diff --git a/.generator/schemas/v2/openapi.yaml b/.generator/schemas/v2/openapi.yaml
index 45c7a5c590..3a98d39484 100644
--- a/.generator/schemas/v2/openapi.yaml
+++ b/.generator/schemas/v2/openapi.yaml
@@ -60098,7 +60098,7 @@ components:
         - TIMESTAMP_DESCENDING
     SecurityMonitoringStandardDataSource:
       default: logs
-      description: Source of events, either logs, audit trail, or Datadog events. `app_sec_spans` is deprecated in favor of `spans`.
+      description: Source of events, either logs, audit trail, security signals, or Datadog events. `app_sec_spans` is deprecated in favor of `spans`.
       enum:
         - logs
         - audit
@@ -60107,6 +60107,7 @@ components:
         - security_runtime
         - network
         - events
+        - security_signals
       example: logs
       type: string
       x-enum-varnames:
@@ -60117,6 +60118,7 @@ components:
         - SECURITY_RUNTIME
         - NETWORK
         - EVENTS
+        - SECURITY_SIGNALS
     SecurityMonitoringStandardRuleCreatePayload:
       description: Create a new rule.
       properties:
diff --git a/src/datadog_api_client/v2/model/security_monitoring_rule_query.py b/src/datadog_api_client/v2/model/security_monitoring_rule_query.py
index 42d6908bb3..1dabf25105 100644
--- a/src/datadog_api_client/v2/model/security_monitoring_rule_query.py
+++ b/src/datadog_api_client/v2/model/security_monitoring_rule_query.py
@@ -21,7 +21,7 @@ def __init__(self, **kwargs):
         :param custom_query_extension: Query extension to append to the logs query.
         :type custom_query_extension: str, optional
 
-        :param data_source: Source of events, either logs, audit trail, or Datadog events. `app_sec_spans` is deprecated in favor of `spans`.
+        :param data_source: Source of events, either logs, audit trail, security signals, or Datadog events. `app_sec_spans` is deprecated in favor of `spans`.
         :type data_source: SecurityMonitoringStandardDataSource, optional
 
         :param distinct_fields: Field for which the cardinality is measured. Sent as an array.
diff --git a/src/datadog_api_client/v2/model/security_monitoring_standard_data_source.py b/src/datadog_api_client/v2/model/security_monitoring_standard_data_source.py
index e0164856b7..cf62eb64a5 100644
--- a/src/datadog_api_client/v2/model/security_monitoring_standard_data_source.py
+++ b/src/datadog_api_client/v2/model/security_monitoring_standard_data_source.py
@@ -14,9 +14,9 @@
 
 class SecurityMonitoringStandardDataSource(ModelSimple):
     """
-    Source of events, either logs, audit trail, or Datadog events. `app_sec_spans` is deprecated in favor of `spans`.
+    Source of events, either logs, audit trail, security signals, or Datadog events. `app_sec_spans` is deprecated in favor of `spans`.
 
-    :param value: If omitted defaults to "logs". Must be one of ["logs", "audit", "app_sec_spans", "spans", "security_runtime", "network", "events"].
+    :param value: If omitted defaults to "logs". Must be one of ["logs", "audit", "app_sec_spans", "spans", "security_runtime", "network", "events", "security_signals"].
     :type value: str
     """
 
@@ -28,6 +28,7 @@ class SecurityMonitoringStandardDataSource(ModelSimple):
         "security_runtime",
         "network",
         "events",
+        "security_signals",
     }
     LOGS: ClassVar["SecurityMonitoringStandardDataSource"]
     AUDIT: ClassVar["SecurityMonitoringStandardDataSource"]
@@ -36,6 +37,7 @@ class SecurityMonitoringStandardDataSource(ModelSimple):
     SECURITY_RUNTIME: ClassVar["SecurityMonitoringStandardDataSource"]
     NETWORK: ClassVar["SecurityMonitoringStandardDataSource"]
     EVENTS: ClassVar["SecurityMonitoringStandardDataSource"]
+    SECURITY_SIGNALS: ClassVar["SecurityMonitoringStandardDataSource"]
 
     @cached_property
     def openapi_types(_):
@@ -51,3 +53,4 @@ def openapi_types(_):
 SecurityMonitoringStandardDataSource.SECURITY_RUNTIME = SecurityMonitoringStandardDataSource("security_runtime")
 SecurityMonitoringStandardDataSource.NETWORK = SecurityMonitoringStandardDataSource("network")
 SecurityMonitoringStandardDataSource.EVENTS = SecurityMonitoringStandardDataSource("events")
+SecurityMonitoringStandardDataSource.SECURITY_SIGNALS = SecurityMonitoringStandardDataSource("security_signals")
diff --git a/src/datadog_api_client/v2/model/security_monitoring_standard_rule_query.py b/src/datadog_api_client/v2/model/security_monitoring_standard_rule_query.py
index 413b2769b7..4274f34653 100644
--- a/src/datadog_api_client/v2/model/security_monitoring_standard_rule_query.py
+++ b/src/datadog_api_client/v2/model/security_monitoring_standard_rule_query.py
@@ -87,7 +87,7 @@ def __init__(
         :param custom_query_extension: Query extension to append to the logs query.
         :type custom_query_extension: str, optional
 
-        :param data_source: Source of events, either logs, audit trail, or Datadog events. ``app_sec_spans`` is deprecated in favor of ``spans``.
+        :param data_source: Source of events, either logs, audit trail, security signals, or Datadog events. ``app_sec_spans`` is deprecated in favor of ``spans``.
         :type data_source: SecurityMonitoringStandardDataSource, optional
 
         :param distinct_fields: Field for which the cardinality is measured. Sent as an array.
diff --git a/src/datadog_api_client/v2/model/threat_hunting_job_query.py b/src/datadog_api_client/v2/model/threat_hunting_job_query.py
index 964b4d082a..ba914fd105 100644
--- a/src/datadog_api_client/v2/model/threat_hunting_job_query.py
+++ b/src/datadog_api_client/v2/model/threat_hunting_job_query.py
@@ -72,7 +72,7 @@ def __init__(
         :param aggregation: The aggregation type.
         :type aggregation: SecurityMonitoringRuleQueryAggregation, optional
 
-        :param data_source: Source of events, either logs, audit trail, or Datadog events. ``app_sec_spans`` is deprecated in favor of ``spans``.
+        :param data_source: Source of events, either logs, audit trail, security signals, or Datadog events. ``app_sec_spans`` is deprecated in favor of ``spans``.
         :type data_source: SecurityMonitoringStandardDataSource, optional
 
         :param distinct_fields: Field for which the cardinality is measured. Sent as an array.