| Description | The security concept, the baseline requirement, and the system behavior the check enforces. |
| Rationale | The underlying risk, potential exploit scenarios, and the compliance standard driving the recommendation. |
| Remediation | Step-by-step guidance, the Group Policy path, or the command-line syntax that brings a non-compliant system into line. |
| Rule | The automated evaluation script, configuration parameter, registry path, or command Wazuh SCA runs to audit the endpoint. |