Document Details

The documentation page demonstrates a moderate Windows bias. Many controls explicitly reference Windows VMs and Windows-specific audit results, such as auditing the Administrators group or deploying the Microsoft IaaSAntimalware extension. Linux equivalents are either missing or mentioned less frequently and with less detail. Windows examples and tools (e.g., 'Show audit results from Windows VMs', 'Microsoft IaaSAntimalware extension', 'audit Windows web servers') are presented first or exclusively in several sections, while Linux-specific guidance is limited to a few controls (e.g., passwordless accounts on Linux VMs). Endpoint protection and security hardening recommendations are focused on Windows, with no mention of common Linux solutions. This creates friction for Linux users seeking parity in compliance and security controls.