diff --git a/google/cloud/securitycenter/__init__.py b/google/cloud/securitycenter/__init__.py
index 39833c6b..0605464d 100644
--- a/google/cloud/securitycenter/__init__.py
+++ b/google/cloud/securitycenter/__init__.py
@@ -46,6 +46,7 @@
 from google.cloud.securitycenter_v1.types.folder import Folder
 from google.cloud.securitycenter_v1.types.iam_binding import IamBinding
 from google.cloud.securitycenter_v1.types.indicator import Indicator
+from google.cloud.securitycenter_v1.types.kernel_rootkit import KernelRootkit
 from google.cloud.securitycenter_v1.types.kubernetes import Kubernetes
 from google.cloud.securitycenter_v1.types.label import Label
 from google.cloud.securitycenter_v1.types.mitre_attack import MitreAttack
@@ -138,6 +139,7 @@
     "Folder",
     "IamBinding",
     "Indicator",
+    "KernelRootkit",
     "Kubernetes",
     "Label",
     "MitreAttack",
diff --git a/google/cloud/securitycenter_v1/__init__.py b/google/cloud/securitycenter_v1/__init__.py
index df18a2e7..0152ba9b 100644
--- a/google/cloud/securitycenter_v1/__init__.py
+++ b/google/cloud/securitycenter_v1/__init__.py
@@ -34,6 +34,7 @@
 from .types.folder import Folder
 from .types.iam_binding import IamBinding
 from .types.indicator import Indicator
+from .types.kernel_rootkit import KernelRootkit
 from .types.kubernetes import Kubernetes
 from .types.label import Label
 from .types.mitre_attack import MitreAttack
@@ -136,6 +137,7 @@
     "GroupResult",
     "IamBinding",
     "Indicator",
+    "KernelRootkit",
     "Kubernetes",
     "Label",
     "ListAssetsRequest",
diff --git a/google/cloud/securitycenter_v1/services/security_center/async_client.py b/google/cloud/securitycenter_v1/services/security_center/async_client.py
index d9e77b6c..6208332f 100644
--- a/google/cloud/securitycenter_v1/services/security_center/async_client.py
+++ b/google/cloud/securitycenter_v1/services/security_center/async_client.py
@@ -62,6 +62,7 @@
 from google.cloud.securitycenter_v1.types import (
     iam_binding,
     indicator,
+    kernel_rootkit,
     kubernetes,
     mitre_attack,
 )
@@ -871,9 +872,9 @@ async def sample_create_notification_config():
                 Required.
                 Unique identifier provided by the client
                 within the parent scope. It must be
-                between 1 and 128 characters, and
-                contains alphanumeric characters,
-                underscores or hyphens only.
+                between 1 and 128 characters and contain
+                alphanumeric characters, underscores, or
+                hyphens only.
 
                 This corresponds to the ``config_id`` field
                 on the ``request`` instance; if ``request`` is provided, this
@@ -1086,7 +1087,10 @@ async def sample_delete_notification_config():
             name (:class:`str`):
                 Required. Name of the notification config to delete. Its
                 format is
-                "organizations/[organization_id]/notificationConfigs/[config_id]".
+                "organizations/[organization_id]/notificationConfigs/[config_id]",
+                "folders/[folder_id]/notificationConfigs/[config_id]",
+                or
+                "projects/[project_id]/notificationConfigs/[config_id]".
 
                 This corresponds to the ``name`` field
                 on the ``request`` instance; if ``request`` is provided, this
@@ -1147,7 +1151,7 @@ async def get_big_query_export(
         timeout: Optional[float] = None,
         metadata: Sequence[Tuple[str, str]] = (),
     ) -> bigquery_export.BigQueryExport:
-        r"""Gets a big query export.
+        r"""Gets a BigQuery export.
 
         .. code-block:: python
 
@@ -1177,10 +1181,10 @@ async def sample_get_big_query_export():
 
         Args:
             request (Optional[Union[google.cloud.securitycenter_v1.types.GetBigQueryExportRequest, dict]]):
-                The request object. Request message for retrieving a big
-                query export.
+                The request object. Request message for retrieving a
+                BigQuery export.
             name (:class:`str`):
-                Required. Name of the big query export to retrieve. Its
+                Required. Name of the BigQuery export to retrieve. Its
                 format is
                 organizations/{organization}/bigQueryExports/{export_id},
                 folders/{folder}/bigQueryExports/{export_id}, or
@@ -1574,7 +1578,10 @@ async def sample_get_notification_config():
             name (:class:`str`):
                 Required. Name of the notification config to get. Its
                 format is
-                "organizations/[organization_id]/notificationConfigs/[config_id]".
+                "organizations/[organization_id]/notificationConfigs/[config_id]",
+                "folders/[folder_id]/notificationConfigs/[config_id]",
+                or
+                "projects/[project_id]/notificationConfigs/[config_id]".
 
                 This corresponds to the ``name`` field
                 on the ``request`` instance; if ``request`` is provided, this
@@ -2526,8 +2533,8 @@ async def sample_list_notification_configs():
                 The request object. Request message for listing
                 notification configs.
             parent (:class:`str`):
-                Required. Name of the organization to list notification
-                configs. Its format is
+                Required. The name of the parent in which to list the
+                notification configurations. Its format is
                 "organizations/[organization_id]",
                 "folders/[folder_id]", or "projects/[project_id]".
 
@@ -2909,11 +2916,12 @@ async def sample_set_finding_state():
                 The request object. Request message for updating a
                 finding's state.
             name (:class:`str`):
-                Required. The relative resource name of the finding.
-                See:
-                https://cloud.google.com/apis/design/resource_names#relative_resource_name
-                Example:
-                "organizations/{organization_id}/sources/{source_id}/findings/{finding_id}".
+                Required. The `relative resource
+                name <https://cloud.google.com/apis/design/resource_names#relative_resource_name>`__
+                of the finding. Example:
+                "organizations/{organization_id}/sources/{source_id}/findings/{finding_id}",
+                "folders/{folder_id}/sources/{source_id}/findings/{finding_id}",
+                "projects/{project_id}/sources/{source_id}/findings/{finding_id}".
 
                 This corresponds to the ``name`` field
                 on the ``request`` instance; if ``request`` is provided, this
@@ -3041,10 +3049,9 @@ async def sample_set_mute():
                 The request object. Request message for updating a
                 finding's mute status.
             name (:class:`str`):
-                Required. The relative resource name of the finding.
-                See:
-                https://cloud.google.com/apis/design/resource_names#relative_resource_name
-                Example:
+                Required. The `relative resource
+                name <https://cloud.google.com/apis/design/resource_names#relative_resource_name>`__
+                of the finding. Example:
                 "organizations/{organization_id}/sources/{source_id}/findings/{finding_id}",
                 "folders/{folder_id}/sources/{source_id}/findings/{finding_id}",
                 "projects/{project_id}/sources/{source_id}/findings/{finding_id}".
@@ -4238,7 +4245,7 @@ async def create_big_query_export(
         timeout: Optional[float] = None,
         metadata: Sequence[Tuple[str, str]] = (),
     ) -> bigquery_export.BigQueryExport:
-        r"""Creates a big query export.
+        r"""Creates a BigQuery export.
 
         .. code-block:: python
 
@@ -4269,18 +4276,19 @@ async def sample_create_big_query_export():
 
         Args:
             request (Optional[Union[google.cloud.securitycenter_v1.types.CreateBigQueryExportRequest, dict]]):
-                The request object. Request message for creating a big
-                query export.
+                The request object. Request message for creating a
+                BigQuery export.
             parent (:class:`str`):
-                Required. Resource name of the new big query export's
-                parent. Its format is "organizations/[organization_id]",
+                Required. The name of the parent resource of the new
+                BigQuery export. Its format is
+                "organizations/[organization_id]",
                 "folders/[folder_id]", or "projects/[project_id]".
 
                 This corresponds to the ``parent`` field
                 on the ``request`` instance; if ``request`` is provided, this
                 should not be set.
             big_query_export (:class:`google.cloud.securitycenter_v1.types.BigQueryExport`):
-                Required. The big query export being
+                Required. The BigQuery export being
                 created.
 
                 This corresponds to the ``big_query_export`` field
@@ -4366,7 +4374,7 @@ async def delete_big_query_export(
         timeout: Optional[float] = None,
         metadata: Sequence[Tuple[str, str]] = (),
     ) -> None:
-        r"""Deletes an existing big query export.
+        r"""Deletes an existing BigQuery export.
 
         .. code-block:: python
 
@@ -4393,10 +4401,10 @@ async def sample_delete_big_query_export():
 
         Args:
             request (Optional[Union[google.cloud.securitycenter_v1.types.DeleteBigQueryExportRequest, dict]]):
-                The request object. Request message for deleting a big
-                query export.
+                The request object. Request message for deleting a
+                BigQuery export.
             name (:class:`str`):
-                Required. Name of the big query export to delete. Its
+                Required. The name of the BigQuery export to delete. Its
                 format is
                 organizations/{organization}/bigQueryExports/{export_id},
                 folders/{folder}/bigQueryExports/{export_id}, or
diff --git a/google/cloud/securitycenter_v1/services/security_center/client.py b/google/cloud/securitycenter_v1/services/security_center/client.py
index 51be2298..b1c45bd9 100644
--- a/google/cloud/securitycenter_v1/services/security_center/client.py
+++ b/google/cloud/securitycenter_v1/services/security_center/client.py
@@ -66,6 +66,7 @@
 from google.cloud.securitycenter_v1.types import (
     iam_binding,
     indicator,
+    kernel_rootkit,
     kubernetes,
     mitre_attack,
 )
@@ -1244,9 +1245,9 @@ def sample_create_notification_config():
                 Required.
                 Unique identifier provided by the client
                 within the parent scope. It must be
-                between 1 and 128 characters, and
-                contains alphanumeric characters,
-                underscores or hyphens only.
+                between 1 and 128 characters and contain
+                alphanumeric characters, underscores, or
+                hyphens only.
 
                 This corresponds to the ``config_id`` field
                 on the ``request`` instance; if ``request`` is provided, this
@@ -1463,7 +1464,10 @@ def sample_delete_notification_config():
             name (str):
                 Required. Name of the notification config to delete. Its
                 format is
-                "organizations/[organization_id]/notificationConfigs/[config_id]".
+                "organizations/[organization_id]/notificationConfigs/[config_id]",
+                "folders/[folder_id]/notificationConfigs/[config_id]",
+                or
+                "projects/[project_id]/notificationConfigs/[config_id]".
 
                 This corresponds to the ``name`` field
                 on the ``request`` instance; if ``request`` is provided, this
@@ -1528,7 +1532,7 @@ def get_big_query_export(
         timeout: Optional[float] = None,
         metadata: Sequence[Tuple[str, str]] = (),
     ) -> bigquery_export.BigQueryExport:
-        r"""Gets a big query export.
+        r"""Gets a BigQuery export.
 
         .. code-block:: python
 
@@ -1558,10 +1562,10 @@ def sample_get_big_query_export():
 
         Args:
             request (Union[google.cloud.securitycenter_v1.types.GetBigQueryExportRequest, dict]):
-                The request object. Request message for retrieving a big
-                query export.
+                The request object. Request message for retrieving a
+                BigQuery export.
             name (str):
-                Required. Name of the big query export to retrieve. Its
+                Required. Name of the BigQuery export to retrieve. Its
                 format is
                 organizations/{organization}/bigQueryExports/{export_id},
                 folders/{folder}/bigQueryExports/{export_id}, or
@@ -1942,7 +1946,10 @@ def sample_get_notification_config():
             name (str):
                 Required. Name of the notification config to get. Its
                 format is
-                "organizations/[organization_id]/notificationConfigs/[config_id]".
+                "organizations/[organization_id]/notificationConfigs/[config_id]",
+                "folders/[folder_id]/notificationConfigs/[config_id]",
+                or
+                "projects/[project_id]/notificationConfigs/[config_id]".
 
                 This corresponds to the ``name`` field
                 on the ``request`` instance; if ``request`` is provided, this
@@ -2831,8 +2838,8 @@ def sample_list_notification_configs():
                 The request object. Request message for listing
                 notification configs.
             parent (str):
-                Required. Name of the organization to list notification
-                configs. Its format is
+                Required. The name of the parent in which to list the
+                notification configurations. Its format is
                 "organizations/[organization_id]",
                 "folders/[folder_id]", or "projects/[project_id]".
 
@@ -3198,11 +3205,12 @@ def sample_set_finding_state():
                 The request object. Request message for updating a
                 finding's state.
             name (str):
-                Required. The relative resource name of the finding.
-                See:
-                https://cloud.google.com/apis/design/resource_names#relative_resource_name
-                Example:
-                "organizations/{organization_id}/sources/{source_id}/findings/{finding_id}".
+                Required. The `relative resource
+                name <https://cloud.google.com/apis/design/resource_names#relative_resource_name>`__
+                of the finding. Example:
+                "organizations/{organization_id}/sources/{source_id}/findings/{finding_id}",
+                "folders/{folder_id}/sources/{source_id}/findings/{finding_id}",
+                "projects/{project_id}/sources/{source_id}/findings/{finding_id}".
 
                 This corresponds to the ``name`` field
                 on the ``request`` instance; if ``request`` is provided, this
@@ -3330,10 +3338,9 @@ def sample_set_mute():
                 The request object. Request message for updating a
                 finding's mute status.
             name (str):
-                Required. The relative resource name of the finding.
-                See:
-                https://cloud.google.com/apis/design/resource_names#relative_resource_name
-                Example:
+                Required. The `relative resource
+                name <https://cloud.google.com/apis/design/resource_names#relative_resource_name>`__
+                of the finding. Example:
                 "organizations/{organization_id}/sources/{source_id}/findings/{finding_id}",
                 "folders/{folder_id}/sources/{source_id}/findings/{finding_id}",
                 "projects/{project_id}/sources/{source_id}/findings/{finding_id}".
@@ -4520,7 +4527,7 @@ def create_big_query_export(
         timeout: Optional[float] = None,
         metadata: Sequence[Tuple[str, str]] = (),
     ) -> bigquery_export.BigQueryExport:
-        r"""Creates a big query export.
+        r"""Creates a BigQuery export.
 
         .. code-block:: python
 
@@ -4551,18 +4558,19 @@ def sample_create_big_query_export():
 
         Args:
             request (Union[google.cloud.securitycenter_v1.types.CreateBigQueryExportRequest, dict]):
-                The request object. Request message for creating a big
-                query export.
+                The request object. Request message for creating a
+                BigQuery export.
             parent (str):
-                Required. Resource name of the new big query export's
-                parent. Its format is "organizations/[organization_id]",
+                Required. The name of the parent resource of the new
+                BigQuery export. Its format is
+                "organizations/[organization_id]",
                 "folders/[folder_id]", or "projects/[project_id]".
 
                 This corresponds to the ``parent`` field
                 on the ``request`` instance; if ``request`` is provided, this
                 should not be set.
             big_query_export (google.cloud.securitycenter_v1.types.BigQueryExport):
-                Required. The big query export being
+                Required. The BigQuery export being
                 created.
 
                 This corresponds to the ``big_query_export`` field
@@ -4648,7 +4656,7 @@ def delete_big_query_export(
         timeout: Optional[float] = None,
         metadata: Sequence[Tuple[str, str]] = (),
     ) -> None:
-        r"""Deletes an existing big query export.
+        r"""Deletes an existing BigQuery export.
 
         .. code-block:: python
 
@@ -4675,10 +4683,10 @@ def sample_delete_big_query_export():
 
         Args:
             request (Union[google.cloud.securitycenter_v1.types.DeleteBigQueryExportRequest, dict]):
-                The request object. Request message for deleting a big
-                query export.
+                The request object. Request message for deleting a
+                BigQuery export.
             name (str):
-                Required. Name of the big query export to delete. Its
+                Required. The name of the BigQuery export to delete. Its
                 format is
                 organizations/{organization}/bigQueryExports/{export_id},
                 folders/{folder}/bigQueryExports/{export_id}, or
diff --git a/google/cloud/securitycenter_v1/services/security_center/transports/grpc.py b/google/cloud/securitycenter_v1/services/security_center/transports/grpc.py
index 5b8ef58a..180962c2 100644
--- a/google/cloud/securitycenter_v1/services/security_center/transports/grpc.py
+++ b/google/cloud/securitycenter_v1/services/security_center/transports/grpc.py
@@ -468,7 +468,7 @@ def get_big_query_export(
     ]:
         r"""Return a callable for the get big query export method over gRPC.
 
-        Gets a big query export.
+        Gets a BigQuery export.
 
         Returns:
             Callable[[~.GetBigQueryExportRequest],
@@ -1189,7 +1189,7 @@ def create_big_query_export(
     ]:
         r"""Return a callable for the create big query export method over gRPC.
 
-        Creates a big query export.
+        Creates a BigQuery export.
 
         Returns:
             Callable[[~.CreateBigQueryExportRequest],
@@ -1217,7 +1217,7 @@ def delete_big_query_export(
     ]:
         r"""Return a callable for the delete big query export method over gRPC.
 
-        Deletes an existing big query export.
+        Deletes an existing BigQuery export.
 
         Returns:
             Callable[[~.DeleteBigQueryExportRequest],
diff --git a/google/cloud/securitycenter_v1/services/security_center/transports/grpc_asyncio.py b/google/cloud/securitycenter_v1/services/security_center/transports/grpc_asyncio.py
index b5b8f2d4..5997a063 100644
--- a/google/cloud/securitycenter_v1/services/security_center/transports/grpc_asyncio.py
+++ b/google/cloud/securitycenter_v1/services/security_center/transports/grpc_asyncio.py
@@ -482,7 +482,7 @@ def get_big_query_export(
     ]:
         r"""Return a callable for the get big query export method over gRPC.
 
-        Gets a big query export.
+        Gets a BigQuery export.
 
         Returns:
             Callable[[~.GetBigQueryExportRequest],
@@ -1211,7 +1211,7 @@ def create_big_query_export(
     ]:
         r"""Return a callable for the create big query export method over gRPC.
 
-        Creates a big query export.
+        Creates a BigQuery export.
 
         Returns:
             Callable[[~.CreateBigQueryExportRequest],
@@ -1239,7 +1239,7 @@ def delete_big_query_export(
     ]:
         r"""Return a callable for the delete big query export method over gRPC.
 
-        Deletes an existing big query export.
+        Deletes an existing BigQuery export.
 
         Returns:
             Callable[[~.DeleteBigQueryExportRequest],
diff --git a/google/cloud/securitycenter_v1/types/__init__.py b/google/cloud/securitycenter_v1/types/__init__.py
index 3c6a6227..5d902c0f 100644
--- a/google/cloud/securitycenter_v1/types/__init__.py
+++ b/google/cloud/securitycenter_v1/types/__init__.py
@@ -28,6 +28,7 @@
 from .folder import Folder
 from .iam_binding import IamBinding
 from .indicator import Indicator
+from .kernel_rootkit import KernelRootkit
 from .kubernetes import Kubernetes
 from .label import Label
 from .mitre_attack import MitreAttack
@@ -107,6 +108,7 @@
     "Folder",
     "IamBinding",
     "Indicator",
+    "KernelRootkit",
     "Kubernetes",
     "Label",
     "MitreAttack",
diff --git a/google/cloud/securitycenter_v1/types/external_system.py b/google/cloud/securitycenter_v1/types/external_system.py
index bc4ab5b4..0dc9880a 100644
--- a/google/cloud/securitycenter_v1/types/external_system.py
+++ b/google/cloud/securitycenter_v1/types/external_system.py
@@ -31,10 +31,11 @@ class ExternalSystem(proto.Message):
 
     Attributes:
         name (str):
-            External System Name e.g. jira, demisto, etc. e.g.:
-            ``organizations/1234/sources/5678/findings/123456/externalSystems/jira``
-            ``folders/1234/sources/5678/findings/123456/externalSystems/jira``
-            ``projects/1234/sources/5678/findings/123456/externalSystems/jira``
+            Full resource name of the external system,
+            for example:
+            "organizations/1234/sources/5678/findings/123456/externalSystems/jira",
+            "folders/1234/sources/5678/findings/123456/externalSystems/jira",
+            "projects/1234/sources/5678/findings/123456/externalSystems/jira".
         assignees (MutableSequence[str]):
             References primary/secondary etc assignees in
             the external system.
diff --git a/google/cloud/securitycenter_v1/types/finding.py b/google/cloud/securitycenter_v1/types/finding.py
index 36de4fb3..c8594d2a 100644
--- a/google/cloud/securitycenter_v1/types/finding.py
+++ b/google/cloud/securitycenter_v1/types/finding.py
@@ -27,6 +27,7 @@
 )
 from google.cloud.securitycenter_v1.types import external_system, file, iam_binding
 from google.cloud.securitycenter_v1.types import exfiltration as gcs_exfiltration
+from google.cloud.securitycenter_v1.types import kernel_rootkit as gcs_kernel_rootkit
 from google.cloud.securitycenter_v1.types import mitre_attack as gcs_mitre_attack
 from google.cloud.securitycenter_v1.types import security_marks as gcs_security_marks
 from google.cloud.securitycenter_v1.types import vulnerability as gcs_vulnerability
@@ -133,8 +134,8 @@ class Finding(proto.Message):
             high confidence, indicates a computer intrusion. Reference:
             https://en.wikipedia.org/wiki/Indicator_of_compromise
         vulnerability (google.cloud.securitycenter_v1.types.Vulnerability):
-            Represents vulnerability specific fields like
-            cve, cvss scores etc. CVE stands for Common
+            Represents vulnerability-specific fields like
+            CVE and CVS scores. CVE stands for Common
             Vulnerabilities and Exposures
             (https://cve.mitre.org/about/)
         mute_update_time (google.protobuf.timestamp_pb2.Timestamp):
@@ -212,6 +213,8 @@ class Finding(proto.Message):
             Database associated with the finding.
         files (MutableSequence[google.cloud.securitycenter_v1.types.File]):
             File associated with the finding.
+        kernel_rootkit (google.cloud.securitycenter_v1.types.KernelRootkit):
+            Kernel Rootkit signature.
     """
 
     class State(proto.Enum):
@@ -409,6 +412,11 @@ class FindingClass(proto.Enum):
         number=46,
         message=file.File,
     )
+    kernel_rootkit: gcs_kernel_rootkit.KernelRootkit = proto.Field(
+        proto.MESSAGE,
+        number=50,
+        message=gcs_kernel_rootkit.KernelRootkit,
+    )
 
 
 __all__ = tuple(sorted(__protobuf__.manifest))
diff --git a/google/cloud/securitycenter_v1/types/kernel_rootkit.py b/google/cloud/securitycenter_v1/types/kernel_rootkit.py
new file mode 100644
index 00000000..a177766e
--- /dev/null
+++ b/google/cloud/securitycenter_v1/types/kernel_rootkit.py
@@ -0,0 +1,104 @@
+# -*- coding: utf-8 -*-
+# Copyright 2022 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+from typing import MutableMapping, MutableSequence
+
+import proto  # type: ignore
+
+__protobuf__ = proto.module(
+    package="google.cloud.securitycenter.v1",
+    manifest={
+        "KernelRootkit",
+    },
+)
+
+
+class KernelRootkit(proto.Message):
+    r"""Kernel mode rootkit signatures.
+
+    Attributes:
+        name (str):
+            Rootkit name when available.
+        unexpected_code_modification (bool):
+            True if unexpected modifications of kernel
+            code memory are present.
+        unexpected_read_only_data_modification (bool):
+            True if unexpected modifications of kernel
+            read-only data memory are present.
+        unexpected_ftrace_handler (bool):
+            True if ``ftrace`` points are present with callbacks
+            pointing to regions that are not in the expected kernel or
+            module code range.
+        unexpected_kprobe_handler (bool):
+            True if ``kprobe`` points are present with callbacks
+            pointing to regions that are not in the expected kernel or
+            module code range.
+        unexpected_kernel_code_pages (bool):
+            True if kernel code pages that are not in the
+            expected kernel or module code regions are
+            present.
+        unexpected_system_call_handler (bool):
+            True if system call handlers that are are not
+            in the expected kernel or module code regions
+            are present.
+        unexpected_interrupt_handler (bool):
+            True if interrupt handlers that are are not
+            in the expected kernel or module code regions
+            are present.
+        unexpected_processes_in_runqueue (bool):
+            True if unexpected processes in the scheduler
+            run queue are present. Such processes are in the
+            run queue, but not in the process task list.
+    """
+
+    name: str = proto.Field(
+        proto.STRING,
+        number=1,
+    )
+    unexpected_code_modification: bool = proto.Field(
+        proto.BOOL,
+        number=2,
+    )
+    unexpected_read_only_data_modification: bool = proto.Field(
+        proto.BOOL,
+        number=3,
+    )
+    unexpected_ftrace_handler: bool = proto.Field(
+        proto.BOOL,
+        number=4,
+    )
+    unexpected_kprobe_handler: bool = proto.Field(
+        proto.BOOL,
+        number=5,
+    )
+    unexpected_kernel_code_pages: bool = proto.Field(
+        proto.BOOL,
+        number=6,
+    )
+    unexpected_system_call_handler: bool = proto.Field(
+        proto.BOOL,
+        number=7,
+    )
+    unexpected_interrupt_handler: bool = proto.Field(
+        proto.BOOL,
+        number=8,
+    )
+    unexpected_processes_in_runqueue: bool = proto.Field(
+        proto.BOOL,
+        number=9,
+    )
+
+
+__all__ = tuple(sorted(__protobuf__.manifest))
diff --git a/google/cloud/securitycenter_v1/types/notification_config.py b/google/cloud/securitycenter_v1/types/notification_config.py
index 2eec73ca..fdc7e57b 100644
--- a/google/cloud/securitycenter_v1/types/notification_config.py
+++ b/google/cloud/securitycenter_v1/types/notification_config.py
@@ -40,7 +40,10 @@ class NotificationConfig(proto.Message):
             The relative resource name of this notification config. See:
             https://cloud.google.com/apis/design/resource_names#relative_resource_name
             Example:
-            "organizations/{organization_id}/notificationConfigs/notify_public_bucket".
+            "organizations/{organization_id}/notificationConfigs/notify_public_bucket",
+            "folders/{folder_id}/notificationConfigs/notify_public_bucket",
+            or
+            "projects/{project_id}/notificationConfigs/notify_public_bucket".
         description (str):
             The description of the notification config
             (max of 1024 characters).
diff --git a/google/cloud/securitycenter_v1/types/securitycenter_service.py b/google/cloud/securitycenter_v1/types/securitycenter_service.py
index 4ad91ea7..f85c3384 100644
--- a/google/cloud/securitycenter_v1/types/securitycenter_service.py
+++ b/google/cloud/securitycenter_v1/types/securitycenter_service.py
@@ -228,8 +228,8 @@ class CreateNotificationConfigRequest(proto.Message):
             Required.
             Unique identifier provided by the client within
             the parent scope. It must be between 1 and 128
-            characters, and contains alphanumeric
-            characters, underscores or hyphens only.
+            characters and contain alphanumeric characters,
+            underscores, or hyphens only.
         notification_config (google.cloud.securitycenter_v1.types.NotificationConfig):
             Required. The notification config being
             created. The name and the service account will
@@ -300,7 +300,9 @@ class DeleteNotificationConfigRequest(proto.Message):
         name (str):
             Required. Name of the notification config to delete. Its
             format is
-            "organizations/[organization_id]/notificationConfigs/[config_id]".
+            "organizations/[organization_id]/notificationConfigs/[config_id]",
+            "folders/[folder_id]/notificationConfigs/[config_id]", or
+            "projects/[project_id]/notificationConfigs/[config_id]".
     """
 
     name: str = proto.Field(
@@ -310,11 +312,11 @@ class DeleteNotificationConfigRequest(proto.Message):
 
 
 class GetBigQueryExportRequest(proto.Message):
-    r"""Request message for retrieving a big query export.
+    r"""Request message for retrieving a BigQuery export.
 
     Attributes:
         name (str):
-            Required. Name of the big query export to retrieve. Its
+            Required. Name of the BigQuery export to retrieve. Its
             format is
             organizations/{organization}/bigQueryExports/{export_id},
             folders/{folder}/bigQueryExports/{export_id}, or
@@ -351,7 +353,9 @@ class GetNotificationConfigRequest(proto.Message):
         name (str):
             Required. Name of the notification config to get. Its format
             is
-            "organizations/[organization_id]/notificationConfigs/[config_id]".
+            "organizations/[organization_id]/notificationConfigs/[config_id]",
+            "folders/[folder_id]/notificationConfigs/[config_id]", or
+            "projects/[project_id]/notificationConfigs/[config_id]".
     """
 
     name: str = proto.Field(
@@ -396,9 +400,9 @@ class GroupAssetsRequest(proto.Message):
 
     Attributes:
         parent (str):
-            Required. Name of the organization to groupBy. Its format is
-            "organizations/[organization_id], folders/[folder_id], or
-            projects/[project_id]".
+            Required. The name of the parent to group the assets by. Its
+            format is "organizations/[organization_id],
+            folders/[folder_id], or projects/[project_id]".
         filter (str):
             Expression that defines the filter to apply across assets.
             The expression is a list of zero or more restrictions
@@ -959,9 +963,10 @@ class ListNotificationConfigsRequest(proto.Message):
 
     Attributes:
         parent (str):
-            Required. Name of the organization to list notification
-            configs. Its format is "organizations/[organization_id]",
-            "folders/[folder_id]", or "projects/[project_id]".
+            Required. The name of the parent in which to list the
+            notification configurations. Its format is
+            "organizations/[organization_id]", "folders/[folder_id]", or
+            "projects/[project_id]".
         page_token (str):
             The value returned by the last
             ``ListNotificationConfigsResponse``; indicates that this is
@@ -1080,8 +1085,8 @@ class ListAssetsRequest(proto.Message):
 
     Attributes:
         parent (str):
-            Required. Name of the organization assets should belong to.
-            Its format is "organizations/[organization_id],
+            Required. The name of the parent that the listed assets
+            belong to. Its format is "organizations/[organization_id],
             folders/[folder_id], or projects/[project_id]".
         filter (str):
             Expression that defines the filter to apply across assets.
@@ -1702,10 +1707,12 @@ class SetFindingStateRequest(proto.Message):
 
     Attributes:
         name (str):
-            Required. The relative resource name of the finding. See:
-            https://cloud.google.com/apis/design/resource_names#relative_resource_name
-            Example:
-            "organizations/{organization_id}/sources/{source_id}/findings/{finding_id}".
+            Required. The `relative resource
+            name <https://cloud.google.com/apis/design/resource_names#relative_resource_name>`__
+            of the finding. Example:
+            "organizations/{organization_id}/sources/{source_id}/findings/{finding_id}",
+            "folders/{folder_id}/sources/{source_id}/findings/{finding_id}",
+            "projects/{project_id}/sources/{source_id}/findings/{finding_id}".
         state (google.cloud.securitycenter_v1.types.Finding.State):
             Required. The desired State of the finding.
         start_time (google.protobuf.timestamp_pb2.Timestamp):
@@ -1734,9 +1741,9 @@ class SetMuteRequest(proto.Message):
 
     Attributes:
         name (str):
-            Required. The relative resource name of the finding. See:
-            https://cloud.google.com/apis/design/resource_names#relative_resource_name
-            Example:
+            Required. The `relative resource
+            name <https://cloud.google.com/apis/design/resource_names#relative_resource_name>`__
+            of the finding. Example:
             "organizations/{organization_id}/sources/{source_id}/findings/{finding_id}",
             "folders/{folder_id}/sources/{source_id}/findings/{finding_id}",
             "projects/{project_id}/sources/{source_id}/findings/{finding_id}".
@@ -1967,15 +1974,16 @@ class UpdateSecurityMarksRequest(proto.Message):
 
 
 class CreateBigQueryExportRequest(proto.Message):
-    r"""Request message for creating a big query export.
+    r"""Request message for creating a BigQuery export.
 
     Attributes:
         parent (str):
-            Required. Resource name of the new big query export's
-            parent. Its format is "organizations/[organization_id]",
-            "folders/[folder_id]", or "projects/[project_id]".
+            Required. The name of the parent resource of the new
+            BigQuery export. Its format is
+            "organizations/[organization_id]", "folders/[folder_id]", or
+            "projects/[project_id]".
         big_query_export (google.cloud.securitycenter_v1.types.BigQueryExport):
-            Required. The big query export being created.
+            Required. The BigQuery export being created.
         big_query_export_id (str):
             Required. Unique identifier provided by the
             client within the parent scope. It must consist
@@ -2090,12 +2098,13 @@ def raw_page(self):
 
 
 class DeleteBigQueryExportRequest(proto.Message):
-    r"""Request message for deleting a big query export.
+    r"""Request message for deleting a BigQuery export.
 
     Attributes:
         name (str):
-            Required. Name of the big query export to delete. Its format
-            is organizations/{organization}/bigQueryExports/{export_id},
+            Required. The name of the BigQuery export to delete. Its
+            format is
+            organizations/{organization}/bigQueryExports/{export_id},
             folders/{folder}/bigQueryExports/{export_id}, or
             projects/{project}/bigQueryExports/{export_id}
     """
diff --git a/securitycenter-v1-py.tar.gz b/securitycenter-v1-py.tar.gz
new file mode 100644
index 00000000..23c452a7
Binary files /dev/null and b/securitycenter-v1-py.tar.gz differ
diff --git a/tests/unit/gapic/securitycenter_v1/test_security_center.py b/tests/unit/gapic/securitycenter_v1/test_security_center.py
index 3eecb564..24c11f6a 100644
--- a/tests/unit/gapic/securitycenter_v1/test_security_center.py
+++ b/tests/unit/gapic/securitycenter_v1/test_security_center.py
@@ -75,6 +75,7 @@
 from google.cloud.securitycenter_v1.types import (
     iam_binding,
     indicator,
+    kernel_rootkit,
     kubernetes,
     label,
     mitre_attack,