Document Details

The documentation page demonstrates Windows bias primarily by referencing Windows event data as the main example for resource-context RBAC and mentioning Windows administrators and Windows Security events before any Linux equivalents. There is no mention of Linux-specific event types (e.g., Linux audit logs) or examples for Linux administrators. Additionally, tools and patterns such as Syslog and CEF are mentioned, but only in the context of forwarding from VMs, with no explicit Linux-centric guidance or examples. The documentation lacks parity in providing Linux-specific scenarios, examples, or administrative roles.