Skip to content

The Group object represents a collection or association of entities, such as users, policies, or devices. It serves as a logical grouping mechanism to organize and manage entities with similar characteristics or permissions within a system or organization.

  • Extends: _entity

name

  • Type: string_t
  • Requirement: recommended

The group name.

uid

  • Type: string_t
  • Requirement: recommended

The unique identifier of the group. For example, for Windows events this is the security identifier (SID) of the group.

desc

  • Type: string_t
  • Requirement: optional

The group description.

privileges

  • Type: string_t
  • Requirement: optional

The group privileges.

type

  • Type: string_t
  • Requirement: optional

The type of the group or account.

At least one of: name, uid