Document Details
Entities Reference
This page contains Windows bias
About This Page
This page is part of the Azure documentation. It contains code examples and configuration instructions for working with Azure services.
Bias Analysis
Detected Bias Types
windows_tools
windows_first
missing_linux_example
Summary
The documentation page demonstrates a Windows bias by referencing Windows-specific concepts and tools (e.g., NTDomain, NetBiosName, SID, RegistryKey/Hive, WindowsSecurityZoneType, AlternateDataStreamName) throughout the entity schemas. Windows terminology is consistently used first or exclusively, while Linux equivalents (such as UID/GID, /etc/passwd, Linux file attributes, or Linux registry alternatives) are not mentioned or described. There are no examples or schema attributes for Linux-specific entities, and fields like OSFamily and OSVersion only list Linux as an option without further detail or parity in examples.
Recommendations
- Add Linux-specific identifiers and examples for entities such as Account (e.g., UID, GID, /etc/passwd), Host (e.g., hostname, /etc/hostname, domain concepts in Linux), and File (e.g., inode, file permissions, SELinux context).
- Include Linux registry alternatives or clarify that RegistryKey/RegistryValue are Windows-only concepts.
- Provide parity in documentation by listing Linux attributes and patterns alongside Windows ones, especially in tables and schema definitions.
- Add examples of Linux-specific entity mapping and investigation, such as mapping Linux process attributes (e.g., /proc, systemd unit names) and Linux log sources.
- Clarify which fields are applicable to Windows, Linux, or both, and provide guidance for cross-platform environments.
Create Pull Request
Scan History
| Date | Scan | Status | Result |
|---|---|---|---|
| 2026-01-14 00:00 | #250 | in_progress |
Biased
|
| 2026-01-13 00:00 | #246 | completed |
Biased
|
| 2026-01-11 00:00 | #240 | completed |
Biased
|
| 2026-01-10 00:00 | #237 | completed |
Biased
|
| 2026-01-09 00:34 | #234 | completed |
Biased
|
| 2026-01-08 00:53 | #231 | completed |
Biased
|
| 2026-01-06 18:15 | #225 | cancelled |
 Clean
|
| 2025-08-17 00:01 | #83 | cancelled |
Clean
|
| 2025-07-13 21:37 | #48 | completed |
Clean
|
| 2025-07-12 23:44 | #41 | cancelled |
Clean
|