diff --git a/windows/threat-protection/TOC.md b/windows/threat-protection/TOC.md
index a1c9446bfb..6e060b5dd5 100644
--- a/windows/threat-protection/TOC.md
+++ b/windows/threat-protection/TOC.md
@@ -63,6 +63,20 @@
 #### [Pull alerts using REST API](windows-defender-atp\pull-alerts-using-rest-api-windows-defender-advanced-threat-protection.md)
 #### [Troubleshoot SIEM tool integration issues](windows-defender-atp\troubleshoot-siem-windows-defender-advanced-threat-protection.md)
 ### [Use the threat intelligence API to create custom alerts](windows-defender-atp\use-custom-ti-windows-defender-advanced-threat-protection.md)
+### [Use the Windows Defender ATP exposed APIs](windows-defender-atp\exposed-apis-windows-defender-advanced-threat-protection.md)
+### [Collect investigation package](windows-defender-atp\collect-investigation-package-windows-defender-advanced-threat-protection.md)
+### [Isolate machine](isolate-machine-windows-defender-atp\windows-defender-advanced-threat-protection.md)
+### [Unisolate machine](unisoalte-machine-windows-defender-atp\windows-defender-advanced-threat-protection.md)
+### [Restrict code execution](windows-defender-atp\restrict-code-execution-windows-defender-advanced-threat-protection.md)
+### [Remove code execution restriction](windows-defender-atp\unrestrict-code-executionwindows-defender-advanced-threat-protection.md)
+### [Run antivirus scan](windows-defender-atp\run-antivirus-scan-windows-defender-advanced-threat-protection.md)
+### [Stop and quarantine files](windows-defender-atp\stop-quarantine-file-windows-defender-advanced-threat-protection.md)
+### [Request sample](windows-defender-atp\request-sample-windows-defender-advanced-threat-protection.md)
+### [Block file](windows-defender-atp\block-file-windows-defender-advanced-threat-protection.md)
+### [Unblock file](windows-defender-atp\unblock-file-windows-defender-advanced-threat-protection.md)
+### [Get package SAS URI](windows-defender-atp\get-package-sas-uri-windows-defender-advanced-threat-protection.md)
+### [Get MachineAction object](windows-defender-atp\get-machineaction-object-windows-defender-advanced-threat-protection.md)
+### [Get FileMachineAction object](windows-defender-atp\get-filemachineaction-object-windows-defender-advanced-threat-protection.md)
 #### [Understand threat intelligence concepts](windows-defender-atp\threat-indicator-concepts-windows-defender-advanced-threat-protection.md)
 #### [Enable the custom threat intelligence application](windows-defender-atp\enable-custom-ti-windows-defender-advanced-threat-protection.md)
 #### [Create custom threat intelligence alerts](windows-defender-atp\custom-ti-api-windows-defender-advanced-threat-protection.md)