Merge pull request #184537 from batamig/mult-screenshots

fixing screenshots

Author: ttorble

articles/sentinel/media/multiple-workspace-view/incidents.png

@@ -3,39 +3,40 @@ title: Work with Microsoft Sentinel incidents in many workspaces at once | Micro
 description: How to view incidents in multiple workspaces concurrently in Microsoft Sentinel.
 author: yelevin
 ms.topic: conceptual
-ms.date: 11/09/2021
+ms.date: 01/09/2022
 ms.author: yelevin
 ms.custom: ignite-fall-2021
 ---
 
-# Work with incidents in many workspaces at once 
+# Work with incidents in many workspaces at once
 
  [!INCLUDE [Banner for top of topics](./includes/banner.md)]
 
-To take full advantage of Microsoft Sentinel’s capabilities, Microsoft recommends using a single-workspace environment. However, there are some use cases that require having several workspaces, in some cases – for example, that of a [Managed Security Service Provider (MSSP)](./multiple-tenants-service-providers.md) and its customers – across multiple tenants. **Multiple Workspace View** lets you see and work with security incidents across several workspaces at the same time, even across tenants, allowing you to maintain full visibility and control of your organization’s security responsiveness.
+To take full advantage of Microsoft Sentinel’s capabilities, Microsoft recommends using a single-workspace environment. However, there are some use cases that require having several workspaces, in some cases – for example, that of a [Managed Security Service Provider (MSSP)](./multiple-tenants-service-providers.md) and its customers – across multiple tenants. **Multiple workspace view** lets you see and work with security incidents across several workspaces at the same time, even across tenants, allowing you to maintain full visibility and control of your organization’s security responsiveness.
 
 [!INCLUDE [reference-to-feature-availability](includes/reference-to-feature-availability.md)]
 
-## Entering Multiple Workspace View
+## Entering multiple workspace view
 
-When you open Microsoft Sentinel, you are presented with a list of all the workspaces to which you have access rights, across all selected tenants and subscriptions. To the left of each workspace name is a checkbox. Clicking the name of a single workspace will bring you into that workspace. To choose multiple workspaces, click all the corresponding checkboxes, and then click the **Multiple Workspace View** button at the top of the page.
+When you open Microsoft Sentinel, you are presented with a list of all the workspaces to which you have access rights, across all selected tenants and subscriptions. To the left of each workspace name is a checkbox. Selecting the name of a single workspace will bring you into that workspace. To choose multiple workspaces, select all the corresponding checkboxes, and then select the **View incidents** button at the top of the page.
 
 > [!IMPORTANT]
-> Multiple Workspace View currently supports a maximum of 10 concurrently displayed workspaces. 
-> 
+> Multiple workspace view currently supports a maximum of 10 concurrently displayed workspaces.
+>
 > If you check more than 10 workspaces, a warning message will appear.
 
 Note that in the list of workspaces, you can see the directory, subscription, location, and resource group associated with each workspace. The directory corresponds to the tenant.
 
-   ![Choose multiple workspaces](./media/multiple-workspace-view/workspaces.png)
+:::image type="content" source="./media/multiple-workspace-view/workspaces.png" alt-text="Select multiple workspaces.":::
 
 ## Working with incidents
 
-In **Multiple Workspace View**, only the **Incidents** screen is available for now. It looks and functions in most ways like the regular **Incidents** screen. There are a few important differences, though:
+Multiple workspace view is currently available only for incidents. This page looks and functions in most ways like the regular [Incidents](investigate-cases.md) page, with the following important differences:
 
-   ![View incidents in multiple workspaces](./media/multiple-workspace-view/incidents.png)
+:::image type="content" source="./media/multiple-workspace-view/incidents.png" alt-text="View incidents across multiple workspaces." lightbox="./media/multiple-workspace-view/incidents.png":::
 
-- The counters at the top of the page - *Open incidents*, *New incidents*, *In progress*, etc. - show the numbers for all of the selected workspaces collectively.
+
+- The counters at the top of the page - *Open incidents*, *New incidents*, *Active incidents*, etc. - show the numbers for all of the selected workspaces collectively.
 
 - You'll see incidents from all of the selected workspaces and directories (tenants) in a single unified list. You can filter the list by workspace and directory, in addition to the filters from the regular **Incidents** screen.
 
@@ -44,6 +45,8 @@ In **Multiple Workspace View**, only the **Incidents** screen is available for n
 - If you choose a single incident and click **View full details** or **Actions** > **Investigate**, you will from then on be in the data context of that incident's workspace and no others.
 
 ## Next steps
-In this document, you learned how to view and work with incidents in multiple Microsoft Sentinel workspaces concurrently. To learn more about Microsoft Sentinel, see the following articles:
+
+In this article, you learned how to view and work with incidents in multiple Microsoft Sentinel workspaces concurrently. To learn more about Microsoft Sentinel, see the following articles:
+
 - Learn how to [get visibility into your data, and potential threats](get-visibility.md).
 - Get started [detecting threats with Microsoft Sentinel](detect-threats-built-in.md).