Merge branch 'melvyn-asc-alerts_ref' of https://github.com/memildin/azure-docs-pr into melvyn-asc-alerts_ref

Author: memildin

articles/security-center/security-center-alerts-overview.md

@@ -111,7 +111,7 @@ Using incidents, Security Center provides you with a single view of an attack ca
 
 ## Security alerts in Azure Activity Log
 
-In addition to being available in the Azure Portal or programmatically, Security alerts and incidents are audited as events in [Azure Activity Log](https://docs.microsoft.com/azure/azure-monitor/platform/activity-log-view). For more information on the event schema, see [Security Alerts in Azure Activity log](https://go.microsoft.com/fwlink/?linkid=2114113).
+In addition to being available in the Azure portal or programmatically, Security alerts and incidents are audited as events in [Azure Activity Log](https://docs.microsoft.com/azure/azure-monitor/platform/activity-log-view). For more information on the event schema, see [Security Alerts in Azure Activity log](https://go.microsoft.com/fwlink/?linkid=2114113).
 
 ## Next steps
 

articles/security-center/security-center-alerts-service-layer.md

@@ -26,11 +26,11 @@ Security Center network-layer analytics are based on sample [IPFIX data](https:/
 
 Some network configurations may restrict Security Center from generating alerts on suspicious network activity. For Security Center to generate network alerts, ensure that:
 
-✔ Your virtual machine has a public IP address (or is on a load balancer with a public IP address).
+- Your virtual machine has a public IP address (or is on a load balancer with a public IP address).
 
-✔ Your virtual machine's network egress traffic isn't blocked by an external IDS solution.
+- Your virtual machine's network egress traffic isn't blocked by an external IDS solution.
 
-✔ Your virtual machine has been assigned the same IP address for the entire hour during which the suspicious communication occurred. This also applies to VMs created as part of a managed service (e.g. AKS, Databricks).
+- Your virtual machine has been assigned the same IP address for the entire hour during which the suspicious communication occurred. This also applies to VMs created as part of a managed service (e.g. AKS, Databricks).
 
 For a list of the Azure network layer alerts, see the [Reference table of alerts](alerts-reference.md#alerts-azurenetlayer).