diff --git a/windows/security/threat-protection/microsoft-defender-atp/images/rules-indicators.png b/windows/security/threat-protection/microsoft-defender-atp/images/rules-indicators.png
new file mode 100644
index 0000000000..67f0679c18
Binary files /dev/null and b/windows/security/threat-protection/microsoft-defender-atp/images/rules-indicators.png differ