Skip to content

Commit 766d2d1

Browse files
committed
fixing link
1 parent 4867dbd commit 766d2d1

File tree

2 files changed

+8
-6
lines changed

2 files changed

+8
-6
lines changed

articles/sentinel/mitre-coverage.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -48,13 +48,13 @@ By default, both currently active scheduled query and near real-time (NRT) rules
4848

4949
In the Azure portal, under **Threat management**, select **MITRE ATT&CK (Preview)**.
5050

51-
:::image type="content" source="media/mitre-coverage/mitre-coverage.png" alt-text="Screenshot of the MITRE coverage page.":::
51+
:::image type="content" source="media/mitre-coverage/mitre-coverage.png" alt-text="Screenshot of the MITRE coverage page." lightbox="media/mitre-coverage/mitre-coverage.png":::
5252

5353
### [Defender portal](#tab/defender-portal)
5454

5555
In the Defender portal, select **Microsoft Sentinel > Threat management > MITRE ATT&CK**.
5656

57-
:::image type="content" source="media/mitre-coverage/mitre-coverage-defender.png" alt-text="Screenshot of the MITRE ATT&CK page in the Defender portal.":::
57+
:::image type="content" source="media/mitre-coverage/mitre-coverage-defender.png" alt-text="Screenshot of the MITRE ATT&CK page in the Defender portal." lightbox="media/mitre-coverage/mitre-coverage-defender.png":::
5858

5959
To filter the page by a specific threat scenario, toggle the **View MITRE by threat scenario** option on, and then select a threat scenario from the drop down. The page is updated accordingly.
6060

articles/sentinel/soc-optimization/soc-optimization-access.md

Lines changed: 6 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -141,19 +141,21 @@ Scroll down to the bottom of the details pane for a link to where you can take t
141141

142142
- If an optimization includes recommendations to add analytics rules, select **Go to Content Hub**.
143143
- If an optimization includes recommendations to move a table to basic logs, select **Change plan**.
144-
- For threat-based coverage optimizations, select **View full threat scenario** to see the full list of relevant threats, active and recommended detections, and coverage levels. From there you can jump directly to the **Content hub** to activate any recommended detections, or to the **MITRE ATT&CK** page to view the [full MITRE ATT&CK coverage for the selected scenario](../mitre-coverage.md?tabs=defender-portal). For example:
144+
- For threat-based coverage optimizations, select **View full threat scenario** to see the full list of relevant threats, active and recommended detections, and coverage levels. From there you can jump directly to the **Content hub** to activate any recommended detections, or to the **MITRE ATT&CK** page to view the [full MITRE ATT&CK coverage for the selected scenario](../mitre-coverage.md?tabs=defender-portal#view-current-mitre-coverage). For example:
145145

146-
:::image type="content" source="media/soc-optimization-access/threat-scenario-page.png" alt-text="Screenshot of the SOC optimization threat scenario page.":::
146+
:::image type="content" source="media/soc-optimization-access/threat-scenario-page.png" alt-text="Screenshot of the SOC optimization threat scenario page." lightbox="media/soc-optimization-access/threat-scenario-page.png":::
147147

148148
---
149149

150-
If you choose to install an analytics rule template from the Content hub, and you don't already have the solution installed, only the analytics rule template that you install is shown in the solution when you're done. Install the full solution to see all available content items from the selected solution. For more information, see [Discover and manage Microsoft Sentinel out-of-the-box content](../sentinel-solutions-deploy.md).
150+
If you choose to install an analytics rule template from the Content hub, and you don't already have the solution installed, only the analytics rule template that you install is shown in the solution when you're done.
151+
152+
Install the full solution to see all available content items from the selected solution. For more information, see [Discover and manage Microsoft Sentinel out-of-the-box content](../sentinel-solutions-deploy.md).
151153

152154
### Manage optimizations
153155

154156
By default, optimization statuses are **Active**. Change their statuses as your teams progress through triaging and implementing recommendations.
155157

156-
Either select the options menu or select **View full details** to take one of the following actions:
158+
Either select the options menu or select **View details** to take one of the following actions:
157159

158160
|Action |Description |
159161
|---------|---------|

0 commit comments

Comments
 (0)