Document Details
Move To Defender
This page contains Windows bias
About This Page
This page is part of the Azure documentation. It contains code examples and configuration instructions for working with Azure services.
Bias Analysis
Detected Bias Types
windows_tools
windows_first
missing_linux_example
Summary
The documentation page demonstrates a Windows bias primarily through exclusive references to Microsoft Defender, WindowsDefenderATP, and other Defender products, which are Windows-centric. There are no Linux-specific examples, tools, or operational patterns mentioned, nor is there guidance for Linux users or parity with Linux-native security workflows. The documentation assumes usage of Microsoft-centric (and thus Windows-centric) security solutions and does not address Linux environments or provide examples for Linux-based operations.
Recommendations
- Add explicit guidance for Linux environments, including how Linux-based hosts and data sources are onboarded, managed, and monitored in the Defender portal.
- Include examples and workflows for Linux systems, such as onboarding Linux servers to Microsoft Sentinel/Defender, configuring connectors for Linux logs, and managing incidents originating from Linux endpoints.
- Reference Linux-native tools (e.g., auditd, syslog, rsyslog, journald) and how their data can be integrated and visualized in the Defender portal.
- Provide parity in automation and playbook examples, showing how Linux-based automation (e.g., Bash scripts, Python, Ansible) can be triggered and managed alongside Azure Logic Apps.
- Clarify any limitations or differences in feature support for Linux endpoints compared to Windows endpoints within the Defender portal.
- Ensure that role-based access control, data retention, and privacy policies are explained for Linux data sources as well as Windows.
Create Pull Request
Scan History
| Date | Scan | Status | Result |
|---|---|---|---|
| 2026-01-14 00:00 | #250 | in_progress |
 Clean
|
| 2026-01-13 00:00 | #246 | completed |
Clean
|
| 2026-01-11 00:00 | #240 | completed |
Biased
|
| 2026-01-10 00:00 | #237 | completed |
Biased
|
| 2026-01-09 00:34 | #234 | completed |
Clean
|
| 2026-01-08 00:53 | #231 | completed |
Biased
|
| 2026-01-06 18:15 | #225 | cancelled |
Clean
|
| 2025-09-16 00:00 | #113 | completed |
Clean
|
| 2025-09-15 00:00 | #112 | completed |
Clean
|
| 2025-09-14 00:00 | #111 | completed |
Clean
|
| 2025-09-13 00:00 | #110 | completed |
Clean
|
| 2025-09-12 00:00 | #109 | completed |
Clean
|
| 2025-09-11 00:00 | #108 | completed |
Clean
|
| 2025-09-10 00:00 | #107 | completed |
Clean
|
| 2025-09-09 00:00 | #106 | completed |
Clean
|
| 2025-09-08 00:00 | #105 | completed |
Clean
|
| 2025-09-07 00:00 | #104 | completed |
Clean
|
| 2025-09-06 00:00 | #103 | completed |
Clean
|
| 2025-09-05 00:00 | #102 | completed |
Clean
|
| 2025-09-04 00:00 | #101 | completed |
Clean
|
| 2025-09-03 00:00 | #100 | completed |
Clean
|
| 2025-08-29 00:01 | #95 | completed |
Clean
|
| 2025-08-17 00:01 | #83 | cancelled |
Clean
|
| 2025-08-11 00:00 | #77 | completed |
Clean
|
| 2025-08-10 00:00 | #76 | completed |
Clean
|
| 2025-08-09 00:00 | #75 | completed |
Clean
|
| 2025-08-08 00:00 | #74 | completed |
Clean
|
| 2025-08-01 00:00 | #67 | completed |
Clean
|
| 2025-07-31 00:00 | #66 | completed |
Clean
|
| 2025-07-30 00:00 | #65 | completed |
Clean
|
| 2025-07-29 00:01 | #64 | completed |
Clean
|
| 2025-07-28 00:00 | #63 | completed |
Clean
|
| 2025-07-27 00:00 | #62 | completed |
Clean
|
| 2025-07-26 00:01 | #61 | completed |
Clean
|
| 2025-07-25 00:00 | #60 | completed |
Clean
|
| 2025-07-24 00:00 | #59 | completed |
Clean
|
| 2025-07-23 00:00 | #58 | completed |
Clean
|
| 2025-07-22 00:01 | #57 | completed |
Clean
|
| 2025-07-21 00:00 | #56 | completed |
Clean
|
| 2025-07-19 13:51 | #54 | completed |
Clean
|
| 2025-07-17 00:00 | #53 | completed |
Clean
|
| 2025-07-13 21:37 | #48 | completed |
Clean
|
| 2025-07-12 23:44 | #41 | cancelled |
Clean
|