diff --git a/windows/keep-secure/windows-defender-advanced-threat-protection.md b/windows/keep-secure/windows-defender-advanced-threat-protection.md
index a9833ce304..0e2829f1c6 100644
--- a/windows/keep-secure/windows-defender-advanced-threat-protection.md
+++ b/windows/keep-secure/windows-defender-advanced-threat-protection.md
@@ -44,7 +44,7 @@ Windows Defender ATP uses the following combination of technology built into Win
 The following diagram shows these Windows Defender ATP service
 components:
 
-![Windows Defender ATP service components](images/service-components.png)
+![Windows Defender ATP service components](images/components.png)
 
 Endpoint investigation capabilities in this service let you drill down
 into security alerts and understand the scope and nature of a potential
@@ -59,6 +59,8 @@ antimalware products.
 Windows Defender ATP leverages Microsoft technology and expertise to
 detect sophisticated cyber-attacks, providing:
 
+![Image to show the protection service that Windows Defender ATP provides](images/value-prop.png)
+
 - Behavior-based, cloud-powered, advanced attack detection
 
     Finds the attacks that made it past all other defenses (post breach detection),provides actionable, correlated alerts for known and unknown adversaries trying to hide their activities on endpoints.