fixing links

Author: batamig

defender-xdr/alert-classification-suspicious-ip-password-spray.md

@@ -51,7 +51,7 @@ This means there's suspicious user activity originating from an IP address that
 
 ### 2. Investigate the IP address
 
-- Look at the [activities](/defender-cloud-apps/microsoft-365-security-center-defender-cloud-apps) that originated from the IP:
+- Look at the [activities](/defender-cloud-apps/activity-filters) that originated from the IP:
 
   - **Is it mostly failed attempts to sign in?**
 

defender-xdr/microsoft-365-defender-portal.md

@@ -219,8 +219,6 @@ With this learning path from Microsoft Learn, you can understand Microsoft Defen
 - [What's new in Microsoft Defender XDR](whats-new.md)
 - [Microsoft Defender for Office 365 in the Microsoft Defender portal](microsoft-365-security-center-mdo.md)
 - [Microsoft Defender for Endpoint in Microsoft Defender portal](microsoft-365-security-center-mde.md)
-- [Microsoft Defender for Identity in the Microsoft Defender portal](/defender-for-identity/microsoft-365-security-center-mdi)
-- [Microsoft Defender for Cloud Apps in Microsoft Defender XDR](/defender-cloud-apps/microsoft-365-security-center-defender-cloud-apps)
 - [Microsoft Defender for Cloud in the Microsoft Defender portal](microsoft-365-security-center-defender-cloud.md)
 - [Microsoft Sentinel in the Microsoft Defender portal](https://go.microsoft.com/fwlink/p/?linkid=2263690)