Findings
Generator
Configuration
Lucidum Reverse
Architecture
Statistics
← All Findings
Vendor:
CrowdStrike Falcon
FIN-580
Weight:
5
4
3
2
1
Confidence:
High
Medium
Low
Edited:
2026-03-06 18:14
Verified
What It Detects
Asset has no Falcon Grouping Tags assigned. Grouping tags in CrowdStrike enable dynamic host group membership and are used to automatically classify assets for policy targeting, reporting, and operational workflows. Assets without grouping tags cannot be included in dynamic groups, potentially missing policy updates when new groups or policies are created.
MITRE ATT&CK Techniques
Comma-separated, e.g. T1078, T1190
Checks
read-only
Field
Operator
Value
Tag
is_empty
Remediation
×
×
×
×
+ Add item
Why It Matters
×
×
×
+ Add item
Save Changes
Export Lucidum