Document Details
Connector Details
This page contains Windows bias
About This Page
This page is part of the Azure documentation. It contains code examples and configuration instructions for working with Azure services.
Bias Analysis
Detected Bias Types
windows_first
windows_tools
missing_linux_example
Summary
The documentation for Microsoft Sentinel data connectors exhibits a Windows bias in several areas. Many connectors, especially those related to on-premises log collection (e.g., Exchange, Active Directory, IIS, Windows Firewall), explicitly reference Windows machines, Windows Event Logs, and the use of Windows agents. Instructions and examples for collecting logs from Windows systems are provided, while equivalent Linux/macOS instructions are often absent or less detailed. Windows tools and patterns (such as Windows Event Forwarding, Windows Firewall, and references to Windows-specific agents) are mentioned prominently, sometimes without Linux alternatives or with Linux options listed after Windows. In some cases, connectors are only described in the context of Windows environments, leaving Linux/macOS users with unclear guidance or no path to implementation.
Recommendations
- For each connector or log type that references Windows-specific tools or agents, provide equivalent instructions and examples for Linux (and, where possible, macOS).
- Where Windows Event Logs or Windows-specific agents are mentioned, also describe how to collect analogous logs from Linux systems (e.g., using Syslog, auditd, or other native Linux logging mechanisms).
- Avoid listing Windows tools or patterns first by default; instead, present cross-platform options side-by-side or in parallel sections.
- Clearly indicate platform support and limitations for each connector, and provide explicit guidance for non-Windows environments.
- Where a connector is Windows-only, state this explicitly and, if possible, suggest workarounds or alternative solutions for Linux/macOS users.
Create Pull Request
Scan History
| Date | Scan | Status | Result |
|---|---|---|---|
| 2026-01-16 00:00 | #258 | completed |
Biased
|
| 2026-01-15 00:00 | #254 | completed |
Biased
|
| 2026-01-14 00:00 | #250 | in_progress |
Biased
|
| 2026-01-13 00:00 | #246 | completed |
Biased
|
| 2026-01-11 00:00 | #240 | completed |
Biased
|
| 2026-01-10 00:00 | #237 | completed |
Biased
|
| 2026-01-09 00:34 | #234 | completed |
 Clean
|
| 2026-01-08 00:53 | #231 | completed |
Biased
|
| 2026-01-06 18:15 | #225 | cancelled |
Clean
|
| 2025-09-10 00:00 | #107 | completed |
Clean
|
| 2025-09-09 00:00 | #106 | completed |
Clean
|
| 2025-09-08 00:00 | #105 | completed |
Clean
|
| 2025-09-07 00:00 | #104 | completed |
Clean
|
| 2025-09-06 00:00 | #103 | completed |
Clean
|
| 2025-09-05 00:00 | #102 | completed |
Clean
|
| 2025-09-04 00:00 | #101 | completed |
Clean
|
| 2025-09-03 00:00 | #100 | completed |
Clean
|
| 2025-08-29 00:01 | #95 | completed |
Clean
|
| 2025-08-11 00:00 | #77 | completed |
Clean
|
| 2025-08-10 00:00 | #76 | completed |
Clean
|
| 2025-08-09 00:00 | #75 | completed |
Clean
|
| 2025-08-08 00:00 | #74 | completed |
Clean
|
| 2025-08-07 00:00 | #73 | completed |
Clean
|
| 2025-08-06 00:00 | #72 | completed |
Clean
|
| 2025-08-05 00:00 | #71 | completed |
Clean
|
| 2025-08-03 00:00 | #69 | completed |
Clean
|
| 2025-08-01 00:00 | #67 | completed |
Clean
|
| 2025-07-31 00:00 | #66 | completed |
Clean
|
| 2025-07-30 00:00 | #65 | completed |
Clean
|
| 2025-07-29 00:01 | #64 | completed |
Clean
|
| 2025-07-28 00:00 | #63 | completed |
Clean
|
| 2025-07-27 00:00 | #62 | completed |
Clean
|
| 2025-07-26 00:01 | #61 | completed |
Clean
|
| 2025-07-25 00:00 | #60 | completed |
Clean
|
| 2025-07-24 00:00 | #59 | completed |
Clean
|
| 2025-07-23 00:00 | #58 | completed |
Clean
|
| 2025-07-22 00:01 | #57 | completed |
Clean
|
| 2025-07-21 00:00 | #56 | completed |
Clean
|
| 2025-07-19 13:51 | #54 | completed |
Clean
|
| 2025-07-17 00:00 | #53 | completed |
Clean
|
| 2025-07-16 00:00 | #52 | completed |
Clean
|
| 2025-07-15 00:00 | #51 | completed |
Clean
|
| 2025-07-14 21:48 | #50 | completed |
Clean
|
| 2025-07-13 21:37 | #48 | completed |
Clean
|
| 2025-07-12 23:44 | #41 | cancelled |
Biased
|