Bias Analysis
Detected Bias Types
windows_first
windows_tools
Summary
The documentation references several Windows-specific concepts and tools (e.g., NTDomain, NetBiosName, AlternateDataStreamName, WindowsSecurityZoneType, registry keys/values) and often lists Windows attributes first or as primary examples. While Linux/macOS equivalents are sometimes acknowledged (e.g., OSFamily includes Linux, Mac, etc.), the documentation structure and examples are noticeably Windows-centric, with limited explicit Linux/macOS guidance.
Recommendations
- Add explicit examples and descriptions for Linux/macOS attributes where relevant (e.g., Linux user/group/domain concepts, file attributes, process identifiers).
- Clarify which entity fields are applicable to non-Windows hosts and provide parity in schema documentation (e.g., for Host, Account, File, Registry).
- Where Windows-specific fields are present (e.g., NTDomain, NetBiosName, AlternateDataStreamName, registry keys), add notes about their absence or equivalents on Linux/macOS.
- Consider reordering lists or tables to avoid always listing Windows attributes first, or group by OS context.
- Provide sample entity mappings for Linux/macOS hosts and accounts.
Create Pull Request