In the CrowdStrike Falcon console, host groups are the mechanism used to organize endpoints (hosts) and the sensors installed on them. The dedicated "Host groups" page, located under the "Host setup and management" menu, is where administrators create, modify, and delete these groups. Creating host groups is a foundational step for policy management, as it allows for the targeted application of prevention policies, sensor update policies, and other configurations to specific sets of assets based on criteria like operating system, organizational unit, or function.

A. User management: This section is exclusively for creating and managing Falcon console user accounts, roles, and API clients, not for grouping endpoint hosts.

B. Sensor update policies: On this page, you create and manage policies that dictate sensor update schedules, but the host groups to which these policies are applied must be created elsewhere.

C. Host management: This is the main page for viewing all discovered hosts and their details. While you can view group membership here, group creation and management are performed on the "Host groups" page.

1. CrowdStrike

Inc. (2023). Falcon Platform: Host and Sensor Management. CrowdStrike Official Documentation. In the section "Host groups

" the procedure is detailed: "To create a host group: 1. In the Falcon console

go to Host setup and management > Host groups. 2. Click Create group." This explicitly identifies the "Host groups" page as the location for this task.

2. CrowdStrike

Inc. (2023). Getting Started: Create Host Groups. CrowdStrike Support Portal Documentation. Article ID: KB0123. This guide states

"Host groups are used to organize your hosts for policy enforcement and reporting. You can create static or dynamic host groups from the Host groups page (Host setup and management > Host groups)." This confirms the specific navigation path and purpose.