minor updates

Author: AbhishekMallick-MS

articles/backup/backup-azure-integrate-microsoft-defender-using-logic-apps.md

@@ -124,9 +124,8 @@ To trigger the logic app using automatic workflow, follow these steps:
    - **Defender for Cloud Data Type**: Select *Security Alert*.
    - **Alert name contains**: Select *Malware* or *ransomware*.
    - **Alert severity**: Select *High*.
-
-1. Select **Create**.   - **Logic app**: Select the logic app you deployed.
-
+   - **Logic app**: Select the logic app you deployed.
+1. Select **Create**.
 ## Email alerts
 
 When the backup policy on the backup item gets disabled, the logic app also sends an email to the ID you've entered during deployment. The email ID should ideally be of the *Backup Admin*. You can then investigate the alert and resume the backups when the issue is resolved or if it's a false alarm.