Document Details
Normalization Schema Dns
This page contains Windows bias
About This Page
This page is part of the Azure documentation. It contains code examples and configuration instructions for working with Azure services.
Bias Analysis
Detected Bias Types
windows_first
windows_tools
windows_examples
windows_heavy_field_examples
Summary
The documentation page exhibits a moderate Windows bias. Windows terminology, formats, and examples are consistently presented first or exclusively (e.g., domain\hostname, SIDs, process paths like C:\Windows\explorer.exe, domain types labeled 'Windows', and user types labeled 'Windows'). Field descriptions and examples favor Windows conventions, with Linux equivalents mentioned only in passing or not at all. There are no Linux-specific examples, and Windows-centric identifiers (SIDs, domain\hostname) are used as canonical formats. The schema and field guidelines are tailored to Windows environments, with Linux support implied but not demonstrated.
Recommendations
- Add Linux-specific examples for fields such as hostnames, process names (e.g., /usr/bin/sshd), and user identifiers (e.g., UID/GID).
- Present Linux and Windows formats side-by-side in field descriptions, especially for fields like SrcFQDN, SrcDomainType, SrcProcessName, and SrcUserId.
- Include explicit mention and examples of Linux domain types (e.g., FQDN, local UNIX domains) and user types (e.g., POSIX users, service accounts).
- Clarify how Linux systems map to schema fields, such as process IDs, hostnames, and domain information.
- Ensure that recommendations and best practices are applicable to both Windows and Linux environments, and highlight any platform-specific discrepancies.
- Where Windows-centric terminology is used (e.g., SIDs, domain\hostname), provide Linux equivalents (e.g., UID/GID, /etc/hostname) and explain mapping.
Create Pull Request
Scan History
| Date | Scan | Status | Result |
|---|---|---|---|
| 2026-01-22 01:38 | #286 | completed |
 Clean
|
| 2026-01-14 00:00 | #250 | in_progress |
Biased
|
| 2026-01-13 00:00 | #246 | completed |
Biased
|
| 2026-01-11 00:00 | #240 | completed |
Biased
|
| 2026-01-10 00:00 | #237 | completed |
Biased
|
| 2026-01-09 00:34 | #234 | completed |
Biased
|
| 2026-01-08 00:53 | #231 | completed |
Biased
|
| 2026-01-06 18:15 | #225 | cancelled |
Clean
|
| 2025-08-17 00:01 | #83 | cancelled |
Clean
|
| 2025-07-13 21:37 | #48 | completed |
Clean
|
| 2025-07-12 23:44 | #41 | cancelled |
Clean
|