diff --git a/windows/keep-secure/manage-alerts-windows-advanced-threat-protection.md b/windows/keep-secure/manage-alerts-windows-advanced-threat-protection.md
index f8d4307dc3..7bdbe03b83 100644
--- a/windows/keep-secure/manage-alerts-windows-advanced-threat-protection.md
+++ b/windows/keep-secure/manage-alerts-windows-advanced-threat-protection.md
@@ -75,6 +75,7 @@ The context of the rule lets you tailor the queue to ensure that only alerts you
**Suppress alert on this machine** | Alerts with the same alert title and on that specific machine only will be suppressed.
All other alerts on that machine will not be suppressed. |
- A security researcher is investigating a malicious script that has been used to attack other machines in your organization.
- A developer regularly creates PowerShell scripts for their team.
**Suppress alert in my organization** | Alerts with the same alert title on any machine will be suppressed. | - A benign administrative tool is used by everyone in your organization.
+
**Suppress an alert and create a suppression rule:**
1. Click the **Manage Alert** menu icon  on the heading of an existing alert.
@@ -87,7 +88,7 @@ The context of the rule lets you tailor the queue to ensure that only alerts you
1. Click the settings icon  on the main menu bar at the top of the Windows Defender ATP screen.
2. Click **Suppression rules**.
-
+ 
> **Note** You can also click **See rules** in the confirmation window that appears when you suppress an alert.