different ss

Author: Shereen-Bhar

articles/defender-for-iot/organizations/how-to-accelerate-alert-incident-response.md

@@ -102,8 +102,6 @@ Specify in the custom alert rule what action Defender for IT should take when th
 
 1. On the sensor console, select **Custom alert rules** > **+ Create rule**.
 
-    :::image type="content" source="media/how-to-accelerate-alert-incident-response/create-custom-alert-rule.png" alt-text="Screenshot of the Create custom alert rule pane for creating custom alert rules." lightbox="media/how-to-accelerate-alert-incident-response/create-custom-alert-rule.png":::
-
 1. In the **Create custom alert rule** pane that shows on the right, define the following fields:
 
     |Name  |Description  |
@@ -116,7 +114,7 @@ Specify in the custom alert rule what action Defender for IT should take when th
     |**Detected**     | Define a date and/or time range for the traffic you want to detect. You can customize the days and time range to fit with maintenance hours or set working hours.       |
     |**Action**     | Define an action you want Defender for IoT to take automatically when the alert is triggered.        |
 
-     :::image type="content" source="media/how-to-accelerate-alert-incident-response/detected.png" alt-text="Screenshot of the Detected field in the Create custom alert rule pane." lightbox="media/how-to-accelerate-alert-incident-response/detected.png":::
+     :::image type="content" source="media/how-to-accelerate-alert-incident-response/create-custom-alert-rule.png" alt-text="Screenshot of the Create custom alert rule pane for creating custom alert rules." lightbox="media/how-to-accelerate-alert-incident-response/create-custom-alert-rule.png":::
 
 1. Select **Save** when you're done to save the rule.