The "Group Assignment" filter on the Host Management page within the CrowdStrike Falcon platform is used to display endpoints based on their membership in one or more specified host groups. Host groups are a fundamental organizational construct in Falcon, allowing administrators to apply distinct policies, manage sensor updates, and scope administrative actions to logical collections of assets. Using this filter enables an administrator to isolate their view to a specific set of hosts (e.g., "Domain Controllers," "PCI Systems") for targeted management, investigation, or reporting, thereby categorizing the view based on these pre-defined groups.

B. Identifying offline hosts is accomplished using the "Status" filter, which can sort by online, offline, or stale states.

C. Detecting hosts with outdated sensors is typically done using the "Sensor Version" filter to view hosts running specific or older agent versions.

D. Filtering hosts by their operating system is performed using the dedicated "OS" or "Platform" filter, not the group assignment filter.

1. CrowdStrike

Inc. (2023). Falcon Platform Documentation: Host and sensor management. CrowdStrike Support Portal. Section: "Managing hosts

" Subsection: "Filtering hosts." This section details the available filters on the Host Management page

explicitly stating the "Group Assignment" filter is used to "Filter hosts by the host groups they're in." It also describes the separate filters for "Status

" "Sensor Version

" and "OS Version

" confirming their distinct functions.

2. Syracuse University

College of Engineering & Computer Science. (2022). CIS 400/600: Intro to Cybersecurity - Lab 3: Endpoint Detection and Response with CrowdStrike Falcon. Page 5

"Host Grouping and Policies." The lab guide explains

"Host groups are the primary mechanism for organizing your endpoints... You can filter the Hosts page by group to see only the members of a specific group." This reinforces that the filter's purpose is categorization and viewing based on group membership.