Document Details
Normalization Schema File Event
This page contains Windows bias
About This Page
This page is part of the Azure documentation. It contains code examples and configuration instructions for working with Azure services.
Bias Analysis
Detected Bias Types
windows_first
windows_tools
windows_examples_heavy
Summary
The documentation demonstrates a moderate Windows bias. Windows tools and terminology (e.g., File Explorer, Windows path formats, domain\hostname, SIDs) are mentioned first or exclusively in several places. Examples for file paths, process names, and user/domain formats predominantly use Windows conventions, with Linux/Unix equivalents appearing less frequently or as secondary notes. The only concrete example of a file operation uses Windows File Explorer. There are no PowerShell-specific examples, but the overall schema and field descriptions favor Windows-centric patterns and identifiers.
Recommendations
- Provide Linux/Unix examples alongside or before Windows examples for file paths, process names, and user/domain formats.
- Include more concrete Linux/Unix scenarios (e.g., using Nautilus, cp/mv commands, or Linux file system paths) in illustrative examples.
- Clarify that fields such as ActorSessionId, process IDs, and path formats are equally applicable to Linux/Unix systems, and provide normalization guidance for those platforms.
- Expand the schema reference to mention Linux/Unix tools and patterns (e.g., inode numbers, UID/GID, /etc/passwd) where relevant.
- Ensure that documentation language and examples do not assume Windows as the default, but treat Linux/Unix and Windows equally as primary platforms.
Create Pull Request
Scan History
| Date | Scan | Status | Result |
|---|---|---|---|
| 2026-01-22 01:38 | #286 | completed |
Biased
|
| 2026-01-14 00:00 | #250 | in_progress |
Biased
|
| 2026-01-13 00:00 | #246 | completed |
Biased
|
| 2026-01-11 00:00 | #240 | completed |
Biased
|
| 2026-01-10 00:00 | #237 | completed |
Biased
|
| 2026-01-09 00:34 | #234 | completed |
Biased
|
| 2026-01-08 00:53 | #231 | completed |
Biased
|
| 2026-01-06 18:15 | #225 | cancelled |
 Clean
|
| 2025-08-17 00:01 | #83 | cancelled |
Clean
|
| 2025-07-13 21:37 | #48 | completed |
Clean
|
| 2025-07-12 23:44 | #41 | cancelled |
Clean
|