Document Details
Normalization Schema Process Event
This page contains Windows bias
About This Page
This page is part of the Azure documentation. It contains code examples and configuration instructions for working with Azure services.
Bias Analysis
Detected Bias Types
windows_first
windows_tools
windows_examples
windows_terms
Summary
The documentation page demonstrates a moderate Windows bias. Many example values for process names, paths, and command lines use Windows-style conventions (e.g., C:\Windows\explorer.exe, rundll32.exe). Integrity level explanations and references are Windows-centric, with links to Microsoft documentation and terminology (e.g., UAC, Mandatory Integrity Control). Linux is mentioned only in passing for PID conversion, and there are no Linux/macOS-specific examples, fields, or references. The documentation assumes Windows as the default context for process activity, file paths, and user/session identifiers.
Recommendations
- Add Linux/macOS-specific examples for process names, paths, and command lines (e.g., /usr/bin/bash, /usr/local/bin/python3).
- Include explanations of process integrity and privilege concepts for Linux/macOS (e.g., SELinux context, capabilities, sudo elevation).
- Reference Linux/macOS documentation where appropriate, not only Windows resources.
- Clarify field usage for non-Windows systems, especially where Windows-specific terms (e.g., UAC, integrity level) are used.
- Ensure examples and field descriptions alternate or balance Windows and Linux/macOS contexts.
Create Pull Request
Scan History
| Date | Scan | Status | Result |
|---|---|---|---|
| 2026-01-12 00:00 | #99 | completed |
Biased
|
| 2026-01-11 06:20 | #98 | completed |
Biased
|
| 2026-01-10 00:00 | #92 | completed |
 Clean
|
| 2026-01-06 22:28 | #78 | completed |
Clean
|
| 2025-12-15 00:00 | #7 | completed |
Clean
|
| 2025-12-14 05:05 | #6 | completed |
Clean
|