diff --git a/prowler/providers/microsoft365/services/entra/entra_security_defaults_disabled/entra_security_defaults_disabled.py b/prowler/providers/microsoft365/services/entra/entra_security_defaults_disabled/entra_security_defaults_disabled.py
index 8ce5a9008f..536cbdd5ac 100644
--- a/prowler/providers/microsoft365/services/entra/entra_security_defaults_disabled/entra_security_defaults_disabled.py
+++ b/prowler/providers/microsoft365/services/entra/entra_security_defaults_disabled/entra_security_defaults_disabled.py
@@ -1,9 +1,29 @@
+from typing import List
+
 from prowler.lib.check.models import Check, Check_Report_Microsoft365
 from prowler.providers.microsoft365.services.entra.entra_client import entra_client
 
 
 class entra_security_defaults_disabled(Check):
-    def execute(self) -> Check_Report_Microsoft365:
+    """Check if Entra Security Defaults are disabled.
+
+    This check verifies if the Entra Security Defaults are disabled in the Microsoft 365 environment.
+    The check passes if security defaults are disabled, and fails if they are enabled.
+
+    Attributes:
+        metadata: Metadata associated with the check (inherited from Check).
+    """
+
+    def execute(self) -> List[Check_Report_Microsoft365]:
+        """Execute the Entra Security Defaults disabled check.
+
+        This method checks the status of Entra Security Defaults and generates a report indicating
+        whether security defaults are disabled or not.
+
+        Returns:
+            List[Check_Report_Microsoft365]: A list containing the report of the check, indicating
+            whether the security defaults are disabled or enabled.
+        """
         findings = []
         report = Check_Report_Microsoft365(
             metadata=self.metadata(), resource=entra_client.security_defaults