diff --git a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2019-01-01-preview/SecurityInsights.json b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2019-01-01-preview/SecurityInsights.json
index b7c7afad2beb..23bcd534e567 100644
--- a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2019-01-01-preview/SecurityInsights.json
+++ b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2019-01-01-preview/SecurityInsights.json
@@ -3968,7 +3968,8 @@
         "Collection",
         "Exfiltration",
         "CommandAndControl",
-        "Impact"
+        "Impact",
+        "PreAttack"
       ],
       "type": "string",
       "x-ms-enum": {