add details and images

2025-05-12 13:27:23 +00:00 · 2019-05-23 11:38:20 -07:00 · 2019-05-23 11:38:20 -07:00 · ea51e4f837
commit ea51e4f837
parent 67aea41a57
3 changed files with 9 additions and 0 deletions
--- a/windows/security/threat-protection/microsoft-defender-atp/images/data-sensitivity-filter.png
+++ b/windows/security/threat-protection/microsoft-defender-atp/images/data-sensitivity-filter.png
--- a/windows/security/threat-protection/microsoft-defender-atp/images/machine-timeline-labels.png
+++ b/windows/security/threat-protection/microsoft-defender-atp/images/machine-timeline-labels.png
--- a/windows/security/threat-protection/microsoft-defender-atp/information-protection-investigation.md
+++ b/windows/security/threat-protection/microsoft-defender-atp/information-protection-investigation.md
@ -35,6 +35,10 @@ Learn how to use data sensitivity labels to prioritize incident investigation.

    ![Image of data sensitivity column](images/data-sensitivity-column.png)

+    You can also filter based on **Data sensitivity** 
+
+    ![Image of data sensitivity filter](images/data-sensitivity-filter.png)
+
 3. Open the incident page to further investigate.

    ![Image of incident page details](images/incident-page.png)
@ -43,8 +47,13 @@ Learn how to use data sensitivity labels to prioritize incident investigation.

    ![Image of machine tab](images/investigate-machines-tab.png)
   
+
 5. Select the machines that store sensitive data and search through the timeline to identify which files may be impacted then take appropriate action to ensure that data is protected. 

+   You can narrow down the events shown on the machine timeline by searching for data sensitivity labels. Doing this will show only events associated with files that have said label name.
+
+    ![Image of machine timeline with narrowed down search results based on label](images/machine-timeline-labels.png)
+
 >[!NOTE] 
 > The event side pane now provides additional insight to the WIP and AIP protection status.