Update easm-copilot.md

Author: danielledennis

articles/external-attack-surface-management/easm-copilot.md

@@ -17,6 +17,7 @@ ms.localizationpriority: high
 > [!IMPORTANT]
 > The information in this article applies to the Microsoft Security Copilot Early Access Program, which is an invite-only paid preview program. Some information in this article relates to prereleased product, which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided in this article.
 
+
 Security Copilot is a cloud-based AI platform that provides a natural language copilot experience. It can help support security professionals in different scenarios, like incident response, threat hunting, and intelligence gathering. For more information about what it can do, go to [What is Microsoft Security Copilot?](/security-copilot/microsoft-security-copilot).
 
 **Security Copilot integrates with Defender EASM**.
@@ -25,8 +26,12 @@ Security Copilot can surface insights from Defender EASM about an organization's
 
 This article introduces you to Security Copilot and includes sample prompts that can help Defender EASM users.
 
+
+
 ## Know before you begin
 
+- Ensure that you reference the company name in your first prompt. Unless otherwise specified, all future prompts will provide data about the initially specified company. 
+
 - Be clear and specific with your prompts. You might get better results if you include specific asset names or metadata values (e.g. CVE IDs) in your prompts.
 
   It might also help to add **Defender EASM** to your prompt, like:
@@ -38,13 +43,15 @@ This article introduces you to Security Copilot and includes sample prompts that
 
 - Security Copilot saves your prompt sessions. To see the previous sessions, in Security Copilot, go to the menu > **My investigations**:
 
-![Screenshot that shows the Microsoft Security Copilot menu and My investigations with previous sessions.](media/copilot-1.png)
+   ![Screenshot that shows the Microsoft Security Copilot menu and My investigations with previous sessions.](media/copilot-1.png)
 
 
   For a walkthrough on Security Copilot, including the pin and share feature, go to [Navigating Microsoft Security Copilot](/security-copilot/navigating-security-copilot).
 
 For more information on writing Security Copilot prompts, go to [Microsoft Security Copilot prompting tips](/security-copilot/prompting-tips).
 
+
+
 ## Open Security Copilot
 
 1. Go to [Microsoft Security Copilot](https://go.microsoft.com/fwlink/?linkid=2247989) and sign in with your credentials.
@@ -60,6 +67,8 @@ For more information on writing Security Copilot prompts, go to [Microsoft Secur
 
 3. Enter your prompt.
 
+
+
 ## Built-in system features
 
 In Security Copilot, there are built in system features. These features can get data from the different plugins that are enabled.
@@ -78,6 +87,8 @@ To view the list of built-in system capabilities for Defender EASM, use the foll
     - Get expired SSL certificates.
     - Get SHA1 certificates. 
 
+
+
 ## Sample prompts for Defender EASM?
 
 There are many prompts you can use to get information about your Defender EASM data. This section lists some ideas and examples.
@@ -92,6 +103,7 @@ Get **general information** about your Defender EASM data, like an attack surfac
 - What are the high priority attack surface insights for my organization? 
 
 
+
 ### CVE vulnerability data 
 
 Get details on **CVEs that are applicable to your inventory**.
@@ -102,6 +114,8 @@ Get details on **CVEs that are applicable to your inventory**.
 - Get assets affected by high priority CVSS's in my attack surface.
 - How many assets have critical CVSS's for my organization? 
 
+
+
 ### Domain and SSL certificate posture
 
 Get information about **domain and SSL certificate posture**, like expired domains and usage of SHA1 certificates.
@@ -113,11 +127,12 @@ Get information about **domain and SSL certificate posture**, like expired domai
 - How many assets are using SSL SHA1 for my organization?
 - Get list of expired SSL certificates.
 
+
+
 ## Provide feedback
 
-Your feedback on the Defender EASM integration with Security Copilot helps with development. To provide feedback, in Security Copilot, use the feedback buttons at the bottom of each completed prompt:
+Your feedback on the Defender EASM integration with Security Copilot helps with development. To provide feedback, in Security Copilot, use the feedback buttons at the bottom of each completed prompt. Your options are "Looks Right," "Needs Improvement" and "Inappropriate." 
 
-![Screenshot that shows how to submit feedback on the prompt results in Microsoft Security Copilot.](media/copilot-3.png)
 
 Your options:
 
@@ -127,12 +142,16 @@ Your options:
 
 Whenever possible, and when the result is **Off-target**, write a few words explaining what can be done to improve the outcome. If you entered Defender EASM-specific prompts and the results aren't EASM related, then include that information.
 
+
+
 ## Data processing and privacy
 
 When you interact with the Security Copilot to get Defender EASM data, Security Copilot pulls that data from Defender EASM. The prompts, the data that's retrieved, and the output shown in the prompt results is processed and stored within the Security Copilot service.
 
 For more information about data privacy in Security Copilot, go to [Privacy and data security in Microsoft Security Copilot](/security-copilot/privacy-data-security).
 
+
+
 ## Related articles
 
 - [What is Microsoft Security Copilot?](/security-copilot/microsoft-security-copilot)