x-pack/filebeat/input/entityanalytics/provider/activedirectory: do not convert special values of accountExpires

[w0rk3r]

Proposed commit message

x-pack/filebeat/input/entityanalytics/provider/activedirectory: do not convert special values of accountExpires

The accountExpires attribute will be set to 0 or 0x7fff_ffff_ffff_ffff
(9223372036854775807) if the account is set to never expire. Return the raw
int in these cases.

Checklist

• My code follows the style guidelines of this project
• I have commented my code, particularly in hard-to-understand areas
• I have made corresponding changes to the documentation
• I have made corresponding change to the default configuration files
• I have added tests that prove my fix is effective or that my feature works
• I have added an entry in CHANGELOG.next.asciidoc or CHANGELOG-developer.next.asciidoc.

Disruptive User Impact

Author's Checklist

• [ ]

How to test this PR locally

• beats\x-pack\filebeat\input\entityanalytics\provider\activedirectory> go test -v -run Test -log_response

Related issues

Use cases

Screenshots

Logs

[elasticmachine]

Pinging @elastic/security-service-integrations (Team:Security-Service Integrations)

[mergify]

This pull request does not have a backport label.
If this is a bug or security fix, could you label this PR @w0rk3r? 🙏.
For such, you'll need to label your PR with:

• The upcoming major version of the Elastic Stack
• The upcoming minor version of the Elastic Stack (if you're not pushing a breaking change)

To fixup this pull request, you need to add the backport labels for the needed
branches, such as:

• backport-8./d is the label to automatically backport to the 8./d branch. /d is the digit
• backport-active-all is the label that automatically backports to all active branches.
• backport-active-8 is the label that automatically backports to all active minor branches for the 8 major.
• backport-active-9 is the label that automatically backports to all active minor branches for the 9 major.

[efd6]

Thanks