diff --git a/windows/security/threat-protection/microsoft-defender-atp/evaluation-lab.md b/windows/security/threat-protection/microsoft-defender-atp/evaluation-lab.md
index 33bf81e773..2045ef6490 100644
--- a/windows/security/threat-protection/microsoft-defender-atp/evaluation-lab.md
+++ b/windows/security/threat-protection/microsoft-defender-atp/evaluation-lab.md
@@ -74,13 +74,13 @@ The machine will automatically be onboarded to your tenant with the recommended
 
 3. Select **Add machine**.
 
-  >[!NOTE]
-  > The evaluation environment can only be provisioned up to three test machines. Each machine will only be available for three days from the day of activation. 
+    >[!NOTE]
+    > The evaluation environment can only be provisioned up to three test machines. Each machine will only be available for three days from the day of activation. 
 
    ![Image of add machine](images/evaluation-add-machine.png)
 
-  >[!NOTE]
-  >If something goes wrong with the machine creation process, you'll be notified and you'll need to submit a new request. If the machine creation fails, it will not be counted against the overall allowed quota. 
+    >[!NOTE]
+    >If something goes wrong with the machine creation process, you'll be notified and you'll need to submit a new request. If the machine creation fails, it will not be counted against the overall allowed quota. 
 
 4. The connection details are displayed. Select **Copy** to save the password for the machine.
 
@@ -91,9 +91,6 @@ The machine will automatically be onboarded to your tenant with the recommended
 
 The environment will reflect your test machine status through the evaluation - including risk score, exposure score, and alerts fired through the simulation.
 
-
-![Image of evaluation lab dashboard](images/evaluation.png)
-
 ## Simulate attack scenarios
 Use the test machines to run attack simulations by connecting to them. 
 
@@ -140,5 +137,5 @@ Your feedback helps us get better in protecting your environment from advanced a
 
 Let us know what you think, by selecting **Provide feedback**.
 
-![Image of provide feedback](images/provide-feedback.png)
+![Image of provide feedback](images/eval-feedback.png.png)
 
diff --git a/windows/security/threat-protection/microsoft-defender-atp/images/eval-feedback.png b/windows/security/threat-protection/microsoft-defender-atp/images/eval-feedback.png
new file mode 100644
index 0000000000..f58eafd166
Binary files /dev/null and b/windows/security/threat-protection/microsoft-defender-atp/images/eval-feedback.png differ