Document Details
Use Matching Analytics To Detect Threats
This page contains Windows bias
About This Page
This page is part of the Azure documentation. It contains code examples and configuration instructions for working with Azure services.
Bias Analysis
Detected Bias Types
windows_first
windows_tools
missing_linux_example
Summary
The documentation page demonstrates a Windows bias by listing Windows-specific data sources (Windows DNS, Windows Firewall) and connectors before Linux equivalents, and by referencing Windows tools and patterns (such as Windows DNS and Windows Firewall) without providing explicit Linux examples or parity (e.g., Linux DNS or firewall logs). While Syslog and CEF are mentioned, there are no concrete Linux-focused examples, screenshots, or instructions. The configuration and triage steps are generic and platform-agnostic, but the overall framing and examples favor Windows environments.
Recommendations
- Add explicit Linux examples, such as how to ingest and match Linux DNS logs (e.g., BIND, Unbound) and Linux firewall logs (e.g., iptables, nftables) in Microsoft Sentinel.
- Include screenshots and configuration steps for Linux data sources and connectors alongside Windows examples.
- Mention and link to Linux-specific solutions in the data connector table (e.g., Linux DNS, Linux firewall).
- Ensure parity in documentation by describing how matching analytics works with Linux event sources and providing troubleshooting tips for Linux environments.
- Avoid listing Windows tools and connectors before Linux equivalents; present them together or alternate order to reduce perceived bias.
Create Pull Request
Scan History
| Date | Scan | Status | Result |
|---|---|---|---|
| 2026-01-14 00:00 | #250 | in_progress |
Biased
|
| 2026-01-13 00:00 | #246 | completed |
Biased
|
| 2026-01-11 00:00 | #240 | completed |
Biased
|
| 2026-01-10 00:00 | #237 | completed |
Biased
|
| 2026-01-09 00:34 | #234 | completed |
Biased
|
| 2026-01-08 00:53 | #231 | completed |
Biased
|
| 2026-01-06 18:15 | #225 | cancelled |
 Clean
|
| 2025-09-16 00:00 | #113 | completed |
Clean
|
| 2025-09-15 00:00 | #112 | completed |
Clean
|
| 2025-09-14 00:00 | #111 | completed |
Clean
|
| 2025-09-13 00:00 | #110 | completed |
Clean
|
| 2025-09-12 00:00 | #109 | completed |
Clean
|
| 2025-09-11 00:00 | #108 | completed |
Clean
|
| 2025-08-17 00:01 | #83 | cancelled |
Clean
|
| 2025-07-13 21:37 | #48 | completed |
Clean
|
| 2025-07-12 23:44 | #41 | cancelled |
Biased
|