> For the complete documentation index, see [llms.txt](https://docs.reveald.com/technical-documentation/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.reveald.com/technical-documentation/admin-guides/epiphany-intelligence-platform-administrator-guide/epiphany-tools/rogue-report/host-list-and-the-query-builder.md). # Host List and the Query Builder The **Host List** is located at the bottom of the [Rogue Report](/technical-documentation/admin-guides/epiphany-intelligence-platform-administrator-guide/epiphany-tools/rogue-report.md). It shows each user that meets the criteria set up using the filters at the top of the pane. In the image below, this report shows *all* users, regardless of which tools they are using. You can tell this by the colored rectangles at the top, which show Windows AD, CrowdStrike, and Tenable.

You can quickly filter the information by removing and adding data sources from the list: * Select the “x” next to a data source name to remove it from the list. * To add a data source you previously removed, expand the drop-down list and select it.

Expand the drop-down list (on the right) and select a data source.

* To change the detail shown in the list, select the **Advanced Filter**/**Basic Filter** switch on the left. * To perform an advanced query to potentially identify devices that aren’t using the required tools, select the filter icon

. This is described in the next section. ### Query Builder Based on our example images, let’s assume you need to build a query to show you the users in Windows Active Directory who aren’t using CrowdStrike. 1. Select the filter icon

. 2. Select **in +**

and then select **windows\_ad+**

. 3. Select **not +**

and then select **crowdstrike+**

. 4. Select **Run Query**. This builds a query that tells Epiphany to list all users who are using Windows AD but not using Crowdstrike. These are the devices you need to ensure start using Crowdstrike. You can download this list as a .csv file and it can become a worklist.

Query Builder with a query to show users in Windows Active Directory who aren't using CrowdStrike.

For more information on advanced queries follow the information in the [Search and Query Guidelines](https://app.gitbook.com/o/dUU09CQc8vIXNBlaSdQu/s/tkp3obVDMu3n9ZTUpfEP/~/changes/970/admin-guides/epiphany-intelligence-platform-administrator-guide/search-and-query-guidelines) section. --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://docs.reveald.com/technical-documentation/admin-guides/epiphany-intelligence-platform-administrator-guide/epiphany-tools/rogue-report/host-list-and-the-query-builder.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.