updated images for TA types

Author: poliveria

defender-xdr/threat-analytics.md

@@ -91,21 +91,22 @@ Select a threat from the dashboard to view the report for that threat. You can a
 
 You can filter the threat report list and view the most relevant reports according to a specific threat type or by type of report.
 
-- **Threat tags**—assist you in viewing the most relevant reports according to a specific threat category. For example, the **Ransomware** tag includes all reports related to ransomware.
 - **Report types**—assist you in viewing the most relevant reports according to a specific report type. For example, the **Tools & techniques** tag includes all reports that cover tools and techniques.
+- **Threat tags**—assist you in viewing the most relevant reports according to a specific threat category. For example, the **Ransomware** tag includes all reports related to ransomware.
+
 
 The different tags have equivalent filters that assist you in efficiently reviewing the threat report list and filtering the view based on a specific threat tag or report type. For example, to view all threat reports related to ransomware category, or threat reports that involve vulnerabilities.
 
+Report types are presented at the top of the threat analytics page. There are counters for the number of available reports under each type.
+
+:::image type="content" source="/defender/media/threat-analytics/ta-dashboard-tags.png" alt-text="Screenshot of the threat analytics report types." lightbox="/defender/media/threat-analytics/ta-dashboard-tags.png":::
+
 The Microsoft Threat Intelligence team adds threat tags to each threat report. The following threat tags are currently available:
   - Ransomware
   - Phishing
   - Activity group
   - Vulnerability
 
-Threat tags are presented at the top of the threat analytics page. There are counters for the number of available reports under each tag.
-
-:::image type="content" source="/defender/media/threat-analytics/ta-dashboard-tags.png" alt-text="Screenshot of the threat analytics report tags." lightbox="/defender/media/threat-analytics/ta-dashboard-tags.png":::
-
 To set the types of reports you want in the list, select **Filters**, choose from the list, and select **Apply**. 
 
   :::image type="content" source="/defender/media/threat-analytics/ta-threattag-filters-mtp-tb.png" alt-text="Screenshot of the Filters list." lightbox="/defender/media/threat-analytics/ta-threattag-filters-mtp.png":::

defender/media/threat-analytics/ta-dashboard-tags.png

@@ -9,7 +9,7 @@
     href: reputation-scoring.md
   - name: Analyst insights
     href: analyst-insights.md 
-  - name: Microsoft Copilot for Security and Defender TI
+  - name: Microsoft Security Copilot and Defender TI
     href: security-copilot-and-defender-threat-intelligence.md 
 - name: Concept
   items:
@@ -29,9 +29,9 @@
     href: using-tags.md
   - name: Using projects
     href: using-projects.md
-  - name: Using Microsoft Copilot in Defender for threat intelligence
+  - name: Using Microsoft Copilot in Microsoft Defender for threat intelligence
     href: using-copilot-threat-intelligence-defender-xdr.md
-  - name: Enabling data connector for Defender TI in Microsoft Sentinel (Preview)
+  - name: Enabling data connector for Defender TI in Microsoft Sentinel
     href: /azure/sentinel/connect-mdti-data-connector
 
 - name: Tutorials

defender/media/threat-analytics/ta-taglist-mtp.png

@@ -16,15 +16,15 @@ ms.custom:
 - cx-ti
 - cx-mdti
 ms.topic: conceptual
-ms.date: 01/15/2025
+ms.date: 04/17/2025
 ---
 
 # Using Microsoft Security Copilot for threat intelligence
 
 **Applies to:**
 - [Microsoft Defender XDR](/defender-xdr)
 
-Microsoft Copilot in Defender applies the capabilities of [Microsoft Security Copilot](/copilot/security/microsoft-security-copilot) to deliver Microsoft Defender Threat Intelligence (Defender TI) information about threat actors and tools, as well as contextual threat intelligence, directly into the Microsoft Defender portal. Based on threat analytics reports, intel profiles, and other available Defender TI content, you can use Copilot in Defender to summarize the latest threats affecting your organization, know which threats to prioritize based on your exposure level, or gain more knowledge about your organization's or the global threat landscape.
+Microsoft Copilot in Microsoft Defender applies the capabilities of [Microsoft Security Copilot](/copilot/security/microsoft-security-copilot) to deliver Microsoft Defender Threat Intelligence (Defender TI) information about threat actors and tools, as well as contextual threat intelligence, directly into the Microsoft Defender portal. Based on threat analytics reports, intel profiles, and other available Defender TI content, you can use Copilot in Defender to summarize the latest threats affecting your organization, know which threats to prioritize based on your exposure level, or gain more knowledge about your organization's or the global threat landscape.
 
 > [!NOTE]
 > Defender TI capabilities are also available in Security Copilot standalone experience through the Microsoft Threat Intelligence plugin. [Learn more about Defender TI integration with Security Copilot](security-copilot-and-defender-threat-intelligence.md)