From 396063f29ec0ec56a67a8123b114e7c61cf11e31 Mon Sep 17 00:00:00 2001 From: jcaparas Date: Thu, 2 Mar 2017 21:00:22 -0800 Subject: [PATCH] add step 5 --- ...-example-code-windows-defender-advanced-threat-protection.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/keep-secure/powershell-example-code-windows-defender-advanced-threat-protection.md b/windows/keep-secure/powershell-example-code-windows-defender-advanced-threat-protection.md index 9ec25133c4..d8b9b38f4a 100644 --- a/windows/keep-secure/powershell-example-code-windows-defender-advanced-threat-protection.md +++ b/windows/keep-secure/powershell-example-code-windows-defender-advanced-threat-protection.md @@ -61,7 +61,7 @@ The following example demonstrates how you to create a new alert definition. [!code[CustomTIAPI](./code/example.ps1#L26-L39)] -## Create a new indicator of compromise +## Step 5: Create a new indicator of compromise You can now use the alert ID obtained from creating a new alert definition to create a new indicator of compromise. [!code[CustomTIAPI](./code/example.ps1#L43-L53)]