> For the complete documentation index, see [llms.txt](https://docs.guardware.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.guardware.com/discover/about/discover-glossary.md).

# DISCOVER Glossary

<table><thead><tr><th width="204">Term</th><th>Definition</th></tr></thead><tbody><tr><td>Agent/Scanning Agent</td><td>The GuardWare DISCOVER software installed on an endpoint that scans and identifies sensitive data according to configured rules.</td></tr><tr><td>Agentless scan</td><td>A scan executed by the Scanning Server against a remote target over WinRM, SSH, or SMB. The scan target does not run any DISCOVER component.</td></tr><tr><td>Data classification</td><td>The process by which DISCOVER groups identified files or content into sensitive data categories.</td></tr><tr><td>Data owner</td><td>The individual accountable for a data type who receives notifications when DISCOVER detects that type of sensitive data.</td></tr><tr><td>Data types</td><td>Categories of sensitive information, predefined (e.g., PCI-DSS, PII, PHI) or user-defined, that DISCOVER scans for.</td></tr><tr><td>Device owner</td><td>The user or administrator responsible for a device that is being scanned or where sensitive data resides.</td></tr><tr><td>Management console</td><td>The central web platform for DISCOVER. Manages scan scheduling, configuration, reporting, and remediation. Runs on the Management Console host.</td></tr><tr><td>DISCOVER Scanning Agent</td><td>The Windows service that executes scan jobs assigned by the Management Console. Can be installed on each device for local scanning, or on a dedicated host or VM for agentless scanning.</td></tr><tr><td>File servers</td><td>File shares accessible over SMB, scanned by DISCOVER to detect sensitive data.</td></tr><tr><td>Internet Information Services (IIS)</td><td>Microsoft's web server platform, used to host the Management Console and its associated services.</td></tr><tr><td>Investigation</td><td>The process of reviewing files flagged during a scan to determine their sensitivity and decide on appropriate action.</td></tr><tr><td>Local scan</td><td>A scan executed by the Scanning Server on the same device it is installed on.</td></tr><tr><td>Management Console host</td><td>The Windows machine on which the DISCOVER Management Console is installed and runs. Can be distinct from the Scanning Server host.</td></tr><tr><td>Microsoft Azure</td><td>Microsoft's cloud platform. DISCOVER uses it to scan Azure-based services such as Exchange Online and SharePoint Online.</td></tr><tr><td>Microsoft Entra ID</td><td>Microsoft's cloud-based identity and access management service (previously Azure AD). Used to authenticate DISCOVER's access to Microsoft 365 services.</td></tr><tr><td>Microsoft Exchange</td><td>Microsoft's email and calendaring platform, available on-premises or as Exchange Online.</td></tr><tr><td>Microsoft Graph API</td><td>A unified RESTful API used by DISCOVER to access and scan Microsoft 365 data sources, including Exchange Online and SharePoint Online, using OAuth 2.0.</td></tr><tr><td>Microsoft Intune</td><td>Microsoft's endpoint and mobile device management service. Can be used to deploy the remote access configuration scripts to target devices.</td></tr><tr><td>Microsoft SharePoint</td><td>Microsoft's collaboration and content management platform. SharePoint Online can be scanned by DISCOVER via the Microsoft Graph API.</td></tr><tr><td>OAuth 2.0 authentication</td><td>The authorisation framework used by DISCOVER to securely access Microsoft 365 cloud services via the Microsoft Graph API.</td></tr><tr><td>Organisation</td><td>An entity within the DISCOVER Management Console representing a company or customer environment.</td></tr><tr><td>PCI-DSS data</td><td>Payment Card Industry-regulated data, such as credit card numbers. A predefined sensitive data type in DISCOVER.</td></tr><tr><td>Remediation</td><td>An action taken after sensitive data is discovered, such as encryption, deletion, relocation, or review.</td></tr><tr><td>Scan</td><td>The process by which DISCOVER inspects files, emails, or services against defined policies to identify and classify sensitive data.</td></tr><tr><td>Scanning Server</td><td>A Windows service where the agent is installed. It performs scans on target devices and shows the scan results in the Management Console.</td></tr><tr><td>Scanning Server Deployment</td><td>A Scanning Server deployment where a dedicated Windows host or VM scans other devices and services remotely. The primary deployment model for agentless scanning.</td></tr><tr><td>Scanning Agent host</td><td>The Windows machine on which the Scanning Agent is installed. In local scanning, this is the endpoint itself. In agentless scanning, this is the dedicated host or VM.</td></tr><tr><td>Sensitive data</td><td>Confidential or regulated information, such as PCI, PII, or intellectual property, that DISCOVER scans for and helps protect.</td></tr><tr><td>SSH</td><td>Secure Shell protocol used by DISCOVER to connect to non-Windows target devices during agentless scanning.</td></tr><tr><td>Target</td><td>Any endpoint, server, or service designated in DISCOVER as a location to be scanned. In agentless scanning, targets do not run any DISCOVER component.</td></tr><tr><td>Virtual machine (VM)</td><td>A virtualised Windows environment that can host the Scanning Server for agentless scanning.</td></tr><tr><td>WinRM</td><td>Windows Remote Management protocol, used by DISCOVER to connect to Windows target devices during agentless scanning.</td></tr></tbody></table>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.guardware.com/discover/about/discover-glossary.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.