There is a command group 'az_network_firewall_policy_intrusion detection'. This group of commands could 'manage intrusion signature rules and bypass rules'. The group of commands has global parameter '--debug' which means 'Increase logging verbosity to show all debug logs.'. The group of commands has global parameter '--help -h' which means 'Show this help message and exit.'. The group of commands has global parameter '--only-show-errors' which means 'Only show errors, suppressing warnings.'. The group of commands has global parameter '--output -o' which means 'Output format.'. The group of commands has global parameter '--query' which means 'JMESPath query string. See <a href="http://jmespath.org/">http://jmespath.org/</a> for more information and examples.'. The group of commands has global parameter '--subscription' which means 'Name or ID of subscription. You can configure the default subscription using `az account set -s NAME_OR_ID`.'. The group of commands has global parameter '--verbose' which means 'Increase logging verbosity. Use --debug for full debug logs.'. This group contains a child command 'az_network_firewall_policy_intrusion detection_add'.The syntax is: az network firewall policy intrusion-detection add [--add]
                                                   [--auto-learn-private-ranges {disabled, enabled}]
                                                   [--cert-name]
                                                   [--configuration]
                                                   [--dns-servers]
                                                   [--enable-dns-proxy {0, 1, f, false, n, no, t, true, y, yes}]
                                                   [--explicit-proxy]
                                                   [--force-string {0, 1, f, false, n, no, t, true, y, yes}]
                                                   [--fqdns]
                                                   [--identity-type {none, systemassigned, systemassigned, userassigned, userassigned}]
                                                   [--idps-mode {alert, deny, off}]
                                                   [--ids]
                                                   [--ip-addresses]
                                                   [--key-vault-secret-id]
                                                   [--mode {alert, deny, off}]
                                                   [--no-wait {0, 1, f, false, n, no, t, true, y, yes}]
                                                   [--policy-name]
                                                   [--private-ranges]
                                                   [--remove]
                                                   [--resource-group]
                                                   [--rule-description]
                                                   [--rule-dest-addresses]
                                                   [--rule-dest-ip-groups]
                                                   [--rule-dest-ports]
                                                   [--rule-name]
                                                   [--rule-protocol {any, icmp, tcp, udp}]
                                                   [--rule-src-addresses]
                                                   [--rule-src-ip-groups]
                                                   [--set]
                                                   [--signature-id]
                                                   [--sku {basic, premium, standard}]
                                                   [--sql {0, 1, f, false, n, no, t, true, y, yes}]
                                                   [--subscription]
                                                   [--tags]
                                                   [--threat-intel-mode {alert, deny, off}]. The parameter '--add' is optional. add an object to a list of objects by specifying a path and key value pairs.  example: --add property.listproperty <key=value, string or json string>.. The parameter '--auto-learn-private-ranges --learn-ranges' is optional. the operation mode for automatically learning private ranges to not be snat.. The parameter '--cert-name' is optional. name of the ca certificate.. The parameter '--configuration' is optional. intrusion detection configuration properties.  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. The parameter '--dns-servers' is optional. space-separated list of dns server ip addresses.  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. The parameter '--enable-dns-proxy' is optional. enable dns proxy.. The parameter '--explicit-proxy' is optional. explicit proxy settings definition.  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. The parameter '--force-string' is optional. when using 'set' or 'add', preserve string literals instead of attempting to convert to json.. The parameter '--fqdns' is optional. space-separated list of fqdns.  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. The parameter '--identity-type' is optional. the type of identity used for the resource. the type 'systemassigned, userassigned' includes both an implicitly created identity and a set of user assigned identities. the type 'none' will remove any identities from the virtual machine.. The parameter '--idps-mode' is optional. idps mode.. The parameter '--ids' is optional. one or more resource ids (space-delimited). it should be a complete resource id containing all information of 'resource id' arguments. you should provide either --ids or other 'resource id' arguments.. The parameter '--ip-addresses' is optional. space-separated list of ipv4 addresses.  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. The parameter '--key-vault-secret-id' is optional. secret id of (base-64 encoded unencrypted pfx) secret or certificate object stored in keyvault.. The parameter '--mode' is optional. the signature state.. The parameter '--no-wait' is optional. do not wait for the long-running operation to finish.. The parameter '--policy-name' is optional. the name of the firewall policy.. The parameter '--private-ranges' is optional. list of private ip addresses/ip address ranges to not be snat.  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. The parameter '--remove' is optional. remove a property or an element from a list.  example: --remove property.list <indextoremove> or --remove propertytoremove.. The parameter '--resource-group -g' is optional. name of resource group. you can configure the default group using `az configure --defaults group=<name>`.. The parameter '--rule-description' is optional. description of the bypass traffic rule.. The parameter '--rule-dest-addresses' is optional. space-separated list of destination ip addresses or ranges for this rule  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. The parameter '--rule-dest-ip-groups' is optional. space-separated list of destination ipgroups for this rule  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. The parameter '--rule-dest-ports' is optional. space-separated list of destination ports or ranges  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. The parameter '--rule-name' is optional. name of the bypass traffic rule.. The parameter '--rule-protocol' is optional. the rule bypass protocol.. The parameter '--rule-src-addresses' is optional. space-separated list of source ip addresses or ranges for this rule  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. The parameter '--rule-src-ip-groups' is optional. space-separated list of source ipgroups  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. The parameter '--set' is optional. update an object by specifying a property path and value to set.  example: --set property1.property2=<value>.. The parameter '--signature-id' is optional. signature id.. The parameter '--sku' is optional. sku of firewall policy.. The parameter '--sql' is optional. a flag to indicate if sql redirect traffic filtering is enabled.. The parameter '--subscription' is optional. name or id of subscription. you can configure the default subscription using `az account set -s name_or_id`.. The parameter '--tags' is optional. space-separated tags: key[=value] [key[=value] ...]. use "" to clear existing tags.  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. The parameter '--threat-intel-mode' is optional. the operation mode for threat intelligence.. 