Merge pull request #226543 from berlihie/patch-3

Alerts are displayed even if the impacted resource was deleted

Author: prmerger-automator[bot]

articles/defender-for-cloud/alerts-overview.md

@@ -17,7 +17,8 @@ Security alerts are the notifications generated by Defender for Cloud and Defend
 - Security alerts are triggered by advanced detections in Defender for Cloud, and are available when you enable Defender for Cloud [Defender plans](defender-for-cloud-introduction.md#protect-cloud-workloads).
 - Each alert provides details of affected resources, issues, and remediation recommendations.
 - Defender for Cloud classifies alerts and prioritizes them by severity in the Defender for Cloud portal.
-- Alerts data is retained for 90 days.
+```suggestion
+- Alerts are displayed for 90 days, even if the resource related to the alert was deleted during that time. This is because the alert might indicate a potential breach to your organization that needs to be further investigated.     
 - Alerts can be exported to CSV format, or directly injected into Microsoft Sentinel.
 - Defender for Cloud leverages the [MITRE Attack Matrix](https://attack.mitre.org/matrices/enterprise/) to associate alerts with their perceived intent, helping formalize security domain knowledge.