Move USX back so staging works + upd TOC + chg ms.service

Author: cwatson-cat

unified-secops-platform/TOC.yml renamed to defender-xdr/unified-secops-platform/TOC.yml

@@ -88,11 +88,7 @@
           href: /defender-xdr/advanced-hunting-shared-queries
     - name: Investigate incidents ## could be incidents, threats, posture findings. Need an overview article for USX. Current overviews (XDR/Sentinel) don't appear to be updated for USX.
       items:
-        - name: Incident response overview
-          href: incident-response-overview.md
-        - name: Incident response planning
-          href: incident-response-planning.md
-        - name: Incident investigation overview
+        - name: Overview
           href: /defender-xdr/investigate-incidents ## Would need update to apply to USX. Per Dianne, this isn't XDR specific.
         - name: Alerts, incidents, and correlation
           href: /defender-xdr/alerts-incidents-correlation
@@ -193,4 +189,12 @@
         - name: Microsoft virus initiative
           href: /defender-xdr/virus-initiative-criteria
         - name: Microsoft security portals
-          href: /defender-xdr/portals
+          href: /defender-xdr/portals
+        - name: Operation guides
+          items:
+            - name: Incident response
+              items:
+              - name: Overview
+                href: incident-response-overview.md
+              - name: Incident response
+                href: incident-response-planning.md

unified-secops-platform/breadcrumb/toc.yml renamed to defender-xdr/unified-secops-platform/breadcrumb/toc.yml

@@ -3,14 +3,14 @@
   topicHref: /defender/index
   items:
   - name: 'Microsoft unified security operations platform'
-    tocHref: /unified-soc-platform/
-    topicHref: /unified-soc-platform/index
+    tocHref: /unified-secops-platform/
+    topicHref: /defender-xdr/unified-secops-platform/index
   - name: 'Microsoft unified security operations platform'
     tocHref: /security/zero-trust/
-    topicHref: /defender-xdr/unified-soc-platform/index
+    topicHref: /defender-xdr/unified-secops-platform/index
   - name: Unified security operations platform
     tocHref: /defender-for-identity/
-    topicHref: /unified-soc-platform/index
+    topicHref: /defender-xdr/unified-secops-platform/index
 
 ## Microsoft Sentinel override
 - name: 'Microsoft Defender'
@@ -19,4 +19,4 @@
   items:
   - name: 'Unified security operations platform'
     tocHref: /azure/sentinel/
-    topicHref: /unified-soc-platform/index
+    topicHref:  /defender-xdr/unified-secops-platform/index

unified-secops-platform/defender-xdr-portal.md renamed to defender-xdr/unified-secops-platform/defender-xdr-portal.md

@@ -2,7 +2,7 @@
 title: Microsoft Defender XDR in the Defender portal 
 description: Learn about Microsoft Defender XDR in the Defender portal
 search.appverid: met150
-ms.service: defender-xdr
+ms.service: unified-secops-platform
 ms.author: cwatson
 author: cwatson-cat
 ms.localizationpriority: medium

unified-secops-platform/incident-response-overview.md renamed to defender-xdr/unified-secops-platform/incident-response-overview.md

@@ -2,11 +2,11 @@
 title: Incident response overview
 description: Get an overview of incident response processes and best practices
 search.appverid: met150
-ms.service: defender-xdr
-ms.author: cwatson
-author: cwatson-cat
+ms.service: unified-secops-platform
+author: yelevin
+ms.author: yelevin
 ms.localizationpriority: medium
-ms.date: 07/16/2024
+ms.date: 10/08/2024
 audience: ITPro
 ms.collection:
 - M365-security-compliance

unified-secops-platform/incident-response-planning.md renamed to defender-xdr/unified-secops-platform/incident-response-planning.md

@@ -2,11 +2,11 @@
 title: Incident response planning
 description: Start planning for incident handling
 search.appverid: met150
-ms.service: defender-xdr
-ms.author: cwatson
-author: cwatson-cat
+ms.service: unified-secops-platform
+author: yelevin
+ms.author: yelevin
 ms.localizationpriority: medium
-ms.date: 07/16/2024
+ms.date: 10/08/2024
 audience: ITPro
 ms.collection:
 - M365-security-compliance

unified-secops-platform/index.yml renamed to defender-xdr/unified-secops-platform/index.yml

@@ -2,7 +2,7 @@
 title: Microsoft Defender portal overview
 description: Learn about the Microsoft Defender portal
 search.appverid: met150
-ms.service: defender-xdr
+ms.service: unified-secops-platform
 ms.author: cwatson
 author: cwatson-cat
 ms.localizationpriority: medium

unified-secops-platform/overview-defender-portal.md renamed to defender-xdr/unified-secops-platform/overview-defender-portal.md

@@ -2,7 +2,7 @@
 title: What is the Microsoft unified security operations platform?
 description: Provides an overview of features and functionality in the Microsoft unified security operations platform
 search.appverid: met150
-ms.service: defender-xdr
+ms.service: unified-secops-platform
 ms.author: cwatson
 author: cwatson-cat
 ms.localizationpriority: medium