Rule

Rule name

Permission required to run the rule

Enable or disable the rule

Scope of the rule

Define the source of the rule

Tests to run on the source

Description of the data

Highlights of the data (table conditions)

Description of the data in Markdown format

Resolution steps in HTML

Resolution steps in Markdown format

Required PowerShell modules for the script to run

Supported systems by the rule

PowerShell method to run the script

Categories associated with the rule

Display name for the rule

Description of the rule

Optional data requirements for this rule. Used by the pre-execution planner to stage datasets once and reuse across multiple rules.

Optional inline guidance content (Summary/Why/How/References) for display in reports and export.

Optional property path used to match entries for inclusion/exclusion (e.g., "SamAccountName", "UserPrincipalName"). Applies to C# rules first; PS support can be added later.

Optional list of keys to include (acts as a pre-filter when provided).

Optional list of keys to exclude (excluded items will be shown in report but not counted in tests).

Optional report hints that guide how typed results should be displayed (summary fields, sections). If not provided, the renderer falls back to smart flattening.

Indicates this rule is deprecated and kept for backward compatibility. Engines and UIs may highlight or hide deprecated rules.

Controls whether this rule should appear in interactive selectors and rule listings. Hidden rules stay discoverable programmatically (by explicit name) but are omitted from UX flows.

Optional inline crosswalk references to vendor baselines or external docs (PingCastle/PurpleKnight). Author in the rule source so maintainers can see mappings at a glance.

Optional links to other TestimoX rules (e.g., domain-level rule confirmed by DC-local rule).

Free-form tags for rule filtering and UI search (e.g., "laps", "acl", "heavy").

Rough execution cost hint used to exclude heavy rules in large environments.

Optional default scoring domain for all tests in this rule. If not set, the scoring engine derives contribution from Category. Individual tests can override via ScoreKind.