diff --git a/windows/keep-secure/alerts-queue-windows-defender-advanced-threat-protection.md b/windows/keep-secure/alerts-queue-windows-defender-advanced-threat-protection.md
index eca90e96df..a235cd0570 100644
--- a/windows/keep-secure/alerts-queue-windows-defender-advanced-threat-protection.md
+++ b/windows/keep-secure/alerts-queue-windows-defender-advanced-threat-protection.md
@@ -39,6 +39,9 @@ To see a list of alerts, click any of the queues under the **Alerts queue** opti
 ## Sort and filter the alerts
 You can sort and filter the alerts by using the available filters or clicking columns that allow you to sort the view in ascending or descending order.
 
+![Image of alerts queue grouped](images/atp-alerts-group.png)
+
+
 The alerts view contains the following columns:
 -	**Title** – A brief description of the alert
 -	**Machine and user** – Machine where the alert was seen and the user entity associated with the alert
@@ -76,7 +79,7 @@ Informational alerts are those that might not be considered harmful to the netwo
 - Flat view - Shows alerts in a chronological order as an alert surfaces.
 - Grouped view - Groups alerts based on commonalities such as alert ID, file hash, or malware family.
 
-The group view allows for efficient alert triage and management. 
+The group view allows for efficient alert triage and management.
 
 
 
diff --git a/windows/keep-secure/images/atp-alerts-group.png b/windows/keep-secure/images/atp-alerts-group.png
new file mode 100644
index 0000000000..e3bf3d41f0
Binary files /dev/null and b/windows/keep-secure/images/atp-alerts-group.png differ