Merge pull request #283168 from yoavfr/docs-editor/advanced-configurations-for-ma-1722513880

Update advanced-configurations-for-malware-scanning.md

Author: prmerger-automator[bot]

articles/defender-for-cloud/advanced-configurations-for-malware-scanning.md

@@ -23,12 +23,12 @@ Learn more on how to [set up response for malware scanning](defender-for-storage
 
 For each storage account enabled with malware scanning, you can define a Log Analytics workspace destination to store every scan result in a centralized log repository that is easy to query.
 
-:::image type="content" source="media/azure-defender-storage-configure/log-analytics-settings.png" alt-text="Screenshot showing where to configure a Log Analytics destination for scan log." lightbox="media/azure-defender-storage-configure/log-analytics-settings.png":::
-
 Before sending scan results to Log Analytics, [create a Log Analytics workspace](../azure-monitor/logs/quick-create-workspace.md) or use an existing one.
 
 To configure the Log Analytics destination, navigate to the relevant storage account, open the **Microsoft Defender for Cloud** tab, and select the settings to configure.
 
+:::image type="content" source="media/azure-defender-storage-configure/log-analytics-settings.png" alt-text="Screenshot showing where to configure a Log Analytics destination for scan log." lightbox="media/azure-defender-storage-configure/log-analytics-settings.png":::
+
 This configuration can be performed using REST API as well:
 
 Request URL:
@@ -57,7 +57,9 @@ Request Body:
     }
 }
 ```
-
+> [!NOTE]
+> The Azure portal lists Log Analytics workspaces from the same subscription as the storage account. The REST API can be used to configure a Log Analytics workspace from a different subscription of the same tenant, as described above.
+> Scan results will be recorded in a table named `StorageMalwareScanningResults`. This table is created when the first scan result is recorded.
 ## Setting up Event Grid for malware scanning
 
 For each storage account enabled with malware scanning, you can configure to send every scan result using an Event Grid event for automation purposes.