Bias Analysis
Detected Bias Types
windows_first
powershell_heavy
missing_linux_example
Summary
The documentation page for scheduled analytics rules in Microsoft Sentinel demonstrates a Windows bias primarily in the 'Next steps' section, where automation is described via API and PowerShell, with PowerShell mentioned explicitly and no Linux-native equivalents (such as Bash, shell scripts, or CLI tools) provided. There are no examples or references to Linux tools or workflows, and the only automation scripting language referenced is PowerShell, which is traditionally associated with Windows environments. No Linux-specific instructions, examples, or parity is offered for users who may be managing Sentinel from Linux systems.
Recommendations
- Include examples of automating rule enablement using Azure CLI (az), which is cross-platform and commonly used on Linux.
- Provide sample Bash or shell scripts for exporting/importing rules, alongside PowerShell examples.
- Mention that PowerShell Core is available on Linux, but also offer instructions for users who prefer native Linux tools.
- Reference Linux-compatible tools and workflows (e.g., curl for API calls, jq for JSON processing) in automation sections.
- Ensure that scripting and automation instructions are presented in a platform-neutral way, or provide both Windows and Linux examples side-by-side.
Create Pull Request