From 45cbd98322f0621775ae96c87e505cf6a7957faf Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Wed, 22 Mar 2017 16:00:52 -0700 Subject: [PATCH] fix --- ...ndows-defender-advanced-threat-protection.md | 17 +++++++++-------- 1 file changed, 9 insertions(+), 8 deletions(-) diff --git a/windows/keep-secure/enable-siem-integration-windows-defender-advanced-threat-protection.md b/windows/keep-secure/enable-siem-integration-windows-defender-advanced-threat-protection.md index 4ed9bd223b..126b68196b 100644 --- a/windows/keep-secure/enable-siem-integration-windows-defender-advanced-threat-protection.md +++ b/windows/keep-secure/enable-siem-integration-windows-defender-advanced-threat-protection.md @@ -29,17 +29,18 @@ Enable security information and event management (SIEM) integration so you can p 2. Select **Enable SIEM integration**. This activates the **SIEM connector access details** section with pre-populated values and an application is created under you Azure Active Directory (AAD) tenant. - > [!WARNING] - > The client secret is only displayed once. Make sure you keep a copy of it in a safe place. - > For more information about getting a new secret see, [Learn how to get a new secret](troubleshoot-custom-ti-windows-defender-advanced-threat-protection.md#learn-how-to-get-a-new-client-secret). + WARNING:
+ The client secret is only displayed once. Make sure you keep a copy of it in a safe place.
+ For more information about getting a new secret see, [Learn how to get a new secret](troubleshoot-custom-ti-windows-defender-advanced-threat-protection.md#learn-how-to-get-a-new-client-secret). 3. Choose the SIEM type you use in your organization. - > [!NOTE] - > If you select HP ArcSight, you'll need to save these two configuration files: - > - WDATP-connector.jsonparser.properties - > - WDATP-connector.properties - > If you want to connect directly to the alerts REST API through programmatic access, choose **Generic API**. + NOTE:
+ If you select HP ArcSight, you'll need to save these two configuration files:
+ - WDATP-connector.jsonparser.properties + - WDATP-connector.properties
+ + If you want to connect directly to the alerts REST API through programmatic access, choose **Generic API**. 4. Copy the individual values or select **Save details to file** to download a file that contains all the values.