This table is built around the wscapi which communicates with Microsoft's Windows Security Center service.

Windows Security Center is a security reporting dashboard available on Windows 10 devices which notifies users when the configuration of their device (eg. Firewall Off) exposes them to risk. These categories are often composite items populated and scored based on one or more underlying settings.

For example, the Firewall state is a composite of several Windows Firewall Profiles: Domain, Public and Private. We can inspect what the WSC output is when each is modified:

+--------------------+-----------------+-----------------+------------------+
| wsc_firewall_state | domain_firewall | public_firewall | private_firewall |
+--------------------+-----------------+-----------------+------------------+
| Good               | enabled         | enabled         | enabled          |
| Poor               | enabled         | disabled        | disabled         |
| Poor               | disabled        | enabled         | disabled         |
| Poor               | disabled        | disabled        | enabled          |
| Poor               | disabled        | disabled        | disabled         |
+--------------------+-----------------+-----------------+------------------+

What is the output of this table?

Each column has 1:4 possible states defined by the API Microsoft Docs: WSC_SECURITY_PROVIDER_HEALTH enumeration

• Good - The status of the security provider category is good and does not need user attention.
• Poor - The status of the security provider category is poor and the computer may be at risk.
• Snoozed - The security provider category is in snooze state. Snooze indicates that WSC is not actively protecting the computer.
• Not Monitored - The status of the security provider category is not monitored by WSC.

The columns output are the following:

• global_state - The overall health of the Windows Security Center. This returns Good when all other services are also in Good states.
• firewall - The health of the monitored Firewall (see windows_security_products).
• autoupdate - The health of the Windows Autoupdate feature.
• antivirus - The health of the moinitored Antivirus solution (see windows_security_products)
• antispyware - The health of the monitored Antispyware solution (see windows_security_products)
• internet_settings - The health of the Internet Settings
• windows_security_center_service - The health of the Windows Security Center Service
• user_account_control - The health of the User Account Control (UAC) capability in Windows.

SELECT * FROM windows_security_center;
+---------------+----------+------------+-----------+-------------+-------------------+---------------------------------+----------------------+
| global_state  | firewall | autoupdate | antivirus | antispyware | internet_settings | windows_security_center_service | user_account_control |
+---------------+----------+------------+-----------+-------------+-------------------+---------------------------------+----------------------+
| Good          | Good     | Good       | Good      | Good        | Good              | Good                            | Good                 |
+---------------+----------+------------+-----------+-------------+-------------------+---------------------------------+----------------------+

Where are these settings being configured within the OS UI?

Global State

If any of the categories have a red alert symbol the state will report back as Poor.
The screenshot below shows a Good configuration:

Firewall

If either the Private or Public firewall profiles are disabled the state will report back as Poor.
The Screenshot below shows a Good configuration:

Autoupdate

If Windows Update is somehow blocked or broken the state will report back as Poor.
The screenshot below shows a Good configuration:

Antivirus

If Windows Defender or another certified antivirus provider is not registered with Windows Security Center the state will report back as Poor.
The screenshot below shows a Good configuration:

Antispyware

If Windows Defender or another certified antispyware provider is not registered with Windows Security Center the state will report back as Poor. This setting has been deprecated in Windows 10:1607 but was left for devices running Windows 7.

Internet Settings

If certain controls in the Internet Settings dialog are changed to a not-recommended configuration the state will report back as Poor as shown in the screenshot below:

Windows Security Center Service

If the WSC service is disabled or tampered with to prevent starting the state will report back as Poor

Windows UAC

If the slider is set to the bottom-most position, the state will report back as Poor.
The screenshot below shows the minimum Good configuration: