diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md
index cc283c9b20..a32eea9cce 100644
--- a/windows/security/threat-protection/TOC.md
+++ b/windows/security/threat-protection/TOC.md
@@ -35,7 +35,7 @@
 #### [Remediation and exception](microsoft-defender-atp/tvm-remediation.md)
 #### [Software inventory](microsoft-defender-atp/tvm-software-inventory.md)
 #### [Weaknesses](microsoft-defender-atp/tvm-weaknesses.md)
-### [Event insights](microsoft-defender-atp/threat-and-vuln-mgt-event-insights.md)
+#### [Event insights](microsoft-defender-atp/threat-and-vuln-mgt-event-insights.md)
 #### [Scenarios](microsoft-defender-atp/threat-and-vuln-mgt-scenarios.md)
 
 ### [Attack surface reduction]()