From b2ff2a9ff7c8b6fbbd57a05fefe48ff261d1d0a1 Mon Sep 17 00:00:00 2001
From: David <1511024+marabooy@users.noreply.github.com>
Date: Fri, 16 Jan 2026 04:31:11 +0300
Subject: [PATCH] Schema sync 2026-01-16 from 1.4.372.0

---
 schemas/beta-Bleu.csdl     |  1 +
 schemas/beta-Fairfax.csdl  | 11 +++++++++++
 schemas/beta-Mooncake.csdl |  1 +
 schemas/beta-Prod.csdl     | 37 +++++++++++++++++++++++++++++++++++--
 schemas/beta-USNat.csdl    |  1 +
 schemas/beta-USSec.csdl    |  1 +
 6 files changed, 50 insertions(+), 2 deletions(-)

diff --git a/schemas/beta-Bleu.csdl b/schemas/beta-Bleu.csdl
index f43adaf6..fc60ccc6 100644
--- a/schemas/beta-Bleu.csdl
+++ b/schemas/beta-Bleu.csdl
@@ -1719,6 +1719,7 @@
         <Member Name="fido2SecurityKey" Value="25" />
         <Member Name="oneTimePasscode" Value="26" />
         <Member Name="passKeySynced" Value="27" />
+        <Member Name="qrCode" Value="28" />
       </EnumType>
       <EnumType Name="userAction">
         <Member Name="registerSecurityInformation" Value="0" />
diff --git a/schemas/beta-Fairfax.csdl b/schemas/beta-Fairfax.csdl
index a5c1b2ec..63f3e68c 100644
--- a/schemas/beta-Fairfax.csdl
+++ b/schemas/beta-Fairfax.csdl
@@ -1561,6 +1561,8 @@
         <Member Name="sourceImageNotSupportCustomizeVMName" Value="8" />
         <Member Name="sourceImageSizeExceedsLimitation" Value="9" />
         <Member Name="sourceImageWithAzureDiskEncryptionNotSupported" Value="12" />
+        <Member Name="fSLogixInstalledSourceImageNotSupported" Value="13" />
+        <Member Name="startMenuAppLimitExceeded" Value="14" />
       </EnumType>
       <EnumType Name="cloudPcDeviceImageOsStatus">
         <Member Name="supported" Value="0" />
@@ -1925,6 +1927,7 @@
         <Member Name="remoteConnectionQualityReport" Value="19" />
         <Member Name="bulkActionStatusReport" Value="22" />
         <Member Name="cloudPcUsageCategoryReport" Value="29" />
+        <Member Name="cloudPCInventoryReport" Value="30" />
       </EnumType>
       <EnumType Name="cloudPcResizeValidationCode">
         <Member Name="success" Value="0" />
@@ -1982,6 +1985,11 @@
         <Member Name="unknownFutureValue" Value="2" />
         <Member Name="retention" Value="3" />
       </EnumType>
+      <EnumType Name="cloudPcSourceImageCategory">
+        <Member Name="managedImage" Value="0" />
+        <Member Name="azureComputeGallery" Value="1" />
+        <Member Name="unknownFutureValue" Value="2" />
+      </EnumType>
       <EnumType Name="cloudPcStatus">
         <Member Name="notProvisioned" Value="0" />
         <Member Name="provisioning" Value="1" />
@@ -1998,6 +2006,7 @@
         <Member Name="resizePendingLicense" Value="12" />
         <Member Name="updatingSingleSignOn" Value="13" />
         <Member Name="modifyingSingleSignOn" Value="14" />
+        <Member Name="refreshPolicyConfiguration" Value="15" />
         <Member Name="preparing" Value="16" />
       </EnumType>
       <EnumType Name="cloudPcStorageAccountAccessTier">
@@ -8078,6 +8087,7 @@
         <Member Name="fido2SecurityKey" Value="25" />
         <Member Name="oneTimePasscode" Value="26" />
         <Member Name="passKeySynced" Value="27" />
+        <Member Name="qrCode" Value="28" />
       </EnumType>
       <EnumType Name="usageRights" IsFlags="true">
         <Member Name="unknown" Value="1" />
@@ -10720,6 +10730,7 @@
         <Property Name="usageStatus" Type="graph.cloudPcImportedSnapshotState" Nullable="false" />
       </ComplexType>
       <ComplexType Name="cloudPcSourceDeviceImage">
+        <Property Name="category" Type="graph.cloudPcSourceImageCategory" Nullable="false" />
         <Property Name="displayName" Type="Edm.String" />
         <Property Name="id" Type="Edm.String" />
         <Property Name="resourceId" Type="Edm.String" Nullable="false" />
diff --git a/schemas/beta-Mooncake.csdl b/schemas/beta-Mooncake.csdl
index 4e7d1056..49bce225 100644
--- a/schemas/beta-Mooncake.csdl
+++ b/schemas/beta-Mooncake.csdl
@@ -5894,6 +5894,7 @@
         <Member Name="fido2SecurityKey" Value="25" />
         <Member Name="oneTimePasscode" Value="26" />
         <Member Name="passKeySynced" Value="27" />
+        <Member Name="qrCode" Value="28" />
       </EnumType>
       <EnumType Name="userAction">
         <Member Name="registerSecurityInformation" Value="0" />
diff --git a/schemas/beta-Prod.csdl b/schemas/beta-Prod.csdl
index 4e8307ff..0ed27c7a 100644
--- a/schemas/beta-Prod.csdl
+++ b/schemas/beta-Prod.csdl
@@ -2115,6 +2115,8 @@
         <Member Name="sourceImageWithDataDiskNotSupported" Value="10" />
         <Member Name="sourceImageWithDiskEncryptionSetNotSupported" Value="11" />
         <Member Name="sourceImageWithAzureDiskEncryptionNotSupported" Value="12" />
+        <Member Name="fSLogixInstalledSourceImageNotSupported" Value="13" />
+        <Member Name="startMenuAppLimitExceeded" Value="14" />
       </EnumType>
       <EnumType Name="cloudPcDeviceImageOsStatus">
         <Member Name="supported" Value="0" />
@@ -2543,6 +2545,7 @@
         <Member Name="cloudPcInsightReport" Value="27" />
         <Member Name="regionalInaccessibleCloudPcTrendReport" Value="28" />
         <Member Name="cloudPcUsageCategoryReport" Value="29" />
+        <Member Name="cloudPCInventoryReport" Value="30" />
       </EnumType>
       <EnumType Name="cloudPcResizeValidationCode">
         <Member Name="success" Value="0" />
@@ -2600,6 +2603,11 @@
         <Member Name="unknownFutureValue" Value="2" />
         <Member Name="retention" Value="3" />
       </EnumType>
+      <EnumType Name="cloudPcSourceImageCategory">
+        <Member Name="managedImage" Value="0" />
+        <Member Name="azureComputeGallery" Value="1" />
+        <Member Name="unknownFutureValue" Value="2" />
+      </EnumType>
       <EnumType Name="cloudPcStatus">
         <Member Name="notProvisioned" Value="0" />
         <Member Name="provisioning" Value="1" />
@@ -2616,6 +2624,7 @@
         <Member Name="resizePendingLicense" Value="12" />
         <Member Name="updatingSingleSignOn" Value="13" />
         <Member Name="modifyingSingleSignOn" Value="14" />
+        <Member Name="refreshPolicyConfiguration" Value="15" />
         <Member Name="preparing" Value="16" />
       </EnumType>
       <EnumType Name="cloudPcStorageAccountAccessTier">
@@ -10584,6 +10593,7 @@
         <Member Name="fido2SecurityKey" Value="25" />
         <Member Name="oneTimePasscode" Value="26" />
         <Member Name="passKeySynced" Value="27" />
+        <Member Name="qrCode" Value="28" />
       </EnumType>
       <EnumType Name="usageRights" IsFlags="true">
         <Member Name="unknown" Value="1" />
@@ -10606,7 +10616,8 @@
         <Member Name="encryptedProtectionTypeNotSupportedException" Value="131072" />
         <Member Name="purviewClaimsChallengeNotSupportedException" Value="262144" />
         <Member Name="exception" Value="524288" />
-        <Member Name="unknownFutureValue" Value="1048576" />
+        <Member Name="labelNotFoundException" Value="1048576" />
+        <Member Name="unknownFutureValue" Value="2097152" />
       </EnumType>
       <EnumType Name="usageRightState">
         <Member Name="active" Value="0" />
@@ -14137,6 +14148,7 @@
         <Property Name="usageStatus" Type="graph.cloudPcImportedSnapshotState" Nullable="false" />
       </ComplexType>
       <ComplexType Name="cloudPcSourceDeviceImage">
+        <Property Name="category" Type="graph.cloudPcSourceImageCategory" Nullable="false" />
         <Property Name="displayName" Type="Edm.String" />
         <Property Name="id" Type="Edm.String" />
         <Property Name="resourceId" Type="Edm.String" Nullable="false" />
@@ -92007,6 +92019,21 @@
         <Annotation Term="Org.OData.Capabilities.V1.SkipSupported" Bool="true" />
         <Annotation Term="Org.OData.Capabilities.V1.TopSupported" Bool="true" />
       </Annotations>
+      <Annotations Target="microsoft.graph.security.detonationBehaviourDetails">
+        <Annotation Term="Org.OData.Core.V1.Revisions">
+          <Collection>
+            <Record>
+              <PropertyValue Property="Date" Date="2025-10-20" />
+              <PropertyValue Property="Description" String="Behaviour details property is being deprecated due to changed in oncyber entity model." />
+              <PropertyValue Property="Kind">
+                <EnumMember>Org.OData.Core.V1.RevisionKind/Deprecated</EnumMember>
+              </PropertyValue>
+              <PropertyValue Property="RemovalDate" Date="2026-03-01" />
+              <PropertyValue Property="Version" String="2025-10/Tasks_And_Plans" />
+            </Record>
+          </Collection>
+        </Annotation>
+      </Annotations>
       <Annotations Target="microsoft.graph.security.ediscoveryExportOperation/azureBlobContainer">
         <Annotation Term="Org.OData.Core.V1.Revisions">
           <Collection>
@@ -109447,7 +109474,8 @@
         <Member Name="hardDelete" Value="5" />
         <Member Name="softDelete" Value="6" />
         <Member Name="moveToDeletedItems" Value="7" />
-        <Member Name="unknownFutureValue" Value="127" />
+        <Member Name="unknownFutureValue" Value="14" />
+        <Member Name="moveToQuarantine" Value="15" />
       </EnumType>
       <EnumType Name="remediationSeverity">
         <Member Name="low" Value="1" />
@@ -110166,11 +110194,16 @@
         <Property Name="analysisDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="compromiseIndicators" Type="Collection(self.compromiseIndicator)" />
         <Property Name="detonationBehaviourDetails" Type="self.detonationBehaviourDetails" />
+        <Property Name="detonationBehaviourDetailsV2" Type="Edm.String" />
         <Property Name="detonationChain" Type="self.detonationChain" />
         <Property Name="detonationObservables" Type="self.detonationObservables" />
         <Property Name="detonationScreenshotUri" Type="Edm.String" />
         <Property Name="detonationVerdict" Type="Edm.String" />
         <Property Name="detonationVerdictReason" Type="Edm.String" />
+        <Property Name="entityMetadata" Type="Edm.String" />
+        <Property Name="mitreTechniques" Type="Edm.String" />
+        <Property Name="staticAnalysis" Type="Edm.String" />
+        <Property Name="submissionSource" Type="Edm.String" />
       </ComplexType>
       <ComplexType Name="detonationObservables">
         <Property Name="contactedIps" Type="Collection(Edm.String)" />
diff --git a/schemas/beta-USNat.csdl b/schemas/beta-USNat.csdl
index fb4b75db..8e88df39 100644
--- a/schemas/beta-USNat.csdl
+++ b/schemas/beta-USNat.csdl
@@ -2413,6 +2413,7 @@
         <Member Name="fido2SecurityKey" Value="25" />
         <Member Name="oneTimePasscode" Value="26" />
         <Member Name="passKeySynced" Value="27" />
+        <Member Name="qrCode" Value="28" />
       </EnumType>
       <EnumType Name="usageRights" IsFlags="true">
         <Member Name="unknown" Value="1" />
diff --git a/schemas/beta-USSec.csdl b/schemas/beta-USSec.csdl
index 67aa1010..c73cc9b7 100644
--- a/schemas/beta-USSec.csdl
+++ b/schemas/beta-USSec.csdl
@@ -2435,6 +2435,7 @@
         <Member Name="fido2SecurityKey" Value="25" />
         <Member Name="oneTimePasscode" Value="26" />
         <Member Name="passKeySynced" Value="27" />
+        <Member Name="qrCode" Value="28" />
       </EnumType>
       <EnumType Name="usageRights" IsFlags="true">
         <Member Name="unknown" Value="1" />