Document Details
Sentinel Hunting Rules Creation
This page contains Windows bias
About This Page
This page is part of the Azure documentation. It contains code examples and configuration instructions for working with Azure services.
Bias Analysis
Detected Bias Types
powershell_heavy
windows_tools
windows_first
Summary
The documentation page demonstrates Windows bias primarily in the section describing how to generate a GUID for the 'id' attribute. It explicitly references the PowerShell New-GUID cmdlet as a method, mentioning it before generic alternatives (development tools, online generators), and does not provide Linux-specific or cross-platform command-line examples (such as uuidgen for Linux/macOS). No Linux tools or patterns are mentioned for this step, and PowerShell is highlighted as the concrete example. The rest of the documentation is platform-neutral, focusing on KQL, YAML, and Microsoft Sentinel concepts.
Recommendations
- Provide Linux/macOS equivalents for GUID generation, such as the uuidgen command.
- List platform-agnostic methods first (e.g., 'any development tool or online generator'), then provide OS-specific examples for both Windows and Linux/macOS.
- Avoid referencing Windows tools (like PowerShell) exclusively; always offer parity with Linux alternatives.
- Consider adding a table or section with cross-platform command-line examples for common tasks (e.g., GUID generation, file editing).
Create Pull Request
Scan History
| Date | Scan | Status | Result |
|---|---|---|---|
| 2026-01-14 00:00 | #250 | in_progress |
Biased
|
| 2026-01-13 00:00 | #246 | completed |
Biased
|
| 2026-01-11 00:00 | #240 | completed |
Biased
|
| 2026-01-10 00:00 | #237 | completed |
Biased
|
| 2026-01-09 00:34 | #234 | completed |
Biased
|
| 2026-01-08 00:53 | #231 | completed |
Biased
|
| 2026-01-06 18:15 | #225 | cancelled |
 Clean
|
| 2025-08-17 00:01 | #83 | cancelled |
Clean
|
| 2025-07-13 21:37 | #48 | completed |
Clean
|
| 2025-07-12 23:44 | #41 | cancelled |
Biased
|