Document Details

The documentation page for creating scheduled analytics rules in Microsoft Sentinel demonstrates a moderate Windows bias. While the core workflow is portal-based and platform-agnostic, references to automation and rule management via PowerShell are present, and PowerShell is mentioned as the primary scripting tool for enabling rules via code. There are no Linux shell (bash/CLI) equivalents or examples provided, and the only automation tooling referenced outside the portal is Windows-centric. Additionally, the mention of exporting rules to ARM templates and enabling via API is followed by PowerShell, with no Linux or cross-platform alternatives suggested. The order of mention also places Windows tools before API usage.