Changes to Search

added the optional property list/items/nhiUnownedEvidence to the response with the 200 status

added the new optional request property assigneeIdentityUserIds

added the new optional request property edgeIds

request property ownerIdentityUserIds deprecated

added the new FINDING_TYPE_EDGE enum value to the request property findingTypes/items

added the new FINDING_TYPE_MCP_GATEWAY_TOOL_CALL_RISK enum value to the request property findingTypes/items

added the new FINDING_TYPE_SHADOW_APP enum value to the request property findingTypes/items

added the new FINDING_TYPE_SHADOW_MCP enum value to the request property findingTypes/items

added the optional property list/items/assigneeIdentityUserId to the response with the 200 status

added the optional property list/items/credentialExpiring/oneOf[subschema #1: Credential Expiring Type]/appResourceSecret to the response with the 200 status

added the optional property list/items/edgeFinding to the response with the 200 status

added the optional property list/items/edgeFindingEvidence to the response with the 200 status

added the optional property list/items/mcpGatewayToolCallRisk to the response with the 200 status

added the optional property list/items/mcpGatewayToolCallRiskEvidence to the response with the 200 status

added the optional property list/items/objectPermissions to the response with the 200 status

added the optional property list/items/shadowApp to the response with the 200 status

added the optional property list/items/shadowMcp to the response with the 200 status

added the optional property list/items/shadowMcpEvidence to the response with the 200 status

added the optional property list/items/usageResourceTarget to the response with the 200 status

added the new DEACTIVATED_OWNER_SOURCE_SECRET_RUN_AS_IDENTITY enum value to the list/items/deactivatedOwner/oneOf[subschema #1: Deactivated Owner Type]/source response property for the response status 200

added the new FINDING_TYPE_CONNECTOR_SYNC_FAILING enum value to the request property findingTypes/items

added the optional property list/items/connectorSyncFailing to the response with the 200 status

added the optional property list/items/connectorSyncFailingEvidence to the response with the 200 status

the request property appIds became not nullable

the request property appUserIds became not nullable

the request property findingTypes became not nullable

the request property severities became not nullable

the request property states became not nullable

the response property list/items/createdAt became nullable for the status 200

the response property list/items/firstObservedAt became nullable for the status 200

the response property list/items/lastObservedAt became nullable for the status 200

the response property list/items/resolvedAt became nullable for the status 200

the response property list/items/riskAcceptanceExpiresAt became nullable for the status 200

the response property list/items/snoozeUntil became nullable for the status 200

the response property list/items/updatedAt became nullable for the status 200

added c1.api.finding.v1.AppUserTarget subschema #2 to the list/items/appUserTarget response property oneOf list for the response status 200

added c1.api.finding.v1.DecoyCredentialUsedType subschema #2 to the list/items/decoyCredentialUsed response property oneOf list for the response status 200

added c1.api.finding.v1.FindingOwnerRef subschema #2 to the list/items/assignedOwner response property oneOf list for the response status 200

added c1.api.finding.v1.FindingOwnerRef subschema #2 to the list/items/computedOwner response property oneOf list for the response status 200

added c1.api.finding.v1.FindingRiskScore subschema #2 to the list/items/riskScore response property oneOf list for the response status 200

added c1.api.finding.v1.IdentityUserTarget subschema #2 to the list/items/identityUserTarget response property oneOf list for the response status 200

added c1.api.finding.v1.ServiceAccountMisclassificationEvidence subschema #2 to the list/items/serviceAccountMisclassificationEvidence response property oneOf list for the response status 200

added c1.api.finding.v1.ServiceAccountMisclassificationType subschema #2 to the list/items/serviceAccountMisclassification response property oneOf list for the response status 200

added c1.api.finding.v1.SimilarUsernameMatchEvidence subschema #2 to the list/items/similarUsernameMatchEvidence response property oneOf list for the response status 200

added c1.api.finding.v1.SimilarUsernameMatchType subschema #2 to the list/items/similarUsernameMatch response property oneOf list for the response status 200

the list/items/appUserTarget response's property type changed from object to no type for status 200

the list/items/assignedOwner response's property type changed from object to no type for status 200

the list/items/computedOwner response's property type changed from object to no type for status 200

the list/items/decoyCredentialUsed response's property type changed from object to no type for status 200

the list/items/identityUserTarget response's property type changed from object to no type for status 200

the list/items/riskScore response's property type changed from object to no type for status 200

the list/items/serviceAccountMisclassification response's property type changed from object to no type for status 200

the list/items/serviceAccountMisclassificationEvidence response's property type changed from object to no type for status 200

the list/items/similarUsernameMatch response's property type changed from object to no type for status 200

the list/items/similarUsernameMatchEvidence response's property type changed from object to no type for status 200

removed the optional property list/items/appUserTarget/appId from the response with the 200 status

removed the optional property list/items/appUserTarget/appUserId from the response with the 200 status

removed the optional property list/items/assignedOwner/appOwnerAppId from the response with the 200 status

removed the optional property list/items/assignedOwner/identityUserId from the response with the 200 status

removed the optional property list/items/assignedOwner/managerOfUserId from the response with the 200 status

removed the optional property list/items/assignedOwner/userSetId from the response with the 200 status

removed the optional property list/items/computedOwner/appOwnerAppId from the response with the 200 status

removed the optional property list/items/computedOwner/identityUserId from the response with the 200 status

removed the optional property list/items/computedOwner/managerOfUserId from the response with the 200 status

removed the optional property list/items/computedOwner/userSetId from the response with the 200 status

removed the optional property list/items/decoyCredentialUsed/decoyId from the response with the 200 status

removed the optional property list/items/decoyCredentialUsed/kind from the response with the 200 status

removed the optional property list/items/identityUserTarget/identityUserId from the response with the 200 status

removed the optional property list/items/riskScore/originalScore from the response with the 200 status

removed the optional property list/items/riskScore/overrideByUserId from the response with the 200 status

removed the optional property list/items/riskScore/overrideScore from the response with the 200 status

removed the optional property list/items/riskScore/riskFactors from the response with the 200 status

removed the optional property list/items/riskScore/score from the response with the 200 status

removed the optional property list/items/riskScore/systemScore from the response with the 200 status

removed the optional property list/items/serviceAccountMisclassification/currentAccountType from the response with the 200 status

removed the optional property list/items/serviceAccountMisclassification/detectedAccountType from the response with the 200 status

removed the optional property list/items/serviceAccountMisclassificationEvidence/detectionReason from the response with the 200 status

removed the optional property list/items/similarUsernameMatch/proposedIdentityUserId from the response with the 200 status

removed the optional property list/items/similarUsernameMatchEvidence/appUsername from the response with the 200 status

removed the optional property list/items/similarUsernameMatchEvidence/identityUsername from the response with the 200 status

removed the optional property list/items/similarUsernameMatchEvidence/similarityScore from the response with the 200 status

added the new optional request property appResourceIds

added the new optional request property appResourceTraitIds

added the new optional request property appResourceTypeIds

added the new optional request property appUserTypes

added the new optional request property connectorIds

added the new optional request property customSubTypes

added the new optional request property decoyIds

added the new optional request property includeUnassigned

added the new optional request property nhiTypes

added the new optional request property ownerIdentityUserIds

added the new optional request property refs

added the new optional request property scopeToAppOwner

added the new optional request property sourceKinds

added the new FINDING_TYPE_CONNECTOR_ANOMALY_DETECTION_DISABLED enum value to the request property findingTypes/items

added the new FINDING_TYPE_CREDENTIAL_EXPIRING enum value to the request property findingTypes/items

added the new FINDING_TYPE_CREDENTIAL_PUBLICLY_EXPOSED enum value to the request property findingTypes/items

added the new FINDING_TYPE_CUSTOM enum value to the request property findingTypes/items

added the new FINDING_TYPE_DEACTIVATED_OWNER enum value to the request property findingTypes/items

added the new FINDING_TYPE_DECOY_PUBLICLY_EXPOSED enum value to the request property findingTypes/items

added the new FINDING_TYPE_NHI_UNOWNED enum value to the request property findingTypes/items

added the new FINDING_TYPE_SERVICE_ACCOUNT_UNOWNED enum value to the request property findingTypes/items

added the new FINDING_TYPE_UNUSED_SECRET enum value to the request property findingTypes/items

added the optional property list/items/annotations to the response with the 200 status

added the optional property list/items/appResourceTarget to the response with the 200 status

added the optional property list/items/connectorAnomalyDetectionDisabled to the response with the 200 status

added the optional property list/items/connectorTarget to the response with the 200 status

added the optional property list/items/credentialExpiring to the response with the 200 status

added the optional property list/items/credentialExpiringEvidence to the response with the 200 status

added the optional property list/items/credentialPubliclyExposed to the response with the 200 status

added the optional property list/items/credentialPubliclyExposedEvidence to the response with the 200 status

added the optional property list/items/custom to the response with the 200 status

added the optional property list/items/customSubType to the response with the 200 status

added the optional property list/items/deactivatedOwner to the response with the 200 status

added the optional property list/items/deactivatedOwnerEvidence to the response with the 200 status

added the optional property list/items/decoyPubliclyExposed to the response with the 200 status

added the optional property list/items/decoyPubliclyExposedEvidence to the response with the 200 status

added the optional property list/items/decoyTarget to the response with the 200 status

added the optional property list/items/dedupKeyParts to the response with the 200 status

added the optional property list/items/description to the response with the 200 status

added the optional property list/items/lastAppearedAt to the response with the 200 status

added the optional property list/items/nhiUnowned to the response with the 200 status

added the optional property list/items/serviceAccountUnowned to the response with the 200 status

added the optional property list/items/sourceKind to the response with the 200 status

added the optional property list/items/tenantTarget to the response with the 200 status

added the optional property list/items/unusedSecret to the response with the 200 status

added the optional property list/items/unusedSecretEvidence to the response with the 200 status

response property list/items/customTags deprecated

request property findingTypes/items was restricted to a list of enum values

added the new FINDING_TYPE_DECOY_CREDENTIAL_USED enum value to the request property findingTypes/items

added the new FINDING_TYPE_SERVICE_ACCOUNT_MISCLASSIFICATION enum value to the request property findingTypes/items

added the new FINDING_TYPE_SIMILAR_USERNAME_MATCH enum value to the request property findingTypes/items

added the new FINDING_TYPE_UNSPECIFIED enum value to the request property findingTypes/items

added the optional property list/items/decoyCredentialUsed to the response with the 200 status

endpoint added