UI changes

Author: David Curwin

articles/defender-for-cloud/disable-vulnerability-findings-containers.md

@@ -36,8 +36,7 @@ Disable rules apply per recommendation, for example, to disable [CVE-2017-17512]
 
  To create a rule:
 
-1. From the recommendations detail page for [Container registry images should have vulnerability findings resolved powered by Microsoft Defender Vulnerability Management](https://portal.azure.com/#blade/Microsoft_Azure_Security/RecommendationsBlade/assessmentKey/33422d8f-ab1e-42be-bc9a-38685bb567b9) or [Running container images should have vulnerability findings resolved powered by Microsoft Defender Vulnerability Management
-](https://portal.azure.com/#blade/Microsoft_Azure_Security/RecommendationsBlade/assessmentKey/e9acaf48-d2cf-45a3-a6e7-3caa2ef769e0), select **Disable rule**.
+1. From the recommendations detail page for [Container registry images should have vulnerability findings resolved powered by Microsoft Defender Vulnerability Management](https://portal.azure.com/#blade/Microsoft_Azure_Security/RecommendationsBlade/assessmentKey/33422d8f-ab1e-42be-bc9a-38685bb567b9) or [Containers running in Azure should have vulnerability findings resolved](https://portal.azure.com/#blade/Microsoft_Azure_Security/RecommendationsBlade/assessmentKey/e9acaf48-d2cf-45a3-a6e7-3caa2ef769e0), select **Disable rule**.
 
 1. Select the relevant scope.
 

articles/defender-for-cloud/media/view-and-remediate-vulnerability-assessment-findings/open-recommendations-page.png

@@ -27,7 +27,7 @@ If you are using Defender CSPM, first review and remediate vulnerabilities expos
 
 **To view vulnerabilities for a specific cluster, do the following:**  
 
-1. Open the **Recommendations** page, using the **>** arrow to open the sub-levels. If issues were found, you'll see the recommendation [Containers running in Azure should have vulnerability findings resolved](https://portal.azure.com/#blade/Microsoft_Azure_Security/RecommendationsBlade/assessmentKey/e9acaf48-d2cf-45a3-a6e7-3caa2ef769e0). Select the recommendation.
+1. In Defender for Cloud, open the **Recommendations** page. If issues were found, you'll see the recommendation [Containers running in Azure should have vulnerability findings resolved](https://portal.azure.com/#blade/Microsoft_Azure_Security/RecommendationsBlade/assessmentKey/e9acaf48-d2cf-45a3-a6e7-3caa2ef769e0). Select the recommendation.
 
     :::image type="content" source="media/view-and-remediate-vulnerabilities-for-images-running-on-aks/running-image-recommendation-line.png" alt-text="Screenshot showing the recommendation line for running container images should have vulnerability findings resolved." lightbox="media/view-and-remediate-vulnerabilities-for-images-running-on-aks/running-image-recommendation-line.png":::
 
@@ -71,7 +71,6 @@ Use these steps to remediate each of the affected images found either in a speci
 1. Check the recommendations page for the recommendation [Running container images should have vulnerability findings resolved](https://portal.azure.com/#view/Microsoft_Azure_Security_CloudNativeCompute/KubernetesRuntimeVisibilityRecommendationDetailsBlade/assessmentKey/41503391-efa5-47ee-9282-4eff6131462c).
 1. If the recommendation still appears and the image you've handled still appears in the list of vulnerable images, check the remediation steps again.
 
-## Next steps
+## Next step
 
 - Learn how to [view and remediate vulnerabilities for registry images](view-and-remediate-vulnerability-assessment-findings.md).
-- Learn more about the Defender for Cloud [Defender plans](defender-for-cloud-introduction.md#protect-cloud-workloads)

articles/defender-for-cloud/media/view-and-remediate-vulnerability-assessment-findings/select-registry.png

@@ -20,11 +20,11 @@ If you are using Defender CSPM, first review and remediate vulnerabilities expos
 
 ## View vulnerabilities on a specific container registry
 
-1. Open the **Recommendations** page, using the **>** arrow to open the sublevels. If issues were found, you'll see the recommendation [Container images in Azure registry should have vulnerability findings resolved](https://portal.azure.com/#blade/Microsoft_Azure_Security/RecommendationsBlade/assessmentKey/33422d8f-ab1e-42be-bc9a-38685bb567b9). Select the recommendation.
+1. In Defender for Cloud, open the **Recommendations** page. If issues were found, you'll see the recommendation [Container images in Azure registry should have vulnerability findings resolved](https://portal.azure.com/#blade/Microsoft_Azure_Security/RecommendationsBlade/assessmentKey/33422d8f-ab1e-42be-bc9a-38685bb567b9). Select the recommendation.
 
     :::image type="content" source="media/view-and-remediate-vulnerability-assessment-findings/open-recommendations-page.png" alt-text="Screenshot showing the line for recommendation container registry images should have vulnerability findings resolved." lightbox="media/view-and-remediate-vulnerability-assessment-findings/open-recommendations-page.png":::
 
-1. The recommendation details page opens with additional information. This information includes the list of registries with vulnerable images ("affected resources") and the remediation steps. Select the affected registry.
+1. The recommendation details page opens with additional information. This information includes the list of registries with vulnerable images ("Resource") and the remediation steps. Select the affected registry.
 
     :::image type="content" source="media/view-and-remediate-vulnerability-assessment-findings/select-registry.png" alt-text="Screenshot showing the recommendation details and affected registries." lightbox="media/view-and-remediate-vulnerability-assessment-findings/select-registry.png":::
 
@@ -44,32 +44,24 @@ If you are using Defender CSPM, first review and remediate vulnerabilities expos
 
     :::image type="content" source="media/view-and-remediate-vulnerability-assessment-findings/image-details.png" alt-text="Screenshot showing the details of the finding on the specific image." lightbox="media/view-and-remediate-vulnerability-assessment-findings/image-details.png":::
 
+You can also group recommendations by title. This is useful when you want to remediate a recommendation that is affecting multiple resources caused by a specific security issue. For more information, see [Group recommendations by title](review-security-recommendations.md#group-recommendations-by-title).
+
 ## View images affected by a specific vulnerability
 
 1. Open the **Recommendations** page. If issues were found, you'll see the recommendation [Container images in Azure registry should have vulnerability findings resolved](https://portal.azure.com/#blade/Microsoft_Azure_Security/RecommendationsBlade/assessmentKey/33422d8f-ab1e-42be-bc9a-38685bb567b9). Select the recommendation.
 
     :::image type="content" source="media/view-and-remediate-vulnerability-assessment-findings/open-recommendations-page.png" alt-text="Screenshot showing the line for recommendation container registry images should have vulnerability findings resolved." lightbox="media/view-and-remediate-vulnerability-assessment-findings/open-recommendations-page.png":::
 
-1. The recommendation details page opens with additional information. This information includes the list of vulnerabilities impacting the images. Select the specific vulnerability.
+1. The recommendation details page opens with additional information. Select the **Findings** tab to see the list of vulnerabilities impacting the images. Select a specific vulnerability.
 
     :::image type="content" source="media/view-and-remediate-vulnerability-assessment-findings/select-specific-vulnerability.png" alt-text="Screenshot showing the list of vulnerabilities impacting the images." lightbox="media/view-and-remediate-vulnerability-assessment-findings/select-specific-vulnerability.png":::
 
-1. The vulnerability finding details pane opens. This pane includes a detailed description of the vulnerability, images affected by that vulnerability, and links to external resources to help mitigate the threats, affected resources, and information on the software version that contributes to [resolving the vulnerability](#remediate-vulnerabilities).
+1. The vulnerability finding details pane opens. This pane includes a detailed description of the vulnerability, images affected by that vulnerability, and links to external resources to help mitigate the threats, affected resources, and information on the software version that contributes to resolving the vulnerability.
 
     :::image type="content" source="media/view-and-remediate-vulnerability-assessment-findings/specific-vulnerability-details.png" alt-text="Screenshot showing the list of images impacted by the vulnerability." lightbox="media/view-and-remediate-vulnerability-assessment-findings/specific-vulnerability-details.png":::
 
-## Remediate vulnerabilities
-
-Use these steps to remediate each of the affected images found either in a specific cluster or for a specific vulnerability:
-
-1. Follow the steps in the remediation section of the recommendation pane.
-1. When you've completed the steps required to remediate the security issue, replace each affected image in your registry or replace each affected image for a specific vulnerability:
-    1. Build a new image (including updates for each of the packages) that resolves the vulnerability according to the remediation details.
-    1. Push the updated image to trigger a scan and delete the old image. It might take up to 24 hours for the previous image to be removed from the results, and for the new image to be included in the results.
-
-1. Check the recommendations page for the recommendation [Container images in Azure registry should have vulnerability findings resolved](https://portal.azure.com/#blade/Microsoft_Azure_Security/RecommendationsBlade/assessmentKey/33422d8f-ab1e-42be-bc9a-38685bb567b9).
-If the recommendation still appears and the image you've handled still appears in the list of vulnerable images, check the remediation steps again.
+For information on how to remediate the vulnerabilities, see [Remediate recommendations](implement-security-recommendations.md).
 
-## Next step
+## Next steps
 
 - Learn how to [view and remediate vulnerabilities for images running on Kubernetes clusters](view-and-remediate-vulnerabilities-for-images.md).