Document Details
Use Matching Analytics To Detect Threats
This page contains Windows bias
About This Page
This page is part of the Azure documentation. It contains code examples and configuration instructions for working with Azure services.
Bias Analysis
Detected Bias Types
windows_first
windows_tools
missing_linux_example
Summary
The documentation page demonstrates a Windows bias by listing Windows-specific data sources (Windows DNS, Windows Firewall) and connectors before Linux equivalents, and by providing examples and solutions focused on Windows tools. While syslog and CEF are mentioned, there are no explicit Linux-focused examples, nor are Linux-specific tools or patterns discussed. The configuration and triage steps reference Microsoft portals and interfaces, which are platform-agnostic but do not address Linux-specific operational concerns.
Recommendations
- Add explicit Linux-focused examples, such as configuring matching analytics with Linux-based syslog sources or Linux firewall logs.
- Include references to Linux-native tools (e.g., iptables, auditd) and how their logs can be ingested and matched.
- Balance the order of data source presentation, listing Linux and Windows sources together or alternating, rather than listing Windows sources first.
- Provide screenshots or walkthroughs using Linux data sources to demonstrate parity.
- Clarify any platform-specific requirements or differences in connector setup for Linux environments.
Create Pull Request
Scan History
| Date | Scan | Status | Result |
|---|---|---|---|
| 2026-01-14 00:00 | #250 | in_progress |
Biased
|
| 2026-01-13 00:00 | #246 | completed |
Biased
|
| 2026-01-11 00:00 | #240 | completed |
Biased
|
| 2026-01-10 00:00 | #237 | completed |
Biased
|
| 2026-01-09 00:34 | #234 | completed |
Biased
|
| 2026-01-08 00:53 | #231 | completed |
Biased
|
| 2026-01-06 18:15 | #225 | cancelled |
 Clean
|
| 2025-09-16 00:00 | #113 | completed |
Clean
|
| 2025-09-15 00:00 | #112 | completed |
Clean
|
| 2025-09-14 00:00 | #111 | completed |
Clean
|
| 2025-09-13 00:00 | #110 | completed |
Clean
|
| 2025-09-12 00:00 | #109 | completed |
Clean
|
| 2025-09-11 00:00 | #108 | completed |
Clean
|
| 2025-08-17 00:01 | #83 | cancelled |
Clean
|
| 2025-07-13 21:37 | #48 | completed |
Clean
|
| 2025-07-12 23:44 | #41 | cancelled |
Biased
|