DISCOVER Glossary

A quick reference for DISCOVER-specific terms.

Term	Definition
Agent/Scanning Agent	The GuardWare DISCOVER software installed on an endpoint that scans and identifies sensitive data according to configured rules.
Agentless scan	A scan executed by the Scanning Server against a remote target over WinRM, SSH, or SMB. The scan target does not run any DISCOVER component.
Data classification	The process by which DISCOVER groups identified files or content into sensitive data categories.
Data owner	The individual accountable for a data type who receives notifications when DISCOVER detects that type of sensitive data.
Data types	Categories of sensitive information, predefined (e.g., PCI-DSS, PII, PHI) or user-defined, that DISCOVER scans for.
Device owner	The user or administrator responsible for a device that is being scanned or where sensitive data resides.
Management console	The central web platform for DISCOVER. Manages scan scheduling, configuration, reporting, and remediation. Runs on the Management Console host.
DISCOVER Scanning Agent	The Windows service that executes scan jobs assigned by the Management Console. Can be installed on each device for local scanning, or on a dedicated host or VM for agentless scanning.
File servers	File shares accessible over SMB, scanned by DISCOVER to detect sensitive data.
Internet Information Services (IIS)	Microsoft's web server platform, used to host the Management Console and its associated services.
Investigation	The process of reviewing files flagged during a scan to determine their sensitivity and decide on appropriate action.
Local scan	A scan executed by the Scanning Server on the same device it is installed on.
Management Console host	The Windows machine on which the DISCOVER Management Console is installed and runs. Can be distinct from the Scanning Server host.
Microsoft Azure	Microsoft's cloud platform. DISCOVER uses it to scan Azure-based services such as Exchange Online and SharePoint Online.
Microsoft Entra ID	Microsoft's cloud-based identity and access management service (previously Azure AD). Used to authenticate DISCOVER's access to Microsoft 365 services.
Microsoft Exchange	Microsoft's email and calendaring platform, available on-premises or as Exchange Online.
Microsoft Graph API	A unified RESTful API used by DISCOVER to access and scan Microsoft 365 data sources, including Exchange Online and SharePoint Online, using OAuth 2.0.
Microsoft Intune	Microsoft's endpoint and mobile device management service. Can be used to deploy the remote access configuration scripts to target devices.
Microsoft SharePoint	Microsoft's collaboration and content management platform. SharePoint Online can be scanned by DISCOVER via the Microsoft Graph API.
OAuth 2.0 authentication	The authorisation framework used by DISCOVER to securely access Microsoft 365 cloud services via the Microsoft Graph API.
Organisation	An entity within the DISCOVER Management Console representing a company or customer environment.
PCI-DSS data	Payment Card Industry-regulated data, such as credit card numbers. A predefined sensitive data type in DISCOVER.
Remediation	An action taken after sensitive data is discovered, such as encryption, deletion, relocation, or review.
Scan	The process by which DISCOVER inspects files, emails, or services against defined policies to identify and classify sensitive data.
Scanning Server	A Windows service where the agent is installed. It performs scans on target devices and shows the scan results in the Management Console.
Scanning Server Deployment	A Scanning Server deployment where a dedicated Windows host or VM scans other devices and services remotely. The primary deployment model for agentless scanning.
Scanning Agent host	The Windows machine on which the Scanning Agent is installed. In local scanning, this is the endpoint itself. In agentless scanning, this is the dedicated host or VM.
Sensitive data	Confidential or regulated information, such as PCI, PII, or intellectual property, that DISCOVER scans for and helps protect.
SSH	Secure Shell protocol used by DISCOVER to connect to non-Windows target devices during agentless scanning.
Target	Any endpoint, server, or service designated in DISCOVER as a location to be scanned. In agentless scanning, targets do not run any DISCOVER component.
Virtual machine (VM)	A virtualised Windows environment that can host the Scanning Server for agentless scanning.
WinRM	Windows Remote Management protocol, used by DISCOVER to connect to Windows target devices during agentless scanning.