Add incident

Author: schmurky

defender-xdr/investigate-incidents.md

@@ -96,6 +96,8 @@ The resulting logs or alerts can be linked to an incident by selecting a results
 
 :::image type="content" source="/defender/media/investigate-incidents/fig2-gohunt-attackstory.png" alt-text="Highlighting the link to incident option in go hunt query results" lightbox="/defender/media/investigate-incidents/fig2-gohunt-attackstory.png":::
 
+If the incident or related alerts were the result of an analytics rule you've set, you can also select **Run query** to see other related results.
+ 
 ## Summary
 
 Use the **Summary** page to assess the relative importance of the incident and quickly access the associated alerts and impacted entities. The **Summary** page gives you a snapshot glance at the top things to notice about the incident.

defender-xdr/whats-new.md

@@ -32,9 +32,9 @@ You can also get product updates and important notifications through the [messag
 ## September 2024
 - (GA) **Advanced hunting context panes** are now available in more experiences. This allows you to access the advanced hunting feature without leaving your current workflow. 
     - For incidents and alerts generated by analytics rules, you can select **Run query** to explore the results of the related analytics rule. 
-    - For analytics rules, you can [UPDATE]. 
-    - In the [query resources report](advanced-hunting-limits.md#find-resource-heavy-queries), you can also view any of the queries by selecting the three dots on the query row and selecting **Open in query editor**. 
-    - [UPDATE FOR GO HUNT]
+    - In the analytics rule wizard's *Set rule logic* step, you can select **View query results** to verify the results of the query you are about to set. 
+    - In the [query resources report](advanced-hunting-limits.md#find-resource-heavy-queries), you can view any of the queries by selecting the three dots on the query row and selecting **Open in query editor**. 
+    - For device entities involved in incidents or alerts, **Go hunt** is also available as one of the options after selecting the three dots on the device side panel.
 
 ## August 2024