diff --git a/windows/keep-secure/dashboard-windows-defender-advanced-threat-protection.md b/windows/keep-secure/dashboard-windows-defender-advanced-threat-protection.md index c2c75d2d52..8bac8bef95 100644 --- a/windows/keep-secure/dashboard-windows-defender-advanced-threat-protection.md +++ b/windows/keep-secure/dashboard-windows-defender-advanced-threat-protection.md @@ -62,7 +62,7 @@ The tile shows you a list of user accounts with the most active alerts. The tota ![User accounts at risk tile shows a list of user accounts with the highest number of alerts and a breakdown of the severity of the alerts](images/atp-users-at-risk.png) -Click the user account to see details about the user account. For more information see [Investigate a user entity in Windows Defender Advanced Threat Protection] +Click the user account to see details about the user account. For more information see [Investigate a user account](investigate-user-windows-defender-advanced-threat-protection.md). ## Machines with active malware detections The **Machines with active malware detections** tile will only appear if your endpoints are using Windows Defender. diff --git a/windows/keep-secure/images/atp-machines-at-risk.png b/windows/keep-secure/images/atp-machines-at-risk.png index e733606c0c..219e958d7d 100644 Binary files a/windows/keep-secure/images/atp-machines-at-risk.png and b/windows/keep-secure/images/atp-machines-at-risk.png differ diff --git a/windows/keep-secure/machines-view-overview-windows-defender-advanced-threat-protection.md b/windows/keep-secure/machines-view-overview-windows-defender-advanced-threat-protection.md index 76dd0c900d..60ad8c3cfd 100644 --- a/windows/keep-secure/machines-view-overview-windows-defender-advanced-threat-protection.md +++ b/windows/keep-secure/machines-view-overview-windows-defender-advanced-threat-protection.md @@ -1,6 +1,6 @@ --- -title: View and organize the Windows Defender ATP machines view -description: Learn about the available features that you can use from the Machines view such as sorting, filtering, and exporting the machine list which can enhance investigations. +title: View and organize the Windows Defender ATP machines list +description: Learn about the available features that you can use from the Machines list such as sorting, filtering, and exporting the machine list which can enhance investigations. keywords: sort, filter, export, csv, machine name, domain, last seen, internal IP, health state, active alerts, active malware detections, threat category, review alerts, network, connection, malware, type, password stealer, ransomware, exploit, threat, general malware, unwanted software search.product: eADQiWindows 10XVcnh ms.prod: w10 diff --git a/windows/keep-secure/respond-file-alerts-windows-defender-advanced-threat-protection.md b/windows/keep-secure/respond-file-alerts-windows-defender-advanced-threat-protection.md index 0d15caf8a1..26459e371e 100644 --- a/windows/keep-secure/respond-file-alerts-windows-defender-advanced-threat-protection.md +++ b/windows/keep-secure/respond-file-alerts-windows-defender-advanced-threat-protection.md @@ -130,7 +130,7 @@ For prevalent files in the organization, a warning is shown before an action is 1. Select the file you want to remove from the blocked list. You can select a file from any of the following views or use the Search box: – **Alerts** - Click the file links from the Description or Details in the Alert timeline - – **Machines view** - Click the file links in the Description or Details columns in the Observed on machine section + – **Machines list** - Click the file links in the Description or Details columns in the Observed on machine section – **Search box** - Select File from the drop–down menu and enter the file name 2. Open the **Actions** menu and select **Remove file from blocked list**. @@ -175,7 +175,7 @@ When the sample is collected, Windows Defender ATP runs the file in is a secure 1. Select the file that you want to submit for deep analysis. You can select or search a file from any of the following views: – Alerts - click the file links from the **Description** or **Details** in the Alert timeline - – **Machines View** - click the file links from the **Description** or **Details** in the **Machine in organization** section + – **Machines list** - click the file links from the **Description** or **Details** in the **Machine in organization** section – Search box - select **File** from the drop–down menu and enter the file name 2. In the **Deep analysis** section of the file view, click **Submit**.