diff --git a/packages/@azure/arm-security/lib/models/index.ts b/packages/@azure/arm-security/lib/models/index.ts
index d8b74510e8e5..4f944c1588b3 100644
--- a/packages/@azure/arm-security/lib/models/index.ts
+++ b/packages/@azure/arm-security/lib/models/index.ts
@@ -614,11 +614,12 @@ export interface Alert extends Resource {
    */
   readonly actionTaken?: string;
   /**
-   * @member {string} [reportedSeverity] Estimated severity of this alert
+   * @member {ReportedSeverity} [reportedSeverity] Estimated severity of this
+   * alert. Possible values include: 'Silent', 'Information', 'Low', 'High'
    * **NOTE: This property will not be serialized. It can only be populated by
    * the server.**
    */
-  readonly reportedSeverity?: string;
+  readonly reportedSeverity?: ReportedSeverity;
   /**
    * @member {string} [compromisedEntity] The entity that the incident happened
    * on
@@ -651,6 +652,13 @@ export interface Alert extends Resource {
    * the server.**
    */
   readonly canBeInvestigated?: boolean;
+  /**
+   * @member {boolean} [isIncident] Whether this alert is for incident type or
+   * not (otherwise - single alert)
+   * **NOTE: This property will not be serialized. It can only be populated by
+   * the server.**
+   */
+  readonly isIncident?: boolean;
   /**
    * @member {AlertEntity[]} [entities] objects that are related to this alerts
    */
@@ -1929,6 +1937,14 @@ export type AutoProvision = 'On' | 'Off';
  */
 export type SettingKind = 'DataExportSetting' | 'AlertSuppressionSetting';
 
+/**
+ * Defines values for ReportedSeverity.
+ * Possible values include: 'Silent', 'Information', 'Low', 'High'
+ * @readonly
+ * @enum {string}
+ */
+export type ReportedSeverity = 'Silent' | 'Information' | 'Low' | 'High';
+
 /**
  * Defines values for SecurityFamily.
  * Possible values include: 'Waf', 'Ngfw', 'SaasWaf', 'Va'
diff --git a/packages/@azure/arm-security/lib/models/mappers.ts b/packages/@azure/arm-security/lib/models/mappers.ts
index c4895035268b..11e40749194e 100644
--- a/packages/@azure/arm-security/lib/models/mappers.ts
+++ b/packages/@azure/arm-security/lib/models/mappers.ts
@@ -780,6 +780,13 @@ export const Alert: msRest.CompositeMapper = {
           name: "Boolean"
         }
       },
+      isIncident: {
+        readOnly: true,
+        serializedName: "properties.isIncident",
+        type: {
+          name: "Boolean"
+        }
+      },
       entities: {
         serializedName: "properties.entities",
         type: {