Merge pull request #4250 from MicrosoftDocs/main

[AutoPublish] main to live - 06/17 04:28 PDT | 06/17 16:58 IST

Author: m365-skilling-repo-management[bot]

ATPDocs/investigate-security-alerts.md

@@ -12,7 +12,7 @@ Investigate alerts that are affecting your environment, understand what they mea
 Begin your investigation by selecting an alert from the **Alerts** page in the Microsoft Defender portal. The alerts page displays a list of all security alerts generated by Defender for Identity, including their severity, status, and impacted assets. Selecting an alert opens the alert page, which contains the alert title, the affected assets, the details side pane, and in some cases, an alert story.
 
 > [!NOTE]
-> The **alert story** and **export to Excel** options are only available for alerts that use the original Defender for Identity structure.  
+> The **alert story** and **export to Excel** options are only available for alerts that use the classic Defender for Identity structure.  
 > For more information about differences in how alerts are presented in the Defender portal, see [View and manage alerts](understanding-security-alerts.md).
 
 ## Investigate using the alert story

ATPDocs/toc.yml

@@ -85,7 +85,7 @@ items:
       - name: Listen for SIEM events
         href: deploy/configure-event-collection.md
         displayName: standalone
-    - name: Activate Defender for Identity capabilities on your domain controller
+    - name: Activate Defender for Identity capabilities on your domain controller (Preview)
       href: deploy/activate-capabilities.md
 - name: Integrate with identity services
   items: