Add the domain attribute to the group object

[mikeradka]

Description of changes:

The group object does not contain a pertinent piece of info which is common in logs: the group's domain. This PR simply adds the domain attribute to the group object.

Here are some examples of when the group's domain is logged:

• https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/event-4732
• https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/event-4733

[zschmerber]

looks good seems like an easy add and the description makes sense.

[Aniak5]

lgtm