Good article, Matt. In the example, would you need to create a "pci_users" host group in Stealthwatch or does Stealthwatch automatically interpret "pci_users"as a host group based on the TrustSec ID 16?