Fix for accounts missing the accountExpires attribute

lkarlslund · Feb 22, 2024 · 3ab9960 · 3ab9960
1 parent 7bdd945
commit 3ab9960
Showing 1 changed file with 6 additions and 4 deletions.
diff --git a/modules/integrations/activedirectory/analyze/analyze-ad.go b/modules/integrations/activedirectory/analyze/analyze-ad.go
@@ -1262,10 +1262,12 @@ func init() {
 					object.Tag("account_enabled")
 				}
 
-				if exp, ok := object.Attr(activedirectory.AccountExpires).First().Raw().(time.Time); ok {
-					if !exp.IsZero() && time.Now().After(exp) {
-						object.Tag("account_expired")
-						expired = true
+				if object.HasAttr(activedirectory.AccountExpires) {
+					if exp, ok := object.Attr(activedirectory.AccountExpires).First().Raw().(time.Time); ok {
+						if !exp.IsZero() && time.Now().After(exp) {
+							object.Tag("account_expired")
+							expired = true
+						}
 					}
 				}