diff --git a/.generator/schemas/v2/openapi.yaml b/.generator/schemas/v2/openapi.yaml
index 42b12a3fb056..a18017d3516e 100644
--- a/.generator/schemas/v2/openapi.yaml
+++ b/.generator/schemas/v2/openapi.yaml
@@ -8650,6 +8650,11 @@ components:
     CloudWorkloadSecurityAgentRuleActionHash:
       additionalProperties: {}
       description: An empty object indicating the hash action
+      properties:
+        field:
+          description: Event field to use for the hash computation.
+          example: process.file
+          type: string
       type: object
     CloudWorkloadSecurityAgentRuleActionMetadata:
       description: The metadata action applied on the scope matching the rule
diff --git a/services/csm_threats/src/v2/index.ts b/services/csm_threats/src/v2/index.ts
index ce6cfd8d4100..2e6228378bcb 100644
--- a/services/csm_threats/src/v2/index.ts
+++ b/services/csm_threats/src/v2/index.ts
@@ -29,6 +29,7 @@ export { CloudWorkloadSecurityAgentPolicyUpdateData } from "./models/CloudWorklo
 export { CloudWorkloadSecurityAgentPolicyUpdaterAttributes } from "./models/CloudWorkloadSecurityAgentPolicyUpdaterAttributes";
 export { CloudWorkloadSecurityAgentPolicyUpdateRequest } from "./models/CloudWorkloadSecurityAgentPolicyUpdateRequest";
 export { CloudWorkloadSecurityAgentRuleAction } from "./models/CloudWorkloadSecurityAgentRuleAction";
+export { CloudWorkloadSecurityAgentRuleActionHash } from "./models/CloudWorkloadSecurityAgentRuleActionHash";
 export { CloudWorkloadSecurityAgentRuleActionMetadata } from "./models/CloudWorkloadSecurityAgentRuleActionMetadata";
 export { CloudWorkloadSecurityAgentRuleActionSet } from "./models/CloudWorkloadSecurityAgentRuleActionSet";
 export { CloudWorkloadSecurityAgentRuleAttributes } from "./models/CloudWorkloadSecurityAgentRuleAttributes";
diff --git a/services/csm_threats/src/v2/models/CloudWorkloadSecurityAgentRuleAction.ts b/services/csm_threats/src/v2/models/CloudWorkloadSecurityAgentRuleAction.ts
index 8c84541ae4e9..51160d00705a 100644
--- a/services/csm_threats/src/v2/models/CloudWorkloadSecurityAgentRuleAction.ts
+++ b/services/csm_threats/src/v2/models/CloudWorkloadSecurityAgentRuleAction.ts
@@ -1,5 +1,6 @@
 import { AttributeTypeMap } from "@datadog/datadog-api-client";
 
+import { CloudWorkloadSecurityAgentRuleActionHash } from "./CloudWorkloadSecurityAgentRuleActionHash";
 import { CloudWorkloadSecurityAgentRuleActionMetadata } from "./CloudWorkloadSecurityAgentRuleActionMetadata";
 import { CloudWorkloadSecurityAgentRuleActionSet } from "./CloudWorkloadSecurityAgentRuleActionSet";
 import { CloudWorkloadSecurityAgentRuleKill } from "./CloudWorkloadSecurityAgentRuleKill";
@@ -15,7 +16,7 @@ export class CloudWorkloadSecurityAgentRuleAction {
   /**
    * An empty object indicating the hash action
    */
-  "hash"?: { [key: string]: any };
+  "hash"?: CloudWorkloadSecurityAgentRuleActionHash;
   /**
    * Kill system call applied on the container matching the rule
    */
@@ -49,7 +50,7 @@ export class CloudWorkloadSecurityAgentRuleAction {
     },
     hash: {
       baseName: "hash",
-      type: "{ [key: string]: any; }",
+      type: "CloudWorkloadSecurityAgentRuleActionHash",
     },
     kill: {
       baseName: "kill",
diff --git a/services/csm_threats/src/v2/models/CloudWorkloadSecurityAgentRuleActionHash.ts b/services/csm_threats/src/v2/models/CloudWorkloadSecurityAgentRuleActionHash.ts
new file mode 100644
index 000000000000..076c6f034269
--- /dev/null
+++ b/services/csm_threats/src/v2/models/CloudWorkloadSecurityAgentRuleActionHash.ts
@@ -0,0 +1,44 @@
+import { AttributeTypeMap } from "@datadog/datadog-api-client";
+
+/**
+ * An empty object indicating the hash action
+ */
+export class CloudWorkloadSecurityAgentRuleActionHash {
+  /**
+   * Event field to use for the hash computation.
+   */
+  "field"?: string;
+  /**
+   * A container for additional, undeclared properties.
+   * This is a holder for any undeclared properties as specified with
+   * the 'additionalProperties' keyword in the OAS document.
+   */
+  "additionalProperties"?: { [key: string]: any };
+  /**
+   * @ignore
+   */
+  "_unparsed"?: boolean;
+
+  /**
+   * @ignore
+   */
+  static readonly attributeTypeMap: AttributeTypeMap = {
+    field: {
+      baseName: "field",
+      type: "string",
+    },
+    additionalProperties: {
+      baseName: "additionalProperties",
+      type: "{ [key: string]: any; }",
+    },
+  };
+
+  /**
+   * @ignore
+   */
+  static getAttributeTypeMap(): AttributeTypeMap {
+    return CloudWorkloadSecurityAgentRuleActionHash.attributeTypeMap;
+  }
+
+  public constructor() {}
+}
diff --git a/services/csm_threats/src/v2/models/TypingInfo.ts b/services/csm_threats/src/v2/models/TypingInfo.ts
index f2e25a5f896d..4a28c3c367db 100644
--- a/services/csm_threats/src/v2/models/TypingInfo.ts
+++ b/services/csm_threats/src/v2/models/TypingInfo.ts
@@ -13,6 +13,7 @@ import { CloudWorkloadSecurityAgentPolicyUpdateData } from "./CloudWorkloadSecur
 import { CloudWorkloadSecurityAgentPolicyUpdateRequest } from "./CloudWorkloadSecurityAgentPolicyUpdateRequest";
 import { CloudWorkloadSecurityAgentPolicyUpdaterAttributes } from "./CloudWorkloadSecurityAgentPolicyUpdaterAttributes";
 import { CloudWorkloadSecurityAgentRuleAction } from "./CloudWorkloadSecurityAgentRuleAction";
+import { CloudWorkloadSecurityAgentRuleActionHash } from "./CloudWorkloadSecurityAgentRuleActionHash";
 import { CloudWorkloadSecurityAgentRuleActionMetadata } from "./CloudWorkloadSecurityAgentRuleActionMetadata";
 import { CloudWorkloadSecurityAgentRuleActionSet } from "./CloudWorkloadSecurityAgentRuleActionSet";
 import { CloudWorkloadSecurityAgentRuleAttributes } from "./CloudWorkloadSecurityAgentRuleAttributes";
@@ -59,6 +60,8 @@ export const TypingInfo: ModelTypingInfo = {
     CloudWorkloadSecurityAgentPolicyUpdaterAttributes:
       CloudWorkloadSecurityAgentPolicyUpdaterAttributes,
     CloudWorkloadSecurityAgentRuleAction: CloudWorkloadSecurityAgentRuleAction,
+    CloudWorkloadSecurityAgentRuleActionHash:
+      CloudWorkloadSecurityAgentRuleActionHash,
     CloudWorkloadSecurityAgentRuleActionMetadata:
       CloudWorkloadSecurityAgentRuleActionMetadata,
     CloudWorkloadSecurityAgentRuleActionSet: