moving TOC around

Author: batamig

articles/sentinel/TOC.yml

@@ -53,6 +53,8 @@
     href: enable-sentinel-features-content.md
   - name: Onboard to Microsoft Sentinel
     href: quickstart-onboard.md
+  - name: Connect Microsoft Sentinel to the Defender portal
+    href: /unified-secops-platform/microsoft-sentinel-onboard?toc=/azure/sentinel/TOC.json&bc=/azure/sentinel/breadcrumb/toc.json
   - name: Configure content
     href: configure-content.md
   - name: Set up multiple workspaces
@@ -63,52 +65,56 @@
     href: configure-data-retention-archive.md
   - name: Deploy side-by-side
     href: deploy-side-by-side.md
-- name: Migrate to Microsoft Sentinel
+- name: Migrate
   items:
-  - name: Plan and design your migration
+  - name: Transition your environment to the Defender portal
+    href: move-to-defender.md
+  - name: Migrate to Microsoft Sentinel
     items:
-    - name: Plan your migration
-      href: migration.md
-    - name: Use the SIEM migration experience
-      href: siem-migration.md
-    - name: Track migration with a workbook
-      href: migration-track.md                
-  - name: Migrate from ArcSight      
-    items: 
-    - name: Migrate detection rules
-      href: migration-arcsight-detection-rules.md
-    - name: Migrate SOAR automation
-      href: migration-arcsight-automation.md
-    - name: Export historical data
-      href: migration-arcsight-historical-data.md           
-  - name: Migrate from Splunk
-    items:
-    - name: Migrate detection rules
-      href: migration-splunk-detection-rules.md
-    - name: Migrate SOAR automation
-      href: migration-splunk-automation.md
-    - name: Export historical data
-      href: migration-splunk-historical-data.md
-  - name: Migrate from QRadar      
-    items:
-    - name: Migrate detection rules
-      href: migration-qradar-detection-rules.md
-    - name: Migrate SOAR automation
-      href: migration-qradar-automation.md
-    - name: Export historical data
-      href: migration-qradar-historical-data.md
-  - name: Ingest historical data
-    items:      
-    - name: Select target platform
-      href: migration-ingestion-target-platform.md
-    - name: Select data ingestion tool
-      href: migration-ingestion-tool.md
-    - name: Ingest data
-      href: migration-export-ingest.md
-  - name: Convert dashboards to workbooks
-    href: migration-convert-dashboards.md
-  - name: Update SOC processes      
-    href: migration-security-operations-center-processes.md
+    - name: Plan and design your migration
+      items:
+      - name: Plan your migration
+        href: migration.md
+      - name: Use the SIEM migration experience
+        href: siem-migration.md
+      - name: Track migration with a workbook
+        href: migration-track.md                
+    - name: Migrate from ArcSight      
+      items: 
+      - name: Migrate detection rules
+        href: migration-arcsight-detection-rules.md
+      - name: Migrate SOAR automation
+        href: migration-arcsight-automation.md
+      - name: Export historical data
+        href: migration-arcsight-historical-data.md           
+    - name: Migrate from Splunk
+      items:
+      - name: Migrate detection rules
+        href: migration-splunk-detection-rules.md
+      - name: Migrate SOAR automation
+        href: migration-splunk-automation.md
+      - name: Export historical data
+        href: migration-splunk-historical-data.md
+    - name: Migrate from QRadar      
+      items:
+      - name: Migrate detection rules
+        href: migration-qradar-detection-rules.md
+      - name: Migrate SOAR automation
+        href: migration-qradar-automation.md
+      - name: Export historical data
+        href: migration-qradar-historical-data.md
+    - name: Ingest historical data
+      items:      
+      - name: Select target platform
+        href: migration-ingestion-target-platform.md
+      - name: Select data ingestion tool
+        href: migration-ingestion-tool.md
+      - name: Ingest data
+        href: migration-export-ingest.md
+    - name: Convert dashboards to workbooks
+      href: migration-convert-dashboards.md
+    - name: Update SOC processes      
+      href: migration-security-operations-center-processes.md
 - name: Manage solutions and content
   items:  
   - name: Overview
@@ -1099,12 +1105,6 @@
       href: /azure/azure-monitor/logs/data-retention-configure?toc=/azure/sentinel/TOC.json&bc=/azure/sentinel/breadcrumb/toc.json
     - name: Auxiliary logs use cases
       href: basic-logs-use-cases.md
-  - name: Microsoft Sentinel in the Defender portal
-    items:
-    - name: Transition your environment to the Defender portal
-      href: move-to-defender.md
-    - name: Connect Microsoft Sentinel to the Defender portal
-      href: /unified-secops-platform/microsoft-sentinel-onboard?toc=/azure/sentinel/TOC.json&bc=/azure/sentinel/breadcrumb/toc.json
   - name: Manage multiple workspaces 
     items:
     - name: Workspaces in the Defender portal