This also surprised me, but when I googled for "00Fin" I got a hit, apparently it is indeed documented:
From the CP_R7730.03_EndpointSecurity_AdminGuide.pdf:
...