From 0b91557a72ed289339b8ca40d578ada17be2e834 Mon Sep 17 00:00:00 2001 From: lomayor Date: Tue, 3 Mar 2020 13:57:44 -0800 Subject: [PATCH] Update investigate-machines.md --- .../microsoft-defender-atp/investigate-machines.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/investigate-machines.md b/windows/security/threat-protection/microsoft-defender-atp/investigate-machines.md index 5dc2c27344..db8960a2f1 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/investigate-machines.md +++ b/windows/security/threat-protection/microsoft-defender-atp/investigate-machines.md @@ -147,7 +147,7 @@ You can also use the [Artifact timeline](investigate-alerts.md#artifact-timeline #### Event details Select an event to view relevant details about that event. A panel displays to show general event information. When applicable and data is available, a graph showing related entities and their relationships are also shown. -To further inspect the event and related events, you can quickly run an advanced hunting query by selecting **Hunt for related events**. +To further inspect the event and related events, you can quickly run an advanced hunting query by selecting **Hunt for related events**. The query will return the selected event and the list of other events that occurred around the same time on the same endpoint. ![Image of the event details panel](images/event-details.png)