Document Details

The documentation demonstrates a moderate Windows bias. Several control mappings and policy definitions specifically reference Windows virtual machines and Windows-specific features (e.g., auditing Windows Administrators group membership, password policies, and deploying Microsoft IaaSAntimalware extension for Windows Server). In many sections, Windows VM examples or controls are listed before Linux equivalents, and some controls (e.g., password complexity, domain join status) are only described for Windows VMs with no Linux counterpart provided. However, there are also Linux-specific controls (e.g., auditing passwd file permissions, remote connections without passwords), and many controls are OS-agnostic or have both Windows and Linux options.