LocalGroup

Field	Type	Possible Operators	Description
Guid	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	A unique identifier that is a combination of GUID of selected Scan and Active Directory ObjectGUID of the object.
FSName	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	A special unique identifier that is a combination of the Name of the object and the FSName of the computer that contains local user.
ObjectSid	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	Local security identifier of object.
Name	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	Name of the specified object.
can_exec_dcom	BOOLEAN	N/A (toggle)	Indicates whether the local group can have enough privilege to execute commands with DCOM(Distributed Component Object Model) protocol on the computer.
inComputerName	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	FSName of the computer that contains the local group.
can_rdp	BOOLEAN	N/A (toggle)	Indicates whether the local group can have enough privilege to connect with RDP (Remote Desktop Protocol) to the computer.
inComputerGuid	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	Guid of the computer that contains the local group.
can_exec_pwsh	BOOLEAN	N/A (toggle)	Indicates whether the local group can have enough privilege to execute commands with Powershell on the computer.
admin_to	BOOLEAN	N/A (toggle)	Indicates whether the local group can have admin privilege on the computer.
member_count	NUMBER	EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL	The total count of the direct child objects.
IsDomainGroup	BOOLEAN	N/A (toggle)	Indicates whether the group is a Domain Group (true) defined in Active Directory or a Local Group (false) defined only on the local machine.
Tier	NUMBER	EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL	Tier level Forestall assigned to the object: 0 (Tier 0), 1 (Tier 1) or 2 (Tier 2). Lower is more privileged.