updates 4

Author: AlizaBernstein

articles/defender-for-cloud/concept-regulatory-compliance.md

@@ -2,26 +2,26 @@
 title: The Microsoft cloud security benchmark in Microsoft Defender for Cloud
 description: Learn about the Microsoft cloud security benchmark in Microsoft Defender for Cloud.
 ms.topic: conceptual
-ms.date: 01/10/2023
+ms.date: 03/13/2024
 ---
 
 # Microsoft cloud security benchmark in Defender for Cloud
 
-Industry standards, regulatory standards, and benchmarks are represented in Microsoft Defender for Cloud as [security standards](security-policy-concept.md), and are assigned to scopes such as Azure subscriptions, AWS accounts, and GCP projects.
+Industry standards, regulatory standards, and benchmarks are represented in Microsoft Defender for Cloud as [security standards](security-policy-concept.md). These standards are assigned to scopes such as Azure subscriptions, AWS accounts, and GCP projects.
 
 Defender for Cloud continuously assesses your hybrid cloud environment against these standards, and provides information about compliance in the **Regulatory compliance** dashboard.
 
 When you onboard subscriptions and accounts to Defender for Cloud, the [Microsoft cloud security benchmark](/security/benchmark/azure/introduction) (MCSB) automatically starts to assess resources in scope.
 
 This benchmark builds on the cloud security principles defined by the Azure Security Benchmark and applies these principles with detailed technical implementation guidance for Azure, for other cloud providers (such as AWS and GCP), and for other Microsoft clouds.
 
-:::image type="content" source="media/concept-regulatory-compliance/microsoft-security-benchmark.png" alt-text="Image that shows the components that make up the Microsoft cloud security benchmark.":::
+:::image type="content" source="media/concept-regulatory-compliance/microsoft-security-benchmark.png" alt-text="Image that shows the components that make up the Microsoft cloud security benchmark." lightbox="media/concept-regulatory-compliance/microsoft-security-benchmark.png":::
 
 The compliance dashboard gives you a view of your overall compliance standing. Security for non-Azure platforms follows the same cloud-neutral security principles as Azure. Each control within the benchmark provides the same granularity and scope of technical guidance across Azure and other cloud resources. 
 
 :::image type="content" source="media/concept-regulatory-compliance/compliance-dashboard.png" alt-text="Screenshot of a sample regulatory compliance page in Defender for Cloud." lightbox="media/concept-regulatory-compliance/compliance-dashboard.png":::
 
-From the compliance dashboard, you're able to manage all of your compliance requirements for your cloud deployments, including automatic, manual and shared responsibilities.
+From the compliance dashboard, you're able to manage all of your compliance requirements for your cloud deployments, including automatic, manual, and shared responsibilities.
 
 > [!NOTE]
 > Shared responsibilities is only compatible with Azure.

articles/defender-for-cloud/remediate-vulnerability-findings-vm.md

@@ -4,15 +4,15 @@ description: Microsoft Defender for Cloud includes a fully integrated vulnerabil
 ms.topic: how-to
 author: dcurwin
 ms.author: dacurwin
-ms.date: 11/09/2021
+ms.date: 03/13/2024
 ---
 
 # View and remediate findings from vulnerability assessment solutions on your VMs
 
 > [!CAUTION]
 > This article references CentOS, a Linux distribution that is nearing End Of Life (EOL) status. Please consider your use and planning accordingly.
 
-When your vulnerability assessment tool reports vulnerabilities to Defender for Cloud, Defender for Cloud presents the findings and related information as recommendations. In addition, the findings include related information such as remediation steps, relevant CVEs, CVSS scores, and more. You can view the identified vulnerabilities for one or more subscriptions, or for a specific VM.
+When your vulnerability assessment tool reports vulnerabilities to Defender for Cloud, Defender for Cloud presents the findings and related information as recommendations. In addition, the findings include related information such as remediation steps, relevant common vulnerabilities and exposures (CVEs), CVSS scores, and more. You can view the identified vulnerabilities for one or more subscriptions, or for a specific VM.
 
 ## View findings from the scans of your virtual machines
 
@@ -38,7 +38,7 @@ To view vulnerability assessment findings (from all of your configured scanners)
 
     - Links to all relevant CVEs (where available)
     - Remediation steps
-    - Any additional reference pages
+    - Any more reference pages
 
 1. To remediate a finding, follow the remediation steps from this details pane.
 
@@ -48,9 +48,9 @@ If you have an organizational need to ignore a finding, rather than remediate it
 
 When a finding matches the criteria you defined in your disable rules, it doesn't appear in the list of findings. Typical scenarios include:
 
-- Disable findings with severity below medium
+- Disable findings with severity less than medium
 - Disable findings that are non-patchable
-- Disable findings with CVSS score below 6.5
+- Disable findings with CVSS score less than 6.5
 - Disable findings with specific text in the security check or category (for example, “RedHat”, “CentOS Security Update for sudo”)
 
 > [!IMPORTANT]
@@ -72,15 +72,17 @@ To create a rule:
 
 1. Select **Apply rule**.
 
-    :::image type="content" source="./media/remediate-vulnerability-findings-vm/new-disable-rule-for-finding.png" alt-text="Create a disable rule for VA findings on VM.":::
+    :::image type="content" source="./media/remediate-vulnerability-findings-vm/new-disable-rule-for-finding.png" alt-text="Create a disable rule for VA findings on VM."  lightbox="media/remediate-vulnerability-findings-vm/new-disable-rule-for-finding.png":::
 
     > [!IMPORTANT]
     > Changes might take up to 24 hours to take effect.
 
 1. To view, override, or delete a rule:
     1. Select **Disable rule**.
     1. From the scope list, subscriptions with active rules show as **Rule applied**.
-        :::image type="content" source="./media/remediate-vulnerability-findings-vm/modify-rule.png" alt-text="Modify or delete an existing rule.":::
+        
+        :::image type="content" source="./media/remediate-vulnerability-findings-vm/modify-rule.png" alt-text="Modify or delete an existing rule."  lightbox="media/remediate-vulnerability-findings-vm/modify-rule.png":::
+
     1. To view or delete the rule, select the ellipsis menu ("...").
 
 ## Export the results

articles/defender-for-cloud/secure-score-access-and-track.md

@@ -2,7 +2,7 @@
 title: Tracking your secure score
 description: Learn about the multiple ways to access and track your secure score in Microsoft Defender for Cloud.
 ms.topic: how-to
-ms.date: 01/09/2023
+ms.date: 03/13/2024
 ---
 
 # Track secure score
@@ -14,7 +14,7 @@ You can find your overall secure score, and your score per subscription, through
 
 ## Get your secure score from the portal
 
-Defender for Cloud displays your score prominently in the portal. When you select the Secure score tile on the overview page, you're taken to the dedicated secure score page, where you'll see the score broken down by subscription. Select a single subscription to see the detailed list of prioritized recommendations and the potential effect that remediating them will have on the subscription's score.
+Defender for Cloud displays your score prominently in the portal. When you select the secure score tile on the overview page, you're taken to the dedicated secure score page, where you'll see the score broken down by subscription. Select a single subscription to see the detailed list of prioritized recommendations and the potential effect that remediating them will have on the subscription's score.
 
 Your secure score is shown in the following locations in Defender for Cloud's portal pages.
 
@@ -24,16 +24,16 @@ Your secure score is shown in the following locations in Defender for Cloud's po
 
 - In the dedicated **Secure score** page you can see the secure score for your subscription and your management groups:
 
-    :::image type="content" source="./media/secure-score-security-controls/score-on-dedicated-dashboard.png" alt-text="The secure score for subscriptions on Defender for Cloud's secure score page":::
+    :::image type="content" source="./media/secure-score-security-controls/score-on-dedicated-dashboard.png" alt-text="The secure score for subscriptions on Defender for Cloud's secure score page" lightbox="media/secure-score-security-controls/score-on-dedicated-dashboard.png":::
 
-    :::image type="content" source="./media/secure-score-security-controls/secure-score-management-groups.png" alt-text="The secure score for management groups on Defender for Cloud's secure score page":::
+    :::image type="content" source="./media/secure-score-security-controls/secure-score-management-groups.png" alt-text="The secure score for management groups on Defender for Cloud's secure score page"  lightbox="media/secure-score-security-controls/secure-score-management-groups.png":::
 
     > [!NOTE]
     > Any management groups for which you don't have sufficient permissions, will show their score as “Restricted.”
 
 - At the top of the **Recommendations** page:
 
-    :::image type="content" source="./media/secure-score-security-controls/score-on-recommendations-page.png" alt-text="The secure score on Defender for Cloud's recommendations page":::
+    :::image type="content" source="./media/secure-score-security-controls/score-on-recommendations-page.png" alt-text="The secure score on Defender for Cloud's recommendations page"  lightbox="media/secure-score-security-controls/score-on-recommendations-page.png":::
 
 ## Get your secure score from the REST API
 
@@ -51,7 +51,7 @@ To access the secure score for multiple subscriptions with Azure Resource Graph:
 
 1. From the Azure portal, open **Azure Resource Graph Explorer**.
 
-    :::image type="content" source="./media/multi-factor-authentication-enforcement/opening-resource-graph-explorer.png" alt-text="Launching Azure Resource Graph Explorer** recommendation page" :::
+    :::image type="content" source="./media/multi-factor-authentication-enforcement/opening-resource-graph-explorer.png" alt-text="Launching Azure Resource Graph Explorer recommendation page."  lightbox="media/multi-factor-authentication-enforcement/opening-resource-graph-explorer.png":::
 
 1. Enter your Kusto query (using the following examples for guidance).