in chef/cookbooks/cpe_crowdstrike_falcon_sensor/resources/cpe_crowdstrike_falcon_sensor.rb [345:367]
def get_grouping_tags(falconctl_path = falcon_agent_prefs['falconctl_path'])
if macos?
command = "#{falconctl_path} grouping-tags get"
command_out = shell_out(command)
command_tokenize = command_out.stdout.strip.split(': ')
return [] if node.safe_nil_empty?(command_tokenize)
return [] if command_tokenize[0].include?('No grouping tags set')
return command_tokenize.last.split(',') unless command_tokenize.empty? && command_tokenize.length > 1
return []
elsif windows?
subkeys = registry_get_values(windows_grouping_tags_regkey)
return [] if node.safe_nil_empty?(subkeys)
subkeys.each do |key|
return key[:data].split(',') if key[:name] == 'GroupingTags'
end
return []
end
end