Monitoring SaaS-Connected Devices

監控 SaaS 連線裝置

Overview | 概述

Devices are the gateway to your SaaS data. The Devices Inventory in Falcon Shield connects the dots between devices, users, and SaaS access — turning fragmented device data into actionable security intelligence.

裝置是存取 SaaS 資料的入口。Falcon Shield 中的裝置清單串連了裝置、使用者和SaaS 存取權之間的關聯，將零散的裝置資料轉化為可操作的安全情報。

Why Device Visibility Matters | 為什麼裝置可見性很重要

Device Identification & Merging | 裝置識別與合併

Falcon Shield merges devices based on:

Falcon Shield 根據以下條件合併裝置：

• User email address (reported by the SaaS app)

• Device ID / Serial Number

• Device type (mobile, laptop, desktop)

• Device name

• 使用者電子郵件地址（由 SaaS 應用程式回報）

• 裝置 ID / 序號

• 裝置類型（行動裝置、筆電、桌上型電腦）

• 裝置名稱

If the same device is reported for two different email addresses, it appears as two separate rows — preventing devices from being lost during user migrations.

如果同一裝置以兩個不同的電子郵件地址回報，它會顯示為兩筆獨立的紀錄 — 避免裝置在使用者遷移過程中遺失。

Available Columns | 可用欄位

Filters and Grouping | 篩選與分組

Key Filters | 關鍵篩選器

Grouping | 分組

Group results by Platform, OS, or OS Version to identify patterns across your device fleet.

依平台、作業系統或作業系統版本分組結果，以識別裝置群組中的模式。

Multiple filters within the same filter = OR logic. Filters across different filter types = AND logic.

同一篩選器內的多個篩選條件 = OR 邏輯。不同篩選器類型之間 = AND 邏輯。

Device Inventory Templates | 裝置清單範本

Privileged Users with Non-Compliant Devices | 特權使用者使用不合规裝置

Why it matters | 為什麼重要： Privileged users accessing SaaS from devices with critical vulnerabilities create a dangerous attack surface. These users have elevated permissions that could be exploited if their device is compromised.

說明： 特權使用者從有嚴重漏洞的裝置存取 SaaS 會造成危險的攻擊面。如果他們的裝置被入侵，這些使用者的高權限可能被利用。

Stale Devices | 閒置裝置

Description | 說明： Devices that appear functional but may be compromised in ways that don't trigger alerts. Attackers design malware to operate stealthily on such systems.

說明： 外觀正常但可能已被入侵且未觸發警報的裝置。攻擊者設計惡意軟體在此類系統上隱密運作。

Devices with Critical Vulnerabilities | 有嚴重漏洞的裝置

Description | 說明： High-severity flaws that can be exploited to gain unauthorized access, elevate privileges, or execute malicious code. Unpatched vulnerabilities create entry points for attackers.

說明： 可被利用來取得未授權存取、提升權限或執行惡意程式碼的嚴重漏洞。未修補的漏洞為攻擊者創造入口。

Unencrypted Devices | 未加密裝置

Description | 說明： Devices lacking data protection mechanisms. In the event of loss or theft, all stored data becomes readily accessible, violating many compliance requirements.

說明： 缺乏資料保護機制的裝置。在裝置遺失或被竊時，所有儲存的資料將變得容易存取，違反許多法規要求。

Related Modules | 相關模組