInContext" Type="graph.signInContext" />
+        <Parameter Name="signInConditions" Type="graph.signInConditions" />
+        <Parameter Name="appliedPoliciesOnly" Type="Edm.Boolean" />
+        <ReturnType Type="Collection(graph.whatIfAnalysisResult)" />
+      </Action>
       <Action Name="extractSensitivityLabels" IsBound="true">
         <Parameter Name="bindparameter" Type="graph.driveItem" />
         <ReturnType Type="graph.extractSensitivityLabelsResult" />
@@ -11589,6 +11951,25 @@
       <Annotations Target="microsoft.graph.auditResource/resourceId">
         <Annotation Term="Org.OData.Core.V1.Description" String="Audit resource's Id." />
       </Annotations>
+      <Annotations Target="microsoft.graph.authenticationContextClassReference">
+        <Annotation Term="Org.OData.Capabilities.V1.CountRestrictions">
+          <Record>
+            <PropertyValue Property="Countable" Bool="false" />
+          </Record>
+        </Annotation>
+        <Annotation Term="Org.OData.Capabilities.V1.FilterRestrictions">
+          <Record>
+            <PropertyValue Property="Filterable" Bool="true" />
+          </Record>
+        </Annotation>
+        <Annotation Term="Org.OData.Capabilities.V1.SelectSupport">
+          <Record>
+            <PropertyValue Property="Supported" Bool="false" />
+          </Record>
+        </Annotation>
+        <Annotation Term="Org.OData.Capabilities.V1.SkipSupported" Bool="false" />
+        <Annotation Term="Org.OData.Capabilities.V1.TopSupported" Bool="false" />
+      </Annotations>
       <Annotations Target="microsoft.graph.automaticUpdateMode">
         <Annotation Term="Org.OData.Core.V1.Description" String="Possible values for automatic update mode." />
       </Annotations>
@@ -11947,6 +12328,64 @@
       <Annotations Target="microsoft.graph.complianceState/unknown">
         <Annotation Term="Org.OData.Core.V1.Description" String="Unknown." />
       </Annotations>
+      <Annotations Target="microsoft.graph.conditionalAccessPolicy">
+        <Annotation Term="Org.OData.Capabilities.V1.CountRestrictions">
+          <Record>
+            <PropertyValue Property="Countable" Bool="true" />
+          </Record>
+        </Annotation>
+        <Annotation Term="Org.OData.Capabilities.V1.ExpandRestrictions">
+          <Record>
+            <PropertyValue Property="Expandable" Bool="false" />
+          </Record>
+        </Annotation>
+        <Annotation Term="Org.OData.Capabilities.V1.FilterRestrictions">
+          <Record>
+            <PropertyValue Property="Filterable" Bool="true" />
+          </Record>
+        </Annotation>
+        <Annotation Term="Org.OData.Capabilities.V1.SelectSupport">
+          <Record>
+            <PropertyValue Property="Supported" Bool="true" />
+          </Record>
+        </Annotation>
+        <Annotation Term="Org.OData.Capabilities.V1.SkipSupported" Bool="true" />
+        <Annotation Term="Org.OData.Capabilities.V1.TopSupported" Bool="true" />
+      </Annotations>
+      <Annotations Target="microsoft.graph.conditionalAccessTemplate">
+        <Annotation Term="Org.OData.Capabilities.V1.CountRestrictions">
+          <Record>
+            <PropertyValue Property="Countable" Bool="false" />
+          </Record>
+        </Annotation>
+        <Annotation Term="Org.OData.Capabilities.V1.DeleteRestrictions">
+          <Record>
+            <PropertyValue Property="Deletable" Bool="false" />
+          </Record>
+        </Annotation>
+        <Annotation Term="Org.OData.Capabilities.V1.FilterRestrictions">
+          <Record>
+            <PropertyValue Property="Filterable" Bool="true" />
+          </Record>
+        </Annotation>
+        <Annotation Term="Org.OData.Capabilities.V1.InsertRestrictions">
+          <Record>
+            <PropertyValue Property="Insertable" Bool="false" />
+          </Record>
+        </Annotation>
+        <Annotation Term="Org.OData.Capabilities.V1.SelectSupport">
+          <Record>
+            <PropertyValue Property="Supported" Bool="true" />
+          </Record>
+        </Annotation>
+        <Annotation Term="Org.OData.Capabilities.V1.SkipSupported" Bool="false" />
+        <Annotation Term="Org.OData.Capabilities.V1.TopSupported" Bool="false" />
+        <Annotation Term="Org.OData.Capabilities.V1.UpdateRestrictions">
+          <Record>
+            <PropertyValue Property="Updatable" Bool="false" />
+          </Record>
+        </Annotation>
+      </Annotations>
       <Annotations Target="microsoft.graph.configurationManagerClientEnabledFeatures">
         <Annotation Term="Org.OData.Core.V1.Description" String="configuration Manager client enabled features" />
       </Annotations>
@@ -15010,6 +15449,28 @@
       <Annotations Target="microsoft.graph.identifierUriRestriction/isStateSetByMicrosoft">
         <Annotation Term="Org.OData.Core.V1.Computed" Bool="true" />
       </Annotations>
+      <Annotations Target="microsoft.graph.identityContainer/conditionalAccess">
+        <Annotation Term="Org.OData.Capabilities.V1.DeleteRestrictions">
+          <Record>
+            <PropertyValue Property="Deletable" Bool="false" />
+          </Record>
+        </Annotation>
+        <Annotation Term="Org.OData.Capabilities.V1.InsertRestrictions">
+          <Record>
+            <PropertyValue Property="Insertable" Bool="false" />
+          </Record>
+        </Annotation>
+        <Annotation Term="Org.OData.Capabilities.V1.ReadRestrictions">
+          <Record>
+            <PropertyValue Property="Readable" Bool="false" />
+          </Record>
+        </Annotation>
+        <Annotation Term="Org.OData.Capabilities.V1.UpdateRestrictions">
+          <Record>
+            <PropertyValue Property="Updatable" Bool="false" />
+          </Record>
+        </Annotation>
+      </Annotations>
       <Annotations Target="microsoft.graph.importedWindowsAutopilotDeviceIdentity">
         <Annotation Term="Org.OData.Core.V1.Description" String="Imported windows autopilot devices." />
       </Annotations>
@@ -18128,6 +18589,30 @@
       <Annotations Target="microsoft.graph.mobileThreatPartnerTenantState/unresponsive">
         <Annotation Term="Org.OData.Core.V1.Description" String="Partner is unresponsive." />
       </Annotations>
+      <Annotations Target="microsoft.graph.namedLocation">
+        <Annotation Term="Org.OData.Capabilities.V1.CountRestrictions">
+          <Record>
+            <PropertyValue Property="Countable" Bool="true" />
+          </Record>
+        </Annotation>
+        <Annotation Term="Org.OData.Capabilities.V1.ExpandRestrictions">
+          <Record>
+            <PropertyValue Property="Expandable" Bool="false" />
+          </Record>
+        </Annotation>
+        <Annotation Term="Org.OData.Capabilities.V1.FilterRestrictions">
+          <Record>
+            <PropertyValue Property="Filterable" Bool="true" />
+          </Record>
+        </Annotation>
+        <Annotation Term="Org.OData.Capabilities.V1.SelectSupport">
+          <Record>
+            <PropertyValue Property="Supported" Bool="true" />
+          </Record>
+        </Annotation>
+        <Annotation Term="Org.OData.Capabilities.V1.SkipSupported" Bool="true" />
+        <Annotation Term="Org.OData.Capabilities.V1.TopSupported" Bool="true" />
+      </Annotations>
       <Annotations Target="microsoft.graph.notificationMessageTemplate">
         <Annotation Term="Org.OData.Core.V1.Description" String="Notification messages are messages that are sent to end users who are determined to be not-compliant with the compliance policies defined by the administrator. Administrators choose notifications and configure them in the Intune Admin Console using the compliance policy creation page under the “Actions for non-compliance” section. Use the notificationMessageTemplate object to create your own custom notifications for administrators to choose while configuring actions for non-compliance." />
       </Annotations>
diff --git a/schemas/v1.0-Fairfax.csdl b/schemas/v1.0-Fairfax.csdl
index 1f3ddc01..93d5902d 100644
--- a/schemas/v1.0-Fairfax.csdl
+++ b/schemas/v1.0-Fairfax.csdl
@@ -32904,10 +32904,6 @@
       <Annotations Target="microsoft.graph.softwareUpdateStatusSummary/unknownUserCount">
         <Annotation Term="Org.OData.Core.V1.Description" String="Number of unknown users." />
       </Annotations>
-      <Annotations Target="microsoft.graph.solutionsRoot">
-        <Annotation Term="Org.OData.Capabilities.V1.BatchContinueOnErrorSupported" Bool="true" />
-        <Annotation Term="Org.OData.Capabilities.V1.BatchSupported" Bool="true" />
-      </Annotations>
       <Annotations Target="microsoft.graph.stateManagementSetting">
         <Annotation Term="Org.OData.Core.V1.Description" String="State Management Setting." />
       </Annotations>
diff --git a/schemas/v1.0-Prod.csdl b/schemas/v1.0-Prod.csdl
index 55900667..2d8690d8 100644
--- a/schemas/v1.0-Prod.csdl
+++ b/schemas/v1.0-Prod.csdl
@@ -10477,7 +10477,7 @@
         <Property Name="enableResultTemplate" Type="Edm.Boolean" />
       </ComplexType>
       <ComplexType Name="retentionLabelSettings">
-        <Property Name="behaviorDuringRetentionPeriod" Type="microsoft.graph.security.behaviorDuringRetentionPeriod" />
+        <Property Name="behaviorDuringRetentionPeriod" Type="self.behaviorDuringRetentionPeriod" />
         <Property Name="isContentUpdateAllowed" Type="Edm.Boolean" />
         <Property Name="isDeleteAllowed" Type="Edm.Boolean" />
         <Property Name="isLabelUpdateAllowed" Type="Edm.Boolean" />
@@ -14004,6 +14004,7 @@
         <Property Name="appId" Type="Edm.String" />
         <Property Name="assetId" Type="Edm.String" />
         <Property Name="availableTo" Type="graph.packageStatus" Nullable="false" />
+        <Property Name="createdDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="deployedTo" Type="graph.packageStatus" Nullable="false" />
         <Property Name="displayName" Type="Edm.String" />
         <Property Name="elementTypes" Type="Collection(Edm.String)" Nullable="false" />
@@ -14027,6 +14028,7 @@
         <Property Name="elementDetails" Type="Collection(graph.packageElementDetail)" Nullable="false" />
         <Property Name="longDescription" Type="Edm.String" />
         <Property Name="sensitivity" Type="Edm.String" />
+        <Property Name="sharedWithUsersAndGroups" Type="Collection(graph.packageAccessEntity)" Nullable="false" />
       </EntityType>
       <EntityType Name="copilotReportRoot" BaseType="graph.entity" />
       <EntityType Name="copilotRoot">
@@ -14655,6 +14657,7 @@
         <NavigationProperty Name="federationConfigurations" Type="Collection(graph.identityProviderBase)" ContainsTarget="true" />
         <NavigationProperty Name="onPremisesSynchronization" Type="Collection(graph.onPremisesDirectorySynchronization)" ContainsTarget="true" />
         <NavigationProperty Name="publicKeyInfrastructure" Type="graph.publicKeyInfrastructureRoot" ContainsTarget="true" />
+        <NavigationProperty Name="recovery" Type="entraRecoveryServices.recovery" ContainsTarget="true" />
         <NavigationProperty Name="subscriptions" Type="Collection(graph.companySubscription)" ContainsTarget="true" />
       </EntityType>
       <EntityType Name="directoryAudit" BaseType="graph.entity">
@@ -18176,20 +18179,21 @@
       </EntityType>
       <EntityType Name="security">
         <NavigationProperty Name="alerts" Type="Collection(graph.alert)" ContainsTarget="true" />
-        <NavigationProperty Name="alerts_v2" Type="Collection(microsoft.graph.security.alert)" ContainsTarget="true" />
+        <NavigationProperty Name="alerts_v2" Type="Collection(self.alert)" ContainsTarget="true" />
         <NavigationProperty Name="attackSimulation" Type="graph.attackSimulationRoot" ContainsTarget="true" />
-        <NavigationProperty Name="cases" Type="microsoft.graph.security.casesRoot" ContainsTarget="true" />
-        <NavigationProperty Name="collaboration" Type="microsoft.graph.security.collaborationRoot" ContainsTarget="true" />
+        <NavigationProperty Name="auditLog" Type="self.auditCoreRoot" ContainsTarget="true" />
+        <NavigationProperty Name="cases" Type="self.casesRoot" ContainsTarget="true" />
+        <NavigationProperty Name="collaboration" Type="self.collaborationRoot" ContainsTarget="true" />
         <NavigationProperty Name="dataSecurityAndGovernance" Type="graph.tenantDataSecurityAndGovernance" ContainsTarget="true" />
-        <NavigationProperty Name="identities" Type="microsoft.graph.security.identityContainer" ContainsTarget="true" />
-        <NavigationProperty Name="incidents" Type="Collection(microsoft.graph.security.incident)" ContainsTarget="true" />
-        <NavigationProperty Name="labels" Type="microsoft.graph.security.labelsRoot" ContainsTarget="true" />
+        <NavigationProperty Name="identities" Type="self.identityContainer" ContainsTarget="true" />
+        <NavigationProperty Name="incidents" Type="Collection(self.incident)" ContainsTarget="true" />
+        <NavigationProperty Name="labels" Type="self.labelsRoot" ContainsTarget="true" />
         <NavigationProperty Name="secureScoreControlProfiles" Type="Collection(graph.secureScoreControlProfile)" ContainsTarget="true" />
         <NavigationProperty Name="secureScores" Type="Collection(graph.secureScore)" ContainsTarget="true" />
         <NavigationProperty Name="subjectRightsRequests" Type="Collection(graph.subjectRightsRequest)" ContainsTarget="true" />
-        <NavigationProperty Name="threatIntelligence" Type="microsoft.graph.security.threatIntelligence" ContainsTarget="true" />
-        <NavigationProperty Name="triggers" Type="microsoft.graph.security.triggersRoot" ContainsTarget="true" />
-        <NavigationProperty Name="triggerTypes" Type="microsoft.graph.security.triggerTypesRoot" ContainsTarget="true" />
+        <NavigationProperty Name="threatIntelligence" Type="self.threatIntelligence" ContainsTarget="true" />
+        <NavigationProperty Name="triggers" Type="self.triggersRoot" ContainsTarget="true" />
+        <NavigationProperty Name="triggerTypes" Type="self.triggerTypesRoot" ContainsTarget="true" />
       </EntityType>
       <EntityType Name="securityReportsRoot" BaseType="graph.entity" />
       <EntityType Name="sendDtmfTonesOperation" BaseType="graph.commsOperation" OpenType="true">
@@ -27369,6 +27373,8 @@
         <Singleton Name="deviceManagement" Type="microsoft.graph.deviceManagement" />
         <Singleton Name="directory" Type="microsoft.graph.directory">
           <NavigationPropertyBinding Path="administrativeUnits/members" Target="directoryObjects" />
+          <NavigationPropertyBinding Path="recovery/snapshots/recoveryJobs" Target="directory/microsoft.graph.entraRecoveryServices.recovery/recovery/jobs" />
+          <NavigationPropertyBinding Path="recovery/snapshots/recoveryPreviewJobs" Target="directory/microsoft.graph.entraRecoveryServices.recovery/recovery/jobs" />
         </Singleton>
         <Singleton Name="drive" Type="microsoft.graph.drive" />
         <Singleton Name="education" Type="microsoft.graph.educationRoot">
@@ -27841,6 +27847,96 @@
         <ReturnType Type="Collection(microsoft.graph.callRecords.pstnCallLogRow)" />
       </Function>
     </Schema>
+    <Schema Namespace="microsoft.graph.entraRecoveryServices" Alias="entraRecoveryServices" xmlns="http://docs.oasis-open.org/odata/ns/edm">
+      <EnumType Name="recoveryAction">
+        <Member Name="softDelete" Value="0" />
+        <Member Name="update" Value="1" />
+        <Member Name="restore" Value="2" />
+        <Member Name="unknownFutureValue" Value="3" />
+      </EnumType>
+      <EnumType Name="recoveryStatus">
+        <Member Name="initialized" Value="0" />
+        <Member Name="running" Value="1" />
+        <Member Name="successful" Value="2" />
+        <Member Name="failed" Value="3" />
+        <Member Name="abandoned" Value="4" />
+        <Member Name="unknownFutureValue" Value="5" />
+        <Member Name="calculating" Value="6" />
+        <Member Name="loadingData" Value="7" />
+      </EnumType>
+      <EnumType Name="resourceTypeName">
+        <Member Name="user" Value="0" />
+        <Member Name="group" Value="1" />
+        <Member Name="conditionalAccessPolicy" Value="2" />
+        <Member Name="namedLocationPolicy" Value="3" />
+        <Member Name="authenticationMethodPolicy" Value="4" />
+        <Member Name="authorizationPolicy" Value="5" />
+        <Member Name="authenticationStrengthPolicy" Value="6" />
+        <Member Name="application" Value="7" />
+        <Member Name="servicePrincipal" Value="8" />
+        <Member Name="unknownFutureValue" Value="9" />
+        <Member Name="oAuth2PermissionGrant" Value="10" />
+        <Member Name="appRoleAssignment" Value="11" />
+        <Member Name="organization" Value="12" />
+      </EnumType>
+      <ComplexType Name="entityTypeAndIds">
+        <Property Name="entityIds" Type="Collection(Edm.String)" Nullable="false" />
+        <Property Name="entityType" Type="entraRecoveryServices.resourceTypeName" Nullable="false" />
+      </ComplexType>
+      <ComplexType Name="recoveryJobEntityNameAndIdsFilter" BaseType="entraRecoveryServices.recoveryJobFilteringCriteriaBase">
+        <Property Name="filterValues" Type="Collection(entraRecoveryServices.entityTypeAndIds)" Nullable="false" />
+      </ComplexType>
+      <ComplexType Name="recoveryJobEntityNamesFilter" BaseType="entraRecoveryServices.recoveryJobFilteringCriteriaBase">
+        <Property Name="entityTypes" Type="Collection(entraRecoveryServices.resourceTypeName)" Nullable="false" />
+      </ComplexType>
+      <ComplexType Name="recoveryJobFilteringCriteriaBase" />
+      <EntityType Name="recovery" BaseType="graph.entity">
+        <NavigationProperty Name="jobs" Type="Collection(entraRecoveryServices.recoveryJobBase)" ContainsTarget="true" />
+        <NavigationProperty Name="snapshots" Type="Collection(entraRecoveryServices.snapshot)" ContainsTarget="true" />
+      </EntityType>
+      <EntityType Name="recoveryChangeObjectBase" BaseType="graph.entity" OpenType="true">
+        <Property Name="displayName" Type="Edm.String" />
+        <Property Name="entityTypeName" Type="entraRecoveryServices.resourceTypeName" Nullable="false" />
+        <Property Name="failureMessage" Type="Edm.String" />
+        <Property Name="recoveryAction" Type="entraRecoveryServices.recoveryAction" Nullable="false" />
+      </EntityType>
+      <EntityType Name="recoveryJob" BaseType="entraRecoveryServices.recoveryJobBase">
+        <Property Name="totalFailedChanges" Type="Edm.Int32" />
+        <Property Name="totalLinksModified" Type="Edm.Int32" />
+        <Property Name="totalObjectsModified" Type="Edm.Int32" />
+      </EntityType>
+      <EntityType Name="recoveryJobBase" BaseType="graph.entity" Abstract="true">
+        <Property Name="filteringCriteria" Type="entraRecoveryServices.recoveryJobFilteringCriteriaBase" />
+        <Property Name="jobCompletionDateTime" Type="Edm.DateTimeOffset" />
+        <Property Name="jobStartDateTime" Type="Edm.DateTimeOffset" Nullable="false" />
+        <Property Name="status" Type="entraRecoveryServices.recoveryStatus" Nullable="false" />
+        <Property Name="targetStateDateTime" Type="Edm.DateTimeOffset" Nullable="false" />
+        <Property Name="totalChangedLinksCalculated" Type="Edm.Int32" />
+        <Property Name="totalChangedObjectsCalculated" Type="Edm.Int32" />
+      </EntityType>
+      <EntityType Name="recoveryPreviewJob" BaseType="entraRecoveryServices.recoveryJobBase" />
+      <EntityType Name="snapshot" BaseType="graph.entity">
+        <Property Name="createdDateTime" Type="Edm.DateTimeOffset" Nullable="false" />
+        <Property Name="totalChangedObjects" Type="Edm.Int32" />
+        <NavigationProperty Name="recoveryJobs" Type="Collection(entraRecoveryServices.recoveryJob)" />
+        <NavigationProperty Name="recoveryPreviewJobs" Type="Collection(entraRecoveryServices.recoveryPreviewJob)" />
+      </EntityType>
+      <Action Name="cancel" IsBound="true">
+        <Parameter Name="bindingParameter" Type="entraRecoveryServices.recoveryJobBase" Nullable="false" />
+      </Action>
+      <Function Name="getChanges" IsBound="true">
+        <Parameter Name="bindingParameter" Type="entraRecoveryServices.recoveryPreviewJob" Nullable="false" />
+        <ReturnType Type="Collection(entraRecoveryServices.recoveryChangeObjectBase)">
+          <Annotation Term="Org.OData.Core.V1.IsDelta" Bool="true" />
+        </ReturnType>
+      </Function>
+      <Function Name="getFailedChanges" IsBound="true">
+        <Parameter Name="bindingParameter" Type="entraRecoveryServices.recoveryJob" Nullable="false" />
+        <ReturnType Type="Collection(entraRecoveryServices.recoveryChangeObjectBase)">
+          <Annotation Term="Org.OData.Core.V1.IsDelta" Bool="true" />
+        </ReturnType>
+      </Function>
+    </Schema>
     <Schema Namespace="microsoft.graph.externalConnectors" xmlns="http://docs.oasis-open.org/odata/ns/edm">
       <EnumType Name="accessType">
         <Member Name="grant" Value="1" />
@@ -28137,6 +28233,7 @@
         <Member Name="canceled" Value="4" />
         <Member Name="failed" Value="5" />
         <Member Name="unknownFutureValue" Value="6" />
+        <Member Name="canceling" Value="7" />
         <Member Name="quarantined" Value="8" />
       </EnumType>
       <EnumType Name="matchMode">
@@ -28195,6 +28292,10 @@
       <ComplexType Name="attributeChangeTrigger" BaseType="microsoft.graph.identityGovernance.workflowExecutionTrigger">
         <Property Name="triggerAttributes" Type="Collection(microsoft.graph.identityGovernance.triggerAttribute)" Nullable="false" />
       </ComplexType>
+      <ComplexType Name="cancelRunsScope" BaseType="microsoft.graph.identityGovernance.cancelScope">
+        <NavigationProperty Name="runs" Type="Collection(microsoft.graph.identityGovernance.run)" />
+      </ComplexType>
+      <ComplexType Name="cancelScope" Abstract="true" />
       <ComplexType Name="countBasedQuarantineCondition" BaseType="microsoft.graph.identityGovernance.quarantineCondition">
         <Property Name="threshold" Type="Edm.Int64" Nullable="false" />
       </ComplexType>
@@ -28485,6 +28586,10 @@
         <Parameter Name="bindingParameter" Type="microsoft.graph.identityGovernance.workflow" />
         <Parameter Name="scope" Type="microsoft.graph.identityGovernance.activationScope" />
       </Action>
+      <Action Name="cancelProcessing" IsBound="true">
+        <Parameter Name="bindingParameter" Type="microsoft.graph.identityGovernance.workflow" />
+        <Parameter Name="scope" Type="microsoft.graph.identityGovernance.cancelScope" />
+      </Action>
       <Action Name="clearQuarantine" EntitySetPath="bindingParameter" IsBound="true">
         <Parameter Name="bindingParameter" Type="microsoft.graph.identityGovernance.workflow" />
         <ReturnType Type="microsoft.graph.identityGovernance.workflow" />
@@ -33867,9 +33972,6 @@
           </Collection>
         </Annotation>
       </Annotations>
-      <Annotations Target="microsoft.graph.employeeExperience">
-        <Annotation Term="Org.OData.Core.V1.Description" String="Represents a container that exposes navigation properties for employee experience resources." />
-      </Annotations>
       <Annotations Target="microsoft.graph.employeeExperience/communities">
         <Annotation Term="Org.OData.Core.V1.Description" String="A collection of communities in Viva Engage." />
       </Annotations>
@@ -34237,6 +34339,81 @@
       <Annotations Target="microsoft.graph.enterpriseCodeSigningCertificate/uploadDateTime">
         <Annotation Term="Org.OData.Core.V1.Description" String="The date time of CodeSigning Cert when it is uploaded (using ISO 8601 format, in UTC time). Uploading a valid cert file through the Intune admin console will automatically populate this value in the HTTP response. Supports: $filter, $select, $top, $OrderBy, $skip. $Search is not supported." />
       </Annotations>
+      <Annotations Target="microsoft.graph.entraRecoveryServices.recoveryAction/restore">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Represents a restore action during recovery" />
+      </Annotations>
+      <Annotations Target="microsoft.graph.entraRecoveryServices.recoveryAction/softDelete">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Represents a soft delete action during recovery" />
+      </Annotations>
+      <Annotations Target="microsoft.graph.entraRecoveryServices.recoveryAction/unknownFutureValue">
+        <Annotation Term="Org.OData.Core.V1.Description" String="This will help in making this enum evolable and adding more values in the future" />
+      </Annotations>
+      <Annotations Target="microsoft.graph.entraRecoveryServices.recoveryAction/update">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Represents an update action during recovery" />
+      </Annotations>
+      <Annotations Target="microsoft.graph.entraRecoveryServices.recoveryStatus/abandoned">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Represents a job that was abandoned by the user" />
+      </Annotations>
+      <Annotations Target="microsoft.graph.entraRecoveryServices.recoveryStatus/calculating">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Represents a job for which we have started calculating the diff/preview." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.entraRecoveryServices.recoveryStatus/failed">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Represents a job that we were not able to run successfully" />
+      </Annotations>
+      <Annotations Target="microsoft.graph.entraRecoveryServices.recoveryStatus/initialized">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Represents a job that has been initialized but has not been started yet" />
+      </Annotations>
+      <Annotations Target="microsoft.graph.entraRecoveryServices.recoveryStatus/loadingData">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Represents a job for which we have started loading data of the snapshot." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.entraRecoveryServices.recoveryStatus/running">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Represents a job that is in progress" />
+      </Annotations>
+      <Annotations Target="microsoft.graph.entraRecoveryServices.recoveryStatus/successful">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Represents a job that ran successfully and is now complete" />
+      </Annotations>
+      <Annotations Target="microsoft.graph.entraRecoveryServices.recoveryStatus/unknownFutureValue">
+        <Annotation Term="Org.OData.Core.V1.Description" String="This will help in making this enum evolable and adding more values in the future-" />
+      </Annotations>
+      <Annotations Target="microsoft.graph.entraRecoveryServices.resourceTypeName/application">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Represents the application entity" />
+      </Annotations>
+      <Annotations Target="microsoft.graph.entraRecoveryServices.resourceTypeName/appRoleAssignment">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Represents the appRoleAssignment entity." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.entraRecoveryServices.resourceTypeName/authenticationMethodPolicy">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Represents the authentication method policy entity" />
+      </Annotations>
+      <Annotations Target="microsoft.graph.entraRecoveryServices.resourceTypeName/authenticationStrengthPolicy">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Represents the authentication strength policy entity" />
+      </Annotations>
+      <Annotations Target="microsoft.graph.entraRecoveryServices.resourceTypeName/authorizationPolicy">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Represents the authorization policy entity" />
+      </Annotations>
+      <Annotations Target="microsoft.graph.entraRecoveryServices.resourceTypeName/conditionalAccessPolicy">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Represents the conditional access policy entity" />
+      </Annotations>
+      <Annotations Target="microsoft.graph.entraRecoveryServices.resourceTypeName/group">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Represents the group entity" />
+      </Annotations>
+      <Annotations Target="microsoft.graph.entraRecoveryServices.resourceTypeName/namedLocationPolicy">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Represents the named location policy entity" />
+      </Annotations>
+      <Annotations Target="microsoft.graph.entraRecoveryServices.resourceTypeName/oAuth2PermissionGrant">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Represents the oAuth2PermissionGrant entity." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.entraRecoveryServices.resourceTypeName/organization">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Represents the organization entity." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.entraRecoveryServices.resourceTypeName/servicePrincipal">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Represents the service principal entity" />
+      </Annotations>
+      <Annotations Target="microsoft.graph.entraRecoveryServices.resourceTypeName/unknownFutureValue">
+        <Annotation Term="Org.OData.Core.V1.Description" String="This will help in making this enum evolable and adding more values in the future." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.entraRecoveryServices.resourceTypeName/user">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Represents the user entity" />
+      </Annotations>
       <Annotations Target="microsoft.graph.errorDetail/errorMessage">
         <Annotation Term="Org.OData.Core.V1.Computed" Bool="true" />
       </Annotations>
@@ -34888,7 +35065,6 @@
             <PropertyValue Property="Supported" Bool="true" />
           </Record>
         </Annotation>
-        <Annotation Term="Org.OData.Core.V1.Description" String="Represents a Microsoft Entra group." />
       </Annotations>
       <Annotations Target="microsoft.graph.group/acceptedSenders">
         <Annotation Term="Org.OData.Capabilities.V1.ChangeTracking">
@@ -39297,9 +39473,6 @@
       <Annotations Target="microsoft.graph.omaSettingStringXml/value">
         <Annotation Term="Org.OData.Core.V1.Description" String="Value. (UTF8 encoded byte array)" />
       </Annotations>
-      <Annotations Target="microsoft.graph.onlineMeeting">
-        <Annotation Term="Org.OData.Core.V1.Description" String="Represents a Microsoft online meeting." />
-      </Annotations>
       <Annotations Target="microsoft.graph.onlineMeetingEngagementConversation">
         <Annotation Term="Org.OData.Core.V1.Description" String="A conversation for Teams QA online meeting." />
       </Annotations>
@@ -40713,6 +40886,82 @@
           </Record>
         </Annotation>
         <Annotation Term="Org.OData.Capabilities.V1.TopSupported" Bool="false" />
+        <Annotation Term="Org.OData.Core.V1.Description" String="Security singleton providing access to audit log resources." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.a365AiExecuteTool">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for A365 AI Execute Tool events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.a365AiInferenceCall">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for A365 AI Inference Call events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.a365AiInvokeAgent">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for A365 AI Invoke Agent events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.a365AiRunSummary">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for A365 AI Run Summary events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.a365SpanOutputs">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for A365 Span Outputs events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.aadRiskDetectionAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for AAD Risk Detection events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.aedAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Advanced eDiscovery events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.agentAdminActivityRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Agent Admin Activity events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.agentSettingAdminActivity">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Agent Setting Admin Activity events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.aiAppInteractionAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for AI App Interaction events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.aiExecuteToolAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for AI Execute Tool events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.aiInteractionsChangeNotificationAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for AI Interactions Change Notification events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.aiInteractionsExportAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for AI Interactions Export events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.aiInteractionsSubscriptionAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for AI Interactions Subscription events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.aiInvokeAgentAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for AI Invoke Agent events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.aipDiscover">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for AIP Discover events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.aipFileDeleted">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for AIP File Deleted events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.aipHeartBeat">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for AIP Heart Beat events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.aipProtectionActionLogRequest">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for AIP Protection Action log request events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.aipScannerDiscoverEvent">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for AIP Scanner Discover Event events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.aipSensitivityLabelActionLogRequest">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for AIP Sensitivity Label Action log request events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.airAdminActionInvestigationData">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for AIR Admin Action Investigation events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.airInvestigationData">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for AIR Investigation events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.airManualInvestigationData">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for AIR Manual Investigation events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.aISpanOutputsAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for AI Span Outputs events." />
       </Annotations>
       <Annotations Target="microsoft.graph.security.alert">
         <Annotation Term="Org.OData.Capabilities.V1.CountRestrictions">
@@ -40753,6 +41002,12 @@
           </Collection>
         </Annotation>
       </Annotations>
+      <Annotations Target="microsoft.graph.security.alertSubmissionAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Alert Submission events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.alertSubmissionResultDetailAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Alert Submission Result Detail events." />
+      </Annotations>
       <Annotations Target="microsoft.graph.security.article">
         <Annotation Term="Org.OData.Capabilities.V1.CountRestrictions">
           <Record>
@@ -40816,6 +41071,149 @@
         <Annotation Term="Org.OData.Capabilities.V1.SkipSupported" Bool="true" />
         <Annotation Term="Org.OData.Capabilities.V1.TopSupported" Bool="true" />
       </Annotations>
+      <Annotations Target="microsoft.graph.security.attackSimAdminAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Attack Sim Admin events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.attackSimAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Attack Sim events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.auditConfigAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Audit Config events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.auditCoreRoot">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Root entity for the audit log API." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.auditCoreRoot/queries">
+        <Annotation Term="Org.OData.Capabilities.V1.DeleteRestrictions">
+          <Record>
+            <PropertyValue Property="Deletable" Bool="true" />
+          </Record>
+        </Annotation>
+        <Annotation Term="Org.OData.Capabilities.V1.InsertRestrictions">
+          <Record>
+            <PropertyValue Property="Insertable" Bool="true" />
+          </Record>
+        </Annotation>
+        <Annotation Term="Org.OData.Capabilities.V1.ReadRestrictions">
+          <Record>
+            <PropertyValue Property="Readable" Bool="true" />
+          </Record>
+        </Annotation>
+        <Annotation Term="Org.OData.Capabilities.V1.UpdateRestrictions">
+          <Record>
+            <PropertyValue Property="Updatable" Bool="false" />
+          </Record>
+        </Annotation>
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.auditData">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Abstract base type for audit event data." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.auditLogQuery">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Represents a query against the unified audit log." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.auditLogQuery/records">
+        <Annotation Term="Org.OData.Capabilities.V1.DeleteRestrictions">
+          <Record>
+            <PropertyValue Property="Deletable" Bool="false" />
+          </Record>
+        </Annotation>
+        <Annotation Term="Org.OData.Capabilities.V1.InsertRestrictions">
+          <Record>
+            <PropertyValue Property="Insertable" Bool="false" />
+          </Record>
+        </Annotation>
+        <Annotation Term="Org.OData.Capabilities.V1.ReadRestrictions">
+          <Record>
+            <PropertyValue Property="Readable" Bool="true" />
+          </Record>
+        </Annotation>
+        <Annotation Term="Org.OData.Capabilities.V1.UpdateRestrictions">
+          <Record>
+            <PropertyValue Property="Updatable" Bool="false" />
+          </Record>
+        </Annotation>
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.auditLogQueryStatus">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Status of an audit log query." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.auditLogRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Represents an individual audit log record." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.auditLogRecordType">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Specifies the type of audit log record." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.auditLogUserType">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Type of user associated with an audit log record." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.auditRecordTypeDictionary">
+        <Annotation Term="Org.OData.Core.V1.Description" String="A dictionary of name-value pairs for dynamic audit event properties." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.auditSearchAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Audit Search events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.azfwApplicationRuleAggregationEventRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Azfw Application Rule Aggregation Event events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.azfwDnsQueryEventRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Azfw Dns Query Event events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.azfwNetworkRuleEventRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Azfw Network Rule Event events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.azureActiveDirectoryAccountLogonAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Azure Active Directory Account Logon events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.azureActiveDirectoryAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Azure Active Directory events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.azureActiveDirectoryStsLogonAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Azure Active Directory STS Logon events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.azureAISearchAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Azure AI Search Audit events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.campaignAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for threat campaign events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.ccraiPolicyViolationRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for CCRAI Policy Violation events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.cdpClassifierHealthRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for CDP Classifier Health events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.cdpColdCrawlStatusRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for CDP Cold Crawl Status events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.cdpConsumptionResourceRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for CDP Consumption Resource events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.cdpContentExplorerAggregateRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for CDP Content Explorer Aggregate events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.cdpdlmaiInteractionInsightsRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Cdpdlmai Interaction Insights events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.cdpDlpSensitiveEndpointAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for CDP DLP Sensitive Endpoint events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.cdpLogRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for CDP Log events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.cdpOcrBillingRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for CDP OCR Billing events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.cdpResourceScopeChangeEventRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for CDP Resource Scope Change Event events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.cloudUpdateDeviceConfigAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Cloud Update Device Config events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.cloudUpdateProfileConfigAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Cloud Update Profile Config events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.cloudUpdateTenantConfigAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Cloud Update Tenant Config events." />
+      </Annotations>
       <Annotations Target="microsoft.graph.security.collaborationRoot">
         <Annotation Term="Org.OData.Capabilities.V1.UpdateRestrictions">
           <Record>
@@ -40823,6 +41221,159 @@
           </Record>
         </Annotation>
       </Annotations>
+      <Annotations Target="microsoft.graph.security.complianceConnectorAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Compliance Connector events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.complianceDLMExchangeAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Compliance DLM Exchange events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.complianceDLMSharePointAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Compliance DLM SharePoint events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.complianceDLPApplicationsAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Compliance DLP Applications events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.complianceDLPApplicationsClassificationAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Compliance DLP Applications Classification events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.complianceDLPEndpointAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Compliance DLP Endpoint events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.complianceDLPEndpointDiscoveryAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Compliance DLP Endpoint Discovery events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.complianceDLPEnforcementAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Compliance DLP Enforcement events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.complianceDLPExchangeAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Compliance DLP Exchange events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.complianceDLPExchangeClassificationAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Compliance DLP Exchange Classification events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.complianceDLPExchangeClassificationCdpRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Compliance DLP Exchange Classification CDP events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.complianceDLPExchangeDiscoveryAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Compliance DLP Exchange Discovery events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.complianceDLPSharePointAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Compliance DLP SharePoint events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.complianceDLPSharePointClassificationAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Compliance DLP SharePoint Classification events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.complianceDLPSharePointClassificationCdpRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Compliance DLP SharePoint Classification CDP events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.complianceDLPSharePointClassificationExtendedAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Compliance DLP SharePoint Classification Extended events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.complianceExchangeOcrAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Compliance Exchange OCR events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.complianceManagerActionRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Compliance Manager Action events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.compliancePolicyGradingSharePointAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Compliance Policy Grading SharePoint events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.complianceSettingsChangeAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Compliance Settings Change events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.complianceSitGradingSharePointAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Compliance SIT Grading SharePoint events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.complianceSupervisionExchangeAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Compliance Supervision Exchange events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.connectedAIAppInteractionAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Connected AI App Interaction events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.consumptionResourceAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Consumption Resource events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.contentStoreMetadataRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Content Store Meta events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.copilotAgentManagementAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Copilot Agent Management events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.copilotForSecurityLoggingAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Copilot for Security Logging events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.copilotForSecurityTriggerAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Copilot for Security Trigger events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.copilotInteractionAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Copilot Interaction events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.copilotPluginSettingAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Copilot Plugin Setting events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.copilotPromptBookSettingAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Copilot Prompt Book Setting events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.copilotSessionSharingAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Copilot Session Sharing events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.copilotSettingAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Copilot Setting events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.copilotWorkspaceSettingAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Copilot Workspace Setting events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.coreReportingSettingsAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Core Reporting Settings events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.cortanaBriefingAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Cortana Briefing events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.criticalAssetManagementClassificationRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Critical Asset Management Classification events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.crmEntityOperationAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for CRM Entity Operation events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.crossTenantAccessPolicyAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Cross Tenant Access Policy events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.customerKeyServiceEncryptionAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Customer Key Service Encryption events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.dataCenterSecurityCmdletAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Data Center Security cmdlet events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.dataGovernanceAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Data Governance events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.dataInsightsRestApiAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Data Insights Rest Api events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.dataLakeExportOperationAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Data Lake Export Operation events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.dataSecurityInvestigationAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Data Security Investigation events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.dataShareOperationAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Data Share Operation events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.defaultAuditData">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Default open-type audit data when no specific subtype applies." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.defenderCaseManagementAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Defender Case Management events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.defenderPreviewFeaturesRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Defender Preview Features events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.defenderSecurityForAIConfigurationAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Defender Security for AI Configuration events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.deployFeatureActivityRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Deploy Feature Activity events." />
+      </Annotations>
       <Annotations Target="microsoft.graph.security.detonationBehaviourDetails">
         <Annotation Term="Org.OData.Core.V1.Revisions">
           <Collection>
@@ -40838,6 +41389,72 @@
           </Collection>
         </Annotation>
       </Annotations>
+      <Annotations Target="microsoft.graph.security.deviceDiscoverySettingsAuthenticatedScansRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Device Discovery Settings Authenticated Scans events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.deviceDiscoverySettingsExclusionRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Device Discovery Settings Exclusion events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.deviceDiscoverySettingsRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Device Discovery Settings events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.discoveryAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for eDiscovery events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.dlpEndpointAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for DLP Endpoint events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.dlpImportResultAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for DLP Import Result events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.dlpSensitiveInformationTypeRulePackageCmdletRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for DLP Sensitive Information Type Rule Package cmdlet events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.dragonCopilotAccessRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Dragon Copilot Access events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.dragonCopilotAdminRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Dragon Copilot Admin events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.dragonCopilotClinicalDataRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Dragon Copilot Clinical Data events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.dragonCopilotSessionRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Dragon Copilot Session events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.dynamics365BusinessCentralAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Dynamics365 Business Central events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.ehrConnectorAuditBaseRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for EHR Connector events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.eopSubmissionFeedEntityAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for EOP Submission Feed Entity events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.exchangeAdminAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Exchange Admin events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.exchangeAggregatedMailboxAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Exchange Aggregated Mailbox events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.exchangeAggregatedOperationRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Exchange Aggregated Operation events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.exchangeMailboxAuditGroupRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Exchange Mailbox Audit Group events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.exchangeMailboxAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Exchange Mailbox events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.fabricAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Microsoft Fabric events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.fabricPolicyRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Fabric Policy events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.healthcareSignalRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Healthcare Signal events." />
+      </Annotations>
       <Annotations Target="microsoft.graph.security.host">
         <Annotation Term="Org.OData.Capabilities.V1.CountRestrictions">
           <Record>
@@ -40930,6 +41547,9 @@
         <Annotation Term="Org.OData.Capabilities.V1.SkipSupported" Bool="true" />
         <Annotation Term="Org.OData.Capabilities.V1.TopSupported" Bool="true" />
       </Annotations>
+      <Annotations Target="microsoft.graph.security.hostedRpaAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Hosted RPA events." />
+      </Annotations>
       <Annotations Target="microsoft.graph.security.hostname">
         <Annotation Term="Org.OData.Capabilities.V1.CountRestrictions">
           <Record>
@@ -40993,6 +41613,12 @@
         <Annotation Term="Org.OData.Capabilities.V1.SkipSupported" Bool="true" />
         <Annotation Term="Org.OData.Capabilities.V1.TopSupported" Bool="true" />
       </Annotations>
+      <Annotations Target="microsoft.graph.security.hrSignalAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for HR Signal events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.hygieneEventRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Hygiene Event events." />
+      </Annotations>
       <Annotations Target="microsoft.graph.security.identityContainer/sensorCandidates">
         <Annotation Term="Org.OData.Capabilities.V1.UpdateRestrictions">
           <Record>
@@ -41024,6 +41650,24 @@
         </Annotation>
         <Annotation Term="Org.OData.Capabilities.V1.TopSupported" Bool="true" />
       </Annotations>
+      <Annotations Target="microsoft.graph.security.informationBarrierPolicyApplicationAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Information Barrier Policy Application events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.informationWorkerProtectionAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Information Worker Protection events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.insiderRiskScopedUserInsightsRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Insider Risk Scoped User Insights events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.insiderRiskScopedUsersRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Insider Risk Scoped Users events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.integratedAppsAppAdminActivityAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Integrated Apps App Admin Activity events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.integratedAppsAppSettingsAdminActivityAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Integrated Apps App Settings Admin Activity events." />
+      </Annotations>
       <Annotations Target="microsoft.graph.security.intelligenceProfile">
         <Annotation Term="Org.OData.Capabilities.V1.CountRestrictions">
           <Record>
@@ -41149,6 +41793,276 @@
         </Annotation>
         <Annotation Term="Org.OData.Capabilities.V1.TopSupported" Bool="false" />
       </Annotations>
+      <Annotations Target="microsoft.graph.security.irmActivityAuditTrailRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for IRM Activity Audit Trail events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.irmUserDefinedDetectionRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for IRM User Defined Detection events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.kaizalaAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Microsoft Kaizala events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.labelAnalyticsAggregateAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Label Analytics Aggregate events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.labelContentExplorerAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Label Content Explorer events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.largeContentMetadataAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Large Content Meta events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.m365ComplianceConnectorAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for M365 Compliance Connector events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.m365daadAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for M365daad events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.m365odspAssetMetadataRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for M365odsp Asset Meta events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.m365SearchSectionsRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for M365 Search Sections events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.mailSubmissionData">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Mail Submission events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.managedServicesAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Managed Services events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.managedTenantsAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Managed Tenants events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.mapgAlertsAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for MAPG Alerts events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.mapgOnboardAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for MAPG Onboard events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.mapgPolicyAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for MAPG Policy events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.mapgRemediationAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for MAPG Remediation events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.mcasAlertsAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for MCAS Alerts events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.mdaAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for MDA events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.mdaDataSecuritySignalRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for MDA Data Security Signal events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.mDASHAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for MDASH events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.mdatpAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for MDATP events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.mdcEventsRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for MDC Events events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.mdiAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for MDI events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.meshWorldsAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Mesh Worlds events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.microsoft365BackupBackupItemAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Microsoft365 Backup Backup Item events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.microsoft365BackupBackupPolicyAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Microsoft365 Backup Backup Policy events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.microsoft365BackupGranularBrowseTaskAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Microsoft365 Backup Granular Browse Task events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.microsoft365BackupRestoreItemAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Microsoft365 Backup Restore Item events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.microsoft365BackupRestoreTaskAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Microsoft365 Backup Restore Task events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.microsoft365CopilotScheduledPromptAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Microsoft365 Copilot Scheduled Prompt events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.microsoftDefenderExpertsXDRAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Microsoft Defender Experts XDR events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.microsoftFlowAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Microsoft Flow events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.microsoftFormsAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Microsoft Forms events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.microsoftGraphDataConnectConsent">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Microsoft Graph Data Connect Consent events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.microsoftGraphDataConnectOperation">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Microsoft Graph Data Connect Operation events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.microsoftPurviewDataCatalogOperationRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Microsoft Purview Data Catalog Operation events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.microsoftPurviewDataMapOperationRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Microsoft Purview Data Map Operation events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.microsoftPurviewMetadataPolicyOperationRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Microsoft Purview Metadata Policy Operation events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.microsoftPurviewPolicyOperationRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Microsoft Purview Policy Operation events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.microsoftPurviewPrivacyAuditEvent">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Microsoft Purview Privacy Audit Event events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.microsoftPurviewUnifiedCatalogOperationRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Microsoft Purview Unified Catalog Operation events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.microsoftStreamAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Microsoft Stream events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.microsoftTeamsAdminAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Microsoft Teams Admin events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.microsoftTeamsAnalyticsAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Microsoft Teams Analytics events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.microsoftTeamsAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Microsoft Teams events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.microsoftTeamsDeviceAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Microsoft Teams Device events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.microsoftTeamsRetentionLabelActionAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Microsoft Teams Retention Label Action events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.microsoftTeamsSensitivityLabelActionAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Microsoft Teams Sensitivity Label Action events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.microsoftTeamsShiftsAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Microsoft Teams Shifts events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.microsoftTeamsUserConcernAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Microsoft Teams User Concern events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.mipAutoLabelExchangeItemAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for MIP Auto Label Exchange Item events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.mipAutoLabelProgressFeedbackAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for MIP Auto Label Progress Feedback events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.mipAutoLabelSharePointItemAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for MIP Auto Label SharePoint Item events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.mipAutoLabelSharePointPolicyLocationAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for MIP Auto Label SharePoint Policy Location events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.mipAutoLabelSimulationSharePointCompletionRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for MIP Auto Label Simulation SharePoint Completion events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.mipAutoLabelSimulationSharePointProgressRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for MIP Auto Label Simulation SharePoint Progress events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.mipAutoLabelSimulationStatisticsRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for MIP Auto Label Simulation Statistics events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.mipExactDataMatchAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for MIP Exact Data Match events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.mipLabelAnalyticsAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for MIP Label Analytics events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.mipLabelAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for MIP Label events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.mosAgentInfoRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for MOS Agent Info events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.mosAgentInfoRecordV2">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for MOS Agent Info V2 events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.ms365dCustomDetectionAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for MS365D Custom Detection events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.ms365dIncidentAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for MS365D Incident events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.ms365dSuppressionRuleAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for MS365D Suppression Rule events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.msdeCustomCollectionAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for MSDE Custom Collection events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.msdeGeneralSettingsAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for MSDE General Settings events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.msdeIndicatorsSettingsAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for MSDE Indicators Settings events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.msdeResponseActionsAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for MSDE Response Actions events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.msdeRolesSettingsAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for MSDE Roles Settings events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.mspVectorSearchContentMetadataAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for MSP Vector Search Content Metadata events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.msticNationStateNotificationRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for MSTIC Nation State Notification events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.multiStageDispositionAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Multi Stage Disposition events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.myAnalyticsSettingsAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for My Analytics Settings events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.noisyAlertPolicyAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Noisy Alert Policy events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.officeNativeAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Office Native events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.omePortalAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for OME Portal events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.onDemandSharePointClassificationAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for On Demand SharePoint Classification events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.oneDriveAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for OneDrive events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.onPremisesFileShareScannerDLPAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for On Premises File Share Scanner DLP events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.onPremisesSharePointScannerDLPAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for On Premises SharePoint Scanner DLP events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.organizationalDataInM365AuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Organizational Data In M365 events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.outlookCopilotAutomationAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Outlook Copilot Automation events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.owaGetAccessTokenForResourceAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for OWA Get Access Token For Resource events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.p4aiAssessmentCategoryRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for P4AI Assessment Category events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.p4aiAssessmentFabricScannerRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for P4AI Assessment Fabric Scanner events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.p4aiAssessmentLocationResultRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for P4AI Assessment Location Result events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.p4aiAssessmentRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for P4AI Assessment events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.p4AIRiskScoreRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for P4 AI Risk Score events." />
+      </Annotations>
       <Annotations Target="microsoft.graph.security.passiveDnsRecord">
         <Annotation Term="Org.OData.Capabilities.V1.CountRestrictions">
           <Record>
@@ -41200,9 +42114,324 @@
         </Annotation>
         <Annotation Term="Org.OData.Capabilities.V1.TopSupported" Bool="true" />
       </Annotations>
+      <Annotations Target="microsoft.graph.security.peopleAdminSettingsAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for People Admin Settings events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.physicalBadgingSignalAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Physical Badging Signal events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.placesDirectoryAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Places Directory events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.plannerChatMessageAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Planner Chat Message events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.plannerChatMessageListAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Planner Chat Message List events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.plannerCopyPlanAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Planner Copy Plan events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.plannerGoalAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Planner Goal events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.plannerGoalListAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Planner Goal List events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.plannerPlanAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Planner Plan events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.plannerPlanListAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Planner Plan List events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.plannerPlanSensitivityLabelAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Planner Plan Sensitivity Label events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.plannerRosterAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Planner Roster events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.plannerRosterSensitivityLabelAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Planner Roster Sensitivity Label events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.plannerTaskAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Planner Task events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.plannerTaskListAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Planner Task List events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.plannerTenantSettingsAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Planner Tenant Settings events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.policyConfigChangeAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Policy Config Change events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.powerAppsAuditAppRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for PowerApps Audit App events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.powerAppsAuditPlanRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for PowerApps Audit Plan events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.powerAppsAuditResourceRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for PowerApps Audit Resource events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.powerBIAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Power BI events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.powerBIDlpAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Power BI DLP events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.powerPagesSiteAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Power Pages Site events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.powerPlatformAdminDlpAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Power Platform Admin DLP events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.powerPlatformAdminEnvironmentAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Power Platform Admin Environment events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.powerPlatformAdministratorActivityRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Power Platform Administrator Activity events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.powerPlatformLockboxResourceAccessRequestAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Power Platform Lockbox Resource Access Request events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.powerPlatformLockboxResourceCommandAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Power Platform Lockbox Resource Command events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.powerPlatformServiceActivityAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Power Platform Service Activity events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.powerPlatformTenantIsolationRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Power Platform Tenant Isolation events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.privacyDataMatchAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Privacy Data Match events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.privacyDataMinimizationRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Privacy Data Minimization events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.privacyDigestEmailRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Privacy Digest Email events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.privacyOpenAccessAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Privacy Open Access events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.privacyPortalAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Privacy Portal events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.privacyRemediationActionRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Privacy Remediation Action events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.privacyRemediationRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Privacy Remediation events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.privaPrivacyAssessmentOperationRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Priva Privacy Assessment Operation events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.privaPrivacyConsentOperationRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Priva Privacy Consent Operation events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.projectAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Microsoft Project events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.projectForTheWebAssignedToMeSettingsAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Project for the Web Assigned To Me Settings events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.projectForTheWebProjectAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Project for the Web Project events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.projectForTheWebProjectSettingsAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Project for the Web Project Settings events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.projectForTheWebRoadmapAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Project for the Web Roadmap events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.projectForTheWebRoadmapItemAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Project for the Web Roadmap Item events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.projectForTheWebRoadmapSettingsAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Project for the Web Roadmap Settings events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.projectForTheWebTaskAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Project for the Web Task events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.publicFolderAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Exchange public folder events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.purviewInsiderRiskAlertsRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Purview Insider Risk Alerts events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.purviewInsiderRiskCasesRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Purview Insider Risk Cases events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.purviewMCRecommendationRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Purview MC Recommendation events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.purviewPostureAgentAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Purview Posture Agent events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.quarantineAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for quarantine events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.recordsManagementAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Records Management events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.reportSubmission">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Report Submission events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.reportSubmissionResultDetail">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Report Submission Result Detail events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.restrictedModeAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Restricted Mode events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.retentionPolicyAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Retention Policy events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.rtiOperationsAgentAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for RTI Operations Agent events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.sbpConfigurationEventRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for SBP Configuration Event events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.sbpUsageEventRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for SBP Usage Event events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.scoreEvidence">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Secure Score evidence events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.scorePlatformGenericAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Score Platform Generic events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.scriptRunAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Script Run events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.searchAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for search events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.securityComplianceAlertRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Security Compliance Alert events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.securityComplianceCenterEOPCmdletAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Security Compliance Center EOP cmdlet events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.securityComplianceInsightsAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Security Compliance Insights events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.securityComplianceRBACAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Security Compliance RBAC events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.securityComplianceUserChangeAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Security Compliance User Change events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.securityCopilotIdentityManagementAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Security Copilot Identity Management events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.securityDevelopmentLifecycleAILogAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Security Development Lifecycle AI Log events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.sensitiveInfoRemediationAgentDataRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Sensitive Info Remediation Agent events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.sensitivityLabelActionAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Sensitivity Label Action events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.sensitivityLabeledFileActionAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Sensitivity Labeled File Action events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.sensitivityLabelPolicyMatchAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Sensitivity Label Policy Match events." />
+      </Annotations>
       <Annotations Target="microsoft.graph.security.sensorSettings/networkAdapters">
         <Annotation Term="Org.OData.Core.V1.AutoExpand" Bool="true" />
       </Annotations>
+      <Annotations Target="microsoft.graph.security.sentinelAIToolAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Sentinel AI Tool events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.sentinelGraphAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Sentinel Graph events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.sentinelJobAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Sentinel Job events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.sentinelKQLOnLakeAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Sentinel KQL On Lake events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.sentinelLakeDataOnboardingAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Sentinel Lake Data Onboarding events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.sentinelLakeEncryptionAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Sentinel Lake Encryption events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.sentinelLakeOnboardingAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Sentinel Lake Onboarding events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.sentinelNotebookOnLakeAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Sentinel Notebook On Lake events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.sentinelPackageAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Sentinel Package events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.sharePointAppPermissionOperationAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for SharePoint App Permission Operation events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.sharePointAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for SharePoint events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.sharePointCommentOperationAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for SharePoint Comment Operation events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.sharePointContentSecurityPolicyAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for SharePoint Content Security Policy events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.sharePointContentTypeOperationAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for SharePoint Content Type Operation events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.sharePointESignatureAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for SharePoint E Signature events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.sharePointFieldOperationAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for SharePoint Field Operation events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.sharePointFileOperationAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for SharePoint File Operation events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.sharePointListItemOperationAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for SharePoint List Item Operation events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.sharePointListOperationAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for SharePoint List Operation events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.sharePointSharingOperationAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for SharePoint Sharing Operation events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.skypeForBusinessCmdletsAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Skype for Business cmdlets events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.skypeForBusinessPSTNUsageAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Skype for Business PSTN Usage events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.skypeForBusinessUsersBlockedAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Skype for Business Users Blocked events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.sonarDetonationContentMetadata">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Sonar Detonation Content Meta events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.sonarDetonationEntityAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Sonar Detonation Entity events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.sonarFileDetonationEntityAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Sonar File Detonation Entity events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.sonarSubmissionEntityAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Sonar Submission Entity events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.sonarUrlDetonationEntityAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Sonar URL Detonation Entity events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.sparkCoreCustomLivePoolRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Spark Core Custom Live Pool events." />
+      </Annotations>
       <Annotations Target="microsoft.graph.security.subdomain">
         <Annotation Term="Org.OData.Capabilities.V1.CountRestrictions">
           <Record>
@@ -41232,6 +42461,177 @@
         <Annotation Term="Org.OData.Capabilities.V1.SkipSupported" Bool="false" />
         <Annotation Term="Org.OData.Capabilities.V1.TopSupported" Bool="true" />
       </Annotations>
+      <Annotations Target="microsoft.graph.security.submissionEntityAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Submission Entity events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.supervisoryReviewDayXInsightsAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Supervisory Review Day X Insights events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.syntheticProbeAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Synthetic Probe events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.teamCopilotInteractionAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Team Copilot Interaction events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.teamsEasyApprovalsAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Teams Easy Approvals events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.teamsEvalDataHubAdminOperationAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Teams Eval Data Hub Admin Operation events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.teamsEvalDataHubDataAccessAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Teams Eval Data Hub Data Access events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.teamsEvalDataHubPermissionChangeAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Teams Eval Data Hub Permission Change events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.teamsHealthcareAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Teams Healthcare events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.teamsUpdatesAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Teams Updates events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.tenantAllowBlockListAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Tenant Allow Block List events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.threatFinderAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Threat Finder events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.threatIntelligenceAtpContentData">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Threat Intelligence Atp Content events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.threatIntelligenceExportAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Threat Intelligence Export events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.threatIntelligenceMailData">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Threat Intelligence Mail events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.threatIntelligenceObjectAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Threat Intelligence Object events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.threatIntelligenceUrlClickData">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Threat Intelligence Url Click events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.todoAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Microsoft To Do events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.trainableClassifierAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Trainable Classifier events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.uamOperationAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for UAM Operation events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.unifiedGroupAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Unified Group events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.unifiedSimulationMatchedItemAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Unified Simulation Matched Item events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.unifiedSimulationSummaryAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Unified Simulation Summary events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.universalPrintManagementAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Universal Print Management events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.universalPrintPrintJobAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Universal Print Print Job events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.urbacAssignmentAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for URBAC Assignment events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.urbacEnableStateAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for URBAC Enable State events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.urbacRoleAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for URBAC Role events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.userTrainingAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for User Training events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.usxWorkspaceOnboardingAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for USX Workspace Onboarding events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.vfamCreatePolicyAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for VFAM Create Policy events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.vfamDeletePolicyAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for VFAM Delete Policy events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.vfamUpdatePolicyAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for VFAM Update Policy events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.vivaAmplifyAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Viva Amplify events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.vivaEngageEventsAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Viva Engage Events events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.vivaEngageNetworkAssociationAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Viva Engage Network Association events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.vivaEngageSegmentAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Viva Engage Segment events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.vivaGlintAdvancedConfigurationAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Viva Glint Advanced Configuration events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.vivaGlintAgenticCampaignAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Viva Glint Agentic Campaign events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.vivaGlintFeedbackProgramAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Viva Glint Feedback Program events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.vivaGlintOrganizationalDataAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Viva Glint Organizational events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.vivaGlintPulseProgramAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Viva Glint Pulse Program events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.vivaGlintPulseProgramRespondentRateAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Viva Glint Pulse Program Respondent Rate events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.vivaGlintQuestionAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Viva Glint Question events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.vivaGlintRoleAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Viva Glint Role events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.vivaGlintRubiconAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Viva Glint Rubicon events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.vivaGlintSupportAccessAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Viva Glint Support Access events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.vivaGlintSystemAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Viva Glint System events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.vivaGlintUserAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Viva Glint User events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.vivaGlintUserGroupAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Viva Glint User Group events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.vivaGoalsAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Viva Goals events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.vivaLearningAdminAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Viva Learning Admin events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.vivaLearningAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Viva Learning events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.vivaPulseAdminAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Viva Pulse Admin events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.vivaPulseOrganizerAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Viva Pulse Organizer events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.vivaPulseReportAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Viva Pulse Report events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.vivaPulseResponseAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Viva Pulse Response events." />
+      </Annotations>
       <Annotations Target="microsoft.graph.security.vulnerability">
         <Annotation Term="Org.OData.Capabilities.V1.CountRestrictions">
           <Record>
@@ -41295,6 +42695,24 @@
         <Annotation Term="Org.OData.Capabilities.V1.SkipSupported" Bool="true" />
         <Annotation Term="Org.OData.Capabilities.V1.TopSupported" Bool="true" />
       </Annotations>
+      <Annotations Target="microsoft.graph.security.wdatpAlertsAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for WDATP Alerts events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.webContentFilteringAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Web Content Filtering events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.windows365CustomerLockboxAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Windows365 Customer Lockbox events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.workplaceAnalyticsAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Workplace Analytics events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.yammerAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Yammer events." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.security.yammerUserHidingAuditRecord">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Audit data for Yammer User Hiding events." />
+      </Annotations>
       <Annotations Target="microsoft.graph.securityNetworkProtocol">
         <Annotation Term="Org.OData.Core.V1.Revisions">
           <Collection>
@@ -41617,10 +43035,6 @@
       <Annotations Target="microsoft.graph.softwareUpdateStatusSummary/unknownUserCount">
         <Annotation Term="Org.OData.Core.V1.Description" String="Number of unknown users." />
       </Annotations>
-      <Annotations Target="microsoft.graph.solutionsRoot">
-        <Annotation Term="Org.OData.Capabilities.V1.BatchContinueOnErrorSupported" Bool="true" />
-        <Annotation Term="Org.OData.Capabilities.V1.BatchSupported" Bool="true" />
-      </Annotations>
       <Annotations Target="microsoft.graph.startWorkingTime(microsoft.graph.workingTimeSchedule)">
         <Annotation Term="Org.OData.Core.V1.Description" String="Triggers the policies associated with the start of working hours for user." />
       </Annotations>
@@ -41941,7 +43355,6 @@
             <PropertyValue Property="Supported" Bool="true" />
           </Record>
         </Annotation>
-        <Annotation Term="Org.OData.Core.V1.Description" String="Represents a Microsoft Entra user account." />
       </Annotations>
       <Annotations Target="microsoft.graph.user/calendar">
         <Annotation Term="Org.OData.Capabilities.V1.ChangeTracking">
@@ -46815,7 +48228,7 @@
         <Property Name="webUrl" Type="Edm.String" />
       </EntityType>
     </Schema>
-    <Schema Namespace="microsoft.graph.security" xmlns="http://docs.oasis-open.org/odata/ns/edm">
+    <Schema Namespace="microsoft.graph.security" Alias="self" xmlns="http://docs.oasis-open.org/odata/ns/edm">
       <EnumType Name="action">
         <Member Name="disable" Value="1" />
         <Member Name="enable" Value="2" />
@@ -46922,6 +48335,502 @@
         <Member Name="intraorg" Value="3" />
         <Member Name="unknownFutureValue" Value="31" />
       </EnumType>
+      <EnumType Name="auditLogQueryStatus">
+        <Member Name="notStarted" Value="0" />
+        <Member Name="running" Value="1" />
+        <Member Name="succeeded" Value="2" />
+        <Member Name="failed" Value="3" />
+        <Member Name="cancelled" Value="4" />
+        <Member Name="unknownFutureValue" Value="5" />
+      </EnumType>
+      <EnumType Name="auditLogRecordType">
+        <Member Name="ExchangeAdmin" Value="1" />
+        <Member Name="ExchangeItem" Value="2" />
+        <Member Name="ExchangeItemGroup" Value="3" />
+        <Member Name="SharePoint" Value="4" />
+        <Member Name="SyntheticProbe" Value="5" />
+        <Member Name="SharePointFileOperation" Value="6" />
+        <Member Name="OneDrive" Value="7" />
+        <Member Name="AzureActiveDirectory" Value="8" />
+        <Member Name="AzureActiveDirectoryAccountLogon" Value="9" />
+        <Member Name="DataCenterSecurityCmdlet" Value="10" />
+        <Member Name="ComplianceDLPSharePoint" Value="11" />
+        <Member Name="Sway" Value="12" />
+        <Member Name="ComplianceDLPExchange" Value="13" />
+        <Member Name="SharePointSharingOperation" Value="14" />
+        <Member Name="AzureActiveDirectoryStsLogon" Value="15" />
+        <Member Name="SkypeForBusinessPSTNUsage" Value="16" />
+        <Member Name="SkypeForBusinessUsersBlocked" Value="17" />
+        <Member Name="SecurityComplianceCenterEOPCmdlet" Value="18" />
+        <Member Name="ExchangeAggregatedOperation" Value="19" />
+        <Member Name="PowerBIAudit" Value="20" />
+        <Member Name="CRM" Value="21" />
+        <Member Name="Yammer" Value="22" />
+        <Member Name="SkypeForBusinessCmdlets" Value="23" />
+        <Member Name="Discovery" Value="24" />
+        <Member Name="MicrosoftTeams" Value="25" />
+        <Member Name="ThreatIntelligence" Value="28" />
+        <Member Name="MailSubmission" Value="29" />
+        <Member Name="MicrosoftFlow" Value="30" />
+        <Member Name="AeD" Value="31" />
+        <Member Name="MicrosoftStream" Value="32" />
+        <Member Name="ComplianceDLPSharePointClassification" Value="33" />
+        <Member Name="ThreatFinder" Value="34" />
+        <Member Name="Project" Value="35" />
+        <Member Name="SharePointListOperation" Value="36" />
+        <Member Name="SharePointCommentOperation" Value="37" />
+        <Member Name="DataGovernance" Value="38" />
+        <Member Name="Kaizala" Value="39" />
+        <Member Name="SecurityComplianceAlerts" Value="40" />
+        <Member Name="ThreatIntelligenceUrl" Value="41" />
+        <Member Name="SecurityComplianceInsights" Value="42" />
+        <Member Name="MIPLabel" Value="43" />
+        <Member Name="WorkplaceAnalytics" Value="44" />
+        <Member Name="PowerAppsApp" Value="45" />
+        <Member Name="PowerAppsPlan" Value="46" />
+        <Member Name="ThreatIntelligenceAtpContent" Value="47" />
+        <Member Name="LabelContentExplorer" Value="48" />
+        <Member Name="TeamsHealthcare" Value="49" />
+        <Member Name="ExchangeItemAggregated" Value="50" />
+        <Member Name="HygieneEvent" Value="51" />
+        <Member Name="DataInsightsRestApiAudit" Value="52" />
+        <Member Name="InformationBarrierPolicyApplication" Value="53" />
+        <Member Name="SharePointListItemOperation" Value="54" />
+        <Member Name="SharePointContentTypeOperation" Value="55" />
+        <Member Name="SharePointFieldOperation" Value="56" />
+        <Member Name="MicrosoftTeamsAdmin" Value="57" />
+        <Member Name="HRSignal" Value="58" />
+        <Member Name="MicrosoftTeamsDevice" Value="59" />
+        <Member Name="MicrosoftTeamsAnalytics" Value="60" />
+        <Member Name="InformationWorkerProtection" Value="61" />
+        <Member Name="Campaign" Value="62" />
+        <Member Name="DLPEndpoint" Value="63" />
+        <Member Name="AirInvestigation" Value="64" />
+        <Member Name="Quarantine" Value="65" />
+        <Member Name="MicrosoftForms" Value="66" />
+        <Member Name="ApplicationAudit" Value="67" />
+        <Member Name="ComplianceSupervisionExchange" Value="68" />
+        <Member Name="CustomerKeyServiceEncryption" Value="69" />
+        <Member Name="OfficeNative" Value="70" />
+        <Member Name="MipAutoLabelSharePointItem" Value="71" />
+        <Member Name="MipAutoLabelSharePointPolicyLocation" Value="72" />
+        <Member Name="MicrosoftTeamsShifts" Value="73" />
+        <Member Name="SecureScore" Value="74" />
+        <Member Name="MipAutoLabelExchangeItem" Value="75" />
+        <Member Name="CortanaBriefing" Value="76" />
+        <Member Name="Search" Value="77" />
+        <Member Name="WDATPAlerts" Value="78" />
+        <Member Name="PowerPlatformAdminDlp" Value="79" />
+        <Member Name="PowerPlatformAdminEnvironment" Value="80" />
+        <Member Name="MDATPAudit" Value="81" />
+        <Member Name="SensitivityLabelPolicyMatch" Value="82" />
+        <Member Name="SensitivityLabelAction" Value="83" />
+        <Member Name="SensitivityLabeledFileAction" Value="84" />
+        <Member Name="AttackSim" Value="85" />
+        <Member Name="AirManualInvestigation" Value="86" />
+        <Member Name="SecurityComplianceRBAC" Value="87" />
+        <Member Name="UserTraining" Value="88" />
+        <Member Name="AirAdminActionInvestigation" Value="89" />
+        <Member Name="MSTIC" Value="90" />
+        <Member Name="PhysicalBadgingSignal" Value="91" />
+        <Member Name="TeamsEasyApprovals" Value="92" />
+        <Member Name="AipDiscover" Value="93" />
+        <Member Name="AipSensitivityLabelAction" Value="94" />
+        <Member Name="AipProtectionAction" Value="95" />
+        <Member Name="AipFileDeleted" Value="96" />
+        <Member Name="AipHeartBeat" Value="97" />
+        <Member Name="MCASAlerts" Value="98" />
+        <Member Name="OnPremisesFileShareScannerDlp" Value="99" />
+        <Member Name="OnPremisesSharePointScannerDlp" Value="100" />
+        <Member Name="ExchangeSearch" Value="101" />
+        <Member Name="SharePointSearch" Value="102" />
+        <Member Name="PrivacyDataMinimization" Value="103" />
+        <Member Name="LabelAnalyticsAggregate" Value="104" />
+        <Member Name="MyAnalyticsSettings" Value="105" />
+        <Member Name="SecurityComplianceUserChange" Value="106" />
+        <Member Name="ComplianceDLPExchangeClassification" Value="107" />
+        <Member Name="ComplianceDLPEndpoint" Value="108" />
+        <Member Name="MipExactDataMatch" Value="109" />
+        <Member Name="MSDEResponseActions" Value="110" />
+        <Member Name="MSDEGeneralSettings" Value="111" />
+        <Member Name="MSDEIndicatorsSettings" Value="112" />
+        <Member Name="MS365DCustomDetection" Value="113" />
+        <Member Name="MSDERolesSettings" Value="114" />
+        <Member Name="MAPGAlerts" Value="115" />
+        <Member Name="MAPGPolicy" Value="116" />
+        <Member Name="MAPGRemediation" Value="117" />
+        <Member Name="PrivacyRemediationAction" Value="118" />
+        <Member Name="PrivacyDigestEmail" Value="119" />
+        <Member Name="MipAutoLabelSimulationProgress" Value="120" />
+        <Member Name="MipAutoLabelSimulationCompletion" Value="121" />
+        <Member Name="MipAutoLabelProgressFeedback" Value="122" />
+        <Member Name="DlpSensitiveInformationType" Value="123" />
+        <Member Name="MipAutoLabelSimulationStatistics" Value="124" />
+        <Member Name="LargeContentMetadata" Value="125" />
+        <Member Name="Microsoft365Group" Value="126" />
+        <Member Name="CDPMlInferencingResult" Value="127" />
+        <Member Name="FilteringMailMetadata" Value="128" />
+        <Member Name="CDPClassificationMailItem" Value="129" />
+        <Member Name="CDPClassificationDocument" Value="130" />
+        <Member Name="OfficeScriptsRunAction" Value="131" />
+        <Member Name="FilteringPostMailDeliveryAction" Value="132" />
+        <Member Name="CDPUnifiedFeedback" Value="133" />
+        <Member Name="TenantAllowBlockList" Value="134" />
+        <Member Name="ConsumptionResource" Value="135" />
+        <Member Name="HealthcareSignal" Value="136" />
+        <Member Name="DlpImportResult" Value="138" />
+        <Member Name="CDPCompliancePolicyExecution" Value="139" />
+        <Member Name="MultiStageDisposition" Value="140" />
+        <Member Name="PrivacyDataMatch" Value="141" />
+        <Member Name="FilteringDocMetadata" Value="142" />
+        <Member Name="FilteringEmailFeatures" Value="143" />
+        <Member Name="PowerBIDlp" Value="144" />
+        <Member Name="FilteringUrlInfo" Value="145" />
+        <Member Name="FilteringAttachmentInfo" Value="146" />
+        <Member Name="CoreReportingSettings" Value="147" />
+        <Member Name="ComplianceConnector" Value="148" />
+        <Member Name="PowerPlatformLockboxResourceAccessRequest" Value="149" />
+        <Member Name="PowerPlatformLockboxResourceCommand" Value="150" />
+        <Member Name="CDPPredictiveCodingLabel" Value="151" />
+        <Member Name="CDPCompliancePolicyUserFeedback" Value="152" />
+        <Member Name="WebpageActivityEndpoint" Value="153" />
+        <Member Name="OMEPortal" Value="154" />
+        <Member Name="CMImprovementActionChange" Value="155" />
+        <Member Name="FilteringUrlClick" Value="156" />
+        <Member Name="MipLabelAnalyticsAuditRecord" Value="157" />
+        <Member Name="FilteringEntityEvent" Value="158" />
+        <Member Name="FilteringRuleHits" Value="159" />
+        <Member Name="FilteringMailSubmission" Value="160" />
+        <Member Name="LabelExplorer" Value="161" />
+        <Member Name="MicrosoftManagedServicePlatform" Value="162" />
+        <Member Name="PowerPlatformServiceActivity" Value="163" />
+        <Member Name="ScorePlatformGenericAuditRecord" Value="164" />
+        <Member Name="FilteringTimeTravelDocMetadata" Value="165" />
+        <Member Name="Alert" Value="166" />
+        <Member Name="AlertStatus" Value="167" />
+        <Member Name="AlertIncident" Value="168" />
+        <Member Name="IncidentStatus" Value="169" />
+        <Member Name="Case" Value="170" />
+        <Member Name="CaseInvestigation" Value="171" />
+        <Member Name="RecordsManagement" Value="172" />
+        <Member Name="PrivacyRemediation" Value="173" />
+        <Member Name="DataShareOperation" Value="174" />
+        <Member Name="CdpDlpSensitive" Value="175" />
+        <Member Name="EHRConnector" Value="176" />
+        <Member Name="FilteringMailGradingResult" Value="177" />
+        <Member Name="PublicFolder" Value="178" />
+        <Member Name="PrivacyTenantAuditHistoryRecord" Value="179" />
+        <Member Name="AipScannerDiscoverEvent" Value="180" />
+        <Member Name="EduDataLakeDownloadOperation" Value="181" />
+        <Member Name="M365ComplianceConnector" Value="182" />
+        <Member Name="MicrosoftGraphDataConnectOperation" Value="183" />
+        <Member Name="MicrosoftPurview" Value="184" />
+        <Member Name="FilteringEmailContentFeatures" Value="185" />
+        <Member Name="PowerPagesSite" Value="186" />
+        <Member Name="PowerAppsResource" Value="187" />
+        <Member Name="PlannerPlan" Value="188" />
+        <Member Name="PlannerCopyPlan" Value="189" />
+        <Member Name="PlannerTask" Value="190" />
+        <Member Name="PlannerRoster" Value="191" />
+        <Member Name="PlannerPlanList" Value="192" />
+        <Member Name="PlannerTaskList" Value="193" />
+        <Member Name="PlannerTenantSettings" Value="194" />
+        <Member Name="ProjectForTheWebProject" Value="195" />
+        <Member Name="ProjectForTheWebTask" Value="196" />
+        <Member Name="ProjectForTheWebRoadmap" Value="197" />
+        <Member Name="ProjectForTheWebRoadmapItem" Value="198" />
+        <Member Name="ProjectForTheWebProjectSettings" Value="199" />
+        <Member Name="ProjectForTheWebRoadmapSettings" Value="200" />
+        <Member Name="QuarantineMetadata" Value="201" />
+        <Member Name="MicrosoftTodoAudit" Value="202" />
+        <Member Name="TimeTravelFilteringDocMetadata" Value="203" />
+        <Member Name="TeamsQuarantineMetadata" Value="204" />
+        <Member Name="SharePointAppPermissionOperation" Value="205" />
+        <Member Name="MicrosoftTeamsSensitivityLabelAction" Value="206" />
+        <Member Name="FilteringTeamsMetadata" Value="207" />
+        <Member Name="FilteringTeamsUrlInfo" Value="208" />
+        <Member Name="FilteringTeamsPostDeliveryAction" Value="209" />
+        <Member Name="MDCAssessments" Value="210" />
+        <Member Name="MDCRegulatoryComplianceStandards" Value="211" />
+        <Member Name="MDCRegulatoryComplianceControls" Value="212" />
+        <Member Name="MDCRegulatoryComplianceAssessments" Value="213" />
+        <Member Name="MDCSecurityConnectors" Value="214" />
+        <Member Name="MDADataSecuritySignal" Value="215" />
+        <Member Name="VivaGoals" Value="216" />
+        <Member Name="FilteringRuntimeInfo" Value="217" />
+        <Member Name="AttackSimAdmin" Value="218" />
+        <Member Name="MicrosoftGraphDataConnectConsent" Value="219" />
+        <Member Name="FilteringAtpDetonationInfo" Value="220" />
+        <Member Name="PrivacyPortal" Value="221" />
+        <Member Name="ManagedTenants" Value="222" />
+        <Member Name="UnifiedSimulationMatchedItem" Value="223" />
+        <Member Name="UnifiedSimulationSummary" Value="224" />
+        <Member Name="UpdateQuarantineMetadata" Value="225" />
+        <Member Name="MS365DSuppressionRule" Value="226" />
+        <Member Name="PurviewDataMapOperation" Value="227" />
+        <Member Name="FilteringUrlPostClickAction" Value="228" />
+        <Member Name="IrmUserDefinedDetectionSignal" Value="229" />
+        <Member Name="TeamsUpdates" Value="230" />
+        <Member Name="PlannerRosterSensitivityLabel" Value="231" />
+        <Member Name="MS365DIncident" Value="232" />
+        <Member Name="FilteringDelistingMetadata" Value="233" />
+        <Member Name="ComplianceDLPSharePointClassificationExtended" Value="234" />
+        <Member Name="MicrosoftDefenderForIdentityAudit" Value="235" />
+        <Member Name="SupervisoryReviewDayXInsight" Value="236" />
+        <Member Name="DefenderExpertsforXDRAdmin" Value="237" />
+        <Member Name="CDPEdgeBlockedMessage" Value="238" />
+        <Member Name="HostedRpa" Value="239" />
+        <Member Name="CdpContentExplorerAggregateRecord" Value="240" />
+        <Member Name="CDPHygieneAttachmentInfo" Value="241" />
+        <Member Name="CDPHygieneSummary" Value="242" />
+        <Member Name="CDPPostMailDeliveryAction" Value="243" />
+        <Member Name="CDPEmailFeatures" Value="244" />
+        <Member Name="CDPHygieneUrlInfo" Value="245" />
+        <Member Name="CDPUrlClick" Value="246" />
+        <Member Name="CDPPackageManagerHygieneEvent" Value="247" />
+        <Member Name="FilteringDocScan" Value="248" />
+        <Member Name="TimeTravelFilteringDocScan" Value="249" />
+        <Member Name="MAPGOnboard" Value="250" />
+        <Member Name="VfamCreatePolicy" Value="251" />
+        <Member Name="VfamUpdatePolicy" Value="252" />
+        <Member Name="VfamDeletePolicy" Value="253" />
+        <Member Name="M365DAAD" Value="254" />
+        <Member Name="CdpColdCrawlStatus" Value="255" />
+        <Member Name="PowerPlatformAdministratorActivity" Value="256" />
+        <Member Name="Windows365CustomerLockbox" Value="257" />
+        <Member Name="CdpResourceScopeChangeEvent" Value="258" />
+        <Member Name="ComplianceCCExchangeExecutionResult" Value="259" />
+        <Member Name="CdpOcrCostEstimatorRecord" Value="260" />
+        <Member Name="CopilotInteraction" Value="261" />
+        <Member Name="CdpOcrBillingRecord" Value="262" />
+        <Member Name="ComplianceDLPApplications" Value="263" />
+        <Member Name="UAMOperation" Value="264" />
+        <Member Name="VivaLearning" Value="265" />
+        <Member Name="VivaLearningAdmin" Value="266" />
+        <Member Name="PurviewPolicyOperation" Value="267" />
+        <Member Name="PurviewMetadataPolicyOperation" Value="268" />
+        <Member Name="PeopleAdminSettings" Value="269" />
+        <Member Name="CdpComplianceDLPExchangeClassification" Value="270" />
+        <Member Name="CdpComplianceDLPSharePointClassification" Value="271" />
+        <Member Name="FilteringBulkSenderInsightData" Value="272" />
+        <Member Name="FilteringBulkThresholdInsightData" Value="273" />
+        <Member Name="PrivacyOpenAccess" Value="274" />
+        <Member Name="OWAAuth" Value="275" />
+        <Member Name="ComplianceDLPApplicationsClassification" Value="276" />
+        <Member Name="SharePointESignature" Value="277" />
+        <Member Name="Dynamics365BusinessCentral" Value="278" />
+        <Member Name="MeshWorlds" Value="279" />
+        <Member Name="VivaPulseResponse" Value="280" />
+        <Member Name="VivaPulseOrganizer" Value="281" />
+        <Member Name="VivaPulseAdmin" Value="282" />
+        <Member Name="VivaPulseReport" Value="283" />
+        <Member Name="AIAppInteraction" Value="284" />
+        <Member Name="ComplianceDLMExchange" Value="285" />
+        <Member Name="ComplianceDLMSharePoint" Value="286" />
+        <Member Name="ProjectForTheWebAssignedToMeSettings" Value="287" />
+        <Member Name="CPSOperation" Value="288" />
+        <Member Name="ComplianceDLPExchangeDiscovery" Value="289" />
+        <Member Name="PurviewMCRecommendation" Value="290" />
+        <Member Name="ComplianceDLPEndpointDiscovery" Value="291" />
+        <Member Name="InsiderRiskScopedUserInsights" Value="292" />
+        <Member Name="MicrosoftTeamsRetentionLabelAction" Value="293" />
+        <Member Name="AadRiskDetection" Value="294" />
+        <Member Name="AuditSearch" Value="295" />
+        <Member Name="AuditRetentionPolicy" Value="296" />
+        <Member Name="AuditConfig" Value="297" />
+        <Member Name="Microsoft365BackupBackupPolicy" Value="298" />
+        <Member Name="Microsoft365BackupRestoreTask" Value="299" />
+        <Member Name="Microsoft365BackupRestoreItem" Value="300" />
+        <Member Name="Microsoft365BackupBackupItem" Value="301" />
+        <Member Name="URBACAssignment" Value="302" />
+        <Member Name="URBACRole" Value="303" />
+        <Member Name="URBACEnableState" Value="304" />
+        <Member Name="IRMSecurityAlert" Value="305" />
+        <Member Name="PurviewInsiderRiskCases" Value="306" />
+        <Member Name="PurviewInsiderRiskAlerts" Value="307" />
+        <Member Name="InsiderRiskScopedUsers" Value="308" />
+        <Member Name="CdpConsumptionResource" Value="309" />
+        <Member Name="CreateCopilotPlugin" Value="310" />
+        <Member Name="UpdateCopilotPlugin" Value="311" />
+        <Member Name="DeleteCopilotPlugin" Value="312" />
+        <Member Name="EnableCopilotPlugin" Value="313" />
+        <Member Name="DisableCopilotPlugin" Value="314" />
+        <Member Name="CreateCopilotWorkspace" Value="315" />
+        <Member Name="UpdateCopilotWorkspace" Value="316" />
+        <Member Name="DeleteCopilotWorkspace" Value="317" />
+        <Member Name="EnableCopilotWorkspace" Value="318" />
+        <Member Name="DisableCopilotWorkspace" Value="319" />
+        <Member Name="CreateCopilotPromptBook" Value="320" />
+        <Member Name="UpdateCopilotPromptBook" Value="321" />
+        <Member Name="DeleteCopilotPromptBook" Value="322" />
+        <Member Name="EnableCopilotPromptBook" Value="323" />
+        <Member Name="DisableCopilotPromptBook" Value="324" />
+        <Member Name="UpdateCopilotSettings" Value="325" />
+        <Member Name="P4AIAssessmentRecord" Value="326" />
+        <Member Name="P4AIAssessmentLocationResultRecord" Value="327" />
+        <Member Name="ConnectedAIAppInteraction" Value="328" />
+        <Member Name="PrivaPrivacyConsentOperation" Value="329" />
+        <Member Name="PrivaPrivacyAssessmentOperation" Value="330" />
+        <Member Name="DataCatalogAccessRequests" Value="331" />
+        <Member Name="ComplianceSettingsChange" Value="332" />
+        <Member Name="DataSecurityInvestigation" Value="333" />
+        <Member Name="TeamCopilotInteraction" Value="334" />
+        <Member Name="IRMActivityAuditTrail" Value="335" />
+        <Member Name="SharePointContentSecurityPolicy" Value="336" />
+        <Member Name="CloudUpdateProfileConfig" Value="337" />
+        <Member Name="CloudUpdateTenantConfig" Value="338" />
+        <Member Name="CloudUpdateDeviceConfig" Value="339" />
+        <Member Name="DefenderPreviewFeatures" Value="340" />
+        <Member Name="DeviceDiscoverySettingsExclusion" Value="341" />
+        <Member Name="DeviceDiscoverySettingsAuthenticatedScans" Value="342" />
+        <Member Name="CriticalAssetManagementClassification" Value="343" />
+        <Member Name="DeviceDiscoverySettings" Value="344" />
+        <Member Name="USXWorkspaceOnboarding" Value="345" />
+        <Member Name="VivaGlintAdvancedConfiguration" Value="346" />
+        <Member Name="VivaGlintPulseProgram" Value="347" />
+        <Member Name="VivaGlintPulseProgramRespondentRate" Value="348" />
+        <Member Name="VivaGlintQuestion" Value="349" />
+        <Member Name="VivaGlintRole" Value="350" />
+        <Member Name="VivaGlintRubicon" Value="351" />
+        <Member Name="VivaGlintSupportAccess" Value="352" />
+        <Member Name="VivaGlintSystem" Value="353" />
+        <Member Name="VivaGlintUser" Value="354" />
+        <Member Name="VivaGlintUserGroup" Value="355" />
+        <Member Name="VivaGlintFeedbackProgram" Value="356" />
+        <Member Name="FabricAudit" Value="357" />
+        <Member Name="TrainableClassifier" Value="358" />
+        <Member Name="WebContentFiltering" Value="359" />
+        <Member Name="NoisyAlertPolicy" Value="360" />
+        <Member Name="OnDemandSharePointClassification" Value="361" />
+        <Member Name="AIInteractionsExport" Value="362" />
+        <Member Name="Microsoft365CopilotScheduledPrompt" Value="363" />
+        <Member Name="PlacesDirectory" Value="364" />
+        <Member Name="MDAAudit" Value="365" />
+        <Member Name="OpticalCharacterRecognition" Value="366" />
+        <Member Name="M365SearchSections" Value="368" />
+        <Member Name="OfficeClientRestrictedModeAction" Value="369" />
+        <Member Name="CrossTenantAccessPolicy" Value="370" />
+        <Member Name="OutlookCopilotAutomation" Value="371" />
+        <Member Name="VivaEngageNetworkAssociation" Value="372" />
+        <Member Name="AppAdminActivity" Value="373" />
+        <Member Name="AppSettingsAdminActivity" Value="374" />
+        <Member Name="UniversalPrintPrintJob" Value="375" />
+        <Member Name="SentinelNotebookOnLake" Value="376" />
+        <Member Name="SentinelJob" Value="377" />
+        <Member Name="SentinelGraph" Value="378" />
+        <Member Name="SentinelKQLOnLake" Value="379" />
+        <Member Name="SentinelPackage" Value="380" />
+        <Member Name="VivaAmplifyOutlookSensitivityLabel" Value="381" />
+        <Member Name="CopilotActions" Value="382" />
+        <Member Name="AIInteractionsSubscription" Value="383" />
+        <Member Name="AIInteractionsChangeNotification" Value="384" />
+        <Member Name="FilteringMailMetadataExtended" Value="385" />
+        <Member Name="SentinelLakeOnboarding" Value="386" />
+        <Member Name="SentinelLakeDataOnboarding" Value="387" />
+        <Member Name="OfficeRestrictedModeAction" Value="388" />
+        <Member Name="CopilotForSecurityTrigger" Value="389" />
+        <Member Name="CopilotAgentManagement" Value="390" />
+        <Member Name="P4AIAssessmentFabricScannerRecord" Value="391" />
+        <Member Name="PlannerGoal" Value="392" />
+        <Member Name="PlannerGoalList" Value="393" />
+        <Member Name="ThreatIntelligenceObject" Value="394" />
+        <Member Name="ThreatIntelligenceExport" Value="395" />
+        <Member Name="SubmissionAgenticGradingResult" Value="396" />
+        <Member Name="AgentAdminActivity" Value="397" />
+        <Member Name="DeployFeatureActivity" Value="398" />
+        <Member Name="AgentSettingsAdminActivity" Value="399" />
+        <Member Name="OrganizationalDataInM365" Value="400" />
+        <Member Name="PlannerChatMessage" Value="401" />
+        <Member Name="PlannerChatMessageList" Value="402" />
+        <Member Name="SentinelAITool" Value="403" />
+        <Member Name="M365ODSPAssetMetadata" Value="404" />
+        <Member Name="AIExecuteTool" Value="405" />
+        <Member Name="AIInvokeAgent" Value="406" />
+        <Member Name="AIInferenceCall" Value="407" />
+        <Member Name="CdpClassifierHealthRecord" Value="408" />
+        <Member Name="SensitiveInfoRemediationAgentData" Value="409" />
+        <Member Name="ComplianceDLPEnforcement" Value="410" />
+        <Member Name="A365AIExecuteTool" Value="411" />
+        <Member Name="A365AIInvokeAgent" Value="412" />
+        <Member Name="A365AIInferenceCall" Value="413" />
+        <Member Name="VivaEngageSegment" Value="414" />
+        <Member Name="RTIOperationsAgent" Value="415" />
+        <Member Name="ContentStoreMetadata" Value="416" />
+        <Member Name="CCRAIPolicyViolation" Value="417" />
+        <Member Name="PlannerPlanSensitivityLabel" Value="418" />
+        <Member Name="MosAgentInfoRecord" Value="419" />
+        <Member Name="A365AIRunSummary" Value="420" />
+        <Member Name="UnifiedCatalogConceptAction" Value="421" />
+        <Member Name="DefenderCaseManagement" Value="422" />
+        <Member Name="CopilotForSecurityLogging" Value="423" />
+        <Member Name="VivaEngageEvents" Value="424" />
+        <Member Name="CallActivityEvent" Value="425" />
+        <Member Name="SonarDetonationContentMetadata" Value="426" />
+        <Member Name="UniversalPrintManagement" Value="427" />
+        <Member Name="YammerUserHiding" Value="428" />
+        <Member Name="Microsoft365BackupGranularBrowseTask" Value="429" />
+        <Member Name="PurviewPostureAgent" Value="430" />
+        <Member Name="MSDECustomCollection" Value="431" />
+        <Member Name="SCPUsageEvent" Value="432" />
+        <Member Name="SCPConfigurationEvent" Value="433" />
+        <Member Name="MDCConfigurationEvent" Value="434" />
+        <Member Name="MDCUsageEvent" Value="435" />
+        <Member Name="A365SpanOutputs" Value="436" />
+        <Member Name="PowerPlatformTenantIsolation" Value="437" />
+        <Member Name="CDPDLMAIInteractionInsights" Value="438" />
+        <Member Name="P4AIAssessmentCategoryRecord" Value="439" />
+        <Member Name="SentinelLakeEncryption" Value="440" />
+        <Member Name="AZFWNetworkRule" Value="441" />
+        <Member Name="AZFWDnsQuery" Value="442" />
+        <Member Name="AZFWApplicationRuleAggregation" Value="443" />
+        <Member Name="TeamsEvalDataHubDataAccess" Value="444" />
+        <Member Name="TeamsEvalDataHubPermissionChange" Value="445" />
+        <Member Name="TeamsEvalDataHubAdminOperation" Value="446" />
+        <Member Name="VivaGlintOrganizationalData" Value="447" />
+        <Member Name="AlertSubmission" Value="448" />
+        <Member Name="AlertSubmissionResultDetail" Value="449" />
+        <Member Name="ComplianceSitGradingSharePoint" Value="450" />
+        <Member Name="CompliancePolicyGradingSharePoint" Value="451" />
+        <Member Name="AzureAISearchAudit" Value="452" />
+        <Member Name="P4AIRiskScoreRecord" Value="453" />
+        <Member Name="DragonCopilotAdmin" Value="454" />
+        <Member Name="AISpanOutputs" Value="455" />
+        <Member Name="EopSubmissionFeedEntity" Value="456" />
+        <Member Name="SonarFileDetonationEntity" Value="457" />
+        <Member Name="SonarSubmissionEntity" Value="458" />
+        <Member Name="SonarUrlDetonationEntity" Value="459" />
+        <Member Name="SubmissionEntity" Value="460" />
+        <Member Name="SonarDetonationEntity" Value="461" />
+        <Member Name="MicrosoftTeamsUserConcern" Value="462" />
+        <Member Name="VivaGlintAgenticCampaign" Value="463" />
+        <Member Name="MSPVectorSearchContentMetadata" Value="464" />
+        <Member Name="FabricPolicy" Value="465" />
+        <Member Name="SecurityCopilotAgentIdentityManagement" Value="466" />
+        <Member Name="CopilotSessionSharing" Value="467" />
+        <Member Name="DragonCopilotAccess" Value="468" />
+        <Member Name="DragonCopilotClinicalData" Value="469" />
+        <Member Name="DragonCopilotSession" Value="470" />
+        <Member Name="MosAgentInfoRecordV2" Value="471" />
+        <Member Name="SecurityDevelopmentLifecycleAILog" Value="472" />
+        <Member Name="MDASH" Value="473" />
+        <Member Name="DefenderSecurityForAIConfiguration" Value="474" />
+        <Member Name="SparkCoreCustomLivePool" Value="475" />
+        <Member Name="unknownFutureValue" Value="476" />
+      </EnumType>
+      <EnumType Name="auditLogUserType">
+        <Member Name="Regular" Value="0" />
+        <Member Name="Reserved" Value="1" />
+        <Member Name="Admin" Value="2" />
+        <Member Name="DcAdmin" Value="3" />
+        <Member Name="System" Value="4" />
+        <Member Name="Application" Value="5" />
+        <Member Name="ServicePrincipal" Value="6" />
+        <Member Name="CustomPolicy" Value="7" />
+        <Member Name="SystemPolicy" Value="8" />
+        <Member Name="PartnerTechnician" Value="9" />
+        <Member Name="Guest" Value="10" />
+        <Member Name="unknownFutureValue" Value="11" />
+      </EnumType>
       <EnumType Name="behaviorDuringRetentionPeriod">
         <Member Name="doNotRetain" Value="0" />
         <Member Name="retain" Value="1" />
@@ -47573,21 +49482,46 @@
         <Member Name="clientUpdateProhibited" Value="4" />
         <Member Name="unknownFutureValue" Value="5" />
       </EnumType>
+      <ComplexType Name="a365AiExecuteTool" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="a365AiInferenceCall" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="a365AiInvokeAgent" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="a365AiRunSummary" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="a365SpanOutputs" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="aadRiskDetectionAuditRecord" BaseType="self.auditData" OpenType="true" />
       <ComplexType Name="account">
-        <Property Name="actions" Type="Collection(microsoft.graph.security.action)" Nullable="false" />
+        <Property Name="actions" Type="Collection(self.action)" Nullable="false" />
         <Property Name="identifier" Type="Edm.String" Nullable="false" />
-        <Property Name="identityProvider" Type="microsoft.graph.security.identityProvider" Nullable="false" />
+        <Property Name="identityProvider" Type="self.identityProvider" Nullable="false" />
       </ComplexType>
-      <ComplexType Name="activeDirectoryDomainEvidence" BaseType="microsoft.graph.security.alertEvidence">
+      <ComplexType Name="activeDirectoryDomainEvidence" BaseType="self.alertEvidence">
         <Property Name="activeDirectoryDomainName" Type="Edm.String" />
-        <Property Name="trustedDomains" Type="Collection(microsoft.graph.security.activeDirectoryDomainEvidence)" Nullable="false" />
+        <Property Name="trustedDomains" Type="Collection(self.activeDirectoryDomainEvidence)" Nullable="false" />
       </ComplexType>
-      <ComplexType Name="aiAgentEvidence" BaseType="microsoft.graph.security.alertEvidence">
+      <ComplexType Name="aedAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="agentAdminActivityRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="agentSettingAdminActivity" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="aiAgentEvidence" BaseType="self.alertEvidence">
         <Property Name="agentId" Type="Edm.String" />
         <Property Name="agentName" Type="Edm.String" />
-        <Property Name="hostingPlatformType" Type="microsoft.graph.security.aiAgentPlatform" />
+        <Property Name="hostingPlatformType" Type="self.aiAgentPlatform" />
         <Property Name="instructions" Type="Edm.String" />
       </ComplexType>
+      <ComplexType Name="aiAppInteractionAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="aiExecuteToolAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="aiInteractionsChangeNotificationAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="aiInteractionsExportAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="aiInteractionsSubscriptionAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="aiInvokeAgentAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="aipDiscover" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="aipFileDeleted" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="aipHeartBeat" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="aipProtectionActionLogRequest" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="aipScannerDiscoverEvent" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="aipSensitivityLabelActionLogRequest" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="airAdminActionInvestigationData" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="airInvestigationData" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="airManualInvestigationData" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="aISpanOutputsAuditRecord" BaseType="self.auditData" OpenType="true" />
       <ComplexType Name="alertComment">
         <Property Name="comment" Type="Edm.String" />
         <Property Name="createdByDisplayName" Type="Edm.String" />
@@ -47596,20 +49530,22 @@
       <ComplexType Name="alertEvidence">
         <Property Name="createdDateTime" Type="Edm.DateTimeOffset" Nullable="false" />
         <Property Name="detailedRoles" Type="Collection(Edm.String)" />
-        <Property Name="remediationStatus" Type="microsoft.graph.security.evidenceRemediationStatus" Nullable="false" />
+        <Property Name="remediationStatus" Type="self.evidenceRemediationStatus" Nullable="false" />
         <Property Name="remediationStatusDetails" Type="Edm.String" />
-        <Property Name="roles" Type="Collection(microsoft.graph.security.evidenceRole)" Nullable="false" />
+        <Property Name="roles" Type="Collection(self.evidenceRole)" Nullable="false" />
         <Property Name="tags" Type="Collection(Edm.String)" />
-        <Property Name="verdict" Type="microsoft.graph.security.evidenceVerdict" Nullable="false" />
+        <Property Name="verdict" Type="self.evidenceVerdict" Nullable="false" />
       </ComplexType>
-      <ComplexType Name="amazonResourceEvidence" BaseType="microsoft.graph.security.alertEvidence">
+      <ComplexType Name="alertSubmissionAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="alertSubmissionResultDetailAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="amazonResourceEvidence" BaseType="self.alertEvidence">
         <Property Name="amazonAccountId" Type="Edm.String" />
         <Property Name="amazonResourceId" Type="Edm.String" />
         <Property Name="resourceName" Type="Edm.String" />
         <Property Name="resourceType" Type="Edm.String" />
       </ComplexType>
       <ComplexType Name="analyzedEmailAttachment">
-        <Property Name="detonationDetails" Type="microsoft.graph.security.detonationDetails" />
+        <Property Name="detonationDetails" Type="self.detonationDetails" />
         <Property Name="fileExtension" Type="Edm.String" />
         <Property Name="fileName" Type="Edm.String" />
         <Property Name="fileSize" Type="Edm.Int32" />
@@ -47617,7 +49553,7 @@
         <Property Name="malwareFamily" Type="Edm.String" />
         <Property Name="sha256" Type="Edm.String" />
         <Property Name="tenantAllowBlockListDetailInfo" Type="Edm.String" />
-        <Property Name="threatType" Type="microsoft.graph.security.threatType" />
+        <Property Name="threatType" Type="self.threatType" />
       </ComplexType>
       <ComplexType Name="analyzedEmailAuthenticationDetail">
         <Property Name="compositeAuthentication" Type="Edm.String" />
@@ -47626,9 +49562,9 @@
         <Property Name="senderPolicyFramework" Type="Edm.String" />
       </ComplexType>
       <ComplexType Name="analyzedEmailDeliveryDetail">
-        <Property Name="action" Type="microsoft.graph.security.deliveryAction" />
+        <Property Name="action" Type="self.deliveryAction" />
         <Property Name="latestThreats" Type="Edm.String" />
-        <Property Name="location" Type="microsoft.graph.security.deliveryLocation" />
+        <Property Name="location" Type="self.deliveryLocation" />
         <Property Name="originalThreats" Type="Edm.String" />
       </ComplexType>
       <ComplexType Name="analyzedEmailDlpRuleInfo">
@@ -47656,12 +49592,12 @@
       </ComplexType>
       <ComplexType Name="analyzedEmailUrl">
         <Property Name="detectionMethod" Type="Edm.String" />
-        <Property Name="detonationDetails" Type="microsoft.graph.security.detonationDetails" />
+        <Property Name="detonationDetails" Type="self.detonationDetails" />
         <Property Name="tenantAllowBlockListDetailInfo" Type="Edm.String" />
-        <Property Name="threatType" Type="microsoft.graph.security.threatType" />
+        <Property Name="threatType" Type="self.threatType" />
         <Property Name="url" Type="Edm.String" />
       </ComplexType>
-      <ComplexType Name="analyzedMessageEvidence" BaseType="microsoft.graph.security.alertEvidence">
+      <ComplexType Name="analyzedMessageEvidence" BaseType="self.alertEvidence">
         <Property Name="antiSpamDirection" Type="Edm.String" />
         <Property Name="attachmentsCount" Type="Edm.Int64" />
         <Property Name="deliveryAction" Type="Edm.String" />
@@ -47669,8 +49605,8 @@
         <Property Name="internetMessageId" Type="Edm.String" />
         <Property Name="language" Type="Edm.String" />
         <Property Name="networkMessageId" Type="Edm.String" />
-        <Property Name="p1Sender" Type="microsoft.graph.security.emailSender" />
-        <Property Name="p2Sender" Type="microsoft.graph.security.emailSender" />
+        <Property Name="p1Sender" Type="self.emailSender" />
+        <Property Name="p2Sender" Type="self.emailSender" />
         <Property Name="receivedDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="recipientEmailAddress" Type="Edm.String" />
         <Property Name="senderIp" Type="Edm.String" />
@@ -47681,42 +49617,68 @@
         <Property Name="urls" Type="Collection(Edm.String)" />
         <Property Name="urn" Type="Edm.String" />
       </ComplexType>
+      <ComplexType Name="attackSimAdminAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="attackSimAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="auditConfigAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="auditData" Abstract="true">
+        <Property Name="dynamicProperties" Type="self.auditRecordTypeDictionary" />
+      </ComplexType>
+      <ComplexType Name="auditRecordTypeDictionary" OpenType="true" />
+      <ComplexType Name="auditSearchAuditRecord" BaseType="self.auditData" OpenType="true" />
       <ComplexType Name="autonomousSystem">
         <Property Name="name" Type="Edm.String" Nullable="false" />
         <Property Name="number" Type="Edm.Int32" Nullable="false" />
         <Property Name="organization" Type="Edm.String" Nullable="false" />
         <Property Name="value" Type="Edm.String" Nullable="false" />
       </ComplexType>
-      <ComplexType Name="azureResourceEvidence" BaseType="microsoft.graph.security.alertEvidence">
+      <ComplexType Name="azfwApplicationRuleAggregationEventRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="azfwDnsQueryEventRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="azfwNetworkRuleEventRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="azureActiveDirectoryAccountLogonAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="azureActiveDirectoryAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="azureActiveDirectoryStsLogonAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="azureAISearchAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="azureResourceEvidence" BaseType="self.alertEvidence">
         <Property Name="resourceId" Type="Edm.String" />
         <Property Name="resourceName" Type="Edm.String" />
         <Property Name="resourceType" Type="Edm.String" />
       </ComplexType>
-      <ComplexType Name="blobContainerEvidence" BaseType="microsoft.graph.security.alertEvidence">
+      <ComplexType Name="blobContainerEvidence" BaseType="self.alertEvidence">
         <Property Name="name" Type="Edm.String" />
-        <Property Name="storageResource" Type="microsoft.graph.security.azureResourceEvidence" />
+        <Property Name="storageResource" Type="self.azureResourceEvidence" />
         <Property Name="url" Type="Edm.String" />
       </ComplexType>
-      <ComplexType Name="blobEvidence" BaseType="microsoft.graph.security.alertEvidence">
-        <Property Name="blobContainer" Type="microsoft.graph.security.blobContainerEvidence" />
+      <ComplexType Name="blobEvidence" BaseType="self.alertEvidence">
+        <Property Name="blobContainer" Type="self.blobContainerEvidence" />
         <Property Name="etag" Type="Edm.String" />
-        <Property Name="fileHashes" Type="Collection(microsoft.graph.security.fileHash)" />
+        <Property Name="fileHashes" Type="Collection(self.fileHash)" />
         <Property Name="name" Type="Edm.String" />
         <Property Name="url" Type="Edm.String" />
       </ComplexType>
-      <ComplexType Name="cloudApplicationEvidence" BaseType="microsoft.graph.security.alertEvidence">
+      <ComplexType Name="campaignAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="ccraiPolicyViolationRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="cdpClassifierHealthRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="cdpColdCrawlStatusRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="cdpConsumptionResourceRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="cdpContentExplorerAggregateRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="cdpdlmaiInteractionInsightsRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="cdpDlpSensitiveEndpointAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="cdpLogRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="cdpOcrBillingRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="cdpResourceScopeChangeEventRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="cloudApplicationEvidence" BaseType="self.alertEvidence">
         <Property Name="appId" Type="Edm.Int64" />
         <Property Name="displayName" Type="Edm.String" />
         <Property Name="instanceId" Type="Edm.Int64" />
         <Property Name="instanceName" Type="Edm.String" />
         <Property Name="saasAppId" Type="Edm.Int64" />
-        <Property Name="stream" Type="microsoft.graph.security.stream" />
+        <Property Name="stream" Type="self.stream" />
       </ComplexType>
-      <ComplexType Name="cloudLogonRequestEvidence" BaseType="microsoft.graph.security.alertEvidence">
+      <ComplexType Name="cloudLogonRequestEvidence" BaseType="self.alertEvidence">
         <Property Name="requestId" Type="Edm.String" />
       </ComplexType>
-      <ComplexType Name="cloudLogonSessionEvidence" BaseType="microsoft.graph.security.alertEvidence">
-        <Property Name="account" Type="microsoft.graph.security.userEvidence" />
+      <ComplexType Name="cloudLogonSessionEvidence" BaseType="self.alertEvidence">
+        <Property Name="account" Type="self.userEvidence" />
         <Property Name="browser" Type="Edm.String" />
         <Property Name="deviceName" Type="Edm.String" />
         <Property Name="operatingSystem" Type="Edm.String" />
@@ -47726,32 +49688,86 @@
         <Property Name="startUtcDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="userAgent" Type="Edm.String" />
       </ComplexType>
+      <ComplexType Name="cloudUpdateDeviceConfigAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="cloudUpdateProfileConfigAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="cloudUpdateTenantConfigAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="complianceConnectorAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="complianceDLMExchangeAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="complianceDLMSharePointAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="complianceDLPApplicationsAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="complianceDLPApplicationsClassificationAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="complianceDLPEndpointAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="complianceDLPEndpointDiscoveryAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="complianceDLPEnforcementAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="complianceDLPExchangeAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="complianceDLPExchangeClassificationAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="complianceDLPExchangeClassificationCdpRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="complianceDLPExchangeDiscoveryAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="complianceDLPSharePointAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="complianceDLPSharePointClassificationAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="complianceDLPSharePointClassificationCdpRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="complianceDLPSharePointClassificationExtendedAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="complianceExchangeOcrAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="complianceManagerActionRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="compliancePolicyGradingSharePointAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="complianceSettingsChangeAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="complianceSitGradingSharePointAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="complianceSupervisionExchangeAuditRecord" BaseType="self.auditData" OpenType="true" />
       <ComplexType Name="compromiseIndicator">
         <Property Name="value" Type="Edm.String" />
-        <Property Name="verdict" Type="microsoft.graph.security.verdictCategory" />
+        <Property Name="verdict" Type="self.verdictCategory" />
       </ComplexType>
-      <ComplexType Name="containerEvidence" BaseType="microsoft.graph.security.alertEvidence">
+      <ComplexType Name="connectedAIAppInteractionAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="consumptionResourceAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="containerEvidence" BaseType="self.alertEvidence">
         <Property Name="args" Type="Collection(Edm.String)" />
         <Property Name="command" Type="Collection(Edm.String)" />
         <Property Name="containerId" Type="Edm.String" />
-        <Property Name="image" Type="microsoft.graph.security.containerImageEvidence" />
+        <Property Name="image" Type="self.containerImageEvidence" />
         <Property Name="isPrivileged" Type="Edm.Boolean" Nullable="false" />
         <Property Name="name" Type="Edm.String" />
-        <Property Name="pod" Type="microsoft.graph.security.kubernetesPodEvidence" />
+        <Property Name="pod" Type="self.kubernetesPodEvidence" />
       </ComplexType>
-      <ComplexType Name="containerImageEvidence" BaseType="microsoft.graph.security.alertEvidence">
-        <Property Name="digestImage" Type="microsoft.graph.security.containerImageEvidence" />
+      <ComplexType Name="containerImageEvidence" BaseType="self.alertEvidence">
+        <Property Name="digestImage" Type="self.containerImageEvidence" />
         <Property Name="imageId" Type="Edm.String" />
-        <Property Name="registry" Type="microsoft.graph.security.containerRegistryEvidence" />
+        <Property Name="registry" Type="self.containerRegistryEvidence" />
       </ComplexType>
-      <ComplexType Name="containerRegistryEvidence" BaseType="microsoft.graph.security.alertEvidence">
+      <ComplexType Name="containerRegistryEvidence" BaseType="self.alertEvidence">
         <Property Name="registry" Type="Edm.String" />
       </ComplexType>
+      <ComplexType Name="contentStoreMetadataRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="copilotAgentManagementAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="copilotForSecurityLoggingAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="copilotForSecurityTriggerAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="copilotInteractionAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="copilotPluginSettingAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="copilotPromptBookSettingAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="copilotSessionSharingAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="copilotSettingAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="copilotWorkspaceSettingAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="coreReportingSettingsAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="cortanaBriefingAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="criticalAssetManagementClassificationRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="crmEntityOperationAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="crossTenantAccessPolicyAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="customerKeyServiceEncryptionAuditRecord" BaseType="self.auditData" OpenType="true" />
       <ComplexType Name="cvssSummary">
         <Property Name="score" Type="Edm.Double" Nullable="false" />
-        <Property Name="severity" Type="microsoft.graph.security.vulnerabilitySeverity" />
+        <Property Name="severity" Type="self.vulnerabilitySeverity" />
         <Property Name="vectorString" Type="Edm.String" />
       </ComplexType>
+      <ComplexType Name="dataCenterSecurityCmdletAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="dataGovernanceAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="dataInsightsRestApiAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="dataLakeExportOperationAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="dataSecurityInvestigationAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="dataShareOperationAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="defaultAuditData" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="defenderCaseManagementAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="defenderPreviewFeaturesRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="defenderSecurityForAIConfigurationAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="deployFeatureActivityRecord" BaseType="self.auditData" OpenType="true" />
       <ComplexType Name="deploymentAccessKeyType">
         <Property Name="deploymentAccessKey" Type="Edm.String" Nullable="false" />
       </ComplexType>
@@ -47767,16 +49783,16 @@
         <Property Name="target" Type="Edm.String" />
       </ComplexType>
       <ComplexType Name="detonationChain">
-        <Property Name="childNodes" Type="Collection(microsoft.graph.security.detonationChain)" />
+        <Property Name="childNodes" Type="Collection(self.detonationChain)" />
         <Property Name="value" Type="Edm.String" />
       </ComplexType>
       <ComplexType Name="detonationDetails">
         <Property Name="analysisDateTime" Type="Edm.DateTimeOffset" />
-        <Property Name="compromiseIndicators" Type="Collection(microsoft.graph.security.compromiseIndicator)" />
-        <Property Name="detonationBehaviourDetails" Type="microsoft.graph.security.detonationBehaviourDetails" />
+        <Property Name="compromiseIndicators" Type="Collection(self.compromiseIndicator)" />
+        <Property Name="detonationBehaviourDetails" Type="self.detonationBehaviourDetails" />
         <Property Name="detonationBehaviourDetailsV2" Type="Edm.String" />
-        <Property Name="detonationChain" Type="microsoft.graph.security.detonationChain" />
-        <Property Name="detonationObservables" Type="microsoft.graph.security.detonationObservables" />
+        <Property Name="detonationChain" Type="self.detonationChain" />
+        <Property Name="detonationObservables" Type="self.detonationObservables" />
         <Property Name="detonationScreenshotUri" Type="Edm.String" />
         <Property Name="detonationVerdict" Type="Edm.String" />
         <Property Name="detonationVerdictReason" Type="Edm.String" />
@@ -47790,58 +49806,79 @@
         <Property Name="contactedUrls" Type="Collection(Edm.String)" />
         <Property Name="droppedfiles" Type="Collection(Edm.String)" />
       </ComplexType>
-      <ComplexType Name="deviceEvidence" BaseType="microsoft.graph.security.alertEvidence">
+      <ComplexType Name="deviceDiscoverySettingsAuthenticatedScansRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="deviceDiscoverySettingsExclusionRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="deviceDiscoverySettingsRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="deviceEvidence" BaseType="self.alertEvidence">
         <Property Name="azureAdDeviceId" Type="Edm.String" />
-        <Property Name="defenderAvStatus" Type="microsoft.graph.security.defenderAvStatus" />
+        <Property Name="defenderAvStatus" Type="self.defenderAvStatus" />
         <Property Name="deviceDnsName" Type="Edm.String" />
         <Property Name="dnsDomain" Type="Edm.String" />
         <Property Name="firstSeenDateTime" Type="Edm.DateTimeOffset" />
-        <Property Name="healthStatus" Type="microsoft.graph.security.deviceHealthStatus" />
+        <Property Name="healthStatus" Type="self.deviceHealthStatus" />
         <Property Name="hostName" Type="Edm.String" />
         <Property Name="ipInterfaces" Type="Collection(Edm.String)" />
         <Property Name="lastExternalIpAddress" Type="Edm.String" />
         <Property Name="lastIpAddress" Type="Edm.String" />
-        <Property Name="loggedOnUsers" Type="Collection(microsoft.graph.security.loggedOnUser)" />
+        <Property Name="loggedOnUsers" Type="Collection(self.loggedOnUser)" />
         <Property Name="mdeDeviceId" Type="Edm.String" />
         <Property Name="ntDomain" Type="Edm.String" />
-        <Property Name="onboardingStatus" Type="microsoft.graph.security.onboardingStatus" />
+        <Property Name="onboardingStatus" Type="self.onboardingStatus" />
         <Property Name="osBuild" Type="Edm.Int64" />
         <Property Name="osPlatform" Type="Edm.String" />
         <Property Name="rbacGroupId" Type="Edm.Int32" />
         <Property Name="rbacGroupName" Type="Edm.String" />
-        <Property Name="resourceAccessEvents" Type="Collection(microsoft.graph.security.resourceAccessEvent)" />
-        <Property Name="riskScore" Type="microsoft.graph.security.deviceRiskScore" />
+        <Property Name="resourceAccessEvents" Type="Collection(self.resourceAccessEvent)" />
+        <Property Name="riskScore" Type="self.deviceRiskScore" />
         <Property Name="version" Type="Edm.String" />
-        <Property Name="vmMetadata" Type="microsoft.graph.security.vmMetadata" />
+        <Property Name="vmMetadata" Type="self.vmMetadata" />
       </ComplexType>
       <ComplexType Name="dictionary" OpenType="true" />
-      <ComplexType Name="dnsEvidence" BaseType="microsoft.graph.security.alertEvidence">
-        <Property Name="dnsServerIp" Type="microsoft.graph.security.ipEvidence" />
+      <ComplexType Name="discoveryAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="dlpEndpointAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="dlpImportResultAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="dlpSensitiveInformationTypeRulePackageCmdletRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="dnsEvidence" BaseType="self.alertEvidence">
+        <Property Name="dnsServerIp" Type="self.ipEvidence" />
         <Property Name="domainName" Type="Edm.String" />
-        <Property Name="hostIpAddress" Type="microsoft.graph.security.ipEvidence" />
-        <Property Name="ipAddresses" Type="Collection(microsoft.graph.security.ipEvidence)" />
+        <Property Name="hostIpAddress" Type="self.ipEvidence" />
+        <Property Name="ipAddresses" Type="Collection(self.ipEvidence)" />
       </ComplexType>
+      <ComplexType Name="dragonCopilotAccessRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="dragonCopilotAdminRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="dragonCopilotClinicalDataRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="dragonCopilotSessionRecord" BaseType="self.auditData" OpenType="true" />
       <ComplexType Name="dynamicColumnValue" OpenType="true" />
+      <ComplexType Name="dynamics365BusinessCentralAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="ehrConnectorAuditBaseRecord" BaseType="self.auditData" OpenType="true" />
       <ComplexType Name="emailSender">
         <Property Name="displayName" Type="Edm.String" />
         <Property Name="domainName" Type="Edm.String" />
         <Property Name="emailAddress" Type="Edm.String" />
       </ComplexType>
+      <ComplexType Name="eopSubmissionFeedEntityAuditRecord" BaseType="self.auditData" OpenType="true" />
       <ComplexType Name="eventPropagationResult">
         <Property Name="location" Type="Edm.String" />
         <Property Name="serviceName" Type="Edm.String" />
-        <Property Name="status" Type="microsoft.graph.security.eventPropagationStatus" />
+        <Property Name="status" Type="self.eventPropagationStatus" />
         <Property Name="statusInformation" Type="Edm.String" />
       </ComplexType>
       <ComplexType Name="eventQuery">
         <Property Name="query" Type="Edm.String" Nullable="false" />
-        <Property Name="queryType" Type="microsoft.graph.security.queryType" />
+        <Property Name="queryType" Type="self.queryType" />
       </ComplexType>
+      <ComplexType Name="exchangeAdminAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="exchangeAggregatedMailboxAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="exchangeAggregatedOperationRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="exchangeMailboxAuditGroupRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="exchangeMailboxAuditRecord" BaseType="self.auditData" OpenType="true" />
       <ComplexType Name="exportFileMetadata">
         <Property Name="downloadUrl" Type="Edm.String" />
         <Property Name="fileName" Type="Edm.String" />
         <Property Name="size" Type="Edm.Int64" />
       </ComplexType>
+      <ComplexType Name="fabricAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="fabricPolicyRecord" BaseType="self.auditData" OpenType="true" />
       <ComplexType Name="fileDetails">
         <Property Name="fileName" Type="Edm.String" />
         <Property Name="filePath" Type="Edm.String" />
@@ -47854,36 +49891,36 @@
         <Property Name="sha256Ac" Type="Edm.String" />
         <Property Name="signer" Type="Edm.String" />
       </ComplexType>
-      <ComplexType Name="fileEvidence" BaseType="microsoft.graph.security.alertEvidence">
-        <Property Name="detectionStatus" Type="microsoft.graph.security.detectionStatus" />
-        <Property Name="fileDetails" Type="microsoft.graph.security.fileDetails" />
+      <ComplexType Name="fileEvidence" BaseType="self.alertEvidence">
+        <Property Name="detectionStatus" Type="self.detectionStatus" />
+        <Property Name="fileDetails" Type="self.fileDetails" />
         <Property Name="mdeDeviceId" Type="Edm.String" />
       </ComplexType>
       <ComplexType Name="fileHash">
-        <Property Name="algorithm" Type="microsoft.graph.security.fileHashAlgorithm" Nullable="false" />
+        <Property Name="algorithm" Type="self.fileHashAlgorithm" Nullable="false" />
         <Property Name="value" Type="Edm.String" />
       </ComplexType>
-      <ComplexType Name="fileHashEvidence" BaseType="microsoft.graph.security.alertEvidence">
-        <Property Name="algorithm" Type="microsoft.graph.security.fileHashAlgorithm" Nullable="false" />
+      <ComplexType Name="fileHashEvidence" BaseType="self.alertEvidence">
+        <Property Name="algorithm" Type="self.fileHashAlgorithm" Nullable="false" />
         <Property Name="value" Type="Edm.String" />
       </ComplexType>
-      <ComplexType Name="filePlanAppliedCategory" BaseType="microsoft.graph.security.filePlanDescriptorBase">
-        <Property Name="subcategory" Type="microsoft.graph.security.filePlanSubcategory" />
+      <ComplexType Name="filePlanAppliedCategory" BaseType="self.filePlanDescriptorBase">
+        <Property Name="subcategory" Type="self.filePlanSubcategory" />
       </ComplexType>
-      <ComplexType Name="filePlanAuthority" BaseType="microsoft.graph.security.filePlanDescriptorBase" />
-      <ComplexType Name="filePlanCitation" BaseType="microsoft.graph.security.filePlanDescriptorBase">
+      <ComplexType Name="filePlanAuthority" BaseType="self.filePlanDescriptorBase" />
+      <ComplexType Name="filePlanCitation" BaseType="self.filePlanDescriptorBase">
         <Property Name="citationJurisdiction" Type="Edm.String" />
         <Property Name="citationUrl" Type="Edm.String" />
       </ComplexType>
-      <ComplexType Name="filePlanDepartment" BaseType="microsoft.graph.security.filePlanDescriptorBase" />
+      <ComplexType Name="filePlanDepartment" BaseType="self.filePlanDescriptorBase" />
       <ComplexType Name="filePlanDescriptorBase">
         <Property Name="displayName" Type="Edm.String" />
       </ComplexType>
-      <ComplexType Name="filePlanReference" BaseType="microsoft.graph.security.filePlanDescriptorBase" />
-      <ComplexType Name="filePlanSubcategory" BaseType="microsoft.graph.security.filePlanDescriptorBase" />
+      <ComplexType Name="filePlanReference" BaseType="self.filePlanDescriptorBase" />
+      <ComplexType Name="filePlanSubcategory" BaseType="self.filePlanDescriptorBase" />
       <ComplexType Name="formattedContent">
         <Property Name="content" Type="Edm.String" />
-        <Property Name="format" Type="microsoft.graph.security.contentFormat" />
+        <Property Name="format" Type="self.contentFormat" />
       </ComplexType>
       <ComplexType Name="geoLocation">
         <Property Name="city" Type="Edm.String" />
@@ -47892,7 +49929,7 @@
         <Property Name="longitude" Type="Edm.Double" />
         <Property Name="state" Type="Edm.String" />
       </ComplexType>
-      <ComplexType Name="gitHubOrganizationEvidence" BaseType="microsoft.graph.security.alertEvidence">
+      <ComplexType Name="gitHubOrganizationEvidence" BaseType="self.alertEvidence">
         <Property Name="company" Type="Edm.String" />
         <Property Name="displayName" Type="Edm.String" />
         <Property Name="email" Type="Edm.String" />
@@ -47900,33 +49937,35 @@
         <Property Name="orgId" Type="Edm.String" />
         <Property Name="webUrl" Type="Edm.String" />
       </ComplexType>
-      <ComplexType Name="gitHubRepoEvidence" BaseType="microsoft.graph.security.alertEvidence">
+      <ComplexType Name="gitHubRepoEvidence" BaseType="self.alertEvidence">
         <Property Name="baseUrl" Type="Edm.String" />
         <Property Name="login" Type="Edm.String" />
         <Property Name="owner" Type="Edm.String" />
         <Property Name="ownerType" Type="Edm.String" />
         <Property Name="repoId" Type="Edm.String" />
       </ComplexType>
-      <ComplexType Name="gitHubUserEvidence" BaseType="microsoft.graph.security.alertEvidence">
+      <ComplexType Name="gitHubUserEvidence" BaseType="self.alertEvidence">
         <Property Name="email" Type="Edm.String" />
         <Property Name="login" Type="Edm.String" />
         <Property Name="name" Type="Edm.String" />
         <Property Name="userId" Type="Edm.String" />
         <Property Name="webUrl" Type="Edm.String" />
       </ComplexType>
-      <ComplexType Name="googleCloudResourceEvidence" BaseType="microsoft.graph.security.alertEvidence">
+      <ComplexType Name="googleCloudResourceEvidence" BaseType="self.alertEvidence">
         <Property Name="fullResourceName" Type="Edm.String" />
         <Property Name="location" Type="Edm.String" />
-        <Property Name="locationType" Type="microsoft.graph.security.googleCloudLocationType" />
+        <Property Name="locationType" Type="self.googleCloudLocationType" />
         <Property Name="projectId" Type="Edm.String" />
         <Property Name="projectNumber" Type="Edm.Int64" />
         <Property Name="resourceName" Type="Edm.String" />
         <Property Name="resourceType" Type="Edm.String" />
       </ComplexType>
-      <ComplexType Name="hostLogonSessionEvidence" BaseType="microsoft.graph.security.alertEvidence">
-        <Property Name="account" Type="microsoft.graph.security.userEvidence" />
+      <ComplexType Name="healthcareSignalRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="hostedRpaAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="hostLogonSessionEvidence" BaseType="self.alertEvidence">
+        <Property Name="account" Type="self.userEvidence" />
         <Property Name="endUtcDateTime" Type="Edm.DateTimeOffset" />
-        <Property Name="host" Type="microsoft.graph.security.deviceEvidence" />
+        <Property Name="host" Type="self.deviceEvidence" />
         <Property Name="sessionId" Type="Edm.String" />
         <Property Name="startUtcDateTime" Type="Edm.DateTimeOffset" />
       </ComplexType>
@@ -47941,55 +49980,63 @@
         <Property Name="firstSeenDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="isRecent" Type="Edm.Boolean" />
         <Property Name="lastSeenDateTime" Type="Edm.DateTimeOffset" />
-        <NavigationProperty Name="component" Type="microsoft.graph.security.hostComponent" />
+        <NavigationProperty Name="component" Type="self.hostComponent" />
       </ComplexType>
       <ComplexType Name="hostReputationRule">
         <Property Name="description" Type="Edm.String" Nullable="false" />
         <Property Name="name" Type="Edm.String" Nullable="false" />
         <Property Name="relatedDetailsUrl" Type="Edm.String" />
-        <Property Name="severity" Type="microsoft.graph.security.hostReputationRuleSeverity" Nullable="false" />
+        <Property Name="severity" Type="self.hostReputationRuleSeverity" Nullable="false" />
       </ComplexType>
       <ComplexType Name="hostSslCertificatePort">
         <Property Name="firstSeenDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="lastSeenDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="port" Type="Edm.Int32" />
       </ComplexType>
+      <ComplexType Name="hrSignalAuditRecord" BaseType="self.auditData" OpenType="true" />
       <ComplexType Name="huntingQueryResults">
-        <Property Name="results" Type="Collection(microsoft.graph.security.huntingRowResult)" />
-        <Property Name="schema" Type="Collection(microsoft.graph.security.singlePropertySchema)" />
+        <Property Name="results" Type="Collection(self.huntingRowResult)" />
+        <Property Name="schema" Type="Collection(self.singlePropertySchema)" />
       </ComplexType>
       <ComplexType Name="huntingRowResult" OpenType="true" />
+      <ComplexType Name="hygieneEventRecord" BaseType="self.auditData" OpenType="true" />
       <ComplexType Name="hyperlink">
         <Property Name="name" Type="Edm.String" Nullable="false" />
         <Property Name="url" Type="Edm.String" Nullable="false" />
       </ComplexType>
+      <ComplexType Name="informationBarrierPolicyApplicationAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="informationWorkerProtectionAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="insiderRiskScopedUserInsightsRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="insiderRiskScopedUsersRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="integratedAppsAppAdminActivityAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="integratedAppsAppSettingsAdminActivityAuditRecord" BaseType="self.auditData" OpenType="true" />
       <ComplexType Name="intelligenceProfileCountryOrRegionOfOrigin">
         <Property Name="code" Type="Edm.String" Nullable="false" />
         <Property Name="label" Type="Edm.String" Nullable="false" />
       </ComplexType>
       <ComplexType Name="invokeActionResult">
         <Property Name="accountId" Type="Edm.String" Nullable="false" />
-        <Property Name="action" Type="microsoft.graph.security.action" Nullable="false" />
+        <Property Name="action" Type="self.action" Nullable="false" />
         <Property Name="correlationId" Type="Edm.String" />
-        <Property Name="identityProvider" Type="microsoft.graph.security.identityProvider" Nullable="false" />
+        <Property Name="identityProvider" Type="self.identityProvider" Nullable="false" />
       </ComplexType>
-      <ComplexType Name="ioTDeviceEvidence" BaseType="microsoft.graph.security.alertEvidence">
+      <ComplexType Name="ioTDeviceEvidence" BaseType="self.alertEvidence">
         <Property Name="deviceId" Type="Edm.String" />
         <Property Name="deviceName" Type="Edm.String" />
         <Property Name="devicePageLink" Type="Edm.String" />
         <Property Name="deviceSubType" Type="Edm.String" />
         <Property Name="deviceType" Type="Edm.String" />
-        <Property Name="importance" Type="microsoft.graph.security.ioTDeviceImportanceType" />
-        <Property Name="ioTHub" Type="microsoft.graph.security.azureResourceEvidence" />
+        <Property Name="importance" Type="self.ioTDeviceImportanceType" />
+        <Property Name="ioTHub" Type="self.azureResourceEvidence" />
         <Property Name="ioTSecurityAgentId" Type="Edm.String" />
-        <Property Name="ipAddress" Type="microsoft.graph.security.ipEvidence" />
+        <Property Name="ipAddress" Type="self.ipEvidence" />
         <Property Name="isAuthorized" Type="Edm.Boolean" />
         <Property Name="isProgramming" Type="Edm.Boolean" />
         <Property Name="isScanner" Type="Edm.Boolean" />
         <Property Name="macAddress" Type="Edm.String" />
         <Property Name="manufacturer" Type="Edm.String" />
         <Property Name="model" Type="Edm.String" />
-        <Property Name="nics" Type="Collection(microsoft.graph.security.nicEvidence)" />
+        <Property Name="nics" Type="Collection(self.nicEvidence)" />
         <Property Name="operatingSystem" Type="Edm.String" />
         <Property Name="owners" Type="Collection(Edm.String)" />
         <Property Name="protocols" Type="Collection(Edm.String)" />
@@ -47998,90 +50045,100 @@
         <Property Name="serialNumber" Type="Edm.String" />
         <Property Name="site" Type="Edm.String" />
         <Property Name="source" Type="Edm.String" />
-        <Property Name="sourceRef" Type="microsoft.graph.security.urlEvidence" />
+        <Property Name="sourceRef" Type="self.urlEvidence" />
         <Property Name="zone" Type="Edm.String" />
       </ComplexType>
-      <ComplexType Name="ipEvidence" BaseType="microsoft.graph.security.alertEvidence">
+      <ComplexType Name="ipEvidence" BaseType="self.alertEvidence">
         <Property Name="countryLetterCode" Type="Edm.String" />
         <Property Name="ipAddress" Type="Edm.String" />
-        <Property Name="location" Type="microsoft.graph.security.geoLocation" />
-        <Property Name="stream" Type="microsoft.graph.security.stream" />
-      </ComplexType>
-      <ComplexType Name="kubernetesClusterEvidence" BaseType="microsoft.graph.security.alertEvidence">
-        <Property Name="cloudResource" Type="microsoft.graph.security.alertEvidence" />
+        <Property Name="location" Type="self.geoLocation" />
+        <Property Name="stream" Type="self.stream" />
+      </ComplexType>
+      <ComplexType Name="irmActivityAuditTrailRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="irmUserDefinedDetectionRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="kaizalaAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="kubernetesClusterEvidence" BaseType="self.alertEvidence">
+        <Property Name="cloudResource" Type="self.alertEvidence" />
         <Property Name="distribution" Type="Edm.String" />
         <Property Name="name" Type="Edm.String" />
-        <Property Name="platform" Type="microsoft.graph.security.kubernetesPlatform" />
+        <Property Name="platform" Type="self.kubernetesPlatform" />
         <Property Name="version" Type="Edm.String" />
       </ComplexType>
-      <ComplexType Name="kubernetesControllerEvidence" BaseType="microsoft.graph.security.alertEvidence">
-        <Property Name="labels" Type="microsoft.graph.security.dictionary" />
+      <ComplexType Name="kubernetesControllerEvidence" BaseType="self.alertEvidence">
+        <Property Name="labels" Type="self.dictionary" />
         <Property Name="name" Type="Edm.String" />
-        <Property Name="namespace" Type="microsoft.graph.security.kubernetesNamespaceEvidence" />
+        <Property Name="namespace" Type="self.kubernetesNamespaceEvidence" />
         <Property Name="type" Type="Edm.String" />
       </ComplexType>
-      <ComplexType Name="kubernetesNamespaceEvidence" BaseType="microsoft.graph.security.alertEvidence">
-        <Property Name="cluster" Type="microsoft.graph.security.kubernetesClusterEvidence" />
-        <Property Name="labels" Type="microsoft.graph.security.dictionary" />
+      <ComplexType Name="kubernetesNamespaceEvidence" BaseType="self.alertEvidence">
+        <Property Name="cluster" Type="self.kubernetesClusterEvidence" />
+        <Property Name="labels" Type="self.dictionary" />
         <Property Name="name" Type="Edm.String" />
       </ComplexType>
-      <ComplexType Name="kubernetesPodEvidence" BaseType="microsoft.graph.security.alertEvidence">
-        <Property Name="containers" Type="Collection(microsoft.graph.security.containerEvidence)" />
-        <Property Name="controller" Type="microsoft.graph.security.kubernetesControllerEvidence" />
-        <Property Name="ephemeralContainers" Type="Collection(microsoft.graph.security.containerEvidence)" />
-        <Property Name="initContainers" Type="Collection(microsoft.graph.security.containerEvidence)" />
-        <Property Name="labels" Type="microsoft.graph.security.dictionary" />
+      <ComplexType Name="kubernetesPodEvidence" BaseType="self.alertEvidence">
+        <Property Name="containers" Type="Collection(self.containerEvidence)" />
+        <Property Name="controller" Type="self.kubernetesControllerEvidence" />
+        <Property Name="ephemeralContainers" Type="Collection(self.containerEvidence)" />
+        <Property Name="initContainers" Type="Collection(self.containerEvidence)" />
+        <Property Name="labels" Type="self.dictionary" />
         <Property Name="name" Type="Edm.String" />
-        <Property Name="namespace" Type="microsoft.graph.security.kubernetesNamespaceEvidence" />
-        <Property Name="podIp" Type="microsoft.graph.security.ipEvidence" />
-        <Property Name="serviceAccount" Type="microsoft.graph.security.kubernetesServiceAccountEvidence" />
+        <Property Name="namespace" Type="self.kubernetesNamespaceEvidence" />
+        <Property Name="podIp" Type="self.ipEvidence" />
+        <Property Name="serviceAccount" Type="self.kubernetesServiceAccountEvidence" />
       </ComplexType>
-      <ComplexType Name="kubernetesSecretEvidence" BaseType="microsoft.graph.security.alertEvidence">
+      <ComplexType Name="kubernetesSecretEvidence" BaseType="self.alertEvidence">
         <Property Name="name" Type="Edm.String" />
-        <Property Name="namespace" Type="microsoft.graph.security.kubernetesNamespaceEvidence" />
+        <Property Name="namespace" Type="self.kubernetesNamespaceEvidence" />
         <Property Name="secretType" Type="Edm.String" />
       </ComplexType>
-      <ComplexType Name="kubernetesServiceAccountEvidence" BaseType="microsoft.graph.security.alertEvidence">
+      <ComplexType Name="kubernetesServiceAccountEvidence" BaseType="self.alertEvidence">
         <Property Name="name" Type="Edm.String" />
-        <Property Name="namespace" Type="microsoft.graph.security.kubernetesNamespaceEvidence" />
+        <Property Name="namespace" Type="self.kubernetesNamespaceEvidence" />
       </ComplexType>
-      <ComplexType Name="kubernetesServiceEvidence" BaseType="microsoft.graph.security.alertEvidence">
-        <Property Name="clusterIP" Type="microsoft.graph.security.ipEvidence" />
-        <Property Name="externalIPs" Type="Collection(microsoft.graph.security.ipEvidence)" />
-        <Property Name="labels" Type="microsoft.graph.security.dictionary" />
+      <ComplexType Name="kubernetesServiceEvidence" BaseType="self.alertEvidence">
+        <Property Name="clusterIP" Type="self.ipEvidence" />
+        <Property Name="externalIPs" Type="Collection(self.ipEvidence)" />
+        <Property Name="labels" Type="self.dictionary" />
         <Property Name="name" Type="Edm.String" />
-        <Property Name="namespace" Type="microsoft.graph.security.kubernetesNamespaceEvidence" />
-        <Property Name="selector" Type="microsoft.graph.security.dictionary" />
-        <Property Name="servicePorts" Type="Collection(microsoft.graph.security.kubernetesServicePort)" />
-        <Property Name="serviceType" Type="microsoft.graph.security.kubernetesServiceType" Nullable="false" />
+        <Property Name="namespace" Type="self.kubernetesNamespaceEvidence" />
+        <Property Name="selector" Type="self.dictionary" />
+        <Property Name="servicePorts" Type="Collection(self.kubernetesServicePort)" />
+        <Property Name="serviceType" Type="self.kubernetesServiceType" Nullable="false" />
       </ComplexType>
       <ComplexType Name="kubernetesServicePort">
         <Property Name="appProtocol" Type="Edm.String" />
         <Property Name="name" Type="Edm.String" />
         <Property Name="nodePort" Type="Edm.Int32" Nullable="false" />
         <Property Name="port" Type="Edm.Int32" Nullable="false" />
-        <Property Name="protocol" Type="microsoft.graph.security.containerPortProtocol" />
+        <Property Name="protocol" Type="self.containerPortProtocol" />
         <Property Name="targetPort" Type="Edm.String" />
       </ComplexType>
+      <ComplexType Name="labelAnalyticsAggregateAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="labelContentExplorerAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="largeContentMetadataAuditRecord" BaseType="self.auditData" OpenType="true" />
       <ComplexType Name="loggedOnUser">
         <Property Name="accountName" Type="Edm.String" />
         <Property Name="domainName" Type="Edm.String" />
       </ComplexType>
-      <ComplexType Name="mailboxConfigurationEvidence" BaseType="microsoft.graph.security.alertEvidence">
+      <ComplexType Name="m365ComplianceConnectorAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="m365daadAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="m365odspAssetMetadataRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="m365SearchSectionsRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="mailboxConfigurationEvidence" BaseType="self.alertEvidence">
         <Property Name="configurationId" Type="Edm.String" />
-        <Property Name="configurationType" Type="microsoft.graph.security.mailboxConfigurationType" />
+        <Property Name="configurationType" Type="self.mailboxConfigurationType" />
         <Property Name="displayName" Type="Edm.String" />
         <Property Name="externalDirectoryObjectId" Type="Edm.Guid" />
         <Property Name="mailboxPrimaryAddress" Type="Edm.String" />
         <Property Name="upn" Type="Edm.String" />
       </ComplexType>
-      <ComplexType Name="mailboxEvidence" BaseType="microsoft.graph.security.alertEvidence">
+      <ComplexType Name="mailboxEvidence" BaseType="self.alertEvidence">
         <Property Name="displayName" Type="Edm.String" />
         <Property Name="primaryAddress" Type="Edm.String" />
         <Property Name="upn" Type="Edm.String" />
-        <Property Name="userAccount" Type="microsoft.graph.security.userAccount" />
+        <Property Name="userAccount" Type="self.userAccount" />
       </ComplexType>
-      <ComplexType Name="mailClusterEvidence" BaseType="microsoft.graph.security.alertEvidence">
+      <ComplexType Name="mailClusterEvidence" BaseType="self.alertEvidence">
         <Property Name="clusterBy" Type="Edm.String" />
         <Property Name="clusterByValue" Type="Edm.String" />
         <Property Name="emailCount" Type="Edm.Int64" />
@@ -48089,28 +50146,94 @@
         <Property Name="query" Type="Edm.String" />
         <Property Name="urn" Type="Edm.String" />
       </ComplexType>
-      <ComplexType Name="malwareEvidence" BaseType="microsoft.graph.security.alertEvidence">
+      <ComplexType Name="mailSubmissionData" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="malwareEvidence" BaseType="self.alertEvidence">
         <Property Name="category" Type="Edm.String" />
-        <Property Name="files" Type="Collection(microsoft.graph.security.fileEvidence)" />
+        <Property Name="files" Type="Collection(self.fileEvidence)" />
         <Property Name="name" Type="Edm.String" />
-        <Property Name="processes" Type="Collection(microsoft.graph.security.processEvidence)" />
-      </ComplexType>
+        <Property Name="processes" Type="Collection(self.processEvidence)" />
+      </ComplexType>
+      <ComplexType Name="managedServicesAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="managedTenantsAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="mapgAlertsAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="mapgOnboardAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="mapgPolicyAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="mapgRemediationAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="mcasAlertsAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="mdaAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="mdaDataSecuritySignalRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="mDASHAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="mdatpAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="mdcEventsRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="mdiAuditRecord" BaseType="self.auditData" OpenType="true" />
       <ComplexType Name="mergeResponse">
         <Property Name="targetIncidentId" Type="Edm.String" Nullable="false" />
       </ComplexType>
-      <ComplexType Name="networkConnectionEvidence" BaseType="microsoft.graph.security.alertEvidence">
-        <Property Name="destinationAddress" Type="microsoft.graph.security.ipEvidence" />
+      <ComplexType Name="meshWorldsAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="microsoft365BackupBackupItemAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="microsoft365BackupBackupPolicyAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="microsoft365BackupGranularBrowseTaskAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="microsoft365BackupRestoreItemAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="microsoft365BackupRestoreTaskAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="microsoft365CopilotScheduledPromptAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="microsoftDefenderExpertsXDRAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="microsoftFlowAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="microsoftFormsAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="microsoftGraphDataConnectConsent" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="microsoftGraphDataConnectOperation" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="microsoftPurviewDataCatalogOperationRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="microsoftPurviewDataMapOperationRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="microsoftPurviewMetadataPolicyOperationRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="microsoftPurviewPolicyOperationRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="microsoftPurviewPrivacyAuditEvent" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="microsoftPurviewUnifiedCatalogOperationRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="microsoftStreamAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="microsoftTeamsAdminAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="microsoftTeamsAnalyticsAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="microsoftTeamsAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="microsoftTeamsDeviceAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="microsoftTeamsRetentionLabelActionAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="microsoftTeamsSensitivityLabelActionAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="microsoftTeamsShiftsAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="microsoftTeamsUserConcernAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="mipAutoLabelExchangeItemAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="mipAutoLabelProgressFeedbackAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="mipAutoLabelSharePointItemAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="mipAutoLabelSharePointPolicyLocationAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="mipAutoLabelSimulationSharePointCompletionRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="mipAutoLabelSimulationSharePointProgressRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="mipAutoLabelSimulationStatisticsRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="mipExactDataMatchAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="mipLabelAnalyticsAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="mipLabelAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="mosAgentInfoRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="mosAgentInfoRecordV2" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="ms365dCustomDetectionAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="ms365dIncidentAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="ms365dSuppressionRuleAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="msdeCustomCollectionAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="msdeGeneralSettingsAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="msdeIndicatorsSettingsAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="msdeResponseActionsAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="msdeRolesSettingsAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="mspVectorSearchContentMetadataAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="msticNationStateNotificationRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="multiStageDispositionAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="myAnalyticsSettingsAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="networkConnectionEvidence" BaseType="self.alertEvidence">
+        <Property Name="destinationAddress" Type="self.ipEvidence" />
         <Property Name="destinationPort" Type="Edm.Int32" />
-        <Property Name="protocol" Type="microsoft.graph.security.protocolType" />
-        <Property Name="sourceAddress" Type="microsoft.graph.security.ipEvidence" />
+        <Property Name="protocol" Type="self.protocolType" />
+        <Property Name="sourceAddress" Type="self.ipEvidence" />
         <Property Name="sourcePort" Type="Edm.Int32" />
       </ComplexType>
-      <ComplexType Name="nicEvidence" BaseType="microsoft.graph.security.alertEvidence">
-        <Property Name="ipAddress" Type="microsoft.graph.security.ipEvidence" />
+      <ComplexType Name="nicEvidence" BaseType="self.alertEvidence">
+        <Property Name="ipAddress" Type="self.ipEvidence" />
         <Property Name="macAddress" Type="Edm.String" />
         <Property Name="vlans" Type="Collection(Edm.String)" />
       </ComplexType>
-      <ComplexType Name="oauthApplicationEvidence" BaseType="microsoft.graph.security.alertEvidence">
+      <ComplexType Name="noisyAlertPolicyAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="oauthApplicationEvidence" BaseType="self.alertEvidence">
         <Property Name="appId" Type="Edm.String" />
         <Property Name="displayName" Type="Edm.String" />
         <Property Name="objectId" Type="Edm.String" />
@@ -48121,29 +50244,97 @@
         <Property Name="maxImageSize" Type="Edm.Int32" />
         <Property Name="timeout" Type="Edm.Duration" />
       </ComplexType>
-      <ComplexType Name="processEvidence" BaseType="microsoft.graph.security.alertEvidence">
-        <Property Name="detectionStatus" Type="microsoft.graph.security.detectionStatus" />
-        <Property Name="imageFile" Type="microsoft.graph.security.fileDetails" />
+      <ComplexType Name="officeNativeAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="omePortalAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="onDemandSharePointClassificationAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="oneDriveAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="onPremisesFileShareScannerDLPAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="onPremisesSharePointScannerDLPAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="organizationalDataInM365AuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="outlookCopilotAutomationAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="owaGetAccessTokenForResourceAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="p4aiAssessmentCategoryRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="p4aiAssessmentFabricScannerRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="p4aiAssessmentLocationResultRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="p4aiAssessmentRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="p4AIRiskScoreRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="peopleAdminSettingsAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="physicalBadgingSignalAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="placesDirectoryAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="plannerChatMessageAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="plannerChatMessageListAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="plannerCopyPlanAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="plannerGoalAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="plannerGoalListAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="plannerPlanAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="plannerPlanListAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="plannerPlanSensitivityLabelAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="plannerRosterAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="plannerRosterSensitivityLabelAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="plannerTaskAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="plannerTaskListAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="plannerTenantSettingsAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="policyConfigChangeAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="powerAppsAuditAppRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="powerAppsAuditPlanRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="powerAppsAuditResourceRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="powerBIAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="powerBIDlpAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="powerPagesSiteAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="powerPlatformAdminDlpAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="powerPlatformAdminEnvironmentAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="powerPlatformAdministratorActivityRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="powerPlatformLockboxResourceAccessRequestAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="powerPlatformLockboxResourceCommandAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="powerPlatformServiceActivityAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="powerPlatformTenantIsolationRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="privacyDataMatchAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="privacyDataMinimizationRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="privacyDigestEmailRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="privacyOpenAccessAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="privacyPortalAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="privacyRemediationActionRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="privacyRemediationRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="privaPrivacyAssessmentOperationRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="privaPrivacyConsentOperationRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="processEvidence" BaseType="self.alertEvidence">
+        <Property Name="detectionStatus" Type="self.detectionStatus" />
+        <Property Name="imageFile" Type="self.fileDetails" />
         <Property Name="mdeDeviceId" Type="Edm.String" />
         <Property Name="parentProcessCreationDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="parentProcessId" Type="Edm.Int64" />
-        <Property Name="parentProcessImageFile" Type="microsoft.graph.security.fileDetails" />
+        <Property Name="parentProcessImageFile" Type="self.fileDetails" />
         <Property Name="processCommandLine" Type="Edm.String" />
         <Property Name="processCreationDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="processId" Type="Edm.Int64" />
-        <Property Name="userAccount" Type="microsoft.graph.security.userAccount" />
-      </ComplexType>
+        <Property Name="userAccount" Type="self.userAccount" />
+      </ComplexType>
+      <ComplexType Name="projectAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="projectForTheWebAssignedToMeSettingsAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="projectForTheWebProjectAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="projectForTheWebProjectSettingsAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="projectForTheWebRoadmapAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="projectForTheWebRoadmapItemAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="projectForTheWebRoadmapSettingsAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="projectForTheWebTaskAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="publicFolderAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="purviewInsiderRiskAlertsRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="purviewInsiderRiskCasesRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="purviewMCRecommendationRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="purviewPostureAgentAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="quarantineAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="recordsManagementAuditRecord" BaseType="self.auditData" OpenType="true" />
       <ComplexType Name="redundancyDetectionSettings">
         <Property Name="isEnabled" Type="Edm.Boolean" />
         <Property Name="maxWords" Type="Edm.Int32" />
         <Property Name="minWords" Type="Edm.Int32" />
         <Property Name="similarityThreshold" Type="Edm.Int32" />
       </ComplexType>
-      <ComplexType Name="registryKeyEvidence" BaseType="microsoft.graph.security.alertEvidence">
+      <ComplexType Name="registryKeyEvidence" BaseType="self.alertEvidence">
         <Property Name="registryHive" Type="Edm.String" />
         <Property Name="registryKey" Type="Edm.String" />
       </ComplexType>
-      <ComplexType Name="registryValueEvidence" BaseType="microsoft.graph.security.alertEvidence">
+      <ComplexType Name="registryValueEvidence" BaseType="self.alertEvidence">
         <Property Name="mdeDeviceId" Type="Edm.String" />
         <Property Name="registryHive" Type="Edm.String" />
         <Property Name="registryKey" Type="Edm.String" />
@@ -48156,22 +50347,27 @@
         <Property Name="fileName" Type="Edm.String" />
         <Property Name="size" Type="Edm.Int64" />
       </ComplexType>
+      <ComplexType Name="reportSubmission" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="reportSubmissionResultDetail" BaseType="self.auditData" OpenType="true" />
       <ComplexType Name="resourceAccessEvent">
         <Property Name="accessDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="accountId" Type="Edm.String" />
         <Property Name="ipAddress" Type="Edm.String" />
         <Property Name="resourceIdentifier" Type="Edm.String" />
       </ComplexType>
+      <ComplexType Name="restrictedModeAuditRecord" BaseType="self.auditData" OpenType="true" />
       <ComplexType Name="retentionDuration" Abstract="true" />
-      <ComplexType Name="retentionDurationForever" BaseType="microsoft.graph.security.retentionDuration" />
-      <ComplexType Name="retentionDurationInDays" BaseType="microsoft.graph.security.retentionDuration">
+      <ComplexType Name="retentionDurationForever" BaseType="self.retentionDuration" />
+      <ComplexType Name="retentionDurationInDays" BaseType="self.retentionDuration">
         <Property Name="days" Type="Edm.Int32" />
       </ComplexType>
       <ComplexType Name="retentionEventStatus">
         <Property Name="error" Type="graph.publicError" />
-        <Property Name="status" Type="microsoft.graph.security.eventStatusType" />
+        <Property Name="status" Type="self.eventStatusType" />
       </ComplexType>
-      <ComplexType Name="sasTokenEvidence" BaseType="microsoft.graph.security.alertEvidence">
+      <ComplexType Name="retentionPolicyAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="rtiOperationsAgentAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="sasTokenEvidence" BaseType="self.alertEvidence">
         <Property Name="allowedIpAddresses" Type="Edm.String" />
         <Property Name="allowedResourceTypes" Type="Collection(Edm.String)" />
         <Property Name="allowedServices" Type="Collection(Edm.String)" />
@@ -48181,9 +50377,22 @@
         <Property Name="signatureHash" Type="Edm.String" />
         <Property Name="signedWith" Type="Edm.String" />
         <Property Name="startDateTime" Type="Edm.DateTimeOffset" />
-        <Property Name="storageResource" Type="microsoft.graph.security.azureResourceEvidence" />
-      </ComplexType>
-      <ComplexType Name="securityGroupEvidence" BaseType="microsoft.graph.security.alertEvidence">
+        <Property Name="storageResource" Type="self.azureResourceEvidence" />
+      </ComplexType>
+      <ComplexType Name="sbpConfigurationEventRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="sbpUsageEventRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="scoreEvidence" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="scorePlatformGenericAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="scriptRunAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="searchAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="securityComplianceAlertRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="securityComplianceCenterEOPCmdletAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="securityComplianceInsightsAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="securityComplianceRBACAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="securityComplianceUserChangeAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="securityCopilotIdentityManagementAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="securityDevelopmentLifecycleAILogAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="securityGroupEvidence" BaseType="self.alertEvidence">
         <Property Name="activeDirectoryObjectGuid" Type="Edm.Guid" />
         <Property Name="displayName" Type="Edm.String" />
         <Property Name="distinguishedName" Type="Edm.String" />
@@ -48191,6 +50400,10 @@
         <Property Name="securityGroupId" Type="Edm.String" />
         <Property Name="sid" Type="Edm.String" />
       </ComplexType>
+      <ComplexType Name="sensitiveInfoRemediationAgentDataRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="sensitivityLabelActionAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="sensitivityLabeledFileActionAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="sensitivityLabelPolicyMatchAuditRecord" BaseType="self.auditData" OpenType="true" />
       <ComplexType Name="sensorDeploymentPackage">
         <Property Name="downloadUrl" Type="Edm.String" Nullable="false" />
         <Property Name="version" Type="Edm.String" Nullable="false" />
@@ -48199,20 +50412,49 @@
         <Property Name="description" Type="Edm.String" Nullable="false" />
         <Property Name="domainControllerDnsNames" Type="Collection(Edm.String)" />
         <Property Name="isDelayedDeploymentEnabled" Type="Edm.Boolean" />
-        <NavigationProperty Name="networkAdapters" Type="Collection(microsoft.graph.security.networkAdapter)" ContainsTarget="true" />
-      </ComplexType>
-      <ComplexType Name="servicePrincipalEvidence" BaseType="microsoft.graph.security.alertEvidence">
+        <NavigationProperty Name="networkAdapters" Type="Collection(self.networkAdapter)" ContainsTarget="true" />
+      </ComplexType>
+      <ComplexType Name="sentinelAIToolAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="sentinelGraphAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="sentinelJobAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="sentinelKQLOnLakeAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="sentinelLakeDataOnboardingAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="sentinelLakeEncryptionAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="sentinelLakeOnboardingAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="sentinelNotebookOnLakeAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="sentinelPackageAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="servicePrincipalEvidence" BaseType="self.alertEvidence">
         <Property Name="appId" Type="Edm.String" />
         <Property Name="appOwnerTenantId" Type="Edm.String" />
         <Property Name="servicePrincipalName" Type="Edm.String" />
         <Property Name="servicePrincipalObjectId" Type="Edm.String" />
-        <Property Name="servicePrincipalType" Type="microsoft.graph.security.servicePrincipalType" />
+        <Property Name="servicePrincipalType" Type="self.servicePrincipalType" />
         <Property Name="tenantId" Type="Edm.String" />
       </ComplexType>
+      <ComplexType Name="sharePointAppPermissionOperationAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="sharePointAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="sharePointCommentOperationAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="sharePointContentSecurityPolicyAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="sharePointContentTypeOperationAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="sharePointESignatureAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="sharePointFieldOperationAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="sharePointFileOperationAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="sharePointListItemOperationAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="sharePointListOperationAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="sharePointSharingOperationAuditRecord" BaseType="self.auditData" OpenType="true" />
       <ComplexType Name="singlePropertySchema">
         <Property Name="name" Type="Edm.String" />
         <Property Name="type" Type="Edm.String" />
       </ComplexType>
+      <ComplexType Name="skypeForBusinessCmdletsAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="skypeForBusinessPSTNUsageAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="skypeForBusinessUsersBlockedAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="sonarDetonationContentMetadata" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="sonarDetonationEntityAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="sonarFileDetonationEntityAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="sonarSubmissionEntityAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="sonarUrlDetonationEntityAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="sparkCoreCustomLivePoolRecord" BaseType="self.auditData" OpenType="true" />
       <ComplexType Name="sslCertificateEntity">
         <Property Name="address" Type="graph.physicalAddress" />
         <Property Name="alternateNames" Type="Collection(Edm.String)" />
@@ -48228,7 +50470,8 @@
         <Property Name="name" Type="Edm.String" />
       </ComplexType>
       <ComplexType Name="stringValueDictionary" OpenType="true" />
-      <ComplexType Name="submissionMailEvidence" BaseType="microsoft.graph.security.alertEvidence">
+      <ComplexType Name="submissionEntityAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="submissionMailEvidence" BaseType="self.alertEvidence">
         <Property Name="networkMessageId" Type="Edm.String" />
         <Property Name="recipient" Type="Edm.String" />
         <Property Name="reportType" Type="Edm.String" />
@@ -48239,17 +50482,25 @@
         <Property Name="submissionId" Type="Edm.String" />
         <Property Name="submitter" Type="Edm.String" />
       </ComplexType>
-      <ComplexType Name="teamsMessageEvidence" BaseType="microsoft.graph.security.alertEvidence">
+      <ComplexType Name="supervisoryReviewDayXInsightsAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="syntheticProbeAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="teamCopilotInteractionAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="teamsEasyApprovalsAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="teamsEvalDataHubAdminOperationAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="teamsEvalDataHubDataAccessAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="teamsEvalDataHubPermissionChangeAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="teamsHealthcareAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="teamsMessageEvidence" BaseType="self.alertEvidence">
         <Property Name="campaignId" Type="Edm.String" />
         <Property Name="channelId" Type="Edm.String" />
-        <Property Name="deliveryAction" Type="microsoft.graph.security.teamsMessageDeliveryAction" />
-        <Property Name="deliveryLocation" Type="microsoft.graph.security.teamsDeliveryLocation" />
-        <Property Name="files" Type="Collection(microsoft.graph.security.fileEvidence)" />
+        <Property Name="deliveryAction" Type="self.teamsMessageDeliveryAction" />
+        <Property Name="deliveryLocation" Type="self.teamsDeliveryLocation" />
+        <Property Name="files" Type="Collection(self.fileEvidence)" />
         <Property Name="groupId" Type="Edm.String" />
         <Property Name="isExternal" Type="Edm.Boolean" />
         <Property Name="isOwned" Type="Edm.Boolean" />
         <Property Name="lastModifiedDateTime" Type="Edm.DateTimeOffset" />
-        <Property Name="messageDirection" Type="microsoft.graph.security.antispamTeamsDirection" />
+        <Property Name="messageDirection" Type="self.antispamTeamsDirection" />
         <Property Name="messageId" Type="Edm.String" />
         <Property Name="owningTenantId" Type="Edm.Guid" />
         <Property Name="parentMessageId" Type="Edm.String" />
@@ -48263,28 +50514,47 @@
         <Property Name="suspiciousRecipients" Type="Collection(Edm.String)" />
         <Property Name="threadId" Type="Edm.String" />
         <Property Name="threadType" Type="Edm.String" />
-        <Property Name="urls" Type="Collection(microsoft.graph.security.urlEvidence)" />
+        <Property Name="urls" Type="Collection(self.urlEvidence)" />
       </ComplexType>
+      <ComplexType Name="teamsUpdatesAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="tenantAllowBlockListAuditRecord" BaseType="self.auditData" OpenType="true" />
       <ComplexType Name="threatDetectionDetail">
         <Property Name="confidenceLevel" Type="Edm.String" />
         <Property Name="priorityAccountProtection" Type="Edm.String" />
         <Property Name="threats" Type="Edm.String" />
       </ComplexType>
+      <ComplexType Name="threatFinderAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="threatIntelligenceAtpContentData" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="threatIntelligenceExportAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="threatIntelligenceMailData" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="threatIntelligenceObjectAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="threatIntelligenceUrlClickData" BaseType="self.auditData" OpenType="true" />
       <ComplexType Name="timelineEvent">
         <Property Name="eventDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="eventDetails" Type="Edm.String" />
         <Property Name="eventResult" Type="Edm.String" />
-        <Property Name="eventSource" Type="microsoft.graph.security.eventSource" />
+        <Property Name="eventSource" Type="self.eventSource" />
         <Property Name="eventThreats" Type="Collection(Edm.String)" />
-        <Property Name="eventType" Type="microsoft.graph.security.timelineEventType" />
+        <Property Name="eventType" Type="self.timelineEventType" />
       </ComplexType>
+      <ComplexType Name="todoAuditRecord" BaseType="self.auditData" OpenType="true" />
       <ComplexType Name="topicModelingSettings">
         <Property Name="dynamicallyAdjustTopicCount" Type="Edm.Boolean" />
         <Property Name="ignoreNumbers" Type="Edm.Boolean" />
         <Property Name="isEnabled" Type="Edm.Boolean" />
         <Property Name="topicCount" Type="Edm.Int32" />
       </ComplexType>
-      <ComplexType Name="urlEvidence" BaseType="microsoft.graph.security.alertEvidence">
+      <ComplexType Name="trainableClassifierAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="uamOperationAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="unifiedGroupAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="unifiedSimulationMatchedItemAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="unifiedSimulationSummaryAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="universalPrintManagementAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="universalPrintPrintJobAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="urbacAssignmentAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="urbacEnableStateAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="urbacRoleAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="urlEvidence" BaseType="self.alertEvidence">
         <Property Name="url" Type="Edm.String" />
       </ComplexType>
       <ComplexType Name="userAccount">
@@ -48293,21 +50563,52 @@
         <Property Name="azureAdUserId" Type="Edm.String" />
         <Property Name="displayName" Type="Edm.String" />
         <Property Name="domainName" Type="Edm.String" />
-        <Property Name="resourceAccessEvents" Type="Collection(microsoft.graph.security.resourceAccessEvent)" />
+        <Property Name="resourceAccessEvents" Type="Collection(self.resourceAccessEvent)" />
         <Property Name="tenantId" Type="Edm.String" />
         <Property Name="userPrincipalName" Type="Edm.String" />
         <Property Name="userSid" Type="Edm.String" />
       </ComplexType>
-      <ComplexType Name="userEvidence" BaseType="microsoft.graph.security.alertEvidence">
-        <Property Name="stream" Type="microsoft.graph.security.stream" />
-        <Property Name="userAccount" Type="microsoft.graph.security.userAccount" />
-      </ComplexType>
+      <ComplexType Name="userEvidence" BaseType="self.alertEvidence">
+        <Property Name="stream" Type="self.stream" />
+        <Property Name="userAccount" Type="self.userAccount" />
+      </ComplexType>
+      <ComplexType Name="userTrainingAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="usxWorkspaceOnboardingAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="vfamCreatePolicyAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="vfamDeletePolicyAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="vfamUpdatePolicyAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="vivaAmplifyAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="vivaEngageEventsAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="vivaEngageNetworkAssociationAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="vivaEngageSegmentAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="vivaGlintAdvancedConfigurationAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="vivaGlintAgenticCampaignAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="vivaGlintFeedbackProgramAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="vivaGlintOrganizationalDataAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="vivaGlintPulseProgramAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="vivaGlintPulseProgramRespondentRateAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="vivaGlintQuestionAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="vivaGlintRoleAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="vivaGlintRubiconAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="vivaGlintSupportAccessAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="vivaGlintSystemAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="vivaGlintUserAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="vivaGlintUserGroupAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="vivaGoalsAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="vivaLearningAdminAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="vivaLearningAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="vivaPulseAdminAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="vivaPulseOrganizerAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="vivaPulseReportAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="vivaPulseResponseAuditRecord" BaseType="self.auditData" OpenType="true" />
       <ComplexType Name="vmMetadata">
-        <Property Name="cloudProvider" Type="microsoft.graph.security.vmCloudProvider" Nullable="false" />
+        <Property Name="cloudProvider" Type="self.vmCloudProvider" Nullable="false" />
         <Property Name="resourceId" Type="Edm.String" />
         <Property Name="subscriptionId" Type="Edm.String" />
         <Property Name="vmId" Type="Edm.String" />
       </ComplexType>
+      <ComplexType Name="wdatpAlertsAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="webContentFilteringAuditRecord" BaseType="self.auditData" OpenType="true" />
       <ComplexType Name="whoisContact">
         <Property Name="address" Type="graph.physicalAddress" />
         <Property Name="email" Type="Edm.String" />
@@ -48319,29 +50620,33 @@
       <ComplexType Name="whoisNameserver">
         <Property Name="firstSeenDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="lastSeenDateTime" Type="Edm.DateTimeOffset" />
-        <NavigationProperty Name="host" Type="microsoft.graph.security.host" Nullable="false" />
+        <NavigationProperty Name="host" Type="self.host" Nullable="false" />
       </ComplexType>
+      <ComplexType Name="windows365CustomerLockboxAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="workplaceAnalyticsAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="yammerAuditRecord" BaseType="self.auditData" OpenType="true" />
+      <ComplexType Name="yammerUserHidingAuditRecord" BaseType="self.auditData" OpenType="true" />
       <EntityType Name="alert" BaseType="graph.entity">
         <Property Name="actorDisplayName" Type="Edm.String" />
-        <Property Name="additionalData" Type="microsoft.graph.security.dictionary" />
+        <Property Name="additionalData" Type="self.dictionary" />
         <Property Name="alertPolicyId" Type="Edm.String" />
         <Property Name="alertWebUrl" Type="Edm.String" />
         <Property Name="assignedTo" Type="Edm.String" />
         <Property Name="categories" Type="Collection(Edm.String)" />
         <Property Name="category" Type="Edm.String" />
-        <Property Name="classification" Type="microsoft.graph.security.alertClassification" />
-        <Property Name="comments" Type="Collection(microsoft.graph.security.alertComment)" />
+        <Property Name="classification" Type="self.alertClassification" />
+        <Property Name="comments" Type="Collection(self.alertComment)" />
         <Property Name="createdDateTime" Type="Edm.DateTimeOffset" />
-        <Property Name="customDetails" Type="microsoft.graph.security.dictionary" />
+        <Property Name="customDetails" Type="self.dictionary" />
         <Property Name="description" Type="Edm.String" />
-        <Property Name="detectionSource" Type="microsoft.graph.security.detectionSource" />
+        <Property Name="detectionSource" Type="self.detectionSource" />
         <Property Name="detectorId" Type="Edm.String" />
-        <Property Name="determination" Type="microsoft.graph.security.alertDetermination" />
-        <Property Name="evidence" Type="Collection(microsoft.graph.security.alertEvidence)" />
+        <Property Name="determination" Type="self.alertDetermination" />
+        <Property Name="evidence" Type="Collection(self.alertEvidence)" />
         <Property Name="firstActivityDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="incidentId" Type="Edm.String" />
         <Property Name="incidentWebUrl" Type="Edm.String" />
-        <Property Name="investigationState" Type="microsoft.graph.security.investigationState" />
+        <Property Name="investigationState" Type="self.investigationState" />
         <Property Name="lastActivityDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="lastUpdateDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="mitreTechniques" Type="Collection(Edm.String)" />
@@ -48349,9 +50654,9 @@
         <Property Name="providerAlertId" Type="Edm.String" />
         <Property Name="recommendedActions" Type="Edm.String" />
         <Property Name="resolvedDateTime" Type="Edm.DateTimeOffset" />
-        <Property Name="serviceSource" Type="microsoft.graph.security.serviceSource" Nullable="false" />
-        <Property Name="severity" Type="microsoft.graph.security.alertSeverity" Nullable="false" />
-        <Property Name="status" Type="microsoft.graph.security.alertStatus" Nullable="false" />
+        <Property Name="serviceSource" Type="self.serviceSource" Nullable="false" />
+        <Property Name="severity" Type="self.alertSeverity" Nullable="false" />
+        <Property Name="status" Type="self.alertStatus" Nullable="false" />
         <Property Name="systemTags" Type="Collection(Edm.String)" />
         <Property Name="tenantId" Type="Edm.String" />
         <Property Name="threatDisplayName" Type="Edm.String" />
@@ -48360,57 +50665,89 @@
       </EntityType>
       <EntityType Name="analyzedEmail" BaseType="graph.entity">
         <Property Name="alertIds" Type="Collection(Edm.String)" />
-        <Property Name="attachments" Type="Collection(microsoft.graph.security.analyzedEmailAttachment)" />
-        <Property Name="authenticationDetails" Type="microsoft.graph.security.analyzedEmailAuthenticationDetail" />
+        <Property Name="attachments" Type="Collection(self.analyzedEmailAttachment)" />
+        <Property Name="authenticationDetails" Type="self.analyzedEmailAuthenticationDetail" />
         <Property Name="bulkComplaintLevel" Type="Edm.String" />
         <Property Name="clientType" Type="Edm.String" />
         <Property Name="contexts" Type="Collection(Edm.String)" />
         <Property Name="detectionMethods" Type="Collection(Edm.String)" />
-        <Property Name="directionality" Type="microsoft.graph.security.antispamDirectionality" />
+        <Property Name="directionality" Type="self.antispamDirectionality" />
         <Property Name="distributionList" Type="Edm.String" />
-        <Property Name="dlpRules" Type="Collection(microsoft.graph.security.analyzedEmailDlpRuleInfo)" />
+        <Property Name="dlpRules" Type="Collection(self.analyzedEmailDlpRuleInfo)" />
         <Property Name="emailClusterId" Type="Edm.String" />
-        <Property Name="exchangeTransportRules" Type="Collection(microsoft.graph.security.analyzedEmailExchangeTransportRuleInfo)" />
+        <Property Name="exchangeTransportRules" Type="Collection(self.analyzedEmailExchangeTransportRuleInfo)" />
         <Property Name="forwardingDetail" Type="Edm.String" />
         <Property Name="inboundConnectorFormattedName" Type="Edm.String" />
         <Property Name="internetMessageId" Type="Edm.String" />
         <Property Name="language" Type="Edm.String" />
-        <Property Name="latestDelivery" Type="microsoft.graph.security.analyzedEmailDeliveryDetail" />
+        <Property Name="latestDelivery" Type="self.analyzedEmailDeliveryDetail" />
         <Property Name="loggedDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="networkMessageId" Type="Edm.String" />
-        <Property Name="originalDelivery" Type="microsoft.graph.security.analyzedEmailDeliveryDetail" />
+        <Property Name="originalDelivery" Type="self.analyzedEmailDeliveryDetail" />
         <Property Name="overrideSources" Type="Collection(Edm.String)" />
         <Property Name="phishConfidenceLevel" Type="Edm.String" />
         <Property Name="policy" Type="Edm.String" />
         <Property Name="policyAction" Type="Edm.String" />
         <Property Name="policyType" Type="Edm.String" />
         <Property Name="primaryOverrideSource" Type="Edm.String" />
-        <Property Name="recipientDetail" Type="microsoft.graph.security.analyzedEmailRecipientDetail" />
+        <Property Name="recipientDetail" Type="self.analyzedEmailRecipientDetail" />
         <Property Name="recipientEmailAddress" Type="Edm.String" />
         <Property Name="returnPath" Type="Edm.String" />
-        <Property Name="senderDetail" Type="microsoft.graph.security.analyzedEmailSenderDetail" />
+        <Property Name="senderDetail" Type="self.analyzedEmailSenderDetail" />
         <Property Name="sizeInBytes" Type="Edm.Int32" />
         <Property Name="spamConfidenceLevel" Type="Edm.String" />
         <Property Name="subject" Type="Edm.String" />
-        <Property Name="threatDetectionDetails" Type="Collection(microsoft.graph.security.threatDetectionDetail)" />
-        <Property Name="threatTypes" Type="Collection(microsoft.graph.security.threatType)" />
-        <Property Name="timelineEvents" Type="Collection(microsoft.graph.security.timelineEvent)" />
-        <Property Name="urls" Type="Collection(microsoft.graph.security.analyzedEmailUrl)" />
+        <Property Name="threatDetectionDetails" Type="Collection(self.threatDetectionDetail)" />
+        <Property Name="threatTypes" Type="Collection(self.threatType)" />
+        <Property Name="timelineEvents" Type="Collection(self.timelineEvent)" />
+        <Property Name="urls" Type="Collection(self.analyzedEmailUrl)" />
       </EntityType>
       <EntityType Name="article" BaseType="graph.entity">
-        <Property Name="body" Type="microsoft.graph.security.formattedContent" Nullable="false" />
+        <Property Name="body" Type="self.formattedContent" Nullable="false" />
         <Property Name="createdDateTime" Type="Edm.DateTimeOffset" Nullable="false" />
         <Property Name="imageUrl" Type="Edm.String" />
         <Property Name="isFeatured" Type="Edm.Boolean" Nullable="false" />
         <Property Name="lastUpdatedDateTime" Type="Edm.DateTimeOffset" Nullable="false" />
-        <Property Name="summary" Type="microsoft.graph.security.formattedContent" Nullable="false" />
+        <Property Name="summary" Type="self.formattedContent" Nullable="false" />
         <Property Name="tags" Type="Collection(Edm.String)" />
         <Property Name="title" Type="Edm.String" Nullable="false" />
-        <NavigationProperty Name="indicators" Type="Collection(microsoft.graph.security.articleIndicator)" />
+        <NavigationProperty Name="indicators" Type="Collection(self.articleIndicator)" />
       </EntityType>
-      <EntityType Name="articleIndicator" BaseType="microsoft.graph.security.indicator" />
+      <EntityType Name="articleIndicator" BaseType="self.indicator" />
       <EntityType Name="artifact" BaseType="graph.entity" Abstract="true" />
-      <EntityType Name="authorityTemplate" BaseType="microsoft.graph.security.filePlanDescriptorTemplate" />
+      <EntityType Name="auditCoreRoot" BaseType="graph.entity">
+        <NavigationProperty Name="queries" Type="Collection(self.auditLogQuery)" ContainsTarget="true" />
+      </EntityType>
+      <EntityType Name="auditLogQuery" BaseType="graph.entity">
+        <Property Name="administrativeUnitIdFilters" Type="Collection(Edm.String)" />
+        <Property Name="displayName" Type="Edm.String" />
+        <Property Name="filterEndDateTime" Type="Edm.DateTimeOffset" />
+        <Property Name="filterStartDateTime" Type="Edm.DateTimeOffset" />
+        <Property Name="ipAddressFilters" Type="Collection(Edm.String)" />
+        <Property Name="keywordFilter" Type="Edm.String" />
+        <Property Name="objectIdFilters" Type="Collection(Edm.String)" />
+        <Property Name="operationFilters" Type="Collection(Edm.String)" />
+        <Property Name="recordTypeFilters" Type="Collection(self.auditLogRecordType)" />
+        <Property Name="serviceFilters" Type="Collection(Edm.String)" />
+        <Property Name="status" Type="self.auditLogQueryStatus" />
+        <Property Name="userPrincipalNameFilters" Type="Collection(Edm.String)" />
+        <NavigationProperty Name="records" Type="Collection(self.auditLogRecord)" ContainsTarget="true" />
+      </EntityType>
+      <EntityType Name="auditLogRecord" BaseType="graph.entity">
+        <Property Name="administrativeUnits" Type="Collection(Edm.String)" />
+        <Property Name="auditData" Type="self.auditData" />
+        <Property Name="auditLogRecordType" Type="self.auditLogRecordType" />
+        <Property Name="clientIp" Type="Edm.String" />
+        <Property Name="createdDateTime" Type="Edm.DateTimeOffset" />
+        <Property Name="objectId" Type="Edm.String" />
+        <Property Name="operation" Type="Edm.String" />
+        <Property Name="organizationId" Type="Edm.String" />
+        <Property Name="service" Type="Edm.String" />
+        <Property Name="userId" Type="Edm.String" />
+        <Property Name="userPrincipalName" Type="Edm.String" />
+        <Property Name="userType" Type="self.auditLogUserType" />
+      </EntityType>
+      <EntityType Name="authorityTemplate" BaseType="self.filePlanDescriptorTemplate" />
       <EntityType Name="autoAuditingConfiguration" BaseType="graph.entity">
         <Property Name="isAutomatic" Type="Edm.Boolean" Nullable="false" />
       </EntityType>
@@ -48420,29 +50757,29 @@
         <Property Name="displayName" Type="Edm.String" />
         <Property Name="lastModifiedBy" Type="graph.identitySet" />
         <Property Name="lastModifiedDateTime" Type="Edm.DateTimeOffset" />
-        <Property Name="status" Type="microsoft.graph.security.caseStatus" />
+        <Property Name="status" Type="self.caseStatus" />
       </EntityType>
       <EntityType Name="caseOperation" BaseType="graph.entity">
-        <Property Name="action" Type="microsoft.graph.security.caseAction" />
+        <Property Name="action" Type="self.caseAction" />
         <Property Name="completedDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="createdBy" Type="graph.identitySet" />
         <Property Name="createdDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="percentProgress" Type="Edm.Int32" />
         <Property Name="resultInfo" Type="graph.resultInfo" />
-        <Property Name="status" Type="microsoft.graph.security.caseOperationStatus" />
+        <Property Name="status" Type="self.caseOperationStatus" />
       </EntityType>
       <EntityType Name="casesRoot" BaseType="graph.entity">
-        <NavigationProperty Name="ediscoveryCases" Type="Collection(microsoft.graph.security.ediscoveryCase)" ContainsTarget="true" />
+        <NavigationProperty Name="ediscoveryCases" Type="Collection(self.ediscoveryCase)" ContainsTarget="true" />
       </EntityType>
-      <EntityType Name="categoryTemplate" BaseType="microsoft.graph.security.filePlanDescriptorTemplate">
-        <NavigationProperty Name="subcategories" Type="Collection(microsoft.graph.security.subcategoryTemplate)" ContainsTarget="true" />
+      <EntityType Name="categoryTemplate" BaseType="self.filePlanDescriptorTemplate">
+        <NavigationProperty Name="subcategories" Type="Collection(self.subcategoryTemplate)" ContainsTarget="true" />
       </EntityType>
-      <EntityType Name="citationTemplate" BaseType="microsoft.graph.security.filePlanDescriptorTemplate">
+      <EntityType Name="citationTemplate" BaseType="self.filePlanDescriptorTemplate">
         <Property Name="citationJurisdiction" Type="Edm.String" />
         <Property Name="citationUrl" Type="Edm.String" />
       </EntityType>
       <EntityType Name="collaborationRoot" BaseType="graph.entity" Abstract="true">
-        <NavigationProperty Name="analyzedEmails" Type="Collection(microsoft.graph.security.analyzedEmail)" ContainsTarget="true" />
+        <NavigationProperty Name="analyzedEmails" Type="Collection(self.analyzedEmail)" ContainsTarget="true" />
       </EntityType>
       <EntityType Name="dataSet" BaseType="graph.entity" Abstract="true">
         <Property Name="createdBy" Type="graph.identitySet" />
@@ -48454,17 +50791,17 @@
         <Property Name="createdBy" Type="graph.identitySet" />
         <Property Name="createdDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="displayName" Type="Edm.String" />
-        <Property Name="holdStatus" Type="microsoft.graph.security.dataSourceHoldStatus" />
+        <Property Name="holdStatus" Type="self.dataSourceHoldStatus" />
       </EntityType>
       <EntityType Name="dataSourceContainer" BaseType="graph.entity" Abstract="true">
         <Property Name="createdDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="displayName" Type="Edm.String" />
-        <Property Name="holdStatus" Type="microsoft.graph.security.dataSourceHoldStatus" />
+        <Property Name="holdStatus" Type="self.dataSourceHoldStatus" />
         <Property Name="lastModifiedDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="releasedDateTime" Type="Edm.DateTimeOffset" />
-        <Property Name="status" Type="microsoft.graph.security.dataSourceContainerStatus" />
+        <Property Name="status" Type="self.dataSourceContainerStatus" />
       </EntityType>
-      <EntityType Name="departmentTemplate" BaseType="microsoft.graph.security.filePlanDescriptorTemplate" />
+      <EntityType Name="departmentTemplate" BaseType="self.filePlanDescriptorTemplate" />
       <EntityType Name="dispositionReviewStage">
         <Key>
           <PropertyRef Name="stageNumber" />
@@ -48473,177 +50810,177 @@
         <Property Name="reviewersEmailAddresses" Type="Collection(Edm.String)" />
         <Property Name="stageNumber" Type="Edm.String" Nullable="false" />
       </EntityType>
-      <EntityType Name="ediscoveryAddToReviewSetOperation" BaseType="microsoft.graph.security.caseOperation">
-        <Property Name="additionalDataOptions" Type="microsoft.graph.security.additionalDataOptions" />
-        <Property Name="cloudAttachmentVersion" Type="microsoft.graph.security.cloudAttachmentVersion" />
-        <Property Name="documentVersion" Type="microsoft.graph.security.documentVersion" />
-        <Property Name="itemsToInclude" Type="microsoft.graph.security.itemsToInclude" />
-        <Property Name="reportFileMetadata" Type="Collection(microsoft.graph.security.reportFileMetadata)" />
-        <NavigationProperty Name="reviewSet" Type="microsoft.graph.security.ediscoveryReviewSet" />
-        <NavigationProperty Name="search" Type="microsoft.graph.security.ediscoverySearch" />
+      <EntityType Name="ediscoveryAddToReviewSetOperation" BaseType="self.caseOperation">
+        <Property Name="additionalDataOptions" Type="self.additionalDataOptions" />
+        <Property Name="cloudAttachmentVersion" Type="self.cloudAttachmentVersion" />
+        <Property Name="documentVersion" Type="self.documentVersion" />
+        <Property Name="itemsToInclude" Type="self.itemsToInclude" />
+        <Property Name="reportFileMetadata" Type="Collection(self.reportFileMetadata)" />
+        <NavigationProperty Name="reviewSet" Type="self.ediscoveryReviewSet" />
+        <NavigationProperty Name="search" Type="self.ediscoverySearch" />
       </EntityType>
-      <EntityType Name="ediscoveryCase" BaseType="microsoft.graph.security.case">
+      <EntityType Name="ediscoveryCase" BaseType="self.case">
         <Property Name="closedBy" Type="graph.identitySet" />
         <Property Name="closedDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="externalId" Type="Edm.String" />
-        <NavigationProperty Name="caseMembers" Type="Collection(microsoft.graph.security.ediscoveryCaseMember)" ContainsTarget="true" />
-        <NavigationProperty Name="custodians" Type="Collection(microsoft.graph.security.ediscoveryCustodian)" ContainsTarget="true" />
-        <NavigationProperty Name="noncustodialDataSources" Type="Collection(microsoft.graph.security.ediscoveryNoncustodialDataSource)" ContainsTarget="true" />
-        <NavigationProperty Name="operations" Type="Collection(microsoft.graph.security.caseOperation)" ContainsTarget="true" />
-        <NavigationProperty Name="reviewSets" Type="Collection(microsoft.graph.security.ediscoveryReviewSet)" ContainsTarget="true" />
-        <NavigationProperty Name="searches" Type="Collection(microsoft.graph.security.ediscoverySearch)" ContainsTarget="true" />
-        <NavigationProperty Name="settings" Type="microsoft.graph.security.ediscoveryCaseSettings" ContainsTarget="true" />
-        <NavigationProperty Name="tags" Type="Collection(microsoft.graph.security.ediscoveryReviewTag)" ContainsTarget="true" />
+        <NavigationProperty Name="caseMembers" Type="Collection(self.ediscoveryCaseMember)" ContainsTarget="true" />
+        <NavigationProperty Name="custodians" Type="Collection(self.ediscoveryCustodian)" ContainsTarget="true" />
+        <NavigationProperty Name="noncustodialDataSources" Type="Collection(self.ediscoveryNoncustodialDataSource)" ContainsTarget="true" />
+        <NavigationProperty Name="operations" Type="Collection(self.caseOperation)" ContainsTarget="true" />
+        <NavigationProperty Name="reviewSets" Type="Collection(self.ediscoveryReviewSet)" ContainsTarget="true" />
+        <NavigationProperty Name="searches" Type="Collection(self.ediscoverySearch)" ContainsTarget="true" />
+        <NavigationProperty Name="settings" Type="self.ediscoveryCaseSettings" ContainsTarget="true" />
+        <NavigationProperty Name="tags" Type="Collection(self.ediscoveryReviewTag)" ContainsTarget="true" />
       </EntityType>
       <EntityType Name="ediscoveryCaseMember" BaseType="graph.entity">
         <Property Name="displayName" Type="Edm.String" />
-        <Property Name="recipientType" Type="microsoft.graph.security.recipientType" />
+        <Property Name="recipientType" Type="self.recipientType" />
         <Property Name="smtpAddress" Type="Edm.String" />
       </EntityType>
       <EntityType Name="ediscoveryCaseSettings" BaseType="graph.entity">
-        <Property Name="caseType" Type="microsoft.graph.security.caseType" Nullable="false" />
-        <Property Name="ocr" Type="microsoft.graph.security.ocrSettings" />
-        <Property Name="redundancyDetection" Type="microsoft.graph.security.redundancyDetectionSettings" />
-        <Property Name="reviewSetSettings" Type="microsoft.graph.security.reviewSetSettings" />
-        <Property Name="topicModeling" Type="microsoft.graph.security.topicModelingSettings" />
+        <Property Name="caseType" Type="self.caseType" Nullable="false" />
+        <Property Name="ocr" Type="self.ocrSettings" />
+        <Property Name="redundancyDetection" Type="self.redundancyDetectionSettings" />
+        <Property Name="reviewSetSettings" Type="self.reviewSetSettings" />
+        <Property Name="topicModeling" Type="self.topicModelingSettings" />
       </EntityType>
-      <EntityType Name="ediscoveryCustodian" BaseType="microsoft.graph.security.dataSourceContainer">
+      <EntityType Name="ediscoveryCustodian" BaseType="self.dataSourceContainer">
         <Property Name="acknowledgedDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="email" Type="Edm.String" />
-        <NavigationProperty Name="lastIndexOperation" Type="microsoft.graph.security.ediscoveryIndexOperation" />
-        <NavigationProperty Name="siteSources" Type="Collection(microsoft.graph.security.siteSource)" ContainsTarget="true" />
-        <NavigationProperty Name="unifiedGroupSources" Type="Collection(microsoft.graph.security.unifiedGroupSource)" ContainsTarget="true" />
-        <NavigationProperty Name="userSources" Type="Collection(microsoft.graph.security.userSource)" ContainsTarget="true" />
+        <NavigationProperty Name="lastIndexOperation" Type="self.ediscoveryIndexOperation" />
+        <NavigationProperty Name="siteSources" Type="Collection(self.siteSource)" ContainsTarget="true" />
+        <NavigationProperty Name="unifiedGroupSources" Type="Collection(self.unifiedGroupSource)" ContainsTarget="true" />
+        <NavigationProperty Name="userSources" Type="Collection(self.userSource)" ContainsTarget="true" />
       </EntityType>
-      <EntityType Name="ediscoveryEstimateOperation" BaseType="microsoft.graph.security.caseOperation">
+      <EntityType Name="ediscoveryEstimateOperation" BaseType="self.caseOperation">
         <Property Name="indexedItemCount" Type="Edm.Int64" />
         <Property Name="indexedItemsSize" Type="Edm.Int64" />
         <Property Name="mailboxCount" Type="Edm.Int32" />
-        <Property Name="reportFileMetadata" Type="Collection(microsoft.graph.security.reportFileMetadata)" />
+        <Property Name="reportFileMetadata" Type="Collection(self.reportFileMetadata)" />
         <Property Name="siteCount" Type="Edm.Int32" />
-        <Property Name="statisticsOptions" Type="microsoft.graph.security.statisticsOptions" />
+        <Property Name="statisticsOptions" Type="self.statisticsOptions" />
         <Property Name="unindexedItemCount" Type="Edm.Int64" />
         <Property Name="unindexedItemsSize" Type="Edm.Int64" />
-        <NavigationProperty Name="search" Type="microsoft.graph.security.ediscoverySearch" />
+        <NavigationProperty Name="search" Type="self.ediscoverySearch" />
       </EntityType>
-      <EntityType Name="ediscoveryExportOperation" BaseType="microsoft.graph.security.caseOperation">
+      <EntityType Name="ediscoveryExportOperation" BaseType="self.caseOperation">
         <Property Name="description" Type="Edm.String" />
-        <Property Name="exportFileMetadata" Type="Collection(microsoft.graph.security.exportFileMetadata)" />
-        <Property Name="exportOptions" Type="microsoft.graph.security.exportOptions" />
-        <Property Name="exportStructure" Type="microsoft.graph.security.exportFileStructure" />
+        <Property Name="exportFileMetadata" Type="Collection(self.exportFileMetadata)" />
+        <Property Name="exportOptions" Type="self.exportOptions" />
+        <Property Name="exportStructure" Type="self.exportFileStructure" />
         <Property Name="outputName" Type="Edm.String" />
-        <NavigationProperty Name="reviewSet" Type="microsoft.graph.security.ediscoveryReviewSet" />
-        <NavigationProperty Name="reviewSetQuery" Type="microsoft.graph.security.ediscoveryReviewSetQuery" />
-      </EntityType>
-      <EntityType Name="ediscoveryHoldOperation" BaseType="microsoft.graph.security.caseOperation" />
-      <EntityType Name="ediscoveryHoldPolicySyncOperation" BaseType="microsoft.graph.security.caseOperation">
-        <Property Name="reportFileMetadata" Type="Collection(microsoft.graph.security.reportFileMetadata)" />
-      </EntityType>
-      <EntityType Name="ediscoveryIndexOperation" BaseType="microsoft.graph.security.caseOperation" />
-      <EntityType Name="ediscoveryNoncustodialDataSource" BaseType="microsoft.graph.security.dataSourceContainer">
-        <NavigationProperty Name="dataSource" Type="microsoft.graph.security.dataSource" ContainsTarget="true" />
-        <NavigationProperty Name="lastIndexOperation" Type="microsoft.graph.security.ediscoveryIndexOperation" />
-      </EntityType>
-      <EntityType Name="ediscoveryPurgeDataOperation" BaseType="microsoft.graph.security.caseOperation">
-        <Property Name="reportFileMetadata" Type="Collection(microsoft.graph.security.reportFileMetadata)" />
-      </EntityType>
-      <EntityType Name="ediscoveryReviewSet" BaseType="microsoft.graph.security.dataSet">
-        <NavigationProperty Name="queries" Type="Collection(microsoft.graph.security.ediscoveryReviewSetQuery)" ContainsTarget="true" />
-      </EntityType>
-      <EntityType Name="ediscoveryReviewSetQuery" BaseType="microsoft.graph.security.search" />
-      <EntityType Name="ediscoveryReviewTag" BaseType="microsoft.graph.security.tag">
-        <Property Name="childSelectability" Type="microsoft.graph.security.childSelectability" />
-        <NavigationProperty Name="childTags" Type="Collection(microsoft.graph.security.ediscoveryReviewTag)" />
-        <NavigationProperty Name="parent" Type="microsoft.graph.security.ediscoveryReviewTag" />
-      </EntityType>
-      <EntityType Name="ediscoverySearch" BaseType="microsoft.graph.security.search">
-        <Property Name="dataSourceScopes" Type="microsoft.graph.security.dataSourceScopes" />
-        <NavigationProperty Name="additionalSources" Type="Collection(microsoft.graph.security.dataSource)" ContainsTarget="true" />
-        <NavigationProperty Name="addToReviewSetOperation" Type="microsoft.graph.security.ediscoveryAddToReviewSetOperation" />
-        <NavigationProperty Name="custodianSources" Type="Collection(microsoft.graph.security.dataSource)" />
-        <NavigationProperty Name="lastEstimateStatisticsOperation" Type="microsoft.graph.security.ediscoveryEstimateOperation" />
-        <NavigationProperty Name="noncustodialSources" Type="Collection(microsoft.graph.security.ediscoveryNoncustodialDataSource)" />
-      </EntityType>
-      <EntityType Name="ediscoverySearchExportOperation" BaseType="microsoft.graph.security.caseOperation">
-        <Property Name="additionalOptions" Type="microsoft.graph.security.additionalOptions" />
-        <Property Name="cloudAttachmentVersion" Type="microsoft.graph.security.cloudAttachmentVersion" />
+        <NavigationProperty Name="reviewSet" Type="self.ediscoveryReviewSet" />
+        <NavigationProperty Name="reviewSetQuery" Type="self.ediscoveryReviewSetQuery" />
+      </EntityType>
+      <EntityType Name="ediscoveryHoldOperation" BaseType="self.caseOperation" />
+      <EntityType Name="ediscoveryHoldPolicySyncOperation" BaseType="self.caseOperation">
+        <Property Name="reportFileMetadata" Type="Collection(self.reportFileMetadata)" />
+      </EntityType>
+      <EntityType Name="ediscoveryIndexOperation" BaseType="self.caseOperation" />
+      <EntityType Name="ediscoveryNoncustodialDataSource" BaseType="self.dataSourceContainer">
+        <NavigationProperty Name="dataSource" Type="self.dataSource" ContainsTarget="true" />
+        <NavigationProperty Name="lastIndexOperation" Type="self.ediscoveryIndexOperation" />
+      </EntityType>
+      <EntityType Name="ediscoveryPurgeDataOperation" BaseType="self.caseOperation">
+        <Property Name="reportFileMetadata" Type="Collection(self.reportFileMetadata)" />
+      </EntityType>
+      <EntityType Name="ediscoveryReviewSet" BaseType="self.dataSet">
+        <NavigationProperty Name="queries" Type="Collection(self.ediscoveryReviewSetQuery)" ContainsTarget="true" />
+      </EntityType>
+      <EntityType Name="ediscoveryReviewSetQuery" BaseType="self.search" />
+      <EntityType Name="ediscoveryReviewTag" BaseType="self.tag">
+        <Property Name="childSelectability" Type="self.childSelectability" />
+        <NavigationProperty Name="childTags" Type="Collection(self.ediscoveryReviewTag)" />
+        <NavigationProperty Name="parent" Type="self.ediscoveryReviewTag" />
+      </EntityType>
+      <EntityType Name="ediscoverySearch" BaseType="self.search">
+        <Property Name="dataSourceScopes" Type="self.dataSourceScopes" />
+        <NavigationProperty Name="additionalSources" Type="Collection(self.dataSource)" ContainsTarget="true" />
+        <NavigationProperty Name="addToReviewSetOperation" Type="self.ediscoveryAddToReviewSetOperation" />
+        <NavigationProperty Name="custodianSources" Type="Collection(self.dataSource)" />
+        <NavigationProperty Name="lastEstimateStatisticsOperation" Type="self.ediscoveryEstimateOperation" />
+        <NavigationProperty Name="noncustodialSources" Type="Collection(self.ediscoveryNoncustodialDataSource)" />
+      </EntityType>
+      <EntityType Name="ediscoverySearchExportOperation" BaseType="self.caseOperation">
+        <Property Name="additionalOptions" Type="self.additionalOptions" />
+        <Property Name="cloudAttachmentVersion" Type="self.cloudAttachmentVersion" />
         <Property Name="description" Type="Edm.String" />
         <Property Name="displayName" Type="Edm.String" />
-        <Property Name="documentVersion" Type="microsoft.graph.security.documentVersion" />
-        <Property Name="exportCriteria" Type="microsoft.graph.security.exportCriteria" />
-        <Property Name="exportFileMetadata" Type="Collection(microsoft.graph.security.exportFileMetadata)" />
-        <Property Name="exportFormat" Type="microsoft.graph.security.exportFormat" />
-        <Property Name="exportLocation" Type="microsoft.graph.security.exportLocation" />
+        <Property Name="documentVersion" Type="self.documentVersion" />
+        <Property Name="exportCriteria" Type="self.exportCriteria" />
+        <Property Name="exportFileMetadata" Type="Collection(self.exportFileMetadata)" />
+        <Property Name="exportFormat" Type="self.exportFormat" />
+        <Property Name="exportLocation" Type="self.exportLocation" />
         <Property Name="exportSingleItems" Type="Edm.Boolean" />
-        <NavigationProperty Name="search" Type="microsoft.graph.security.ediscoverySearch" />
+        <NavigationProperty Name="search" Type="self.ediscoverySearch" />
       </EntityType>
-      <EntityType Name="ediscoveryTagOperation" BaseType="microsoft.graph.security.caseOperation" />
+      <EntityType Name="ediscoveryTagOperation" BaseType="self.caseOperation" />
       <EntityType Name="filePlanDescriptor" BaseType="graph.entity">
-        <Property Name="authority" Type="microsoft.graph.security.filePlanAuthority" />
-        <Property Name="category" Type="microsoft.graph.security.filePlanAppliedCategory" />
-        <Property Name="citation" Type="microsoft.graph.security.filePlanCitation" />
-        <Property Name="department" Type="microsoft.graph.security.filePlanDepartment" />
-        <Property Name="filePlanReference" Type="microsoft.graph.security.filePlanReference" />
-        <NavigationProperty Name="authorityTemplate" Type="microsoft.graph.security.authorityTemplate" />
-        <NavigationProperty Name="categoryTemplate" Type="microsoft.graph.security.categoryTemplate" />
-        <NavigationProperty Name="citationTemplate" Type="microsoft.graph.security.citationTemplate" />
-        <NavigationProperty Name="departmentTemplate" Type="microsoft.graph.security.departmentTemplate" />
-        <NavigationProperty Name="filePlanReferenceTemplate" Type="microsoft.graph.security.filePlanReferenceTemplate" />
+        <Property Name="authority" Type="self.filePlanAuthority" />
+        <Property Name="category" Type="self.filePlanAppliedCategory" />
+        <Property Name="citation" Type="self.filePlanCitation" />
+        <Property Name="department" Type="self.filePlanDepartment" />
+        <Property Name="filePlanReference" Type="self.filePlanReference" />
+        <NavigationProperty Name="authorityTemplate" Type="self.authorityTemplate" />
+        <NavigationProperty Name="categoryTemplate" Type="self.categoryTemplate" />
+        <NavigationProperty Name="citationTemplate" Type="self.citationTemplate" />
+        <NavigationProperty Name="departmentTemplate" Type="self.departmentTemplate" />
+        <NavigationProperty Name="filePlanReferenceTemplate" Type="self.filePlanReferenceTemplate" />
       </EntityType>
       <EntityType Name="filePlanDescriptorTemplate" BaseType="graph.entity">
         <Property Name="createdBy" Type="graph.identitySet" />
         <Property Name="createdDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="displayName" Type="Edm.String" />
       </EntityType>
-      <EntityType Name="filePlanReferenceTemplate" BaseType="microsoft.graph.security.filePlanDescriptorTemplate" />
+      <EntityType Name="filePlanReferenceTemplate" BaseType="self.filePlanDescriptorTemplate" />
       <EntityType Name="healthIssue" BaseType="graph.entity">
         <Property Name="additionalInformation" Type="Collection(Edm.String)" Nullable="false" />
         <Property Name="createdDateTime" Type="Edm.DateTimeOffset" Nullable="false" />
         <Property Name="description" Type="Edm.String" Nullable="false" />
         <Property Name="displayName" Type="Edm.String" />
         <Property Name="domainNames" Type="Collection(Edm.String)" />
-        <Property Name="healthIssueType" Type="microsoft.graph.security.healthIssueType" />
+        <Property Name="healthIssueType" Type="self.healthIssueType" />
         <Property Name="issueTypeId" Type="Edm.String" />
         <Property Name="lastModifiedDateTime" Type="Edm.DateTimeOffset" Nullable="false" />
         <Property Name="recommendations" Type="Collection(Edm.String)" Nullable="false" />
         <Property Name="recommendedActionCommands" Type="Collection(Edm.String)" Nullable="false" />
         <Property Name="sensorDNSNames" Type="Collection(Edm.String)" />
-        <Property Name="severity" Type="microsoft.graph.security.healthIssueSeverity" />
-        <Property Name="status" Type="microsoft.graph.security.healthIssueStatus" />
+        <Property Name="severity" Type="self.healthIssueSeverity" />
+        <Property Name="status" Type="self.healthIssueStatus" />
       </EntityType>
-      <EntityType Name="host" BaseType="microsoft.graph.security.artifact" Abstract="true">
+      <EntityType Name="host" BaseType="self.artifact" Abstract="true">
         <Property Name="firstSeenDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="lastSeenDateTime" Type="Edm.DateTimeOffset" />
-        <NavigationProperty Name="childHostPairs" Type="Collection(microsoft.graph.security.hostPair)" />
-        <NavigationProperty Name="components" Type="Collection(microsoft.graph.security.hostComponent)" />
-        <NavigationProperty Name="cookies" Type="Collection(microsoft.graph.security.hostCookie)" />
-        <NavigationProperty Name="hostPairs" Type="Collection(microsoft.graph.security.hostPair)" />
-        <NavigationProperty Name="parentHostPairs" Type="Collection(microsoft.graph.security.hostPair)" />
-        <NavigationProperty Name="passiveDns" Type="Collection(microsoft.graph.security.passiveDnsRecord)" />
-        <NavigationProperty Name="passiveDnsReverse" Type="Collection(microsoft.graph.security.passiveDnsRecord)" />
-        <NavigationProperty Name="ports" Type="Collection(microsoft.graph.security.hostPort)" />
-        <NavigationProperty Name="reputation" Type="microsoft.graph.security.hostReputation" ContainsTarget="true" />
-        <NavigationProperty Name="sslCertificates" Type="Collection(microsoft.graph.security.hostSslCertificate)" />
-        <NavigationProperty Name="subdomains" Type="Collection(microsoft.graph.security.subdomain)" />
-        <NavigationProperty Name="trackers" Type="Collection(microsoft.graph.security.hostTracker)" />
-        <NavigationProperty Name="whois" Type="microsoft.graph.security.whoisRecord" />
-      </EntityType>
-      <EntityType Name="hostComponent" BaseType="microsoft.graph.security.artifact">
+        <NavigationProperty Name="childHostPairs" Type="Collection(self.hostPair)" />
+        <NavigationProperty Name="components" Type="Collection(self.hostComponent)" />
+        <NavigationProperty Name="cookies" Type="Collection(self.hostCookie)" />
+        <NavigationProperty Name="hostPairs" Type="Collection(self.hostPair)" />
+        <NavigationProperty Name="parentHostPairs" Type="Collection(self.hostPair)" />
+        <NavigationProperty Name="passiveDns" Type="Collection(self.passiveDnsRecord)" />
+        <NavigationProperty Name="passiveDnsReverse" Type="Collection(self.passiveDnsRecord)" />
+        <NavigationProperty Name="ports" Type="Collection(self.hostPort)" />
+        <NavigationProperty Name="reputation" Type="self.hostReputation" ContainsTarget="true" />
+        <NavigationProperty Name="sslCertificates" Type="Collection(self.hostSslCertificate)" />
+        <NavigationProperty Name="subdomains" Type="Collection(self.subdomain)" />
+        <NavigationProperty Name="trackers" Type="Collection(self.hostTracker)" />
+        <NavigationProperty Name="whois" Type="self.whoisRecord" />
+      </EntityType>
+      <EntityType Name="hostComponent" BaseType="self.artifact">
         <Property Name="category" Type="Edm.String" />
         <Property Name="firstSeenDateTime" Type="Edm.DateTimeOffset" Nullable="false" />
         <Property Name="lastSeenDateTime" Type="Edm.DateTimeOffset" Nullable="false" />
         <Property Name="name" Type="Edm.String" Nullable="false" />
         <Property Name="version" Type="Edm.String" />
-        <NavigationProperty Name="host" Type="microsoft.graph.security.host" Nullable="false" />
+        <NavigationProperty Name="host" Type="self.host" Nullable="false" />
       </EntityType>
-      <EntityType Name="hostCookie" BaseType="microsoft.graph.security.artifact">
+      <EntityType Name="hostCookie" BaseType="self.artifact">
         <Property Name="domain" Type="Edm.String" Nullable="false" />
         <Property Name="firstSeenDateTime" Type="Edm.DateTimeOffset" Nullable="false" />
         <Property Name="lastSeenDateTime" Type="Edm.DateTimeOffset" Nullable="false" />
         <Property Name="name" Type="Edm.String" Nullable="false" />
-        <NavigationProperty Name="host" Type="microsoft.graph.security.host" Nullable="false" />
+        <NavigationProperty Name="host" Type="self.host" Nullable="false" />
       </EntityType>
-      <EntityType Name="hostname" BaseType="microsoft.graph.security.host">
+      <EntityType Name="hostname" BaseType="self.host">
         <Property Name="registrant" Type="Edm.String" />
         <Property Name="registrar" Type="Edm.String" />
       </EntityType>
@@ -48651,43 +50988,43 @@
         <Property Name="firstSeenDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="lastSeenDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="linkKind" Type="Edm.String" />
-        <NavigationProperty Name="childHost" Type="microsoft.graph.security.host" Nullable="false" />
-        <NavigationProperty Name="parentHost" Type="microsoft.graph.security.host" Nullable="false" />
+        <NavigationProperty Name="childHost" Type="self.host" Nullable="false" />
+        <NavigationProperty Name="parentHost" Type="self.host" Nullable="false" />
       </EntityType>
       <EntityType Name="hostPort" BaseType="graph.entity">
-        <Property Name="banners" Type="Collection(microsoft.graph.security.hostPortBanner)" />
+        <Property Name="banners" Type="Collection(self.hostPortBanner)" />
         <Property Name="firstSeenDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="lastScanDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="lastSeenDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="port" Type="Edm.Int32" Nullable="false" />
-        <Property Name="protocol" Type="microsoft.graph.security.hostPortProtocol" />
-        <Property Name="services" Type="Collection(microsoft.graph.security.hostPortComponent)" />
-        <Property Name="status" Type="microsoft.graph.security.hostPortStatus" />
+        <Property Name="protocol" Type="self.hostPortProtocol" />
+        <Property Name="services" Type="Collection(self.hostPortComponent)" />
+        <Property Name="status" Type="self.hostPortStatus" />
         <Property Name="timesObserved" Type="Edm.Int32" />
-        <NavigationProperty Name="host" Type="microsoft.graph.security.host" Nullable="false" />
-        <NavigationProperty Name="mostRecentSslCertificate" Type="microsoft.graph.security.sslCertificate" />
+        <NavigationProperty Name="host" Type="self.host" Nullable="false" />
+        <NavigationProperty Name="mostRecentSslCertificate" Type="self.sslCertificate" />
       </EntityType>
       <EntityType Name="hostReputation" BaseType="graph.entity">
-        <Property Name="classification" Type="microsoft.graph.security.hostReputationClassification" Nullable="false" />
-        <Property Name="rules" Type="Collection(microsoft.graph.security.hostReputationRule)" />
+        <Property Name="classification" Type="self.hostReputationClassification" Nullable="false" />
+        <Property Name="rules" Type="Collection(self.hostReputationRule)" />
         <Property Name="score" Type="Edm.Int32" Nullable="false" />
       </EntityType>
-      <EntityType Name="hostSslCertificate" BaseType="microsoft.graph.security.artifact">
+      <EntityType Name="hostSslCertificate" BaseType="self.artifact">
         <Property Name="firstSeenDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="lastSeenDateTime" Type="Edm.DateTimeOffset" />
-        <Property Name="ports" Type="Collection(microsoft.graph.security.hostSslCertificatePort)" />
-        <NavigationProperty Name="host" Type="microsoft.graph.security.host" />
-        <NavigationProperty Name="sslCertificate" Type="microsoft.graph.security.sslCertificate" />
+        <Property Name="ports" Type="Collection(self.hostSslCertificatePort)" />
+        <NavigationProperty Name="host" Type="self.host" />
+        <NavigationProperty Name="sslCertificate" Type="self.sslCertificate" />
       </EntityType>
-      <EntityType Name="hostTracker" BaseType="microsoft.graph.security.artifact">
+      <EntityType Name="hostTracker" BaseType="self.artifact">
         <Property Name="firstSeenDateTime" Type="Edm.DateTimeOffset" Nullable="false" />
         <Property Name="kind" Type="Edm.String" Nullable="false" />
         <Property Name="lastSeenDateTime" Type="Edm.DateTimeOffset" Nullable="false" />
         <Property Name="value" Type="Edm.String" Nullable="false" />
-        <NavigationProperty Name="host" Type="microsoft.graph.security.host" Nullable="false" />
+        <NavigationProperty Name="host" Type="self.host" Nullable="false" />
       </EntityType>
       <EntityType Name="identityAccounts" BaseType="graph.entity" Abstract="true">
-        <Property Name="accounts" Type="Collection(microsoft.graph.security.account)" />
+        <Property Name="accounts" Type="Collection(self.account)" />
         <Property Name="cloudSecurityIdentifier" Type="Edm.String" />
         <Property Name="displayName" Type="Edm.String" />
         <Property Name="domain" Type="Edm.String" />
@@ -48695,21 +51032,21 @@
         <Property Name="onPremisesSecurityIdentifier" Type="Edm.String" />
       </EntityType>
       <EntityType Name="identityContainer" BaseType="graph.entity">
-        <NavigationProperty Name="healthIssues" Type="Collection(microsoft.graph.security.healthIssue)" ContainsTarget="true" />
-        <NavigationProperty Name="identityAccounts" Type="Collection(microsoft.graph.security.identityAccounts)" ContainsTarget="true" />
-        <NavigationProperty Name="sensorCandidateActivationConfiguration" Type="microsoft.graph.security.sensorCandidateActivationConfiguration" ContainsTarget="true" Nullable="false" />
-        <NavigationProperty Name="sensorCandidates" Type="Collection(microsoft.graph.security.sensorCandidate)" ContainsTarget="true" />
-        <NavigationProperty Name="sensors" Type="Collection(microsoft.graph.security.sensor)" ContainsTarget="true" />
-        <NavigationProperty Name="settings" Type="microsoft.graph.security.settingsContainer" ContainsTarget="true" />
+        <NavigationProperty Name="healthIssues" Type="Collection(self.healthIssue)" ContainsTarget="true" />
+        <NavigationProperty Name="identityAccounts" Type="Collection(self.identityAccounts)" ContainsTarget="true" />
+        <NavigationProperty Name="sensorCandidateActivationConfiguration" Type="self.sensorCandidateActivationConfiguration" ContainsTarget="true" Nullable="false" />
+        <NavigationProperty Name="sensorCandidates" Type="Collection(self.sensorCandidate)" ContainsTarget="true" />
+        <NavigationProperty Name="sensors" Type="Collection(self.sensor)" ContainsTarget="true" />
+        <NavigationProperty Name="settings" Type="self.settingsContainer" ContainsTarget="true" />
       </EntityType>
       <EntityType Name="incident" BaseType="graph.entity">
         <Property Name="assignedTo" Type="Edm.String" />
-        <Property Name="classification" Type="microsoft.graph.security.alertClassification" />
-        <Property Name="comments" Type="Collection(microsoft.graph.security.alertComment)" />
+        <Property Name="classification" Type="self.alertClassification" />
+        <Property Name="comments" Type="Collection(self.alertComment)" />
         <Property Name="createdDateTime" Type="Edm.DateTimeOffset" Nullable="false" />
         <Property Name="customTags" Type="Collection(Edm.String)" />
         <Property Name="description" Type="Edm.String" />
-        <Property Name="determination" Type="microsoft.graph.security.alertDetermination" />
+        <Property Name="determination" Type="self.alertDetermination" />
         <Property Name="displayName" Type="Edm.String" />
         <Property Name="incidentWebUrl" Type="Edm.String" />
         <Property Name="lastModifiedBy" Type="Edm.String" />
@@ -48717,72 +51054,72 @@
         <Property Name="priorityScore" Type="Edm.Int32" />
         <Property Name="redirectIncidentId" Type="Edm.String" />
         <Property Name="resolvingComment" Type="Edm.String" />
-        <Property Name="severity" Type="microsoft.graph.security.alertSeverity" Nullable="false" />
-        <Property Name="status" Type="microsoft.graph.security.incidentStatus" Nullable="false" />
+        <Property Name="severity" Type="self.alertSeverity" Nullable="false" />
+        <Property Name="status" Type="self.incidentStatus" Nullable="false" />
         <Property Name="summary" Type="Edm.String" />
         <Property Name="systemTags" Type="Collection(Edm.String)" />
         <Property Name="tenantId" Type="Edm.String" />
-        <NavigationProperty Name="alerts" Type="Collection(microsoft.graph.security.alert)" />
+        <NavigationProperty Name="alerts" Type="Collection(self.alert)" />
       </EntityType>
       <EntityType Name="indicator" BaseType="graph.entity" Abstract="true">
-        <Property Name="source" Type="microsoft.graph.security.indicatorSource" Nullable="false" />
-        <NavigationProperty Name="artifact" Type="microsoft.graph.security.artifact" Nullable="false" />
+        <Property Name="source" Type="self.indicatorSource" Nullable="false" />
+        <NavigationProperty Name="artifact" Type="self.artifact" Nullable="false" />
       </EntityType>
       <EntityType Name="intelligenceProfile" BaseType="graph.entity">
         <Property Name="aliases" Type="Collection(Edm.String)" />
-        <Property Name="countriesOrRegionsOfOrigin" Type="Collection(microsoft.graph.security.intelligenceProfileCountryOrRegionOfOrigin)" />
-        <Property Name="description" Type="microsoft.graph.security.formattedContent" Nullable="false" />
+        <Property Name="countriesOrRegionsOfOrigin" Type="Collection(self.intelligenceProfileCountryOrRegionOfOrigin)" />
+        <Property Name="description" Type="self.formattedContent" Nullable="false" />
         <Property Name="firstActiveDateTime" Type="Edm.DateTimeOffset" Nullable="false" />
-        <Property Name="kind" Type="microsoft.graph.security.intelligenceProfileKind" Nullable="false" />
-        <Property Name="summary" Type="microsoft.graph.security.formattedContent" Nullable="false" />
+        <Property Name="kind" Type="self.intelligenceProfileKind" Nullable="false" />
+        <Property Name="summary" Type="self.formattedContent" Nullable="false" />
         <Property Name="targets" Type="Collection(Edm.String)" />
         <Property Name="title" Type="Edm.String" Nullable="false" />
-        <Property Name="tradecraft" Type="microsoft.graph.security.formattedContent" />
-        <NavigationProperty Name="indicators" Type="Collection(microsoft.graph.security.intelligenceProfileIndicator)" />
+        <Property Name="tradecraft" Type="self.formattedContent" />
+        <NavigationProperty Name="indicators" Type="Collection(self.intelligenceProfileIndicator)" />
       </EntityType>
-      <EntityType Name="intelligenceProfileIndicator" BaseType="microsoft.graph.security.indicator">
+      <EntityType Name="intelligenceProfileIndicator" BaseType="self.indicator">
         <Property Name="firstSeenDateTime" Type="Edm.DateTimeOffset" Nullable="false" />
         <Property Name="lastSeenDateTime" Type="Edm.DateTimeOffset" />
       </EntityType>
-      <EntityType Name="ipAddress" BaseType="microsoft.graph.security.host">
-        <Property Name="autonomousSystem" Type="microsoft.graph.security.autonomousSystem" />
+      <EntityType Name="ipAddress" BaseType="self.host">
+        <Property Name="autonomousSystem" Type="self.autonomousSystem" />
         <Property Name="countryOrRegion" Type="Edm.String" />
         <Property Name="hostingProvider" Type="Edm.String" />
         <Property Name="netblock" Type="Edm.String" />
       </EntityType>
       <EntityType Name="labelsRoot" BaseType="graph.entity">
-        <NavigationProperty Name="authorities" Type="Collection(microsoft.graph.security.authorityTemplate)" ContainsTarget="true" />
-        <NavigationProperty Name="categories" Type="Collection(microsoft.graph.security.categoryTemplate)" ContainsTarget="true" />
-        <NavigationProperty Name="citations" Type="Collection(microsoft.graph.security.citationTemplate)" ContainsTarget="true" />
-        <NavigationProperty Name="departments" Type="Collection(microsoft.graph.security.departmentTemplate)" ContainsTarget="true" />
-        <NavigationProperty Name="filePlanReferences" Type="Collection(microsoft.graph.security.filePlanReferenceTemplate)" ContainsTarget="true" />
-        <NavigationProperty Name="retentionLabels" Type="Collection(microsoft.graph.security.retentionLabel)" ContainsTarget="true" />
+        <NavigationProperty Name="authorities" Type="Collection(self.authorityTemplate)" ContainsTarget="true" />
+        <NavigationProperty Name="categories" Type="Collection(self.categoryTemplate)" ContainsTarget="true" />
+        <NavigationProperty Name="citations" Type="Collection(self.citationTemplate)" ContainsTarget="true" />
+        <NavigationProperty Name="departments" Type="Collection(self.departmentTemplate)" ContainsTarget="true" />
+        <NavigationProperty Name="filePlanReferences" Type="Collection(self.filePlanReferenceTemplate)" ContainsTarget="true" />
+        <NavigationProperty Name="retentionLabels" Type="Collection(self.retentionLabel)" ContainsTarget="true" />
       </EntityType>
       <EntityType Name="networkAdapter" BaseType="graph.entity">
         <Property Name="isEnabled" Type="Edm.Boolean" />
         <Property Name="name" Type="Edm.String" />
       </EntityType>
-      <EntityType Name="passiveDnsRecord" BaseType="microsoft.graph.security.artifact">
+      <EntityType Name="passiveDnsRecord" BaseType="self.artifact">
         <Property Name="collectedDateTime" Type="Edm.DateTimeOffset" Nullable="false" />
         <Property Name="firstSeenDateTime" Type="Edm.DateTimeOffset" Nullable="false" />
         <Property Name="lastSeenDateTime" Type="Edm.DateTimeOffset" Nullable="false" />
         <Property Name="recordType" Type="Edm.String" Nullable="false" />
-        <NavigationProperty Name="artifact" Type="microsoft.graph.security.artifact" Nullable="false" />
-        <NavigationProperty Name="parentHost" Type="microsoft.graph.security.host" Nullable="false" />
+        <NavigationProperty Name="artifact" Type="self.artifact" Nullable="false" />
+        <NavigationProperty Name="parentHost" Type="self.host" Nullable="false" />
       </EntityType>
       <EntityType Name="retentionEvent" BaseType="graph.entity">
         <Property Name="createdBy" Type="graph.identitySet" />
         <Property Name="createdDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="description" Type="Edm.String" />
         <Property Name="displayName" Type="Edm.String" />
-        <Property Name="eventPropagationResults" Type="Collection(microsoft.graph.security.eventPropagationResult)" />
-        <Property Name="eventQueries" Type="Collection(microsoft.graph.security.eventQuery)" />
-        <Property Name="eventStatus" Type="microsoft.graph.security.retentionEventStatus" />
+        <Property Name="eventPropagationResults" Type="Collection(self.eventPropagationResult)" />
+        <Property Name="eventQueries" Type="Collection(self.eventQuery)" />
+        <Property Name="eventStatus" Type="self.retentionEventStatus" />
         <Property Name="eventTriggerDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="lastModifiedBy" Type="graph.identitySet" />
         <Property Name="lastModifiedDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="lastStatusUpdateDateTime" Type="Edm.DateTimeOffset" />
-        <NavigationProperty Name="retentionEventType" Type="microsoft.graph.security.retentionEventType" />
+        <NavigationProperty Name="retentionEventType" Type="self.retentionEventType" />
       </EntityType>
       <EntityType Name="retentionEventType" BaseType="graph.entity">
         <Property Name="createdBy" Type="graph.identitySet" />
@@ -48793,11 +51130,11 @@
         <Property Name="lastModifiedDateTime" Type="Edm.DateTimeOffset" />
       </EntityType>
       <EntityType Name="retentionLabel" BaseType="graph.entity">
-        <Property Name="actionAfterRetentionPeriod" Type="microsoft.graph.security.actionAfterRetentionPeriod" />
-        <Property Name="behaviorDuringRetentionPeriod" Type="microsoft.graph.security.behaviorDuringRetentionPeriod" />
+        <Property Name="actionAfterRetentionPeriod" Type="self.actionAfterRetentionPeriod" />
+        <Property Name="behaviorDuringRetentionPeriod" Type="self.behaviorDuringRetentionPeriod" />
         <Property Name="createdBy" Type="graph.identitySet" />
         <Property Name="createdDateTime" Type="Edm.DateTimeOffset" />
-        <Property Name="defaultRecordBehavior" Type="microsoft.graph.security.defaultRecordBehavior" />
+        <Property Name="defaultRecordBehavior" Type="self.defaultRecordBehavior" />
         <Property Name="descriptionForAdmins" Type="Edm.String" />
         <Property Name="descriptionForUsers" Type="Edm.String" />
         <Property Name="displayName" Type="Edm.String" />
@@ -48805,11 +51142,11 @@
         <Property Name="labelToBeApplied" Type="Edm.String" />
         <Property Name="lastModifiedBy" Type="graph.identitySet" />
         <Property Name="lastModifiedDateTime" Type="Edm.DateTimeOffset" />
-        <Property Name="retentionDuration" Type="microsoft.graph.security.retentionDuration" />
-        <Property Name="retentionTrigger" Type="microsoft.graph.security.retentionTrigger" />
-        <NavigationProperty Name="descriptors" Type="microsoft.graph.security.filePlanDescriptor" ContainsTarget="true" />
-        <NavigationProperty Name="dispositionReviewStages" Type="Collection(microsoft.graph.security.dispositionReviewStage)" ContainsTarget="true" />
-        <NavigationProperty Name="retentionEventType" Type="microsoft.graph.security.retentionEventType" />
+        <Property Name="retentionDuration" Type="self.retentionDuration" />
+        <Property Name="retentionTrigger" Type="self.retentionTrigger" />
+        <NavigationProperty Name="descriptors" Type="self.filePlanDescriptor" ContainsTarget="true" />
+        <NavigationProperty Name="dispositionReviewStages" Type="Collection(self.dispositionReviewStage)" ContainsTarget="true" />
+        <NavigationProperty Name="retentionEventType" Type="self.retentionEventType" />
       </EntityType>
       <EntityType Name="search" BaseType="graph.entity" Abstract="true">
         <Property Name="contentQuery" Type="Edm.String" />
@@ -48822,16 +51159,16 @@
       </EntityType>
       <EntityType Name="sensor" BaseType="graph.entity">
         <Property Name="createdDateTime" Type="Edm.DateTimeOffset" Nullable="false" />
-        <Property Name="deploymentStatus" Type="microsoft.graph.security.deploymentStatus" Nullable="false" />
+        <Property Name="deploymentStatus" Type="self.deploymentStatus" Nullable="false" />
         <Property Name="displayName" Type="Edm.String" Nullable="false" />
         <Property Name="domainName" Type="Edm.String" Nullable="false" />
-        <Property Name="healthStatus" Type="microsoft.graph.security.sensorHealthStatus" Nullable="false" />
+        <Property Name="healthStatus" Type="self.sensorHealthStatus" Nullable="false" />
         <Property Name="openHealthIssuesCount" Type="Edm.Int64" Nullable="false" />
-        <Property Name="sensorType" Type="microsoft.graph.security.sensorType" Nullable="false" />
-        <Property Name="serviceStatus" Type="microsoft.graph.security.serviceStatus" Nullable="false" />
-        <Property Name="settings" Type="microsoft.graph.security.sensorSettings" Nullable="false" />
+        <Property Name="sensorType" Type="self.sensorType" Nullable="false" />
+        <Property Name="serviceStatus" Type="self.serviceStatus" Nullable="false" />
+        <Property Name="settings" Type="self.sensorSettings" Nullable="false" />
         <Property Name="version" Type="Edm.String" Nullable="false" />
-        <NavigationProperty Name="healthIssues" Type="Collection(microsoft.graph.security.healthIssue)" />
+        <NavigationProperty Name="healthIssues" Type="Collection(self.healthIssue)" />
       </EntityType>
       <EntityType Name="sensorCandidate" BaseType="graph.entity">
         <Property Name="computerDnsName" Type="Edm.String" Nullable="false" />
@@ -48840,30 +51177,30 @@
         <Property Name="senseClientVersion" Type="Edm.String" Nullable="false" />
       </EntityType>
       <EntityType Name="sensorCandidateActivationConfiguration" BaseType="graph.entity">
-        <Property Name="activationMode" Type="microsoft.graph.security.sensorCandidateActivationMode" Nullable="false" />
+        <Property Name="activationMode" Type="self.sensorCandidateActivationMode" Nullable="false" />
       </EntityType>
       <EntityType Name="settingsContainer" BaseType="graph.entity">
-        <NavigationProperty Name="autoAuditingConfiguration" Type="microsoft.graph.security.autoAuditingConfiguration" ContainsTarget="true" />
+        <NavigationProperty Name="autoAuditingConfiguration" Type="self.autoAuditingConfiguration" ContainsTarget="true" />
       </EntityType>
-      <EntityType Name="siteSource" BaseType="microsoft.graph.security.dataSource">
+      <EntityType Name="siteSource" BaseType="self.dataSource">
         <NavigationProperty Name="site" Type="graph.site" Nullable="false" />
       </EntityType>
-      <EntityType Name="sslCertificate" BaseType="microsoft.graph.security.artifact">
+      <EntityType Name="sslCertificate" BaseType="self.artifact">
         <Property Name="expirationDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="fingerprint" Type="Edm.String" />
         <Property Name="firstSeenDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="issueDateTime" Type="Edm.DateTimeOffset" />
-        <Property Name="issuer" Type="microsoft.graph.security.sslCertificateEntity" />
+        <Property Name="issuer" Type="self.sslCertificateEntity" />
         <Property Name="lastSeenDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="serialNumber" Type="Edm.String" />
         <Property Name="sha1" Type="Edm.String" />
-        <Property Name="subject" Type="microsoft.graph.security.sslCertificateEntity" />
-        <NavigationProperty Name="relatedHosts" Type="Collection(microsoft.graph.security.host)" />
+        <Property Name="subject" Type="self.sslCertificateEntity" />
+        <NavigationProperty Name="relatedHosts" Type="Collection(self.host)" />
       </EntityType>
-      <EntityType Name="subcategoryTemplate" BaseType="microsoft.graph.security.filePlanDescriptorTemplate" />
+      <EntityType Name="subcategoryTemplate" BaseType="self.filePlanDescriptorTemplate" />
       <EntityType Name="subdomain" BaseType="graph.entity">
         <Property Name="firstSeenDateTime" Type="Edm.DateTimeOffset" />
-        <NavigationProperty Name="host" Type="microsoft.graph.security.host" Nullable="false" />
+        <NavigationProperty Name="host" Type="self.host" Nullable="false" />
       </EntityType>
       <EntityType Name="tag" BaseType="graph.entity" Abstract="true">
         <Property Name="createdBy" Type="graph.identitySet" />
@@ -48872,190 +51209,190 @@
         <Property Name="lastModifiedDateTime" Type="Edm.DateTimeOffset" />
       </EntityType>
       <EntityType Name="threatIntelligence" BaseType="graph.entity">
-        <NavigationProperty Name="articleIndicators" Type="Collection(microsoft.graph.security.articleIndicator)" ContainsTarget="true" />
-        <NavigationProperty Name="articles" Type="Collection(microsoft.graph.security.article)" ContainsTarget="true" />
-        <NavigationProperty Name="hostComponents" Type="Collection(microsoft.graph.security.hostComponent)" ContainsTarget="true" />
-        <NavigationProperty Name="hostCookies" Type="Collection(microsoft.graph.security.hostCookie)" ContainsTarget="true" />
-        <NavigationProperty Name="hostPairs" Type="Collection(microsoft.graph.security.hostPair)" ContainsTarget="true" />
-        <NavigationProperty Name="hostPorts" Type="Collection(microsoft.graph.security.hostPort)" ContainsTarget="true" />
-        <NavigationProperty Name="hosts" Type="Collection(microsoft.graph.security.host)" ContainsTarget="true" />
-        <NavigationProperty Name="hostSslCertificates" Type="Collection(microsoft.graph.security.hostSslCertificate)" ContainsTarget="true" />
-        <NavigationProperty Name="hostTrackers" Type="Collection(microsoft.graph.security.hostTracker)" ContainsTarget="true" />
-        <NavigationProperty Name="intelligenceProfileIndicators" Type="Collection(microsoft.graph.security.intelligenceProfileIndicator)" ContainsTarget="true" />
-        <NavigationProperty Name="intelProfiles" Type="Collection(microsoft.graph.security.intelligenceProfile)" ContainsTarget="true" />
-        <NavigationProperty Name="passiveDnsRecords" Type="Collection(microsoft.graph.security.passiveDnsRecord)" ContainsTarget="true" />
-        <NavigationProperty Name="sslCertificates" Type="Collection(microsoft.graph.security.sslCertificate)" ContainsTarget="true" />
-        <NavigationProperty Name="subdomains" Type="Collection(microsoft.graph.security.subdomain)" ContainsTarget="true" />
-        <NavigationProperty Name="vulnerabilities" Type="Collection(microsoft.graph.security.vulnerability)" ContainsTarget="true" />
-        <NavigationProperty Name="whoisHistoryRecords" Type="Collection(microsoft.graph.security.whoisHistoryRecord)" ContainsTarget="true" />
-        <NavigationProperty Name="whoisRecords" Type="Collection(microsoft.graph.security.whoisRecord)" ContainsTarget="true" />
+        <NavigationProperty Name="articleIndicators" Type="Collection(self.articleIndicator)" ContainsTarget="true" />
+        <NavigationProperty Name="articles" Type="Collection(self.article)" ContainsTarget="true" />
+        <NavigationProperty Name="hostComponents" Type="Collection(self.hostComponent)" ContainsTarget="true" />
+        <NavigationProperty Name="hostCookies" Type="Collection(self.hostCookie)" ContainsTarget="true" />
+        <NavigationProperty Name="hostPairs" Type="Collection(self.hostPair)" ContainsTarget="true" />
+        <NavigationProperty Name="hostPorts" Type="Collection(self.hostPort)" ContainsTarget="true" />
+        <NavigationProperty Name="hosts" Type="Collection(self.host)" ContainsTarget="true" />
+        <NavigationProperty Name="hostSslCertificates" Type="Collection(self.hostSslCertificate)" ContainsTarget="true" />
+        <NavigationProperty Name="hostTrackers" Type="Collection(self.hostTracker)" ContainsTarget="true" />
+        <NavigationProperty Name="intelligenceProfileIndicators" Type="Collection(self.intelligenceProfileIndicator)" ContainsTarget="true" />
+        <NavigationProperty Name="intelProfiles" Type="Collection(self.intelligenceProfile)" ContainsTarget="true" />
+        <NavigationProperty Name="passiveDnsRecords" Type="Collection(self.passiveDnsRecord)" ContainsTarget="true" />
+        <NavigationProperty Name="sslCertificates" Type="Collection(self.sslCertificate)" ContainsTarget="true" />
+        <NavigationProperty Name="subdomains" Type="Collection(self.subdomain)" ContainsTarget="true" />
+        <NavigationProperty Name="vulnerabilities" Type="Collection(self.vulnerability)" ContainsTarget="true" />
+        <NavigationProperty Name="whoisHistoryRecords" Type="Collection(self.whoisHistoryRecord)" ContainsTarget="true" />
+        <NavigationProperty Name="whoisRecords" Type="Collection(self.whoisRecord)" ContainsTarget="true" />
       </EntityType>
       <EntityType Name="triggersRoot" BaseType="graph.entity">
-        <NavigationProperty Name="retentionEvents" Type="Collection(microsoft.graph.security.retentionEvent)" ContainsTarget="true" />
+        <NavigationProperty Name="retentionEvents" Type="Collection(self.retentionEvent)" ContainsTarget="true" />
       </EntityType>
       <EntityType Name="triggerTypesRoot" BaseType="graph.entity">
-        <NavigationProperty Name="retentionEventTypes" Type="Collection(microsoft.graph.security.retentionEventType)" ContainsTarget="true" />
+        <NavigationProperty Name="retentionEventTypes" Type="Collection(self.retentionEventType)" ContainsTarget="true" />
       </EntityType>
-      <EntityType Name="unclassifiedArtifact" BaseType="microsoft.graph.security.artifact">
+      <EntityType Name="unclassifiedArtifact" BaseType="self.artifact">
         <Property Name="kind" Type="Edm.String" Nullable="false" />
         <Property Name="value" Type="Edm.String" Nullable="false" />
       </EntityType>
-      <EntityType Name="unifiedGroupSource" BaseType="microsoft.graph.security.dataSource">
-        <Property Name="includedSources" Type="microsoft.graph.security.sourceType" />
+      <EntityType Name="unifiedGroupSource" BaseType="self.dataSource">
+        <Property Name="includedSources" Type="self.sourceType" />
         <NavigationProperty Name="group" Type="graph.group" Nullable="false" />
       </EntityType>
-      <EntityType Name="user" BaseType="microsoft.graph.security.identityAccounts">
+      <EntityType Name="user" BaseType="self.identityAccounts">
         <Property Name="emailAddress" Type="Edm.String" />
         <Property Name="userPrincipalName" Type="Edm.String" />
       </EntityType>
-      <EntityType Name="userSource" BaseType="microsoft.graph.security.dataSource">
+      <EntityType Name="userSource" BaseType="self.dataSource">
         <Property Name="email" Type="Edm.String" Nullable="false" />
-        <Property Name="includedSources" Type="microsoft.graph.security.sourceType" />
+        <Property Name="includedSources" Type="self.sourceType" />
         <Property Name="siteWebUrl" Type="Edm.String" />
       </EntityType>
       <EntityType Name="vulnerability" BaseType="graph.entity">
         <Property Name="activeExploitsObserved" Type="Edm.Boolean" Nullable="false" />
         <Property Name="commonWeaknessEnumerationIds" Type="Collection(Edm.String)" Nullable="false" />
         <Property Name="createdDateTime" Type="Edm.DateTimeOffset" Nullable="false" />
-        <Property Name="cvss2Summary" Type="microsoft.graph.security.cvssSummary" Nullable="false" />
-        <Property Name="cvss3Summary" Type="microsoft.graph.security.cvssSummary" Nullable="false" />
-        <Property Name="description" Type="microsoft.graph.security.formattedContent" Nullable="false" />
-        <Property Name="exploits" Type="Collection(microsoft.graph.security.hyperlink)" />
+        <Property Name="cvss2Summary" Type="self.cvssSummary" Nullable="false" />
+        <Property Name="cvss3Summary" Type="self.cvssSummary" Nullable="false" />
+        <Property Name="description" Type="self.formattedContent" Nullable="false" />
+        <Property Name="exploits" Type="Collection(self.hyperlink)" />
         <Property Name="exploitsAvailable" Type="Edm.Boolean" Nullable="false" />
         <Property Name="hasChatter" Type="Edm.Boolean" Nullable="false" />
         <Property Name="lastModifiedDateTime" Type="Edm.DateTimeOffset" Nullable="false" />
         <Property Name="priorityScore" Type="Edm.Int32" Nullable="false" />
         <Property Name="publishedDateTime" Type="Edm.DateTimeOffset" Nullable="false" />
-        <Property Name="references" Type="Collection(microsoft.graph.security.hyperlink)" />
-        <Property Name="remediation" Type="microsoft.graph.security.formattedContent" />
-        <Property Name="severity" Type="microsoft.graph.security.vulnerabilitySeverity" Nullable="false" />
-        <NavigationProperty Name="articles" Type="Collection(microsoft.graph.security.article)" />
-        <NavigationProperty Name="components" Type="Collection(microsoft.graph.security.vulnerabilityComponent)" ContainsTarget="true" />
+        <Property Name="references" Type="Collection(self.hyperlink)" />
+        <Property Name="remediation" Type="self.formattedContent" />
+        <Property Name="severity" Type="self.vulnerabilitySeverity" Nullable="false" />
+        <NavigationProperty Name="articles" Type="Collection(self.article)" />
+        <NavigationProperty Name="components" Type="Collection(self.vulnerabilityComponent)" ContainsTarget="true" />
       </EntityType>
       <EntityType Name="vulnerabilityComponent" BaseType="graph.entity">
         <Property Name="name" Type="Edm.String" Nullable="false" />
       </EntityType>
       <EntityType Name="whoisBaseRecord" BaseType="graph.entity" Abstract="true">
-        <Property Name="abuse" Type="microsoft.graph.security.whoisContact" />
-        <Property Name="admin" Type="microsoft.graph.security.whoisContact" />
-        <Property Name="billing" Type="microsoft.graph.security.whoisContact" />
+        <Property Name="abuse" Type="self.whoisContact" />
+        <Property Name="admin" Type="self.whoisContact" />
+        <Property Name="billing" Type="self.whoisContact" />
         <Property Name="domainStatus" Type="Edm.String" />
         <Property Name="expirationDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="firstSeenDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="lastSeenDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="lastUpdateDateTime" Type="Edm.DateTimeOffset" />
-        <Property Name="nameservers" Type="Collection(microsoft.graph.security.whoisNameserver)" />
-        <Property Name="noc" Type="microsoft.graph.security.whoisContact" />
+        <Property Name="nameservers" Type="Collection(self.whoisNameserver)" />
+        <Property Name="noc" Type="self.whoisContact" />
         <Property Name="rawWhoisText" Type="Edm.String" />
-        <Property Name="registrant" Type="microsoft.graph.security.whoisContact" />
-        <Property Name="registrar" Type="microsoft.graph.security.whoisContact" />
+        <Property Name="registrant" Type="self.whoisContact" />
+        <Property Name="registrar" Type="self.whoisContact" />
         <Property Name="registrationDateTime" Type="Edm.DateTimeOffset" />
-        <Property Name="technical" Type="microsoft.graph.security.whoisContact" />
+        <Property Name="technical" Type="self.whoisContact" />
         <Property Name="whoisServer" Type="Edm.String" />
-        <Property Name="zone" Type="microsoft.graph.security.whoisContact" />
-        <NavigationProperty Name="host" Type="microsoft.graph.security.host" Nullable="false" />
+        <Property Name="zone" Type="self.whoisContact" />
+        <NavigationProperty Name="host" Type="self.host" Nullable="false" />
       </EntityType>
-      <EntityType Name="whoisHistoryRecord" BaseType="microsoft.graph.security.whoisBaseRecord" />
-      <EntityType Name="whoisRecord" BaseType="microsoft.graph.security.whoisBaseRecord">
-        <NavigationProperty Name="history" Type="Collection(microsoft.graph.security.whoisHistoryRecord)" />
+      <EntityType Name="whoisHistoryRecord" BaseType="self.whoisBaseRecord" />
+      <EntityType Name="whoisRecord" BaseType="self.whoisBaseRecord">
+        <NavigationProperty Name="history" Type="Collection(self.whoisHistoryRecord)" />
       </EntityType>
       <Action Name="activate" IsBound="true">
-        <Parameter Name="bindingParameter" Type="Collection(microsoft.graph.security.sensorCandidate)" />
+        <Parameter Name="bindingParameter" Type="Collection(self.sensorCandidate)" />
         <Parameter Name="serverIds" Type="Collection(Edm.String)" Unicode="false" />
       </Action>
       <Action Name="activate" IsBound="true">
-        <Parameter Name="bindingParameter" Type="microsoft.graph.security.ediscoveryCustodian" />
+        <Parameter Name="bindingParameter" Type="self.ediscoveryCustodian" />
       </Action>
       <Action Name="addToReviewSet" IsBound="true">
-        <Parameter Name="bindingParameter" Type="microsoft.graph.security.ediscoveryReviewSet" />
-        <Parameter Name="search" Type="microsoft.graph.security.ediscoverySearch" />
-        <Parameter Name="additionalDataOptions" Type="microsoft.graph.security.additionalDataOptions" />
-        <Parameter Name="itemsToInclude" Type="microsoft.graph.security.itemsToInclude" />
-        <Parameter Name="cloudAttachmentVersion" Type="microsoft.graph.security.cloudAttachmentVersion" />
-        <Parameter Name="documentVersion" Type="microsoft.graph.security.documentVersion" />
+        <Parameter Name="bindingParameter" Type="self.ediscoveryReviewSet" />
+        <Parameter Name="search" Type="self.ediscoverySearch" />
+        <Parameter Name="additionalDataOptions" Type="self.additionalDataOptions" />
+        <Parameter Name="itemsToInclude" Type="self.itemsToInclude" />
+        <Parameter Name="cloudAttachmentVersion" Type="self.cloudAttachmentVersion" />
+        <Parameter Name="documentVersion" Type="self.documentVersion" />
       </Action>
       <Action Name="applyHold" IsBound="true">
-        <Parameter Name="bindingParameter" Type="Collection(microsoft.graph.security.ediscoveryCustodian)" />
+        <Parameter Name="bindingParameter" Type="Collection(self.ediscoveryCustodian)" />
         <Parameter Name="ids" Type="Collection(Edm.String)" Unicode="false" />
       </Action>
       <Action Name="applyHold" IsBound="true">
-        <Parameter Name="bindingParameter" Type="Collection(microsoft.graph.security.ediscoveryNoncustodialDataSource)" />
+        <Parameter Name="bindingParameter" Type="Collection(self.ediscoveryNoncustodialDataSource)" />
         <Parameter Name="ids" Type="Collection(Edm.String)" Unicode="false" />
       </Action>
       <Action Name="applyHold" IsBound="true">
-        <Parameter Name="bindingParameter" Type="microsoft.graph.security.ediscoveryCustodian" />
+        <Parameter Name="bindingParameter" Type="self.ediscoveryCustodian" />
       </Action>
       <Action Name="applyHold" IsBound="true">
-        <Parameter Name="bindingParameter" Type="microsoft.graph.security.ediscoveryNoncustodialDataSource" />
+        <Parameter Name="bindingParameter" Type="self.ediscoveryNoncustodialDataSource" />
       </Action>
       <Action Name="applyTags" IsBound="true">
-        <Parameter Name="bindingParameter" Type="microsoft.graph.security.ediscoveryReviewSetQuery" />
-        <Parameter Name="tagsToAdd" Type="Collection(microsoft.graph.security.ediscoveryReviewTag)" />
-        <Parameter Name="tagsToRemove" Type="Collection(microsoft.graph.security.ediscoveryReviewTag)" />
+        <Parameter Name="bindingParameter" Type="self.ediscoveryReviewSetQuery" />
+        <Parameter Name="tagsToAdd" Type="Collection(self.ediscoveryReviewTag)" />
+        <Parameter Name="tagsToRemove" Type="Collection(self.ediscoveryReviewTag)" />
       </Action>
       <Action Name="close" IsBound="true">
-        <Parameter Name="bindingParameter" Type="microsoft.graph.security.ediscoveryCase" />
+        <Parameter Name="bindingParameter" Type="self.ediscoveryCase" />
       </Action>
       <Action Name="estimateStatistics" IsBound="true">
-        <Parameter Name="bindingParameter" Type="microsoft.graph.security.ediscoverySearch" />
-        <Parameter Name="statisticsOptions" Type="microsoft.graph.security.statisticsOptions" />
+        <Parameter Name="bindingParameter" Type="self.ediscoverySearch" />
+        <Parameter Name="statisticsOptions" Type="self.statisticsOptions" />
       </Action>
       <Action Name="export" IsBound="true">
-        <Parameter Name="bindingParameter" Type="microsoft.graph.security.ediscoveryReviewSet" />
+        <Parameter Name="bindingParameter" Type="self.ediscoveryReviewSet" />
         <Parameter Name="outputName" Type="Edm.String" Unicode="false" />
         <Parameter Name="description" Type="Edm.String" Unicode="false" />
-        <Parameter Name="exportOptions" Type="microsoft.graph.security.exportOptions" />
-        <Parameter Name="exportStructure" Type="microsoft.graph.security.exportFileStructure" />
+        <Parameter Name="exportOptions" Type="self.exportOptions" />
+        <Parameter Name="exportStructure" Type="self.exportFileStructure" />
       </Action>
       <Action Name="export" IsBound="true">
-        <Parameter Name="bindingParameter" Type="microsoft.graph.security.ediscoveryReviewSetQuery" />
+        <Parameter Name="bindingParameter" Type="self.ediscoveryReviewSetQuery" />
         <Parameter Name="outputName" Type="Edm.String" Unicode="false" />
         <Parameter Name="description" Type="Edm.String" Unicode="false" />
-        <Parameter Name="exportOptions" Type="microsoft.graph.security.exportOptions" />
-        <Parameter Name="exportStructure" Type="microsoft.graph.security.exportFileStructure" />
+        <Parameter Name="exportOptions" Type="self.exportOptions" />
+        <Parameter Name="exportStructure" Type="self.exportFileStructure" />
       </Action>
       <Action Name="exportReport" IsBound="true">
-        <Parameter Name="bindingParameter" Type="microsoft.graph.security.ediscoverySearch" />
+        <Parameter Name="bindingParameter" Type="self.ediscoverySearch" />
         <Parameter Name="displayName" Type="Edm.String" Unicode="false" />
         <Parameter Name="description" Type="Edm.String" Unicode="false" />
-        <Parameter Name="exportCriteria" Type="microsoft.graph.security.exportCriteria" />
-        <Parameter Name="exportLocation" Type="microsoft.graph.security.exportLocation" />
-        <Parameter Name="additionalOptions" Type="microsoft.graph.security.additionalOptions" />
-        <Parameter Name="cloudAttachmentVersion" Type="microsoft.graph.security.cloudAttachmentVersion" />
-        <Parameter Name="documentVersion" Type="microsoft.graph.security.documentVersion" />
+        <Parameter Name="exportCriteria" Type="self.exportCriteria" />
+        <Parameter Name="exportLocation" Type="self.exportLocation" />
+        <Parameter Name="additionalOptions" Type="self.additionalOptions" />
+        <Parameter Name="cloudAttachmentVersion" Type="self.cloudAttachmentVersion" />
+        <Parameter Name="documentVersion" Type="self.documentVersion" />
       </Action>
       <Action Name="exportResult" IsBound="true">
-        <Parameter Name="bindingParameter" Type="microsoft.graph.security.ediscoverySearch" />
+        <Parameter Name="bindingParameter" Type="self.ediscoverySearch" />
         <Parameter Name="displayName" Type="Edm.String" Unicode="false" />
         <Parameter Name="description" Type="Edm.String" Unicode="false" />
-        <Parameter Name="exportCriteria" Type="microsoft.graph.security.exportCriteria" />
-        <Parameter Name="exportLocation" Type="microsoft.graph.security.exportLocation" />
-        <Parameter Name="additionalOptions" Type="microsoft.graph.security.additionalOptions" />
-        <Parameter Name="exportFormat" Type="microsoft.graph.security.exportFormat" />
+        <Parameter Name="exportCriteria" Type="self.exportCriteria" />
+        <Parameter Name="exportLocation" Type="self.exportLocation" />
+        <Parameter Name="additionalOptions" Type="self.additionalOptions" />
+        <Parameter Name="exportFormat" Type="self.exportFormat" />
         <Parameter Name="exportSingleItems" Type="Edm.Boolean" />
-        <Parameter Name="cloudAttachmentVersion" Type="microsoft.graph.security.cloudAttachmentVersion" />
-        <Parameter Name="documentVersion" Type="microsoft.graph.security.documentVersion" />
+        <Parameter Name="cloudAttachmentVersion" Type="self.cloudAttachmentVersion" />
+        <Parameter Name="documentVersion" Type="self.documentVersion" />
       </Action>
       <Action Name="invokeAction" IsBound="true">
-        <Parameter Name="bindingParameter" Type="microsoft.graph.security.identityAccounts" />
+        <Parameter Name="bindingParameter" Type="self.identityAccounts" />
         <Parameter Name="accountId" Type="Edm.String" Nullable="false" Unicode="false" />
-        <Parameter Name="action" Type="microsoft.graph.security.action" Nullable="false" />
-        <Parameter Name="identityProvider" Type="microsoft.graph.security.identityProvider" Nullable="false" />
-        <ReturnType Type="microsoft.graph.security.invokeActionResult" />
+        <Parameter Name="action" Type="self.action" Nullable="false" />
+        <Parameter Name="identityProvider" Type="self.identityProvider" Nullable="false" />
+        <ReturnType Type="self.invokeActionResult" />
       </Action>
       <Action Name="mergeIncidents" IsBound="true">
-        <Parameter Name="bindingParameter" Type="Collection(microsoft.graph.security.incident)" />
+        <Parameter Name="bindingParameter" Type="Collection(self.incident)" />
         <Parameter Name="incidentIds" Type="Collection(Edm.String)" Unicode="false" />
         <Parameter Name="incidentComment" Type="Edm.String" Unicode="false">
           <Annotation Term="Org.OData.Core.V1.OptionalParameter" />
         </Parameter>
-        <Parameter Name="mergeReasons" Type="microsoft.graph.security.correlationReason">
+        <Parameter Name="mergeReasons" Type="self.correlationReason">
           <Annotation Term="Org.OData.Core.V1.OptionalParameter" />
         </Parameter>
-        <ReturnType Type="microsoft.graph.security.mergeResponse" />
+        <ReturnType Type="self.mergeResponse" />
       </Action>
       <Action Name="moveAlerts" IsBound="true">
-        <Parameter Name="bindingParameter" Type="Collection(microsoft.graph.security.alert)" />
+        <Parameter Name="bindingParameter" Type="Collection(self.alert)" />
         <Parameter Name="alertIds" Type="Collection(Edm.String)" Unicode="false" />
         <Parameter Name="incidentId" Type="Edm.String" Unicode="false">
           <Annotation Term="Org.OData.Core.V1.OptionalParameter" />
@@ -49063,58 +51400,58 @@
         <Parameter Name="alertComment" Type="Edm.String" Unicode="false">
           <Annotation Term="Org.OData.Core.V1.OptionalParameter" />
         </Parameter>
-        <Parameter Name="newCorrelationReasons" Type="microsoft.graph.security.correlationReason">
+        <Parameter Name="newCorrelationReasons" Type="self.correlationReason">
           <Annotation Term="Org.OData.Core.V1.OptionalParameter" />
         </Parameter>
-        <ReturnType Type="microsoft.graph.security.mergeResponse" />
+        <ReturnType Type="self.mergeResponse" />
       </Action>
       <Action Name="purgeData" IsBound="true">
-        <Parameter Name="bindingParameter" Type="microsoft.graph.security.ediscoverySearch" />
-        <Parameter Name="purgeType" Type="microsoft.graph.security.purgeType">
+        <Parameter Name="bindingParameter" Type="self.ediscoverySearch" />
+        <Parameter Name="purgeType" Type="self.purgeType">
           <Annotation Term="Org.OData.Core.V1.OptionalParameter" />
         </Parameter>
-        <Parameter Name="purgeAreas" Type="microsoft.graph.security.purgeAreas">
+        <Parameter Name="purgeAreas" Type="self.purgeAreas">
           <Annotation Term="Org.OData.Core.V1.OptionalParameter" />
         </Parameter>
       </Action>
       <Action Name="regenerateDeploymentAccessKey" IsBound="true">
-        <Parameter Name="bindingParameter" Type="Collection(microsoft.graph.security.sensor)" />
-        <ReturnType Type="microsoft.graph.security.deploymentAccessKeyType" />
+        <Parameter Name="bindingParameter" Type="Collection(self.sensor)" />
+        <ReturnType Type="self.deploymentAccessKeyType" />
       </Action>
       <Action Name="release" IsBound="true">
-        <Parameter Name="bindingParameter" Type="microsoft.graph.security.ediscoveryCustodian" />
+        <Parameter Name="bindingParameter" Type="self.ediscoveryCustodian" />
       </Action>
       <Action Name="release" IsBound="true">
-        <Parameter Name="bindingParameter" Type="microsoft.graph.security.ediscoveryNoncustodialDataSource" />
+        <Parameter Name="bindingParameter" Type="self.ediscoveryNoncustodialDataSource" />
       </Action>
       <Action Name="remediate" IsBound="true">
-        <Parameter Name="bindingParameter" Type="Collection(microsoft.graph.security.analyzedEmail)" />
+        <Parameter Name="bindingParameter" Type="Collection(self.analyzedEmail)" />
         <Parameter Name="displayName" Type="Edm.String" Unicode="false" />
         <Parameter Name="description" Type="Edm.String" Unicode="false" />
-        <Parameter Name="severity" Type="microsoft.graph.security.remediationSeverity" />
-        <Parameter Name="action" Type="microsoft.graph.security.remediationAction" />
+        <Parameter Name="severity" Type="self.remediationSeverity" />
+        <Parameter Name="action" Type="self.remediationAction" />
         <Parameter Name="remediateSendersCopy" Type="Edm.Boolean" />
-        <Parameter Name="analyzedEmails" Type="Collection(microsoft.graph.security.analyzedEmail)" />
+        <Parameter Name="analyzedEmails" Type="Collection(self.analyzedEmail)" />
       </Action>
       <Action Name="removeHold" IsBound="true">
-        <Parameter Name="bindingParameter" Type="Collection(microsoft.graph.security.ediscoveryCustodian)" />
+        <Parameter Name="bindingParameter" Type="Collection(self.ediscoveryCustodian)" />
         <Parameter Name="ids" Type="Collection(Edm.String)" Unicode="false" />
       </Action>
       <Action Name="removeHold" IsBound="true">
-        <Parameter Name="bindingParameter" Type="Collection(microsoft.graph.security.ediscoveryNoncustodialDataSource)" />
+        <Parameter Name="bindingParameter" Type="Collection(self.ediscoveryNoncustodialDataSource)" />
         <Parameter Name="ids" Type="Collection(Edm.String)" Unicode="false" />
       </Action>
       <Action Name="removeHold" IsBound="true">
-        <Parameter Name="bindingParameter" Type="microsoft.graph.security.ediscoveryCustodian" />
+        <Parameter Name="bindingParameter" Type="self.ediscoveryCustodian" />
       </Action>
       <Action Name="removeHold" IsBound="true">
-        <Parameter Name="bindingParameter" Type="microsoft.graph.security.ediscoveryNoncustodialDataSource" />
+        <Parameter Name="bindingParameter" Type="self.ediscoveryNoncustodialDataSource" />
       </Action>
       <Action Name="reopen" IsBound="true">
-        <Parameter Name="bindingParameter" Type="microsoft.graph.security.ediscoveryCase" />
+        <Parameter Name="bindingParameter" Type="self.ediscoveryCase" />
       </Action>
       <Action Name="resetToDefault" IsBound="true">
-        <Parameter Name="bindingParameter" Type="microsoft.graph.security.ediscoveryCaseSettings" />
+        <Parameter Name="bindingParameter" Type="self.ediscoveryCaseSettings" />
       </Action>
       <Action Name="runHuntingQuery" IsBound="true">
         <Parameter Name="bindingParameter" Type="graph.security" />
@@ -49122,25 +51459,25 @@
         <Parameter Name="timespan" Type="Edm.String" Unicode="false">
           <Annotation Term="Org.OData.Core.V1.OptionalParameter" />
         </Parameter>
-        <ReturnType Type="microsoft.graph.security.huntingQueryResults" />
+        <ReturnType Type="self.huntingQueryResults" />
       </Action>
       <Action Name="updateIndex" IsBound="true">
-        <Parameter Name="bindingParameter" Type="microsoft.graph.security.ediscoveryCustodian" />
+        <Parameter Name="bindingParameter" Type="self.ediscoveryCustodian" />
       </Action>
       <Action Name="updateIndex" IsBound="true">
-        <Parameter Name="bindingParameter" Type="microsoft.graph.security.ediscoveryNoncustodialDataSource" />
+        <Parameter Name="bindingParameter" Type="self.ediscoveryNoncustodialDataSource" />
       </Action>
       <Function Name="asHierarchy" IsBound="true">
-        <Parameter Name="bindingParameter" Type="Collection(microsoft.graph.security.ediscoveryReviewTag)" />
-        <ReturnType Type="Collection(microsoft.graph.security.ediscoveryReviewTag)" />
+        <Parameter Name="bindingParameter" Type="Collection(self.ediscoveryReviewTag)" />
+        <ReturnType Type="Collection(self.ediscoveryReviewTag)" />
       </Function>
       <Function Name="getDeploymentAccessKey" IsBound="true">
-        <Parameter Name="bindingParameter" Type="Collection(microsoft.graph.security.sensor)" />
-        <ReturnType Type="microsoft.graph.security.deploymentAccessKeyType" />
+        <Parameter Name="bindingParameter" Type="Collection(self.sensor)" />
+        <ReturnType Type="self.deploymentAccessKeyType" />
       </Function>
       <Function Name="getDeploymentPackageUri" IsBound="true">
-        <Parameter Name="bindingParameter" Type="Collection(microsoft.graph.security.sensor)" />
-        <ReturnType Type="microsoft.graph.security.sensorDeploymentPackage" />
+        <Parameter Name="bindingParameter" Type="Collection(self.sensor)" />
+        <ReturnType Type="self.sensorDeploymentPackage" />
       </Function>
     </Schema>
     <Schema Namespace="microsoft.graph.teamsAdministration" Alias="teamsAdministration" xmlns="http://docs.oasis-open.org/odata/ns/edm">