diff --git a/windows/security/threat-protection/windows-defender-atp/advanced-hunting-reference-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/advanced-hunting-reference-windows-defender-advanced-threat-protection.md
index b479c93420..db6c9b6f35 100644
--- a/windows/security/threat-protection/windows-defender-atp/advanced-hunting-reference-windows-defender-advanced-threat-protection.md
+++ b/windows/security/threat-protection/windows-defender-atp/advanced-hunting-reference-windows-defender-advanced-threat-protection.md
@@ -53,14 +53,14 @@ Use the following table to understand what the columns represent, its data type,
 | InitiatingProcessAccountDomain      | string      | Domain of the account that ran the process responsible for the event.                                                                                                                                                                                          |
 | InitiatingProcessAccountName        | string      | User name of the account that ran the process responsible for the event.                                                                                                                                                                                       |
 | InitiatingProcessAccountSid         | string      | Security Identifier (SID) of the account that ran the process responsible for the event.                                                                                                                                                                       |
-| InitiatingProcessCommandLine        | string      | Path and command line arguments used to run the process that initiated the event.                                                                                                                                                                              |
+| InitiatingProcessCommandLine        | string      | Command line used to run the process that initiated the event.                                                                                                                                                                              |
 | InitiatingProcessCreationTime       | datetime    | Date and time when the process that initiated the event was started.                                                                                                                                                                                           |
 | InitiatingProcessFileName           | string      | Name of the process that initiated the event.                                                                                                                                                                                                                  |
 | InitiatingProcessFolderPath         | string      | Folder containing the process (image file) that initiated the event.                                                                                                                                                                                           |
 | InitiatingProcessId                 | int         | Process ID (PID) of the process that initiated the event.                                                                                                                                                                                                      |
 | InitiatingProcessIntegrityLevel     | string      | Integrity level of the process that initiated the event. Windows assigns integrity levels to processes based on certain characteristics, such as if they were launched from an internet download. These integrity levels influence permissions to resources. |
 | InitiatingProcessMd5                | string      | MD5 hash of the process (image file) that initiated the event.                                                                                                                                                                                                 |
-| InitiatingProcessParentCreationTime | datetime    | Date and time when the parent of the process responsible for the event was event was started.                                                                                                                                                                  |
+| InitiatingProcessParentCreationTime | datetime    | Date and time when the parent of the process responsible for the event was started.                                                                                                                                                                  |
 | InitiatingProcessParentId           | int         | Process ID (PID) of the parent process that spawned the process responsible for the event.                                                                                                                                                                     |
 | InitiatingProcessParentName         | string      | Name of the parent process that spawned the process responsible for the event.                                                                                                                                                                                 |
 | InitiatingProcessSha1               | string      | SHA-1 of the process (image file) that initiated the event.                                                                                                                                                                                                    |
@@ -77,12 +77,12 @@ Use the following table to understand what the columns represent, its data type,
 | NetworkCardIPs                      | string      | List of all network adapters on the machine, including their MAC addresses and assigned IP addresses, in JSON array format.                                                                                                                                    |
 | OSArchitecture                      | string      | Architecture of the operating system running on the machine.                                                                                                                                                                                                   |
 | OSBuild                             | string      | Build version of the operating system running on the machine.                                                                                                                                                                                                  |
-| OSPlatform                          | string      | Platform of the operating system running on the machine. This indicates specific operating systems, including variations within the same family, such Windows 10 and Windows 7.                                                                                |
+| OSPlatform                          | string      | Platform of the operating system running on the machine. This indicates specific operating systems, including variations within the same family, such as Windows 10 and Windows 7.                                                                                |
 | PreviousRegistryKey                 | string      | Original registry key of the registry value before it was modified.                                                                                                                                                                                            |
 | PreviousRegistryValueData           | string      | Original data of the registry value before it was modified.                                                                                                                                                                                                    |
 | PreviousRegistryValueName           | string      | Original name of the registry value before it was modified.                                                                                                                                                                                                    |
 | PreviousRegistryValueType           | string      | Original data type of the registry value before it was modified.                                                                                                                                                                                               |
-| ProcessCommandline                  | string      | Path and command line arguments used to create the new process.                                                                                                                                                                                                |
+| ProcessCommandline                  | string      | Command line used to create the new process.                                                                                                                                                                                                |
 | ProcessCreationTime                 | datetime    | Date and time the process was created.                                                                                                                                                                                                                         |
 | ProcessId                           | int         | Process ID (PID) of the newly created process.                                                                                                                                                                                                                 |
 | ProcessIntegrityLevel               | string      | Integrity level of the newly created process. Windows assigns integrity levels to processes based on certain characteristics, such as if they were launched from an internet downloaded. These integrity levels influence permissions to resources.            |