From a555d33cc2654a2180789100c244c32b4e292c81 Mon Sep 17 00:00:00 2001
From: Kurt Sarens <56369685+kurtsarens@users.noreply.github.com>
Date: Wed, 19 Aug 2020 17:41:08 -0700
Subject: [PATCH] Update troubleshoot-collect-support-log.md

MDATP is a solution that consist of multiple components. Live response session can be used to collect MDAV support data too
---
 .../troubleshoot-collect-support-log.md                       | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/windows/security/threat-protection/microsoft-defender-atp/troubleshoot-collect-support-log.md b/windows/security/threat-protection/microsoft-defender-atp/troubleshoot-collect-support-log.md
index 49b05d09ea..ad09527b75 100644
--- a/windows/security/threat-protection/microsoft-defender-atp/troubleshoot-collect-support-log.md
+++ b/windows/security/threat-protection/microsoft-defender-atp/troubleshoot-collect-support-log.md
@@ -27,7 +27,9 @@ When contacting support, you may be asked to provide the output package of the M
 
 This topic provides instructions on how to run the tool via Live Response.
 
-1. Download the [LiveAnalyzer.ps1 script](https://aka.ms/MDATPLiveAnalyzer ).
+1. Download the appropriate script
+    * Sense: [LiveAnalyzer.ps1 script](https://aka.ms/MDATPLiveAnalyzer ).
+    * Microsoft Defender AV: [LiveAnalyzer+MDAV.ps1 script](https://aka.ms/MDATPLiveAnalyzer ).
  
 2.	Initiate a [Live Response session](live-response.md#initiate-a-live-response-session-on-a-device) on the machine you need to investigate.