fix

Author: TerryLanfear

articles/security/fundamentals/antimalware.md

@@ -47,7 +47,7 @@ When using Azure App Service on Windows, the underlying service that hosts the w
 
 > [!NOTE]
 > Microsoft Defender Antivirus is the built-in Antimalware enabled in Windows Server 2016 and above.
-> The Azure VM Antimalware extension can still be added to a Windows Server 2016 and above Azure VM with Microsoft Defender Antivirus. In this scenario, the extension applies any optional [configuration policies](antimalware.md#default-and-custom-antimalware-configuration) to be used by Microsoft Defender Antivirus The extension does not deploy any additional antimalware services.
+> The Azure VM Antimalware extension can still be added to a Windows Server 2016 and above Azure VM with Microsoft Defender Antivirus. In this scenario, the extension applies any optional [configuration policies](antimalware.md#default-and-custom-antimalware-configuration) to be used by Microsoft Defender Antivirus The extension does not deploy any other antimalware services.
 > See the [Samples](antimalware.md#samples) section of this article for more details.
 
 ### Microsoft antimalware workflow

articles/virtual-machines/extensions/iaas-antimalware-windows.md

@@ -21,30 +21,28 @@ ms.author: terrylan
 
 ## Overview
 
-The modern threat landscape for cloud environments is extremely dynamic, increasing the pressure on business IT cloud subscribers to maintain effective protection in order to meet compliance and security requirements. Microsoft Antimalware for Azure is free real-time protection capability that helps identify and remove viruses, spyware, and other malicious software, with configurable alerts when known malicious or unwanted software attempts to install itself or run on your Azure systems. The solution is built on the same antimalware platform as Microsoft Security Essentials (MSE), Microsoft Forefront Endpoint Protection, Microsoft System Center Endpoint Protection, Windows Intune, and Windows Defender for Windows 8.0 and higher.
+The modern threat landscape for cloud environments is dynamic, increasing the pressure on business IT cloud subscribers to maintain effective protection in order to meet compliance and security requirements. Microsoft Antimalware for Azure is free, real-time protection capability. Microsoft Antimalware helps identify and remove viruses, spyware, and other malicious software, with configurable alerts when known malicious or unwanted software attempts to install itself or run on your Azure systems. The solution is built on the same antimalware platform as Microsoft Security Essentials (MSE), Microsoft Forefront Endpoint Protection, Microsoft System Center Endpoint Protection, Windows Intune, and Windows Defender for Windows 8.0 and higher.
 Microsoft Antimalware for Azure is a single-agent solution for applications and tenant environments, designed to run in the background without human intervention. You can deploy protection based on the needs of your application workloads, with either basic secure-by-default or advanced custom configuration, including antimalware monitoring.
 
 ## Prerequisites
 
 ### Operating system
 
-The Microsoft Antimalware for Azure solution includes the Microsoft Antimalware Client, and Service, Antimalware classic deployment model, Antimalware PowerShell cmdlets, and Azure Diagnostics Extension. The Microsoft Antimalware solution is supported on Windows Server 2008 R2, Windows Server 2012, and Windows Server 2012 R2 operating system families. 
-It is not supported on the Windows Server 2008 operating system, and also is not supported in Linux. 
+The Microsoft Antimalware for Azure solution includes the Microsoft Antimalware Client, and Service, Antimalware classic deployment model, Antimalware PowerShell cmdlets, and Azure Diagnostics Extension. The Microsoft Antimalware solution is supported on Windows Server 2008 R2, Windows Server 2012, and Windows Server 2012 R2 operating system families.
+It isn't supported on the Windows Server 2008 operating system, and also isn't supported in Linux.
 
-Windows Defender is the built-in Antimalware enabled in Windows Server 2016. The Windows Defender Interface is also enabled by default on some Windows Server 2016 SKU's.
-The Azure VM Antimalware extension can still be added to a Windows Server 2016 Azure VM with Windows Defender, but in this scenario the extension will apply any optional configuration policies to be used by Windows Defender, the extension will not deploy any additional antimalware service. 
-For more information, see [Update to Azure Antimalware Extension for Cloud Services](/archive/blogs/azuresecurity/update-to-azure-antimalware-extension-for-cloud-services).
+Windows Defender is the built-in Antimalware enabled in Windows Server 2016. The Windows Defender Interface is also enabled by default on some Windows Server 2016 SKUs. The Azure VM Antimalware extension can still be added to a Windows Server 2016 and above Azure VM with Windows Defender. In this scenario the extension applies any optional [configuration policies](../../security/fundamentals/antimalware.md#default-and-custom-antimalware-configuration) to be used by Windows Defender. The extension does not deploy any other antimalware service. See the [Samples](../../security/fundamentals/antimalware.md#samples) section of the Microsoft Antimalware article for more details.
 
 ### Internet connectivity
 
-The Microsoft Antimalware for Windows requires that the target virtual machine is connected to the internet to receive regular engine and signature updates. 
+The Microsoft Antimalware for Windows requires that the target virtual machine is connected to the internet to receive regular engine and signature updates.
 
 ## Template deployment
 Azure VM extensions can be deployed with Azure Resource Manager templates. Templates are ideal when deploying one or more virtual machines that require post deployment configuration such as onboarding to Azure Antimalware.
 
-The JSON configuration for a virtual machine extension can be nested inside the virtual machine resource, or placed at the root or top level of a Resource Manager JSON template. 
+The JSON configuration for a virtual machine extension can be nested inside the virtual machine resource, or placed at the root or top level of a Resource Manager JSON template.
 The placement of the JSON configuration affects the value of the resource name and type. 
-For more information, see [Set name and type for child resources](../../azure-resource-manager/templates/child-resource-name-type.md). 
+For more information, see [Set name and type for child resources](../../azure-resource-manager/templates/child-resource-name-type.md).
 
 The following example assumes the VM extension is nested inside the virtual machine resource. When nesting the extension resource, the JSON is placed in the `"resources": []` object of the virtual machine.
 
@@ -103,7 +101,7 @@ AntimalwareEnabled
 - Values: true/false
 
   - true = Enable
-  - false = Error out, as false is not a supported value
+  - false = Error out, as false isn't a supported value
 
 RealtimeProtectionEnabled
 
@@ -151,13 +149,13 @@ Microsoft Antimalware extension logs are available at - %Systemdrive%\WindowsAzu
 | -2147156121 | Setup tried to remove competitor product. But competitor product uninstall failed | Try to remove the competitor product manually, reboot, and retry installation  |
 | -2147156116 | Policy file validation failed | Make sure you pass a valid policy XML file to setup  |
 | -2147156095 | Setup couldn't start the Antimalware service | Verify all binaries are correctly signed, and right licensing file is installed |
-| -2147023293 | A fatal error occurred during installation. In most cases, it will. Epp.msi, can’t register\start\stop AM service or mini filter driver | MSI logs from EPP.msi are required here for future investigation |
-| -2147023277 | Installation package could not be opened | Verify that the package exists, and is accessible, or contact the application vendor to verify that this is a valid Windows Installer package |
+| -2147023293 | A fatal error occurred during installation. In most cases, it will. Epp.msi, can't register\start\stop AM service or mini filter driver | MSI logs from EPP.msi are required here for future investigation |
+| -2147023277 | Installation package couldn't be opened | Verify that the package exists, and is accessible, or contact the application vendor to verify that this is a valid Windows Installer package |
 | -2147156109 | Windows Defender is required as a prerequisite |  |
-| -2147205073 | The websso issuer is not supported | |
-| -2147024893 | The system cannot find the path specified |  |
-| -2146885619 | Not a cryptographic message or the cryptographic message is not formatted correctly |  |
-| -1073741819 | The instruction at 0x%p referenced memory at 0x%p. The memory could not be %s |  |
+| -2147205073 | The websso issuer isn't supported | |
+| -2147024893 | The system can't find the path specified |  |
+| -2146885619 | Not a cryptographic message or the cryptographic message isn't formatted correctly |  |
+| -1073741819 | The instruction at 0x%p referenced memory at 0x%p. The memory couldn't be %s |  |
 | 1 | Incorrect Function |  |
 
 ### Support