diff --git a/windows/security/threat-protection/windows-defender-atp/configure-email-notifications-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/configure-email-notifications-windows-defender-advanced-threat-protection.md
index 2d843ca2bd..7088b2f2e3 100644
--- a/windows/security/threat-protection/windows-defender-atp/configure-email-notifications-windows-defender-advanced-threat-protection.md
+++ b/windows/security/threat-protection/windows-defender-atp/configure-email-notifications-windows-defender-advanced-threat-protection.md
@@ -15,7 +15,6 @@ manager: dansimp
 audience: ITPro
 ms.collection: M365-security-compliance 
 ms.topic: article
-ms.date: 10/08/2018
 ---
 
 # Configure alert notifications in Windows Defender ATP
@@ -70,7 +69,7 @@ You can create rules that determine the machines and alert severities to send em
 
 Here's an example email notification:
 
-![Image of example email notification](images/atp-example-email-notification.png)
+![Image of example email notification](images/email-notification.png)
 
 ## Edit a notification rule
 1. Select the notification rule you'd like to edit.
diff --git a/windows/security/threat-protection/windows-defender-atp/images/email-notification.png b/windows/security/threat-protection/windows-defender-atp/images/email-notification.png
new file mode 100644
index 0000000000..1b9875fcad
Binary files /dev/null and b/windows/security/threat-protection/windows-defender-atp/images/email-notification.png differ
diff --git a/windows/security/threat-protection/windows-defender-atp/images/pending-actions.png b/windows/security/threat-protection/windows-defender-atp/images/pending-actions.png
new file mode 100644
index 0000000000..8cb0f643a6
Binary files /dev/null and b/windows/security/threat-protection/windows-defender-atp/images/pending-actions.png differ
diff --git a/windows/security/threat-protection/windows-defender-atp/manage-auto-investigation-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/manage-auto-investigation-windows-defender-advanced-threat-protection.md
index 3b6362ab90..c99beec6db 100644
--- a/windows/security/threat-protection/windows-defender-atp/manage-auto-investigation-windows-defender-advanced-threat-protection.md
+++ b/windows/security/threat-protection/windows-defender-atp/manage-auto-investigation-windows-defender-advanced-threat-protection.md
@@ -15,7 +15,6 @@ manager: dansimp
 audience: ITPro
 ms.collection: M365-security-compliance 
 ms.topic: conceptual
-ms.date: 09/03/2018
 ---
 
 # Learn about the automated investigations dashboard
@@ -161,7 +160,7 @@ This tab is only displayed when an investigation is complete and shows all pendi
 ## Pending actions
 If there are pending actions on an Automated investigation, you'll see a pop up similar to the following image. 
 
-![Image of pending actions](images\atp-pending-actions-notification.png)
+![Image of pending actions](images\pending-actions.png)
 
 When you click on the pending actions link, you'll be taken to the pending actions page. You can also navigate to the page from the navigation page by going to **Automated investigation** > **Pending actions**.