Document Details
Normalization Schema Dns
This page contains Windows bias
About This Page
This page is part of the Azure documentation. It contains code examples and configuration instructions for working with Azure services.
Bias Analysis
Detected Bias Types
windows_first
windows_tools
windows_examples
Summary
The documentation demonstrates a mild Windows bias. Windows terminology (e.g., domain\hostname, SIDs, C:\Windows paths) is used in examples and field descriptions, often before or instead of Linux/macOS equivalents. Hostname and domain examples use Windows formats, and process examples reference Windows paths. There is mention of Linux in one place (process IDs), but no Linux/macOS-specific examples, formats, or terminology are provided.
Recommendations
- Add Linux/macOS-specific examples for fields like SrcHostname, SrcProcessName, and process IDs (e.g., /usr/bin/sshd, /var/log, UID/GID formats).
- Include Linux/macOS domain and user formats (e.g., FQDNs, POSIX usernames, UIDs) alongside Windows examples.
- Clarify that fields and formats are source-agnostic and provide explicit guidance for mapping Linux/macOS telemetry to the schema.
- Balance example hostnames, process paths, and user identifiers between Windows and Linux/macOS.
- Reference Linux/macOS DNS server sources (e.g., BIND, Unbound, dnsmasq) in the discrepancies and source sections.
Create Pull Request
Scan History
| Date | Scan | Status | Result |
|---|---|---|---|
| 2026-01-22 01:38 | #286 | completed |
 Clean
|
| 2026-01-14 00:00 | #250 | in_progress |
Biased
|
| 2026-01-13 00:00 | #246 | completed |
Biased
|
| 2026-01-11 00:00 | #240 | completed |
Biased
|
| 2026-01-10 00:00 | #237 | completed |
Biased
|
| 2026-01-09 00:34 | #234 | completed |
Biased
|
| 2026-01-08 00:53 | #231 | completed |
Biased
|
| 2026-01-06 18:15 | #225 | cancelled |
Clean
|
| 2025-08-17 00:01 | #83 | cancelled |
Clean
|
| 2025-07-13 21:37 | #48 | completed |
Clean
|
| 2025-07-12 23:44 | #41 | cancelled |
Clean
|