Document Details
Audit Logs To Rules
This page contains Windows bias
About This Page
This page is part of the Azure documentation. It contains code examples and configuration instructions for working with Azure services.
Bias Analysis
Detected Bias Types
powershell_heavy
windows_first
windows_tools
missing_linux_example
Summary
The documentation page exhibits a notable Windows bias. Windows-specific tools (PowerShell, .exe utilities) are featured prominently and in greater detail than Linux equivalents. Windows examples and terminology (e.g., PowerShell commands, .exe files, Windows paths) are presented first and in more depth, while Linux instructions are less detailed or absent (e.g., no Bash or shell scripting examples for Linux users, no mention of Linux-native automation tools). The allowlist generator tool is only available as a Windows executable, with no Linux alternative provided. Sample identities and rules are overwhelmingly Windows-centric, with little coverage of Linux processes or users.
Recommendations
- Provide Linux-native examples for all major steps, including shell (Bash) or Python scripts for resource creation and management.
- Offer a cross-platform or Linux-compatible version of the allowlist generator tool, or document manual log parsing methods for Linux.
- Balance sample identities and rules to include Linux processes and users, not just Windows executables.
- Present CLI and ARM template methods before or alongside PowerShell, emphasizing cross-platform parity.
- Explicitly note any limitations or workarounds for Linux users where Windows-only tooling is referenced.
Create Pull Request
Scan History
| Date | Scan | Status | Result |
|---|---|---|---|
| 2026-01-14 01:31 | #124 | completed |
Biased
|
| 2026-01-13 06:17 | #109 | completed |
Biased
|
| 2026-01-12 00:00 | #101 | completed |
Biased
|
| 2026-01-10 00:00 | #94 | completed |
 Clean
|
| 2026-01-09 19:00 | #91 | completed |
Clean
|
| 2026-01-06 22:28 | #80 | completed |
Clean
|