From 9b1b73c58a0d66460e72fc3a68a822db63414d8b Mon Sep 17 00:00:00 2001
From: pavel jurka <pavel.jurka@sentinelone.com>
Date: Wed, 16 Oct 2024 15:27:54 +0200
Subject: [PATCH] wip

---
 dictionary.json                | 33 +++++++++++++++++++++++++++++++++
 profiles/active_directory.json | 18 ++++++++++++++++++
 2 files changed, 51 insertions(+)

diff --git a/dictionary.json b/dictionary.json
index 0acc6dcee..8a707eb94 100644
--- a/dictionary.json
+++ b/dictionary.json
@@ -118,6 +118,34 @@
       "description": "The permissions that were granted in a platform-native format. See specific usage.",
       "type": "integer_t"
     },
+    "ad_age_group": {
+      "caption": "AD Age Group",
+      "description": "The age group of the user. Allowed values: Minor, NotAdult, and Adult.",
+      "type": "string_t"
+    },
+    "ad_age_group_id": {
+      "caption": "AD Age Group ID",
+      "description": "The identifier of the normalized Ad Age Group ID.",
+      "type": "integer_t",
+      "sibling": "ad_age_group",
+      "enum": {
+        "0": {
+          "caption": "Unknown"
+        },
+        "1": {
+          "caption": "Minor"
+        },
+        "2": {
+          "caption": "NotAdult"
+        },
+        "3": {
+          "caption": "Adult"
+        },
+        "99": {
+          "caption": "Other"
+        }
+      }
+    },
     "admin_count": {
       "caption": "Admin Count",
       "type": "integer_t",
@@ -1934,6 +1962,11 @@
       "description": "The updated managed entity.",
       "type": "managed_entity"
     },
+    "entra_id_group_type": {
+      "caption": "EntraId Group Type",
+      "description": "Contains a group type like Microsoft 365 Group, Security Group, Distribution Group, or Mail Enabled Security Group.",
+      "type": "string_t"
+    },
     "environment_variables": {
       "caption": "Environment Variables",
       "description": "An array of environment variables.",
diff --git a/profiles/active_directory.json b/profiles/active_directory.json
index 6ca19513c..def3d92ec 100644
--- a/profiles/active_directory.json
+++ b/profiles/active_directory.json
@@ -9,6 +9,12 @@
       "description": "Indicates that a given object is a member of a Privileged group in Active Directory.",
       "requirement": "recommended"
     },
+    "ad_age_group": {
+      "requirement": "optional"
+    },
+    "ad_age_group_id": {
+      "requirement": "optional"
+    },
     "classification": {
       "description": "Describes a classification for the group (such as low, medium or high business impact).",
       "requirement": "optional"
@@ -23,6 +29,9 @@
       "requirement": "optional",
       "description": "Email address of the the user in Active Directory."
     },
+    "entra_id_group_type": {
+      "requirement": "optional"
+    },
     "forest": {
       "requirement": "recommended"
     },
@@ -47,6 +56,9 @@
     "on_premises_sam_account_name": {
       "requirement": "optional"
     },
+    "on_premises_security_identifier": {
+      "requirement": "optional"
+    },
     "on_premises_sync_enabled": {
       "requirement": "optional"
     },
@@ -76,6 +88,12 @@
     },
     "token_groups": {
       "requirement": "optional"
+    },
+    "ad_user_type": {
+      "requirement": "optional"
+    },
+    "ad_user_type_id": {
+      "requirement": "optional"
     }
   }
 }
\ No newline at end of file