Document Details

The documentation page for Microsoft Defender for IoT alert reference demonstrates a mild Windows bias. Several alert types and descriptions specifically mention Windows processes and services (e.g., 'Unauthorized Windows Process', 'Unauthorized Windows Service', 'Suspicion of Remote Code Execution with PsExec', 'Suspicion of Remote Windows Service Management'), and malware alerts focus on Windows-specific threats (e.g., WannaCry, NotPetya, DoublePulsar, Conficker). There are no Linux-specific process/service alerts or malware examples, and Windows terminology appears before or instead of Linux equivalents.