Bias Analysis
Detected Bias Types
windows_first
windows_terms
windows_examples
Summary
The documentation exhibits mild Windows bias, primarily through the use of Windows-centric terminology (e.g., NTDomain, Windows domain), and by listing Windows examples before Linux equivalents in file path fields. Several field descriptions reference Windows-specific concepts, such as 'DeviceNtDomain', 'DestinationNTDomain', and provide Windows-style file paths before Linux ones. However, Linux/UNIX references are present, and the documentation does not exclusively focus on Windows or PowerShell.
Recommendations
- Ensure Linux/UNIX examples are presented alongside or before Windows examples, especially in fields like filePath and oldFilePath.
- Balance terminology by including Linux/UNIX domain concepts (e.g., LDAP, Kerberos realms) where NTDomain/Windows domain is mentioned.
- Clarify that fields such as process names and file paths are platform-agnostic, and provide equal examples for both Windows and Linux/UNIX.
- Add explicit notes or examples for Linux/UNIX environments in field descriptions where only Windows terms are currently used.
- Review enrichment and custom field sections to ensure no implicit Windows-first assumptions are made.
Create Pull Request