diff --git a/windows/keep-secure/images/alertsq.png b/windows/keep-secure/images/alertsq.png index dbc6a72a8e..a537983efe 100644 Binary files a/windows/keep-secure/images/alertsq.png and b/windows/keep-secure/images/alertsq.png differ diff --git a/windows/keep-secure/images/alertsq2.png b/windows/keep-secure/images/alertsq2.png new file mode 100644 index 0000000000..35f0a3836b Binary files /dev/null and b/windows/keep-secure/images/alertsq2.png differ diff --git a/windows/keep-secure/machines-view-windows-advanced-threat-protection.md b/windows/keep-secure/machines-view-windows-advanced-threat-protection.md index 8616d79e99..707b3e172b 100644 --- a/windows/keep-secure/machines-view-windows-advanced-threat-protection.md +++ b/windows/keep-secure/machines-view-windows-advanced-threat-protection.md @@ -30,9 +30,9 @@ The Machines view contains the following columns: - **Last seen** - when the machine last reported telemetry - **Internal IP** - the local internal Internet Protocol (IP) address of the machine - **Active Alerts** - the number of alerts reported by the machine by severity -- **Active threats** - the number of active threats reported by the machine +- **Active malware detections** - the number of active threats reported by the machine -> **Note**  The **Active threats** and **Threat category** filter column will only appear if your endpoints are using [Windows Defender](https://technet.microsoft.com/en-us/library/mt622091(v=vs.85).aspx) as the default real-time protection antimalware product. +> **Note**  The **Active alerts** and **Active malware detections** filter column will only appear if your endpoints are using [Windows Defender](https://technet.microsoft.com/en-us/library/mt622091(v=vs.85).aspx) as the default real-time protection antimalware product. Click any column header to sort the view in ascending or descending order.