Merge pull request #356 from MicrosoftDocs/v-smandalika-8957404

DefenderDocs - v-smandalika - 8957404 - added lightbox syntaxes to images and made updates to notes

Author: American-Dipper

defender-office-365/safe-links-about.md

@@ -61,7 +61,7 @@ Safe Links protection by Safe Links policies is available in the following locat
   >
   > Safe Links supports only HTTP(S) and FTP formats.
   >
-  > Although Safe Links no longer wraps URLs pointing to SharePoint sites, SharePoint URLs are still processed by Safe Links. This change improves the performance of loading SharePoint URLs without degrading protection.
+  > Safe Links no longer wraps URLs pointing to SharePoint sites. SharePoint URLs are still processed by the Safe Links service. This change doesn't cause a degradation in the protection a tenant receives. It's intended to improve the performance of loading SharePoint URLs.
   >
   > Using another service to wrap links before Defender for Office 365 might prevent Safe Links from process links, including wrapping, detonating, or otherwise validating the "maliciousness" of the link.
 

defender-xdr/custom-detection-rules.md

@@ -149,6 +149,7 @@ You can run a query continuously as long as:
 - The query references one table only.
 - The query uses an operator from the list of supported KQL operators. **[Supported KQL features](/azure/azure-monitor/essentials/data-collection-transformations-structure#supported-kql-features)**
 - The query doesn't use joins, unions, or the `externaldata` operator.
+- The query doesn't include any comments line/information.
 
 ###### Tables that support Continuous (NRT) frequency
 

defender-xdr/microsoft-365-security-center-mdo.md

@@ -63,11 +63,11 @@ The left navigation, or quick launch bar, will look familiar. However, there are
 
 With the unified Microsoft Defender XDR solution, you can stitch together the threat signals and determine the full scope and impact of the threat, and how it's currently impacting the organization.
 
-![The The Microsoft Defender portal converged experience.](/defender/media/mdo-m36d-nav-collapsed.png)
+:::image type="content" source="/defender/media/mdo-m36d-nav-collapsed.png" alt-text="A screenshot of the left navigation pane of the M365 Defender portal." lightbox="/defender/media/mdo-m36d-nav-collapsed.png":::
 
 Defender for Office 365 safeguards your organization against malicious threats posed by email messages, links (URLs), and collaboration tools.
 
-![The Defender for Office 365 portal.](/defender/media/mdo-m365d-nav.png)
+:::image type="content" source="/defender/media/mdo-m365d-nav.png" alt-text="A screenshot that shows the Defender for Office 365 navigation pane options." lightbox="/defender/media/mdo-m365d-nav.png":::
 
 ### Incidents and alerts
 
@@ -76,7 +76,7 @@ Brings together incident and alert management across your email, devices, and id
 - [Learn more about Investigations](incidents-overview.md)
 - [Learn more about managing alerts](/windows/security/threat-protection/microsoft-defender-atp/review-alerts)
 
-![Alerts and Actions quick launch bar in the Microsoft Defender portal.](/defender/media/m365d-incident-nav.png)
+:::image type="content" source="/defender/media/m365d-incident-nav.png" alt-text="A screenshot that shows the M365 Defender portal navigation pane emphasizing Incidents & alerts as well as Hunting capabilities." lightbox="/defender/media/m365d-incident-nav.png":::
 
 ### Hunting
 
@@ -108,7 +108,7 @@ Learn more about how to [track and respond to emerging threats with threat analy
 
 Track and investigate threats to your users' email, track campaigns, and more. If you've used the Security & Compliance Center, this will be familiar.
 
-![The quick launch menu for Email & collab, on the left navigation pane in the Microsoft Defender portal.](/defender/media/mdo-m365d-nav.png)
+:::image type="content" source="/defender/media/mdo-m365d-nav.png" alt-text="A screenshot that shows the left navigation pane of the M365 Defender portal focused on Email & collaboration." lightbox="/defender/media/mdo-m365d-nav.png":::
 
 #### Email entity page
 
@@ -118,7 +118,7 @@ The [Email entity page](/defender-office-365/mdo-email-entity-page) *unifies* em
 
 View reports, change your settings, and modify user roles.
 
-![The quick launch menu for The Microsoft Defender portal permissions and reporting, on the left navigation pane in the Microsoft Defender portal.](/defender/media/m365d-settings-nav.png)
+:::image type="content" source="/defender/media/m365d-settings-nav.png" alt-text="A screenshot that shows the left navigation pane of the M365 Defender portal highlighting Access and Reports capabilities." lightbox="/defender/media/m365d-settings-nav.png":::
 
 > [!NOTE]
 > For Defender for Office 365 users, you can now *manage and rotate* DKIM keys in The Microsoft Defender portal at <https://security.microsoft.com/authentication?viewid=DKIM>.