more updates

Author: dicolanl

src/SecurityInsights/SecurityInsights/Az.SecurityInsights.psd1

@@ -74,8 +74,21 @@ NestedModules = @('Microsoft.Azure.PowerShell.Cmdlets.SecurityInsights.dll')
 FunctionsToExport = @()
 
 # Cmdlets to export from this module, for best performance, do not use wildcards and do not delete the entry, use an empty array if there are no cmdlets to export.
-CmdletsToExport = 'Get-AzSentinelAction',
+CmdletsToExport = 'Get-AzSentinelAlertRuleAction',
+    'New-AzSentinelAlertRuleAction',
+    'Remove-AzSentinelAlertRuleAction',
+    'Set-AzSentinelAlertRuleAction',
     'Get-AzSentinelAlertRule',
+    'New-AzSentinelAlertRule',
+    'Remove-AzSentinelAlertRule',
+    'Set-AzSentinelAlertRule',
+    'Get-AzSentinelBookmark',
+    'New-AzSentinelBookmark',
+    'New-AzSentinelBookmarkIncidentInfo',
+    'Remove-AzSentinelBookmark',
+    'Set-AzSentinelBookmark',
+    'Get-AzSentinelIncidentComment',
+    'New-AzSentinelIncidentComment',
     'Get-AzSentinelIncident', 
     'New-AzSentinelIncident', 
     'New-AzSentinelIncidentLabel', 

src/SecurityInsights/SecurityInsights/Cmdlets/Bookmarks/NewBookmarks.cs

@@ -61,6 +61,11 @@ public class NewBookmarks : SecurityInsightsCmdletBase
 
         public override void ExecuteCmdlet()
         {
+            if (BookmarkId == null)
+            {
+                BookmarkId = Guid.NewGuid().ToString();
+            }
+
             var name = BookmarkId;
 
             UserInfo userinfo = new UserInfo

src/SecurityInsights/SecurityInsights/Cmdlets/IncidentComments/NewIncidentComments.cs

@@ -0,0 +1,65 @@
+// ----------------------------------------------------------------------------------
+//
+// Copyright Microsoft Corporation
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+// http://www.apache.org/licenses/LICENSE-2.0
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+// ------------------------------------
+
+using System.Management.Automation;
+using Microsoft.Azure.Commands.SecurityInsights;
+using Microsoft.Azure.Commands.SecurityInsights.Common;
+using Microsoft.Azure.Commands.SecurityInsights.Models.IncidentComments;
+using Microsoft.Azure.Commands.ResourceManager.Common.ArgumentCompleters;
+using System.Collections.Generic;
+using Microsoft.Azure.Management.SecurityInsights.Models;
+using System;
+
+namespace Microsoft.Azure.Commands.SecurityInsights.Cmdlets.IncidentsComments
+{
+    [Cmdlet(VerbsCommon.New, ResourceManager.Common.AzureRMConstants.AzureRMPrefix + "SentinelIncidentComment", DefaultParameterSetName = ParameterSetNames.IncidentCommentId), OutputType(typeof(PSSentinelIncidentComment))]
+    public class NewBookmarks : SecurityInsightsCmdletBase
+    {
+        [Parameter(ParameterSetName = ParameterSetNames.IncidentCommentId, Mandatory = true, HelpMessage = ParameterHelpMessages.ResourceGroupName)]
+        [ResourceGroupCompleter]
+        [ValidateNotNullOrEmpty] 
+        public string ResourceGroupName { get; set; }
+
+        [Parameter(ParameterSetName = ParameterSetNames.IncidentCommentId, Mandatory = true, HelpMessage = ParameterHelpMessages.WorkspaceName)]
+        [ValidateNotNullOrEmpty] 
+        public string WorkspaceName { get; set; }
+
+        [Parameter(ParameterSetName = ParameterSetNames.IncidentCommentId, Mandatory = true, HelpMessage = ParameterHelpMessages.IncidentId)]
+        [ValidateNotNullOrEmpty]
+        public string IncidentId { get; set; }
+
+        [Parameter(ParameterSetName = ParameterSetNames.IncidentCommentId, Mandatory = false, HelpMessage = ParameterHelpMessages.IncidentCommentId)]
+        public string IncidentCommentId { get; set; }
+
+        [Parameter(ParameterSetName = ParameterSetNames.BookmarkId, Mandatory = true, HelpMessage = ParameterHelpMessages.Message)] 
+        public string Message { get; set; }
+       
+        public override void ExecuteCmdlet()
+        {
+            if (IncidentCommentId == null)
+            {
+                IncidentCommentId = Guid.NewGuid().ToString();
+            }
+
+            var name = IncidentCommentId;
+
+            if (ShouldProcess(name, VerbsCommon.Set))
+            {
+                var outputIncidentCommnet = SecurityInsightsClient.IncidentComments.CreateCommentWithHttpMessagesAsync(ResourceGroupName, WorkspaceName, IncidentId, name, Message).GetAwaiter().GetResult().Body;
+
+                WriteObject(outputIncidentCommnet, enumerateCollection: false);
+            }
+        }
+    }
+}

src/SecurityInsights/SecurityInsights/Common/ParameterHelpMessages.cs

@@ -69,6 +69,7 @@ public static class ParameterHelpMessages
 
         #region IncidentComments
         public const string IncidentCommentId = "Incident Comment Id.";
+        public const string Message = "Incident Message.";
         #endregion
 
         #region Incidents

src/SecurityInsights/SecurityInsights/SecurityInsights.csproj

@@ -10,4 +10,8 @@
     <PackageReference Include="Microsoft.Azure.Management.SecurityInsights" Version="1.0.0-preview.1" />
   </ItemGroup>
 
+  <ItemGroup>
+    <Folder Include="Models\DataConnectors\" />
+  </ItemGroup>
+
 </Project>