add related articles

Author: DeCohen

ATPDocs/remove-discoverable-passwords-active-directory-account-attributes.md

@@ -14,9 +14,9 @@ Certain free-text attributes are often overlooked during hardening but are reada
 
 Attackers seek low-friction paths to expand access. Exposed passwords in these attributes represent an easy win because:
 
-- The attributes are not access-restricted.
+- The attributes aren't access-restricted.
 
-- They are not monitored by default.
+- They aren't monitored by default.
 
 - They provide context attackers can exploit for lateral movement and privilege escalation.
 
@@ -29,7 +29,7 @@ Removing exposed credentials from these attributes reduces the risk of identity
 > This security recommendation is part of Microsoft Defender for Identity and is powered by AI-based analysis of free-text attributes in Active Directory. 
 > Findings can include false positives. Always validate the results before taking action.
 
-Microsoft Defender for Identity detects potential credential exposure in Active Directory by analyzing commonly used free-text attributes. This includes looking for common password formats, hints,  `'description'`, `'info'`, and `'adminComment'` fields, as well as other contextual clues that may suggest the presence of credential misuse. Microsoft Defender for Identity detects indicators such as:
+Microsoft Defender for Identity detects potential credential exposure in Active Directory by analyzing commonly used free-text attributes. This includes looking for common password formats, hints,  `'description'`, `'info'`, and `'adminComment'` fields, and other contextual clues that might suggest the presence of credential misuse. Microsoft Defender for Identity detects indicators such as:
 
 - Plaintext passwords or variations. For example, '`Password=Summer2024!'`
 
@@ -44,7 +44,7 @@ Detected matches are surfaced in **Secure Score** and the **Security Assessment
 
 To address this security assessment, follow these steps:
 
-1. Review the recommended action at [https://security.microsoft.com/securescore?viewid=actions ](https://security.microsoft.com/securescore?viewid=actions ) for Remove discoverable passwords in Active Directory account attributes.
+1. Review the recommended action at [https://security.microsoft.com/securescore?viewid=actions](https://security.microsoft.com/securescore?viewid=actions) for Remove discoverable passwords in Active Directory account attributes.
 1. Review the exposed entries in the security report. Identify any field content that includes:
 
     - Cleartext passwords
@@ -57,4 +57,4 @@ To address this security assessment, follow these steps:
 1. Fully remove the sensitive information. Don’t just mask the value. Partial obfuscation (for example, P@ssw***) can still offer useful clues to attackers.
 
 > [!NOTE]
-> Assessments are updated in near real time, and scores and statuses are updated every 24 hours. The list of impacted entities is updated within a few minutes of your implementing the recommendations. The status might take time until it's marked as **Completed**.
+> Assessments are updated in near real time. Scores and statuses are updated every 24 hours. The list of impacted entities is updated within a few minutes of you implementing the recommendations. The status might take time until it's marked as **Completed**.

ATPDocs/remove-inactive-service-account.md

@@ -31,4 +31,8 @@ To leverage this security assessment effectively, follow these steps:
 - Delete the account: If no issues are observed, proceed to delete the account and fully remove its access.
 
 > [!NOTE]
-> Assessments are updated in near real time, and scores and statuses are updated every 24 hours. The list of impacted entities is updated within a few minutes of your implementing the recommendations. The status may take time until it's marked as **Completed**.
+> Assessments are updated in near real time, and scores and statuses are updated every 24 hours. The list of impacted entities is updated within a few minutes of your implementing the recommendations. The status may take time until it's marked as **Completed**.
+
+## Related articles
+
+- [Microsoft Secure Score](/defender-xdr/microsoft-secure-score)