diff --git a/windows/keep-secure/TOC.md b/windows/keep-secure/TOC.md
index e4736a5542..f8ed355b57 100644
--- a/windows/keep-secure/TOC.md
+++ b/windows/keep-secure/TOC.md
@@ -772,6 +772,8 @@
 ##### [Enable SIEM integration in Windows Defender ATP](enable-siem-integration-windows-defender-advanced-threat-protection.md)
 ##### [Configure Splunk to consume Windows Defender ATP alerts](configure-splunk-windows-defender-advanced-threat-protection.md)
 ##### [Configure HP ArcSight to consume Windows Defender ATP alerts](configure-arcsight-windows-defender-advanced-threat-protection.md)
+#### [Get alerts using REST API](generic-api-windows-defender-advanced-threat-protection.md)
+##### [SIEM schema portal mapping](siem-portal-mapping-windows-defender-advanced-threat-protection.md)
 #### [Use the threat intelligence API to create custom alerts](use-custom-ti-windows-defender-advanced-threat-protection.md)
 ##### [Understand threat intelligence concepts](threat-indicator-concepts-windows-defender-advanced-threat-protection.md)
 ##### [Enable the custom threat intelligence application](enable-custom-ti-windows-defender-advanced-threat-protection.md)
diff --git a/windows/keep-secure/siem-portal-mapping-windows-defender-advanced-threat-protection.md b/windows/keep-secure/siem-portal-mapping-windows-defender-advanced-threat-protection.md
index 7f31afcf8e..44aef83969 100644
--- a/windows/keep-secure/siem-portal-mapping-windows-defender-advanced-threat-protection.md
+++ b/windows/keep-secure/siem-portal-mapping-windows-defender-advanced-threat-protection.md
@@ -11,7 +11,7 @@ author: mjcaparas
 localizationpriority: high
 ---
 
-# SIEM schema and portal mapping
+# SIEM schema portal mapping
 
 **Applies to:**