Filter detections using a query in Falcon Query Language (FQL) An asterisk wildcard * includes all results. Common filter options include: status, device.device_id, max_severity.
The full list of valid filter options is extensive. Review it in CrowdStrike’s documentation inside the Falcon console.