uptycs

type AlertRule struct {
	ID                     string                 `json:"id,omitempty"`
	Name                   string                 `json:"name,omitempty"`
	Description            string                 `json:"description,omitempty"`
	Code                   string                 `json:"code,omitempty"`
	Type                   string                 `json:"type,omitempty" validate:"required,oneof=sql builder"`
	Rule                   string                 `json:"rule,omitempty"`
	Grouping               string                 `json:"grouping,omitempty"`
	Enabled                bool                   `json:"enabled"`
	Custom                 bool                   `json:"custom"`
	Throttled              bool                   `json:"throttled"`
	CreatedAt              string                 `json:"createdAt,omitempty"`
	IsInternal             bool                   `json:"isInternal"`
	AlertTags              []string               `json:"alertTags" validate:"required_if=Type sql"`
	CreatedBy              string                 `json:"createdBy,omitempty"`
	UpdatedAt              string                 `json:"updatedAt,omitempty"`
	TimeSuppresionStart    string                 `json:"timeSuppresionStart,omitempty"`
	TimeSuppresionDuration int                    `json:"timeSuppresionDuration,omitempty"`
	UpdatedBy              string                 `json:"updatedBy,omitempty"`
	GroupingL2             string                 `json:"groupingL2,omitempty"`
	GroupingL3             string                 `json:"groupingL3,omitempty"`
	Lock                   bool                   `json:"lock"`
	AlertNotifyInterval    int                    `json:"alertNotifyInterval,omitempty"`
	AlertNotifyCount       int                    `json:"alertNotifyCount,omitempty"`
	AlertRuleExceptions    []RuleException        `json:"alertRuleExceptions"`
	Destinations           []AlertRuleDestination `json:"destinations"`
	SQLConfig              *SQLConfig             `json:"sqlConfig,omitempty"`
	Links                  []LinkItem             `json:"links,omitempty"`
	BuilderConfig          *BuilderConfigLite     `json:"builderConfig"`
}

type AlertRuleCategories struct {
	Links  []LinkItem          `json:"links"`
	Items  []AlertRuleCategory `json:"items"`
	Offset int                 `json:"offset,omitempty"`
	Limit  int                 `json:"limit,omitempty"`
}

type AlertRuleCategory struct {
	ID        string     `json:"id,omitempty"`
	RuleID    string     `json:"ruleId,omitempty"`
	Name      string     `json:"name,omitempty"`
	CreatedAt string     `json:"createdAt,omitempty"`
	CreatedBy string     `json:"createdBy,omitempty"`
	Links     []LinkItem `json:"links,omitempty"`
}

type AlertRuleDestination struct {
	ID                 string `json:"id,omitempty"`
	RuleID             string `json:"ruleId,omitempty"`
	Severity           string `json:"severity,omitempty"`
	DestinationID      string `json:"destinationId,omitempty"`
	NotifyEveryAlert   bool   `json:"notifyEveryAlert"`
	CloseAfterDelivery bool   `json:"closeAfterDelivery"`
	CreatedAt          string `json:"createdAt,omitempty"`
}

type AlertRuleQuery struct {
	RuleID    string `json:"ruleId,omitempty"`
	Sequence  int    `json:"sequence,omitempty"`
	QueryID   string `json:"queryId,omitempty"`
	LastRanAt string `json:"lastRanAt,omitempty"`
}

type AlertRules struct {
	Links  []LinkItem  `json:"links"`
	Items  []AlertRule `json:"items"`
	Offset int         `json:"offset,omitempty"`
	Limit  int         `json:"limit,omitempty"`
}

type Asset struct {
	Gateway                   string                 `json:"gateway,omitempty"`
	Name                      string                 `json:"hostname,omitempty"` // there is no name, use hostname for ease
	CityID                    string                 `json:"cityId,omitempty"`
	CreatedAt                 string                 `json:"createdAt,omitempty"`
	Disabled                  bool                   `json:"disabled"`
	HostName                  string                 `json:"hostName,omitempty"`
	ID                        string                 `json:"id,omitempty"`
	LastEnrolledAt            string                 `json:"lastEnrolledAt,omitempty"`
	Os                        string                 `json:"os,omitempty"`
	OsFlavor                  string                 `json:"osFlavor,omitempty"`
	OsqueryVersion            string                 `json:"osqueryVersion,omitempty"`
	OsVersion                 string                 `json:"osVersion,omitempty"`
	Status                    string                 `json:"status,omitempty"`
	UpgradeState              bool                   `json:"upgradeState"`
	ObjectGroupID             string                 `json:"objectGroupId,omitempty"`
	Live                      bool                   `json:"live"`
	Location                  string                 `json:"location,omitempty"`
	ManualSlackAssignment     bool                   `json:"manualSlackAssignment"`
	HardwareVendor            string                 `json:"hardwareVendor,omitempty"`
	AssetObjectGroupID        string                 `json:"assetObjectGroupId,omitempty"`
	PackageObjectGroupID      string                 `json:"packageObjectGroupId,omitempty"`
	ObjectGroup               ObjectGroup            `json:"objectGroup"`
	City                      City                   `json:"city"`
	AssetCloudInfo            AssetCloudInfo         `json:"assetCloudInfo"`
	LastActivityAt            string                 `json:"lastActivityAt,omitempty"`
	LastUpgradedAt            string                 `json:"lastUpgradedAt,omitempty"`
	EventExcludeProfiles      []EventExcludeProfiles `json:"eventExcludeProfiles"`
	Tags                      []string               `json:"tags"`
	Capabilities              []AssetCapabilities    `json:"capabilities"`
	OsDisplay                 string                 `json:"osDisplay,omitempty"`
	Description               string                 `json:"description,omitempty"`
	Latitude                  float64                `json:"latitude"`
	Longitude                 float64                `json:"longitude"`
	CPUBrand                  string                 `json:"cpuBrand,omitempty"`
	HardwareModel             string                 `json:"hardwareModel,omitempty"`
	HardwareSerial            string                 `json:"hardwareSerial,omitempty"`
	Cores                     int                    `json:"cores"`
	LogicalCores              int                    `json:"logicalCores"`
	MemoryMb                  int                    `json:"memoryMb"`
	OsKey                     string                 `json:"osKey,omitempty"`
	OsVersionSortable         string                 `json:"osVersionSortable,omitempty"`
	ProfileID                 string                 `json:"profileId,omitempty"`
	OsqueryVersionSortable    string                 `json:"osqueryVersionSortable,omitempty"`
	UpgradeOsqueryVersion     string                 `json:"upgradeOsqueryVersion,omitempty"`
	NewEpoch                  bool                   `json:"newEpoch"`
	LastEpoch                 string                 `json:"lastEpoch,omitempty"`
	ComplianceProfileID       string                 `json:"complianceProfileId,omitempty"`
	Flags                     CustomJSONString       `json:"flags"`
	UpdatedBy                 string                 `json:"updatedBy,omitempty"`
	UpdatedAt                 string                 `json:"updatedAt,omitempty"`
	DeletedAt                 string                 `json:"deletedAt,omitempty"`
	FlagsFile                 string                 `json:"flagsFile,omitempty"`
	FlagsFileChecksum         string                 `json:"flagsFileChecksum,omitempty"`
	ActiveFlagProfileID       string                 `json:"activeFlagProfileId,omitempty"`
	ActiveFlagProfileSource   string                 `json:"activeFlagProfileSource,omitempty"`
	ActiveCustomProfileID     string                 `json:"activeCustomProfileId,omitempty"`
	ActiveCustomProfileSource string                 `json:"activeCustomProfileSource,omitempty"`
	Protect                   bool                   `json:"protect"`
	AgentVersion              string                 `json:"agentVersion,omitempty"`
	AgentVersionSortable      string                 `json:"agentVersionSortable,omitempty"`
	AgentID                   string                 `json:"agentId,omitempty"`
	AgentType                 string                 `json:"agentType,omitempty"`
	ResourceType              string                 `json:"resourceType,omitempty"`
	Arch                      string                 `json:"arch,omitempty"`
	Platform                  string                 `json:"platform,omitempty"`
	PlatformLike              string                 `json:"platformLike,omitempty"`
	AssetCapabilities         []AssetCapabilities    `json:"assetCapabilities"`
	Interfaces                []AssetInterface       `json:"interfaces"`
	Links                     []LinkItem             `json:"links"`
}

type AssetCapabilities struct {
	ID               string `json:"id"`
	AssetID          string `json:"assetId,omitempty"`
	Name             string `json:"name,omitempty"`
	Status           string `json:"status,omitempty"`
	IndividualStatus struct {
		ConfigurationStatus  string `json:"configurationStatus,omitempty"`
		FlagStatus           string `json:"flagStatus,omitempty"`
		ScheduledQueryStatus string `json:"scheduledQueryStatus,omitempty"`
	} `json:"individualStatus,omitempty"`
	CreatedAt string `json:"createdAt,omitempty"`
	UpdatedAt string `json:"updatedAt,omitempty"`
}

type AssetCloudInfo struct {
	CloudID  string `json:"cloudId,omitempty"`
	Provider string `json:"provider,omitempty"`
	Account  string `json:"account,omitempty"`
	Image    string `json:"image,omitempty"`
	Type     string `json:"type,omitempty"`
	Region   string `json:"region,omitempty"`
	Zone     string `json:"zone,omitempty"`
	Service  string `json:"service,omitempty"`
}

type AssetGroupRule struct {
	ID             string     `json:"id,omitempty"`
	Name           string     `json:"name"`
	Description    string     `json:"description,omitempty"`
	Query          string     `json:"query"`
	Interval       int        `json:"interval,omitempty"`
	OsqueryVersion string     `json:"osqueryVersion,omitempty"`
	Platform       string     `json:"platform,omitempty"`
	Enabled        bool       `json:"enabled"`
	CreatedBy      string     `json:"createdBy,omitempty"`
	UpdatedBy      string     `json:"updatedBy,omitempty"`
	CreatedAt      string     `json:"createdAt,omitempty"`
	UpdatedAt      string     `json:"updatedAt,omitempty"`
	Links          []LinkItem `json:"links,omitempty"`
}

type AssetGroupRules struct {
	Links  []LinkItem       `json:"links"`
	Items  []AssetGroupRule `json:"items"`
	Offset int              `json:"offset,omitempty"`
	Limit  int              `json:"limit,omitempty"`
}

type AssetInterface struct {
	Name      string `json:"name"`
	Mac       string `json:"mac"`
	IP        string `json:"ip"`
	Mask      string `json:"mask"`
	IsPrimary bool   `json:"isPrimary"`
}

type AssetTag struct {
	ID   string `json:"tagId,omitempty"`
	Name string `json:"-,omitempty"`
}

type AssetTags struct {
	Links  []LinkItem `json:"links"`
	Items  []AssetTag `json:"items"`
	Offset int        `json:"offset,omitempty"`
	Limit  int        `json:"limit,omitempty"`
}

type Assets struct {
	Links  []LinkItem `json:"links"`
	Items  []Asset    `json:"items"`
	Offset int        `json:"offset,omitempty"`
	Limit  int        `json:"limit,omitempty"`
}

type AtcQueries struct {
	Links  []LinkItem `json:"links"`
	Items  []AtcQuery `json:"items"`
	Offset int        `json:"offset,omitempty"`
	Limit  int        `json:"limit,omitempty"`
}

type AtcQuery struct {
	ID          string `json:"id,omitempty"`
	Name        string `json:"name,omitempty"`
	Description string `json:"description,omitempty"`
	Query       string `json:"query,omitempty"`
	OsPaths     struct {
		Darwin  []PathStruct `json:"darwin,omitempty"`
		Debian  []PathStruct `json:"debian,omitempty"`
		Windows []PathStruct `json:"windows,omitempty"`
	} `json:"osPaths,omitempty"`
	Columns []struct {
		Name        string `json:"name,omitempty"`
		Description string `json:"description,omitempty"`
	} `json:"columns,omitempty"`
	CreatedBy string     `json:"createdBy,omitempty"`
	UpdatedBy string     `json:"updatedBy,omitempty"`
	CreatedAt string     `json:"createdAt,omitempty"`
	UpdatedAt string     `json:"updatedAt,omitempty"`
	Links     []LinkItem `json:"links,omitempty"`
}

type AuditConfiguration struct {
	ID          string       `json:"id,omitempty"`
	Name        string       `json:"name,omitempty"`
	Description string       `json:"description,omitempty"`
	Framework   string       `json:"framework" validate:"required,oneof=CIS PCI CUSTOM FEDRAMP SOC2 HIPAA STIG NIST ISO VDA-TISAX"`
	Version     string       `json:"version" validate:"required,max=256,min=1"`
	OsVersion   string       `json:"osVersion" validate:"required,min=1"`
	Platform    string       `json:"platform" validate:"required,min=1"`
	TableName   string       `json:"tableName" validate:"required,min=1"`
	Sha256      string       `json:"sha256,omitempty"`
	CreatedBy   string       `json:"createdBy,omitempty"`
	UpdatedBy   string       `json:"updatedBy,omitempty"`
	CreatedAt   string       `json:"createdAt,omitempty"`
	UpdatedAt   string       `json:"updatedAt,omitempty"`
	Type        string       `json:"type,omitempty"`
	Checks      int          `json:"checks,omitempty"`
	AuditEntry  []AuditEntry `json:"auditEntities"`
	Links       []LinkItem   `json:"links,omitempty"`
}

type AuditConfigurations struct {
	Links  []LinkItem           `json:"links"`
	Items  []AuditConfiguration `json:"items"`
	Offset int                  `json:"offset,omitempty"`
	Limit  int                  `json:"limit,omitempty"`
}

type AuditEntry struct {
	ID                   string   `json:"id,omitempty"`
	AuditConfigurationID string   `json:"auditConfigurationId,omitempty"`
	AuditName            []string `json:"auditName"`
	Standard             string   `json:"standard,omitempty"`
	Version              string   `json:"version,omitempty"`
	Section              string   `json:"section,omitempty"`
	Title                string   `json:"title,omitempty"`
	Scored               bool     `json:"scored"`
	Level                string   `json:"level,omitempty"`
	Description          string   `json:"description,omitempty"`
	Rationale            string   `json:"rationale,omitempty"`
	Command              string   `json:"command,omitempty"`
	Remediation          string   `json:"remediation,omitempty"`
	ExpectedValue        string   `json:"expectedValue,omitempty"`
	AuthoritativeSource  string   `json:"authoritativeSource,omitempty"`
	Exception            string   `json:"exception,omitempty"`
	Chapter              string   `json:"chapter,omitempty"`
	CheckID              string   `json:"checkId,omitempty"`
	Enabled              bool     `json:"enabled"`
	Service              string   `json:"service,omitempty"`
	CreatedBy            string   `json:"createdBy,omitempty"`
	Score                float64  `json:"score"`
	UpdatedBy            string   `json:"updatedBy,omitempty"`
	RunCategory          int      `json:"runCategory"`
	Timeout              int      `json:"timeout"`
	CreatedAt            string   `json:"createdAt,omitempty"`
	UpdatedAt            string   `json:"updatedAt,omitempty"`
	IsManual             bool     `json:"isManual"`
}

type AutoAlertConfig struct {
	RaiseAlert      bool             `json:"raiseAlert"`
	DisableAlert    bool             `json:"disableAlert"`
	MetadataSources CustomJSONString `json:"metadataSources,omitempty"`
}

type BlockRule struct {
	ID                        string     `json:"id,omitempty"`
	Name                      string     `json:"name,omitempty"`
	Description               string     `json:"description,omitempty"`
	Platform                  string     `json:"platform,omitempty"`
	Priority                  int        `json:"priority"`
	Type                      string     `json:"type,omitempty"`
	Status                    string     `json:"status,omitempty"`
	Custom                    bool       `json:"custom"`
	EnableLockdown            bool       `json:"enableLockdown"`
	CertificateMode           string     `json:"certificateMode,omitempty"`
	HasLookupTable            bool       `json:"hasLookupTable"`
	CreatedAt                 string     `json:"createdAt,omitempty"`
	CreatedBy                 string     `json:"createdBy,omitempty"`
	UpdatedAt                 string     `json:"updatedAt,omitempty"`
	UpdatedBy                 string     `json:"updatedBy,omitempty"`
	Checks                    int        `json:"checks"`
	AssetsCount               int        `json:"assetsCount"`
	UptycsProtectEnabledCount int        `json:"uptycsProtectEnabledCount"`
	Links                     []LinkItem `json:"links,omitempty"`
}

type BlockRules struct {
	Links  []LinkItem  `json:"links"`
	Items  []BlockRule `json:"items"`
	Offset int         `json:"offset,omitempty"`
	Limit  int         `json:"limit,omitempty"`
}

type BuilderConfig struct {
	ID              string           `json:"id,omitempty"`
	TableName       string           `json:"tableName,omitempty"`
	Added           bool             `json:"added"`
	MatchesFilter   bool             `json:"matchesFilter"`
	Filters         CustomJSONString `json:"filters,omitempty"`
	Severity        string           `json:"severity,omitempty"`
	Key             string           `json:"key,omitempty"`
	ValueField      string           `json:"valueField,omitempty"`
	AutoAlertConfig AutoAlertConfig  `json:"autoAlertConfig"`
}

type BuilderConfigLite struct {
	ID string `json:"id"`
}

type Carve struct {
	ID              string `json:"id,omitempty"`
	Name            string `json:"-"` // Required but not actually in a carve
	AssetID         string `json:"assetId,omitempty"`
	Path            string `json:"path,omitempty"`
	CreatedAt       string `json:"createdAt,omitempty"`
	UpdatedAt       string `json:"updatedAt,omitempty"`
	Status          string `json:"status,omitempty"`
	DeletedUserName string `json:"deletedUserName,omitempty"`
	DeletedAt       string `json:"deletedAt,omitempty"`
	AssetHostName   string `json:"assetHostName,omitempty"`
	Offset          int    `json:"offset,omitempty"`
	Length          int    `json:"length,omitempty"`
}

type Carves struct {
	Links  []LinkItem `json:"links"`
	Items  []Carve    `json:"items"`
	Offset int        `json:"offset,omitempty"`
	Limit  int        `json:"limit,omitempty"`
}

type City struct {
	ID                 string `json:"id"`
	Name               string `json:"name,omitempty"`
	SubdivisionIsoCode string `json:"subdivisionIsoCode,omitempty"`
	SubdivisionName    string `json:"subdivisionName,omitempty"`
	CountryIsoCode     string `json:"countryIsoCode,omitempty"`
	CountryName        string `json:"countryName,omitempty"`
}

type Client struct {
	HostURL    string
	HTTPClient *http.Client
	Token      string
}

type ComplianceProfile struct {
	ID          string     `json:"id,omitempty"`
	Name        string     `json:"name,omitempty"`
	Description string     `json:"description,omitempty"`
	Custom      bool       `json:"custom"`
	Priority    int        `json:"priority,omitempty"`
	CreatedBy   string     `json:"createdBy,omitempty"`
	UpdatedBy   string     `json:"updatedBy,omitempty"`
	CreatedAt   string     `json:"createdAt,omitempty"`
	UpdatedAt   string     `json:"updatedAt,omitempty"`
	Links       []LinkItem `json:"links,omitempty"`
}

type ComplianceProfiles struct {
	Links      []LinkItem          `json:"links"`
	Items      []ComplianceProfile `json:"items"`
	Offset     int                 `json:"offset,omitempty"`
	Limit      int                 `json:"limit,omitempty"`
	Decorators []string            `json:"decorators"`
}

type Config struct {
	Host       string
	APIKey     string
	APISecret  string
	CustomerID string
}

type CustomJSONString string

type CustomProfile struct {
	ID             string           `json:"id,omitempty"`
	Name           string           `json:"name,omitempty"`
	Description    string           `json:"description,omitempty"`
	QuerySchedules CustomJSONString `json:"querySchedules,omitempty" validate:"required,min=1"`
	Priority       int              `json:"priority"`
	CreatedBy      string           `json:"createdBy,omitempty"`
	UpdatedBy      string           `json:"updatedBy,omitempty"`
	CreatedAt      string           `json:"createdAt,omitempty"`
	UpdatedAt      string           `json:"updatedAt,omitempty"`
	ResourceType   string           `json:"resourceType,omitempty"`
	Links          []LinkItem       `json:"links,omitempty"`
}

type CustomProfiles struct {
	Links  []LinkItem      `json:"links"`
	Items  []CustomProfile `json:"items"`
	Offset int             `json:"offset,omitempty"`
	Limit  int             `json:"limit,omitempty"`
}

type DNSLookupEvents struct {
	Answer   []string `json:"answer"`
	Question []string `json:"question"`
}

type DataLookupTable struct {
	ID                      string `json:"id"`
	LookupTableID           string `json:"lookupTableId"`
	LookupTableName         string `json:"lookupTableName"`
	LookupKeyName           string `json:"lookupKeyName"`
	Enabled                 bool   `json:"enabled"`
	RefreshFrequencyMinutes int    `json:"refreshFrequencyMinutes"`
	LastRefreshAt           string `json:"lastRefreshAt"`
	RefreshInfo             struct {
		Key               string `json:"key"`
		Query             string `json:"query"`
		UptDay            int    `json:"uptDay"`
		UptBatch          int    `json:"uptBatch"`
		TableName         string `json:"tableName"`
		CustomerDb        string `json:"customerDb"`
		LookupTable       string `json:"lookupTable"`
		LookupSchema      string `json:"lookupSchema"`
		LastRefreshAt     int64  `json:"lastRefreshAt"`
		RefreshFrequency  int    `json:"refreshFrequency"`
		QueryForDashboard string `json:"queryForDashboard"`
	} `json:"refreshInfo"`
}

type Destination struct {
	ID        string            `json:"id,omitempty"`
	Name      string            `json:"name,omitempty"`
	Type      string            `json:"type,omitempty" validate:"oneof=email slack http pagerduty azure"`
	Address   string            `json:"address,omitempty"`
	CreatedAt string            `json:"createdAt,omitempty"`
	CreatedBy string            `json:"createdBy,omitempty"`
	UpdatedAt string            `json:"updatedAt,omitempty"`
	UpdatedBy string            `json:"updatedBy,omitempty"`
	Enabled   bool              `json:"enabled"`
	Default   bool              `json:"default"`
	Config    DestinationConfig `json:"config,omitempty"`
	Template  struct {
		Template string `json:"template,omitempty"`
	} `json:"template,omitempty"`
	Links []LinkItem `json:"links,omitempty"`
}

type DestinationConfig struct {
	Sender          string           `json:"sender,omitempty"`
	Method          string           `json:"method,omitempty"`
	Username        string           `json:"username,omitempty"`
	Password        string           `json:"password,omitempty"`
	DataKey         string           `json:"dataKey,omitempty"`
	Token           string           `json:"token,omitempty"`
	SlackAttachment bool             `json:"slackAttachment,omitempty"` //noqa
	Headers         CustomJSONString `json:"headers,omitempty"`
}

type Destinations struct {
	Links  []LinkItem    `json:"links"`
	Items  []Destination `json:"items"`
	Offset int           `json:"offset,omitempty"`
	Limit  int           `json:"limit,omitempty"`
}

type EbpfDNSLookupEvents struct {
	Answer   []string `json:"answer"`
	Question []string `json:"question"`
}

type EventExcludeProfile struct {
	ID           string                      `json:"id,omitempty"`
	Name         string                      `json:"name,omitempty"`
	Description  string                      `json:"description,omitempty"`
	Priority     int                         `json:"priority,omitempty"`
	Metadata     EventExcludeProfileMetadata `json:"metadata,omitempty"`
	MetadataJSON string                      `json:"metadataJson,omitempty"`
	ResourceType string                      `json:"resourceType,omitempty"`
	Platform     string                      `json:"platform,omitempty"`
	CreatedAt    string                      `json:"createdAt,omitempty"`
	CreatedBy    string                      `json:"createdBy,omitempty"`
	UpdatedAt    string                      `json:"updatedAt,omitempty"`
	UpdatedBy    string                      `json:"updatedBy,omitempty"`
	Links        []LinkItem                  `json:"links,omitempty"`
}

type EventExcludeProfileMetadata struct {
	DNSLookupEvents     DNSLookupEvents     `json:"dns_lookup_events,omitempty"`
	UserEvents          UserEvents          `json:"user_events,omitempty"`
	SocketEvents        SocketEvents        `json:"socket_events,omitempty"`
	ProcessEvents       ProcessEvents       `json:"process_events,omitempty"`
	RegistryEvents      RegistryEvents      `json:"registry_events,omitempty"`
	ProcessFileEvents   ProcessFileEvents   `json:"process_file_events,omitempty"`
	HTTPEvents          HTTPEvents          `json:"http_events,omitempty"`
	EbpfDNSLookupEvents EbpfDNSLookupEvents `json:"ebpf_dns_lookup_events,omitempty"`
}

type EventExcludeProfiles struct {
	Links  []LinkItem            `json:"links"`
	Items  []EventExcludeProfile `json:"items"`
	Offset int                   `json:"offset,omitempty"`
	Limit  int                   `json:"limit,omitempty"`
}

type EventRule struct {
	ID            string          `json:"id,omitempty"`
	Name          string          `json:"name,omitempty"`
	Description   string          `json:"description,omitempty"`
	Code          string          `json:"code,omitempty"`
	Type          string          `json:"type,omitempty"`
	Rule          string          `json:"rule,omitempty"`
	Grouping      string          `json:"grouping,omitempty"`
	Enabled       bool            `json:"enabled"`
	Custom        bool            `json:"custom"`
	CreatedAt     string          `json:"createdAt,omitempty"`
	IsInternal    bool            `json:"isInternal"`
	EventTags     []string        `json:"eventTags"`
	CreatedBy     string          `json:"createdBy,omitempty"`
	UpdatedAt     string          `json:"updatedAt,omitempty"`
	UpdatedBy     string          `json:"updatedBy,omitempty"`
	GroupingL2    string          `json:"groupingL2,omitempty"`
	GroupingL3    string          `json:"groupingL3,omitempty"`
	Score         string          `json:"score,omitempty"`
	Lock          bool            `json:"lock"`
	Exceptions    []RuleException `json:"exceptions"`
	SQLConfig     *SQLConfig      `json:"sqlConfig,omitempty"`
	BuilderConfig *BuilderConfig  `json:"builderConfig"`
	Links         []LinkItem      `json:"links,omitempty"`
}

type EventRules struct {
	Links  []LinkItem  `json:"links"`
	Items  []EventRule `json:"items"`
	Offset int         `json:"offset,omitempty"`
	Limit  int         `json:"limit,omitempty"`
}

type Exception struct {
	ID              string           `json:"id"`
	Name            string           `json:"name,omitempty"`
	Description     string           `json:"description,omitempty"`
	ExceptionType   string           `json:"exceptionType,omitempty"`
	CreatedBy       string           `json:"createdBy,omitempty"`
	CreatedAt       string           `json:"createdAt,omitempty"`
	UpdatedAt       string           `json:"updatedAt,omitempty"`
	UpdatedBy       string           `json:"updatedBy,omitempty"`
	TableName       string           `json:"tableName,omitempty"`
	IsGlobal        bool             `json:"isGlobal"`
	Custom          bool             `json:"custom"`
	Disabled        bool             `json:"disabled"`
	CloseOpenAlerts bool             `json:"closeOpenAlerts"`
	Rule            CustomJSONString `json:"rule,omitempty"`
	Links           []LinkItem       `json:"links"`
}

type Exceptions struct {
	Links  []LinkItem  `json:"links"`
	Items  []Exception `json:"items"`
	Offset int         `json:"offset,omitempty"`
	Limit  int         `json:"limit,omitempty"`
}

type FilePathGroup struct {
	ID                    string                   `json:"id,omitempty"`
	Name                  string                   `json:"name,omitempty"`
	Description           string                   `json:"description,omitempty"`
	Grouping              string                   `json:"grouping,omitempty"`
	IncludePaths          []string                 `json:"includePaths"`
	IncludePathExtensions []string                 `json:"includePathExtensions"`
	ExcludePaths          []string                 `json:"excludePaths"`
	Custom                bool                     `json:"custom" validate:"required"`
	CheckSignature        bool                     `json:"checkSignature"`
	FileAccesses          bool                     `json:"fileAccesses"`
	ExcludeProcessNames   []string                 `json:"excludeProcessNames"`
	PriorityPaths         []string                 `json:"priorityPaths"`
	CreatedBy             string                   `json:"createdBy,omitempty"`
	UpdatedBy             string                   `json:"updatedBy,omitempty"`
	CreatedAt             string                   `json:"createdAt,omitempty"`
	UpdatedAt             string                   `json:"updatedAt,omitempty"`
	Signatures            []FilePathGroupSignature `json:"signatures" validate:"required,min=0"`
	YaraGroupRules        []YaraGroupRule          `json:"yaraGroupRules" validate:"required,min=0"`
	Links                 []LinkItem               `json:"links,omitempty"`
}

type FilePathGroupSignature struct {
	ID          string   `json:"id,omitempty"`
	Name        string   `json:"name,omitempty"`
	Description string   `json:"description,omitempty"`
	Paths       []string `json:"paths"`
	CreatedBy   string   `json:"createdBy,omitempty"`
	UpdatedBy   string   `json:"updatedBy,omitempty"`
	CreatedAt   string   `json:"createdAt,omitempty"`
	UpdatedAt   string   `json:"updatedAt,omitempty"`
}

type FilePathGroups struct {
	Links  []LinkItem      `json:"links"`
	Items  []FilePathGroup `json:"items"`
	Offset int             `json:"offset,omitempty"`
	Limit  int             `json:"limit,omitempty"`
}

type FlagProfile struct {
	ID           string           `json:"id,omitempty"`
	Custom       bool             `json:"custom"`
	Name         string           `json:"name,omitempty"`
	Description  string           `json:"description,omitempty"`
	Priority     int              `json:"priority"`
	Flags        CustomJSONString `json:"flags,omitempty" validate:"required,min=1"`
	OsFlags      CustomJSONString `json:"osFlags,omitempty"`
	CreatedBy    string           `json:"createdBy,omitempty"`
	UpdatedBy    string           `json:"updatedBy,omitempty"`
	CreatedAt    string           `json:"createdAt,omitempty"`
	UpdatedAt    string           `json:"updatedAt,omitempty"`
	ResourceType string           `json:"resourceType,omitempty"`
	Links        []LinkItem       `json:"links,omitempty"`
}

type FlagProfiles struct {
	Links  []LinkItem    `json:"links"`
	Items  []FlagProfile `json:"items"`
	Offset int           `json:"offset,omitempty"`
	Limit  int           `json:"limit,omitempty"`
}

type HTTPEvents struct {
	Host []string `json:"host"`
}

type LinkItem struct {
	Rel   string `json:"rel,omitempty"`
	Title string `json:"title,omitempty"`
	Href  string `json:"href,omitempty"`
}

type LookupTable struct {
	ID              string               `json:"id"`
	Name            string               `json:"name"`
	Description     string               `json:"description,omitempty"`
	Active          bool                 `json:"active"`
	IDField         string               `json:"idField,omitempty"`
	RowCount        int                  `json:"rowCount"`
	ForRuleEngine   bool                 `json:"forRuleEngine"`
	CreatedBy       string               `json:"createdBy"`
	UpdatedBy       string               `json:"updatedBy"`
	CreatedAt       string               `json:"createdAt"`
	UpdatedAt       string               `json:"updatedAt"`
	DataLookupTable DataLookupTable      `json:"dataLookupTable,omitempty"`
	FetchRowsquery  string               `json:"fetchRowsquery"`
	DataRows        []LookupTableDataRow `json:"-,omitempty"`
	Links           []LinkItem           `json:"links"`
}

type LookupTableDataRow struct {
	ID            string           `json:"id"`
	Name          string           `json:"-"` //Not provided
	LookupTableID string           `json:"lookupTableId"`
	IDFieldValue  string           `json:"idFieldValue"`
	Data          CustomJSONString `json:"data"`
	CreatedAt     string           `json:"createdAt"`
}

type LookupTables struct {
	Links  []LinkItem    `json:"links"`
	Items  []LookupTable `json:"items"`
	Offset int           `json:"offset,omitempty"`
	Limit  int           `json:"limit,omitempty"`
}

type MockClient struct {
	DoFunc func(req *http.Request) (*http.Response, error)
}

type ObjectGroup struct {
	ID               string        `json:"id,omitempty"`
	Name             string        `json:"name,omitempty"`
	Key              string        `json:"key,omitempty"`
	Value            string        `json:"value,omitempty"`
	AssetGroupRuleID string        `json:"assetGroupRuleId,omitempty"`
	ObjectGroupID    string        `json:"objectGroupId,omitempty"`
	UserID           string        `json:"userid,omitempty"`
	RoleID           string        `json:"roleid,omitempty"`
	Description      string        `json:"description,omitempty"`
	Secret           string        `json:"secret,omitempty"`
	ObjectType       string        `json:"objectType,omitempty"`
	Custom           bool          `json:"custom"`
	RetentionDays    int           `json:"retentionDays,omitempty"`
	RangerID         int           `json:"rangerId,omitempty"`
	CreatedBy        string        `json:"createdBy,omitempty"`
	UpdatedBy        string        `json:"updatedBy,omitempty"`
	CreatedAt        string        `json:"createdAt,omitempty"`
	UpdatedAt        string        `json:"updatedAt,omitempty"`
	Destinations     []Destination `json:"destinations"`
}

type ObjectGroups struct {
	Links  []LinkItem    `json:"links"`
	Items  []ObjectGroup `json:"items"`
	Offset int           `json:"offset,omitempty"`
	Limit  int           `json:"limit,omitempty"`
}

type PathStruct struct {
	Path string `json:"path,omitempty"`
}

type ProcessEvents struct {
	Path []string `json:"path"`
}

type ProcessFileEvents struct {
	Path       []string `json:"path"`
	Operation  []string `json:"operation"`
	Executable []string `json:"executable"`
}

type Queries struct {
	Links  []LinkItem `json:"links"`
	Items  []Query    `json:"items"`
	Offset int        `json:"offset,omitempty"`
	Limit  int        `json:"limit,omitempty"`
}

type Query struct {
	ID          string           `json:"id,omitempty"`
	Name        string           `json:"name,omitempty"`
	Description string           `json:"description,omitempty"`
	Query       string           `json:"query,omitempty"`
	Removed     bool             `json:"removed"`
	Version     string           `json:"version,omitempty"`
	Interval    int              `json:"interval"`
	Platform    string           `json:"platform,omitempty"`
	Snapshot    bool             `json:"snapshot"`
	RunNow      bool             `json:"runNow"`
	Value       string           `json:"value,omitempty"`
	QuerypackID string           `json:"querypackId,omitempty"`
	TableName   string           `json:"tableName,omitempty"`
	DataTypes   CustomJSONString `json:"dataTypes,omitempty"` //This is super ephemeral
	Verified    bool             `json:"verified"`
	CreatedBy   string           `json:"createdBy,omitempty"`
	UpdatedBy   string           `json:"updatedBy,omitempty"`
	CreatedAt   string           `json:"createdAt,omitempty"`
	UpdatedAt   string           `json:"updatedAt,omitempty"`
}

type QueryError struct {
	Message struct {
		Detail string `json:"detail"`
	} `json:"message"`
}

type QueryJob struct {
	ID              string              `json:"id"`
	Name            string              `json:"name"`
	Query           string              `json:"query" validate:"required"`
	Type            string              `json:"type" validate:"required,oneof=global"`
	Parameters      []QueryJobParameter `json:"parameters,omitempty"`
	ParameterValues struct {
		From string `json:"from,omitempty"`
		To   string `json:"to,omitempty"`
	} `json:"parameterValues,omitempty"`
	QueryID           string           `json:"queryId,omitempty"`
	Status            string           `json:"status,omitempty"`
	RowCount          int              `json:"rowCount"`
	Columns           []QueryJobColumn `json:"columns,omitempty"`
	StartTime         string           `json:"startTime,omitempty"`
	EndTime           string           `json:"endTime,omitempty"`
	Error             QueryError       `json:"error"`
	Purged            bool             `json:"purged"`
	IncompleteResults bool             `json:"incompleteResults"`
	AlertID           string           `json:"alertId,omitempty"`
	CreatedBy         string           `json:"createdBy"`
	UpdatedBy         string           `json:"updatedBy"`
	CreatedAt         string           `json:"createdAt"`
	UpdatedAt         string           `json:"updatedAt"`
	Source            string           `json:"source,omitempty"`
	ResultStore       string           `json:"resultStore,omitempty"`
	AgentType         string           `json:"agentType,omitempty"`
	ResourceType      string           `json:"resourceType,omitempty"`
	Links             []LinkItem       `json:"links"`
}

type QueryJobColumn struct {
	Name         string `json:"name"`
	Type         string `json:"type"`
	OriginalName string `json:"originalName"`
	Link         string `json:"link"`
}

type QueryJobParameter struct {
	Key          string `json:"key"`
	DataType     string `json:"dataType"`
	Multiple     bool   `json:"multiple"`
	Optional     bool   `json:"optional"`
	DefaultValue string `json:"defaultValue"`
}

type QueryJobResult struct {
	QueryStats struct {
		CPUTimeMillis     int `json:"cpuTimeMillis"`
		ProcessedRows     int `json:"processedRows"`
		ProcessedBytes    int `json:"processedBytes"`
		ElapsedTimeMillis int `json:"elapsedTimeMillis"`
	} `json:"queryStats"`
	Status      string           `json:"status"`
	ID          string           `json:"id"`
	Name        string           `json:"-"`
	RowDataHash string           `json:"rowDataHash"`
	Error       interface{}      `json:"error"`
	EndTime     string           `json:"endTime"`
	StartTime   string           `json:"startTime"`
	RowCount    int              `json:"rowCount"`
	ResultStore string           `json:"resultStore"`
	RowData     CustomJSONString `json:"rowData"`
	CreatedAt   string           `json:"createdAt"`
	RowNumber   int              `json:"rowNumber"`
	QueryJobID  string           `json:"queryJobId"`
	Columns     []QueryJobColumn `json:"columns"`
	Offset      int              `json:"offset"`
	Limit       int              `json:"limit"`
	Items       []QueryJobResult `json:"items"`
	Links       []LinkItem       `json:"links"`
}

type QueryJobResultsStats struct {
	CPUTimeMillis     int `json:"cpuTimeMillis"`
	ProcessedRows     int `json:"processedRows"`
	ProcessedBytes    int `json:"processedBytes"`
	ElapsedTimeMillis int `json:"elapsedTimeMillis"`
}

type QueryJobs struct {
	Links  []LinkItem `json:"links"`
	Items  []QueryJob `json:"items"`
	Offset int        `json:"offset,omitempty"`
	Limit  int        `json:"limit,omitempty"`
}

type Querypack struct {
	ID               string           `json:"id,omitempty"`
	Name             string           `json:"name,omitempty"`
	Description      string           `json:"description" validate:"required,max=1024,min=1"`
	Type             string           `json:"type" validate:"required,oneof=compliance default hardware incident system vulnerability"`
	AdditionalLogger bool             `json:"additionalLogger"`
	Custom           bool             `json:"custom"`
	CreatedBy        string           `json:"createdBy,omitempty"`
	UpdatedBy        string           `json:"updatedBy,omitempty"`
	CreatedAt        string           `json:"createdAt,omitempty"`
	UpdatedAt        string           `json:"updatedAt,omitempty"`
	IsInternal       bool             `json:"isInternal"`
	ResourceType     string           `json:"resourceType"`
	Queries          []Query          `json:"queries"`
	Conf             CustomJSONString `json:"conf,omitempty"`
	Links            []LinkItem       `json:"links,omitempty"`
}

type Querypacks struct {
	Links  []LinkItem  `json:"links"`
	Items  []Querypack `json:"items"`
	Offset int         `json:"offset,omitempty"`
	Limit  int         `json:"limit,omitempty"`
}

type RegistryEvents struct {
	Action []string `json:"action"`
}

type RegistryPath struct {
	ID                   string     `json:"id,omitempty"`
	Name                 string     `json:"name,omitempty"`
	Description          string     `json:"description,omitempty"`
	Grouping             string     `json:"grouping,omitempty"`
	IncludeRegistryPaths []string   `json:"includeRegistryPaths" validate:"required,min=1"`
	RegAccesses          bool       `json:"regAccesses"`
	ExcludeRegistryPaths []string   `json:"excludeRegistryPaths"`
	Custom               bool       `json:"custom"`
	CreatedBy            string     `json:"createdBy,omitempty"`
	UpdatedBy            string     `json:"updatedBy,omitempty"`
	CreatedAt            string     `json:"createdAt,omitempty"`
	UpdatedAt            string     `json:"updatedAt,omitempty"`
	Links                []LinkItem `json:"links,omitempty"`
}

type RegistryPaths struct {
	Links  []LinkItem     `json:"links"`
	Items  []RegistryPath `json:"items"`
	Offset int            `json:"offset,omitempty"`
	Limit  int            `json:"limit,omitempty"`
}

type Role struct {
	ID                   string        `json:"id,omitempty"`
	Name                 string        `json:"name,omitempty"`
	Description          string        `json:"description,omitempty"`
	Permissions          []string      `json:"permissions" validate:"required,min=0"`
	Custom               bool          `json:"custom"`
	Hidden               bool          `json:"hidden"`
	CreatedBy            string        `json:"createdBy,omitempty"`
	UpdatedBy            string        `json:"updatedBy,omitempty"`
	CreatedAt            string        `json:"createdAt,omitempty"`
	UpdatedAt            string        `json:"updatedAt,omitempty"`
	NoMinimalPermissions bool          `json:"noMinimalPermissions"`
	RoleObjectGroups     []ObjectGroup `json:"roleObjectGroups" validate:"required,min=0"`
}

type Roles struct {
	Links  []LinkItem `json:"links"`
	Items  []Role     `json:"items"`
	Offset int        `json:"offset,omitempty"`
	Limit  int        `json:"limit,omitempty"`
}

type RuleException struct {
	ID          string `json:"id,omitempty"`
	RuleID      string `json:"ruleId,omitempty"`
	ExceptionID string `json:"exceptionId,omitempty"`
	CreatedAt   string `json:"createdAt,omitempty"`
	UpdatedAt   string `json:"updatedAt,omitempty"`
}

type SQLConfig struct {
	IntervalSeconds int `json:"intervalSeconds,omitempty"`
}

type SocketEvents struct {
	RemoteAddress []string `json:"remote_address"`
}

type Tag struct {
	ID                          string                   `json:"id,omitempty"`
	Name                        string                   `json:"-"` // There is no name
	Value                       string                   `json:"value,omitempty"`
	Key                         string                   `json:"key"`
	CreatedBy                   string                   `json:"createdBy,omitempty"`
	UpdatedBy                   string                   `json:"updatedBy,omitempty"`
	FlagProfileID               string                   `json:"flagProfileId,omitempty"`
	CustomProfileID             string                   `json:"customProfileId,omitempty"`
	ComplianceProfileID         string                   `json:"complianceProfileId,omitempty"`
	ProcessBlockRuleID          string                   `json:"processBlockRuleId,omitempty"`
	DNSBlockRuleID              string                   `json:"dnsBlockRuleId,omitempty"`
	WindowsDefenderPreferenceID string                   `json:"windowsDefenderPreferenceId,omitempty"`
	TagRuleID                   string                   `json:"tagRuleId,omitempty"`
	Tag                         string                   `json:"tag,omitempty"`
	Custom                      bool                     `json:"custom"`
	System                      bool                     `json:"system"`
	CreatedAt                   string                   `json:"createdAt,omitempty"`
	ExpireAt                    string                   `json:"expireAt,omitempty"`
	Status                      string                   `json:"status,omitempty"`
	Source                      string                   `json:"source,omitempty"`
	UpdatedAt                   string                   `json:"updatedAt,omitempty"`
	ResourceType                string                   `json:"resourceType,omitempty"`
	FilePathGroups              []TagConfigurationObject `json:"filePathGroups" validate:"required,min=0"`
	EventExcludeProfiles        []TagConfigurationObject `json:"eventExcludeProfiles" validate:"required,min=0"`
	RegistryPaths               []TagConfigurationObject `json:"registryPaths" validate:"required,min=0"`
	Querypacks                  []TagConfigurationObject `json:"querypacks" validate:"required,min=0"`
	YaraGroupRules              []TagConfigurationObject `json:"yaraGroupRules" validate:"required,min=0"`
	AuditConfigurations         []TagConfigurationObject `json:"auditConfigurations" validate:"required,min=0"`
}

type TagConfiguration Tag

type TagConfigurationObject struct {
	ID                     string                         `json:"id,omitempty"`
	Name                   string                         `json:"name,omitempty"`
	AuditConfigurationTag  *TagConfigurationObjectDetails `json:"AuditConfigurationTag,omitempty"`
	YaraGroupRuleTag       *TagConfigurationObjectDetails `json:"YaraGroupRuleTag,omitempty"`
	QuerypackTag           *TagConfigurationObjectDetails `json:"QuerypackTag,omitempty"`
	RegistryPathTag        *TagConfigurationObjectDetails `json:"RegistryPathTag,omitempty"`
	EventExcludeProfileTag *TagConfigurationObjectDetails `json:"EventExcludeProfileTag,omitempty"`
	FilePathGroupTag       *TagConfigurationObjectDetails `json:"FilePathGroupTag,omitempty"`
	Links                  []LinkItem                     `json:"links,omitempty"`
}

type TagConfigurationObjectDetails struct {
	ID                   string `json:"id,omitempty"`
	AuditConfigurationID string `json:"auditConfigurationId,omitempty"`
	YaraGroupRuleID      string `json:"yaraGroupRuleId,omitempty"`
	QuerypackID          string `json:"querypackId,omitempty"`
	RegistryPathID       string `json:"registryPathId,omitempty"`
	EventExcludeProfile  string `json:"eventExcludeProfile,omitempty"`
	FilePathGroupID      string `json:"filePathGroupId,omitempty"`
	TagID                string `json:"tagId,omitempty"`
	CreatedBy            string `json:"createdBy,omitempty"`
	CreatedAt            string `json:"createdAt,omitempty"`
}

type TagConfigurations struct {
	Links  []LinkItem         `json:"links"`
	Items  []TagConfiguration `json:"items"`
	Offset int                `json:"offset,omitempty"`
	Limit  int                `json:"limit,omitempty"`
}

type TagRule struct {
	ID             string `json:"id,omitempty"`
	Name           string `json:"name,omitempty" validate:"required,max=255,min=1"`
	Description    string `json:"description,omitempty"`
	Query          string `json:"query,omitempty" validate:"required"`
	Source         string `json:"source,omitempty" validate:"required,oneof=global realtime"`
	RunOnce        bool   `json:"runOnce"`
	Interval       int    `json:"interval,omitempty" validate:"required_if=RunOnce false"`
	OSqueryVersion string `json:"osqueryVersion,omitempty"`
	Platform       string `json:"platform,omitempty" validate:"required_if=Source realtime"`
	Enabled        bool   `json:"enabled"`
	System         bool   `json:"system"`
	LastRunAt      string `json:"lastRunAt,omitempty"`
	CreatedBy      string `json:"createdBy,omitempty"`
	UpdatedBy      string `json:"updatedBy,omitempty"`
	CreatedAt      string `json:"createdAt,omitempty"`
	UpdatedAt      string `json:"updatedAt,omitempty"`
	ResourceType   string `json:"resourceType,omitempty"`
}

type TagRules struct {
	Links  []LinkItem `json:"links"`
	Items  []TagRule  `json:"items"`
	Offset int        `json:"offset,omitempty"`
	Limit  int        `json:"limit,omitempty"`
}

type Tags struct {
	Links  []LinkItem `json:"links"`
	Items  []Tag      `json:"items"`
	Offset int        `json:"offset,omitempty"`
	Limit  int        `json:"limit,omitempty"`
}

type User struct {
	ID                  string        `json:"id,omitempty"`
	Name                string        `json:"name"`
	Email               string        `json:"email,omitempty" validate:"required_if=Bot false"`
	Phone               string        `json:"phone,omitempty" validate:"required_if=Bot false"`
	Active              bool          `json:"active"`
	SuperAdmin          bool          `json:"superAdmin"`
	Bot                 bool          `json:"bot" validate:"excluded_with=Email"`
	Support             bool          `json:"support"`
	PriorLogin          bool          `json:"priorLogin"`
	ImageURL            string        `json:"imageUrl,omitempty"`
	Password            string        `json:"password,omitempty"`
	MaxIdleTimeMins     int           `json:"maxIdleTimeMins" validate:"required,max=360,min=1"`
	AlertHiddenColumns  []string      `json:"alertHiddenColumns" validate:"required,min=0"`
	UpdatedAt           string        `json:"updatedAt,omitempty"`
	CreatedAt           string        `json:"createdAt,omitempty"`
	LastUpdatedByUptycs string        `json:"lastUpdatedByUptycs"`
	Roles               []Role        `json:"roles" validate:"required,min=0"`
	UserObjectGroups    []ObjectGroup `json:"userObjectGroups" validate:"required,min=0"`
}

type UserEvents struct {
	Message []string `json:"message"`
}

type Users struct {
	Links  []LinkItem `json:"links"`
	Items  []User     `json:"items"`
	Offset int        `json:"offset,omitempty"`
	Limit  int        `json:"limit,omitempty"`
}

type WindowsDefenderPreference struct {
	ID                                            string     `json:"id,omitempty"`
	Name                                          string     `json:"name,omitempty"`
	Description                                   string     `json:"description,omitempty"`
	Priority                                      int        `json:"priority"`
	RealTimeScanDirection                         int        `json:"realTimeScanDirection"`
	CheckForSignaturesBeforeRunningScan           bool       `json:"checkForSignaturesBeforeRunningScan"`
	ScanOnlyIfIdleEnabled                         bool       `json:"scanOnlyIfIdleEnabled"`
	ScanScheduleDay                               int        `json:"scanScheduleDay"`
	SignatureDisableUpdateOnStartupWithoutEngine  bool       `json:"signatureDisableUpdateOnStartupWithoutEngine"`
	SignatureScheduleDay                          int        `json:"signatureScheduleDay"`
	DisablePrivacyMode                            bool       `json:"disablePrivacyMode"`
	RandomizeScheduleTaskTimes                    bool       `json:"randomizeScheduleTaskTimes"`
	DisableBehaviorMonitoring                     bool       `json:"disableBehaviorMonitoring"`
	DisableIntrusionPreventionSystem              bool       `json:"disableIntrusionPreventionSystem"`
	DisableIOAVProtection                         bool       `json:"disableIOAVProtection"`
	DisableRealtimeMonitoring                     bool       `json:"disableRealtimeMonitoring"`
	DisableScriptScanning                         bool       `json:"disableScriptScanning"`
	DisableArchiveScanning                        bool       `json:"disableArchiveScanning"`
	DisableCatchupFullScan                        bool       `json:"disableCatchupFullScan"`
	DisableCatchupQuickScan                       bool       `json:"disableCatchupQuickScan"`
	DisableEmailScanning                          bool       `json:"disableEmailScanning"`
	DisableRemovableDriveScanning                 bool       `json:"disableRemovableDriveScanning"`
	DisableRestorePoint                           bool       `json:"disableRestorePoint"`
	DisableScanningMappedNetworkDrivesForFullScan bool       `json:"disableScanningMappedNetworkDrivesForFullScan"`
	DisableScanningNetworkFiles                   bool       `json:"disableScanningNetworkFiles"`
	UILockdown                                    bool       `json:"uILockdown"`
	Force                                         bool       `json:"force"`
	CreatedBy                                     string     `json:"createdBy,omitempty"`
	UpdatedBy                                     string     `json:"updatedBy,omitempty"`
	CreatedAt                                     string     `json:"createdAt,omitempty"`
	UpdatedAt                                     string     `json:"updatedAt,omitempty"`
	Links                                         []LinkItem `json:"links"`
}

type WindowsDefenderPreferences struct {
	Links  []LinkItem                  `json:"links"`
	Items  []WindowsDefenderPreference `json:"items"`
	Offset int                         `json:"offset,omitempty"`
	Limit  int                         `json:"limit,omitempty"`
}

type YaraGroupRule struct {
	ID          string     `json:"id,omitempty"`
	Name        string     `json:"name,omitempty"`
	Description string     `json:"description,omitempty"`
	Rules       string     `json:"rules,omitempty"`
	Custom      bool       `json:"custom"`
	CreatedBy   string     `json:"createdBy,omitempty"`
	UpdatedBy   string     `json:"updatedBy,omitempty"`
	CreatedAt   string     `json:"createdAt,omitempty"`
	UpdatedAt   string     `json:"updatedAt,omitempty"`
	Links       []LinkItem `json:"links,omitempty"`
}

type YaraGroupRules struct {
	Links  []LinkItem      `json:"links"`
	Items  []YaraGroupRule `json:"items"`
	Offset int             `json:"offset,omitempty"`
	Limit  int             `json:"limit,omitempty"`
}