Bias Analysis
Detected Bias Types
powershell_heavy
windows_tools
missing_linux_example
windows_first
Summary
The documentation page demonstrates a Windows bias by providing only PowerShell examples for searching the audit log, referencing Windows-centric tools and roles (Exchange Online, Office 365), and omitting equivalent Linux or cross-platform command-line instructions. The workflow assumes use of Microsoft portals and PowerShell, which are native to Windows environments, without mentioning or prioritizing Linux-compatible alternatives.
Recommendations
- Include CLI examples using cross-platform tools such as Azure CLI, Microsoft Graph API via curl, or Python scripts that can run on Linux and macOS.
- Explicitly mention how Linux users can access audit logs, including any REST API endpoints or SDKs.
- Provide parity in step-by-step instructions for searching and exporting audit logs using Linux-compatible methods.
- Reference cross-platform authentication and session management approaches (e.g., OAuth2 tokens for API access) instead of only PowerShell/Windows credential management.
- Add notes or sections highlighting platform-agnostic best practices for SOC analysts working outside Windows environments.
Create Pull Request