From 76de15536b11d8353edca4af85c99efd01a84e25 Mon Sep 17 00:00:00 2001 From: Dulce Montemayor Date: Wed, 11 Sep 2019 09:11:54 -0700 Subject: [PATCH] Update configure-microsoft-threat-experts.md --- .../configure-microsoft-threat-experts.md | 15 ++++++++------- 1 file changed, 8 insertions(+), 7 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/configure-microsoft-threat-experts.md b/windows/security/threat-protection/microsoft-defender-atp/configure-microsoft-threat-experts.md index 83ee4f7627..09e9f8d161 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/configure-microsoft-threat-experts.md +++ b/windows/security/threat-protection/microsoft-defender-atp/configure-microsoft-threat-experts.md @@ -74,15 +74,16 @@ You can partner with Microsoft Threat Experts who can be engaged directly from w >Alert inquiries related to your organization's customized threat intelligence data are currently not supported. Consult your security operations or incident response team for details. 1. Navigate to the portal page with the relevant information that you'd like to investigate, for example, the **Incident** page. Ensure that the page for the relevant alert or machine is in view before you send an investigation request. -2. From the upper right-hand menu, click **?**. Then, select **Consult a threat expert**. ->![Image of Microsoft Threat Experts Experts on Demand from the menu](images/MTE_Menu.png) -
A flyout screen opens.
+2. From the upper right-hand menu, click **?**. Then, select **Consult a threat expert**. A flyout screen opens. + +![Image of Microsoft Threat Experts Experts on Demand from the menu](images/MTE_Menu.png) + + +3. The **Inquiry topic** field is pre-populated with the link to the relevant page for your investigation request. For example, a link to the incident, alert, or machine details page that you were at when you made the request. In the next field, provide enough information to give the Microsoft Threat Experts enough context to start the investigation. + >![Image of Microsoft Threat Experts Experts on Demand screen](images/MTE_EOD.png) - ->The **Inquiry topic** field is pre-populated with the link to the relevant page for your investigation request. For example, a link to the incident, alert, or machine details page that you were at when you made the request. - -3. In the next field, provide enough information to give the Microsoft Threat Experts enough context to start the investigation. + 4. Enter the email address that you'd like to use to correspond with Microsoft Threat Experts.