Merge pull request #3793 from MicrosoftDocs/chrisda

Click path and art updates

Author: chrisda

defender-business/mdb-review-remediation-actions.md

@@ -19,28 +19,26 @@ ms.collection:
 - tier1
 ---
 
-# Review remediation actions in the Action center
+# Review remediation actions in the Action Center
 
 As threats are detected, remediation actions come into play. Depending on the particular threat and how your security settings are configured, remediation actions might be taken automatically or only upon approval. Examples of remediation actions include stopping a process from running or removing a scheduled task.
 
-All remediation actions are tracked in the Action center.
+All remediation actions are tracked in the Action Center.
 
-:::image type="content" source="/defender/media/defender-business/mdb-actioncenter.png" alt-text="Screenshot of the Action center":::
+:::image type="content" source="media/mdb-actioncenter.png" alt-text="Screenshot of the location of the Action Center in the Microsoft Defender portal." lightbox="media/mdb-actioncenter.png":::
 
 **This article describes**:
 
-- [How to use the Action center](#how-to-use-the-action-center)
+- [How to use the Action Center](#how-to-use-the-action-center)
 - [Remediation actions](#remediation-actions)
 
-## How to use the Action center
+## How to use the Action Center
 
-1. Go to the Microsoft Defender portal ([https://security.microsoft.com](https://security.microsoft.com)) and sign in.
+1. In the Defender portal at <https://security.microsoft.com>, go to  **Actions & submissions** \> **Action Center**. Or, to go directly to the **Action Center** page, use <https://security.microsoft.com/action-center>.
 
-2. In the navigation pane, choose **Action center**.
-
-3. Select the **Pending** tab to view and approve (or reject) any pending actions. Actions can arise from antivirus/antimalware protection, automated investigations, manual response activities, or live response sessions.
-
-4. Select the **History** tab to view a list of completed actions.
+2. On the **Action Center** page, use the available tabs:
+   - **Pending**: View and approve (or reject) any pending actions. Actions on the **Pending** tab can arise from anti-virus protection, anti-malware protection, automated investigations, manual response activities, or live response sessions.
+   - **History**: View completed actions.
 
 ## Remediation actions
 
@@ -50,10 +48,10 @@ The following table lists remediation actions that are available.
 
 |Source|Actions|
 |---|---|
-|[Automatic attack disruption](mdb-attack-disruption.md)|- Contain a device <br/>- Contain a user <br/>- Disable a user account|
-|[Automated investigations](/defender-endpoint/automated-investigations)|- Quarantine a file<br/> - Remove a registry key<br/> - Kill a process<br/> - Stop a service<br/> - Disable a driver<br/> - Remove a scheduled task|
-|[Manual response actions](/defender-endpoint/respond-machine-alerts)|- Run antivirus scan<br/> - Isolate a device<br/> - Add an indicator to block or allow a file|
-|[Live response](/defender-endpoint/live-response)|- Collect forensic data<br/> - Analyze a file<br/> - Run a script<br/> - Send a suspicious entity to Microsoft for analysis<br/> - Remediate a file <br/> - Proactively hunt for threats|
+|[Automatic attack disruption](mdb-attack-disruption.md)|<ul></li>Contain a device</li><li>Contain a user account on a device</li><li>Disable a user account</ul></li>|
+|[Automated investigations](/defender-endpoint/automated-investigations)|<ul></li>Quarantine a file</li><li>Remove a registry key</li><li>Kill a process</li><li>Stop a service</li><li>Disable a driver</li><li>Remove a scheduled task</ul></li>|
+|[Manual response actions](/defender-endpoint/respond-machine-alerts)|<ul></li>Run antivirus scan</li><li>Isolate a device</li><li>Add an indicator to block or allow a file</ul></li>|
+|[Live response](/defender-endpoint/live-response)|<ul></li>Collect forensic data</li><li>Analyze a file</li><li>Run a script</li><li>Send a suspicious entity to Microsoft for analysis</li><li>Remediate a file</li><li>Proactively hunt for threats</ul></li>|
 
 ## Next steps