feat: [ocsf#1122] - ldap - moved active directory sid objects to ad p…

…rofile

dictionary.json

@@ -104,19 +104,6 @@
       "description": "The permissions that were granted to the in a platform-native format.",
       "type": "integer_t"
     },
-    "admin_count": {
-      "caption": "Admin Count",
-      "type": "integer_t",
-      "description": "Indicates that a given object is a member of a Privileged group in Active Directory.",
-      "enum": {
-        "0": {
-          "caption": "Not Member"
-        },
-        "1": {
-          "caption": "Member"
-        }
-      }
-    },
     "affected_code": {
       "caption": "Affected Code",
       "description": "List of Affected Code objects that describe details about code blocks identified as vulnerable.",
@@ -2398,6 +2385,11 @@
       "description": "The event occurred on a personal device.",
       "type": "boolean_t"
     },
+    "is_privileged": {
+      "caption": "Member of Privileged Group",
+      "type": "boolean_t",
+      "description": "Indicates that a given object is a member of a Privileged group in Active Directory."
+    },
     "is_remote": {
       "caption": "Remote",
       "description": "The indication of whether the session is remote.",

profiles/active_directory.json

@@ -4,7 +4,7 @@
   "caption": "Active Directory",
   "name": "active_directory",
   "attributes": {
-    "admin_count": {
+    "is_privileged": {
       "requirement": "recommended"
     },
     "classification": {