diff --git a/windows/security/threat-protection/microsoft-defender-atp/respond-file-alerts.md b/windows/security/threat-protection/microsoft-defender-atp/respond-file-alerts.md
index 230e57d75e..3f4ceec2f5 100644
--- a/windows/security/threat-protection/microsoft-defender-atp/respond-file-alerts.md
+++ b/windows/security/threat-protection/microsoft-defender-atp/respond-file-alerts.md
@@ -63,7 +63,7 @@ This action takes effect on machines with Windows 10, version 1703 or later, whe
 1. Select the file you want to stop and quarantine. You can select a file from any of the following views or use the Search box:
 
     - **Alerts** - click the corresponding links from the Description or Details in the Artifact timeline
-    - **Search box** - select File from the drop–down menu and enter the file name
+    - **Search box** - select **File** from the drop–down menu and enter the file name
 
 2. Go to the top bar and select **Stop and Quarantine File**.
 
@@ -98,7 +98,7 @@ You can roll back and remove a file from quarantine if you’ve determined that
 
 1. Open an elevated command–line prompt on the machine:
 
-    a. Go to **Start** and type cmd.
+    a. Go to **Start** and type _cmd_.
 
     b. Right–click **Command prompt** and select **Run as administrator**.