Merge branch 'public' into patch-1

Author: denisebmsft

ATPDocs/notifications.md

@@ -19,18 +19,19 @@ This article describes how to configure Defender for Identity notifications so t
 
 ## Configure email notifications
 
-This section describes how to configure email notifications for Defender for Identity health issues or security alerts.
+This section describes how to configure email notifications for Defender for Identity health issues.
 
 1. In [Microsoft Defender XDR](https://security.microsoft.com), select **Settings** > **Identities**. 
 
-1. Under **Notifications**, select **Health issues notifications** or **Alert notifications** as needed.
+1. Under **Notifications**, select **Health issues notifications**.
 
 1. In the **Add recipient email**, enter the email address(es) where you want to receive email notifications, and select **+ Add**.
 
-Whenever Defender for Identity detects a health issue or security alert, configured recipients receive an email notification with the details, with a link to Microsoft Defender XDR for more details.
+Whenever Defender for Identity detects a health issue, configured recipients receive an email notification with the details, with a link to Microsoft Defender XDR for more details.
 
 > [!NOTE]
-> *Alert notifications* page will be deprecated by January 15, 2025. Please use the '[Email Notifications](https://security.microsoft.com/securitysettings/defender/email_notifications)' page under Defender XDR settings for new and existing notifications rules. [Learn more](https://aka.ms/IncidentsNotificationsDefenderXdr)
+> To receive email notifications about Incidents, please use the [Email Notifications](https://security.microsoft.com/securitysettings/defender/email_notifications) page under Defender XDR Settings for new and existing notifications rules. [Learn more](https://aka.ms/IncidentsNotificationsDefenderXdr).
+
 ## Configure Syslog notifications
 
 This section describes how to configure Defender for Identity to send health issues and security events to a Syslog server through a configured sensor. 
@@ -41,13 +42,13 @@ Events aren't sent from the Defender for Identity service to your Syslog server
 
 1. In [Microsoft Defender XDR](https://security.microsoft.com), select **Settings** > **Identities**.
 
-1. Under **Notifications**, select **Syslog notifications** and then toggle on the **Syslog service** option.
+1. Under **Notifications**, select **Syslog notifications**, and then toggle on the **Syslog service** option.
 
 1. Select **Configure service** to open the **Syslog service** pane.
 
 1. Enter the following details:
 
-    - **Sensor**: Select the sensor you want to send notifications to the Syslog server
+    - **Sensor**: Select the sensor you want to send notifications to the Syslog server.
     - **Service endpoint** and **Port**: Enter the IP address or fully qualified domain name (FQDN) for the Syslog server, and then enter the port number. You can configure only one Syslog endpoint.
     - **Transport**: Select the **Transport** protocol (TCP or UDP).
     - **Format**: Select the format (RFC 3164 or RFC 5424).

defender-endpoint/evaluate-mda-using-mde-security-settings-management.md

@@ -12,9 +12,6 @@ ms.collection:
 - m365-security
 - tier2
 ms.topic: conceptual
-ms.custom: 
-- cx-ti
-- cx-ean
 ms.subservice: edr
 search.appverid: met150
 ms.date: 02/12/2025

defender-xdr/access-den-graph-api.md

@@ -14,7 +14,7 @@ ms.collection:
 ms.topic: conceptual
 ms.custom: 
 - cx-ti
-- cx-dex
+- cx-ean
 search.appverid: met150
 ms.date: 10/30/2024
 appliesto:

defender-xdr/communicate-defender-experts-xdr.md

@@ -13,6 +13,9 @@ ms.collection:
   - tier1
   - essentials-manage
 ms.topic: conceptual
+ms.custom: 
+- cx-ti
+- cx-dex
 search.appverid: met150
 ms.date: 03/05/2025
 ---

defender-xdr/defender-experts-report.md

@@ -13,7 +13,7 @@ manager: dansimp
 audience: ITPro
 ms.custom: 
 - cx-ti
-- cx-dex
+- cx-ean
 ms.collection: 
 - m365-security 
 - tier1

defender-xdr/experts-on-demand.md

@@ -11,7 +11,7 @@ ms.author: vpattnaik
 author: vpattnai
 ms.custom: 
 - cx-ti
-- cx-dex
+- cx-ean
 ms.localizationpriority: medium
 manager: dansimp
 audience: ITPro

defender-xdr/managed-detection-and-response-xdr.md

@@ -15,7 +15,7 @@ ms.collection:
 ms.topic: conceptual
 ms.custom: 
 - cx-ti
-- cx-ean
+- cx-dex
 search.appverid: met150
 ms.date: 10/31/2024
 ---