Document Details
Normalization Schema Process Event
This page contains Windows bias
About This Page
This page is part of the Azure documentation. It contains code examples and configuration instructions for working with Azure services.
Bias Analysis
Detected Bias Types
windows_first
windows_examples
windows_terms
Summary
The documentation for the ASIM Process Event normalization schema is designed to be cross-platform and references support for both Windows and Linux systems. However, there is a noticeable Windows bias in the examples and terminology: most example process names and paths use Windows conventions (e.g., C:\Windows\explorer.exe), integrity levels are described only in terms of Windows, and links to further reading about process integrity reference Windows-specific documentation. Linux is mentioned as supported in some field notes, but Linux-specific examples, terminology, or links are absent.
Recommendations
- Add Linux/macOS process examples alongside Windows ones (e.g., /usr/bin/bash, /usr/bin/sshd).
- Describe process integrity and privilege concepts for Linux/macOS (e.g., user/group IDs, capabilities, SELinux contexts) or clarify that some fields are Windows-only.
- Include Linux/macOS-specific notes or links where relevant (e.g., for process creation, integrity, or privilege elevation).
- Balance example paths and process names between Windows and Linux/macOS.
- Clarify in field descriptions which concepts are OS-specific and provide cross-platform guidance.
Create Pull Request
Scan History
| Date | Scan | Status | Result |
|---|---|---|---|
| 2026-01-22 01:38 | #286 | completed |
Biased
|
| 2026-01-14 00:00 | #250 | in_progress |
Biased
|
| 2026-01-13 00:00 | #246 | completed |
Biased
|
| 2026-01-11 00:00 | #240 | completed |
Biased
|
| 2026-01-10 00:00 | #237 | completed |
Biased
|
| 2026-01-09 00:34 | #234 | completed |
Biased
|
| 2026-01-08 00:53 | #231 | completed |
Biased
|
| 2026-01-06 18:15 | #225 | cancelled |
 Clean
|
| 2025-08-17 00:01 | #83 | cancelled |
Clean
|
| 2025-07-13 21:37 | #48 | completed |
Biased
|
| 2025-07-12 23:44 | #41 | cancelled |
Clean
|