added image

Author: diannegali

defender-xdr/security-copilot-defender-identity-summary.md

@@ -33,13 +33,13 @@ With the identity summary capability, analysts can immediately identify suspicio
 
 The identity summary contains essential information about an identity, including:
 
-- When a user account was created and whether the user account is of high, medium, or low criticality
-- Unusual behavioral patterns related to sign in locations, sign in frequency, or frequency of failed sign in attempts
-- A user’s current role, including their department and position, and whether there are role changes, comparing role additions and deletions with the user’s job title and department to highlight inconsistencies
-- Data about a user’s last sign in to a device, whether or not the device is associated with to the user, in the last 30 days
+- The date when a user account is created, and whether the user account is of high, medium, or low criticality
+- Any unusual behavioral patterns related to sign in locations, sign in frequency, or frequency of failed sign in attempts
+- A user’s current role, including their department and position, and whether there are notable role changes compared to the user’s job title and department to highlight inconsistencies
+- Data about a user’s last sign in to a device, whether or not the device is associated to the user, in the last 30 days
 - Authentication methods and applications used
 - Risks associated with a user based on Microsoft Entra ID
-- General information like a user’s professional title and contact information, department, and their manager’s contact information 
+- General information like a user’s professional title and contact information, department, and their manager’s contact information
 
 The identity summary capability is available in the Microsoft Defender portal for customers who have provisioned access to Copilot for Security. Users who access the Copilot for Security standalone portal can use this capability through the Microsoft Defender XDR plugin. Know more about [preinstalled plugins in Copilot for Security](/security-copilot/manage-plugins#preinstalled-plugins).
 
@@ -70,7 +70,13 @@ Review the identity summary results. You can copy the results to clipboard, rege
 > [!TIP]
 > When investigating users in the Copilot for Security portal, Microsoft recommends including the word ***Defender*** in your prompts to ensure that the identity summary capability delivers the results. For example, you can use the prompt *Show the Defender summary of this user in the last {time frame}* to generate the identity summary of a user account within the time frame indicated. You can specify up to 120 days on the time frame, with the default being 30 days when you don’t indicate one.
 
-Microsoft highly encourages you to provide feedback to Copilot, as it’s crucial for a capability’s continuous improvement. To provide feedback, navigate to the bottom of the Copilot side panel and select the feedback icon ![Screenshot of the feedback icon for Copilot in Defender cards](/defender/media/copilot-in-defender/create-report/copilot-defender-feedback.png). Fill in the dedicated text box to share your thoughts, experiences, and requests. Microsoft values your feedback and takes it seriously in our commitment to enhance Copilot’s performance and user experience.
+Microsoft highly encourages you to provide feedback to Copilot, as it’s crucial for a capability’s continuous improvement. To provide feedback, navigate to the bottom of the Copilot side panel and select the feedback icon ![Screenshot of the feedback icon for Copilot in Defender cards](/defender/media/copilot-in-defender/create-report/copilot-defender-feedback.png).
+
+   :::image type="content" source="/defender/media/copilot-in-defender/identity-summary/feedback-textbox.png" alt-text="Screenshot highlighting the view user page option in an username search within Identities.":::
+
+Fill in the dedicated text box to share your thoughts, experiences, and requests. Microsoft values your feedback and takes it seriously in our commitment to enhance Copilot’s performance and user experience.
+
+
 
 ## See also