resovle conflicts

Author: ceperezb

learn-pr/wwl-sci/security-copilot-exercises/includes/8-explore-embedded-defender-xdr.md

@@ -3,7 +3,6 @@ In this exercise, you investigate an incident in Microsoft Defender XDR. As part
 > [!NOTE]
 > The environment for this exercise is a simulation generated from the product. As a limited simulation, links on a page may not be enabled and text-based inputs that fall outside of the specified script may not be supported. A pop-up message displays stating, "This feature is not available within the simulation." When this occurs, select OK and continue the exercise steps.  
 >
->
 >:::image type="content" source="../media/simulation-pop-up-error.png" alt-text="Screenshot of pop-up screen indicating that this feature isn't available within the simulation.":::
 
 
@@ -14,7 +13,7 @@ For this exercise, you're logged in as Avery Howard and have the Copilot owner r
 This exercise should take approximately **30** minutes to complete.
 
 > [!NOTE]
-> When a lab instruction calls for opening a link to the simulated environment, it's recommended that you open the link in a new browser window so that you can simultaneously view the instructions and the exercise environment. To do so, select the right mouse key and select the option.
+> When a lab instruction calls for opening a link to the simulated environment, we recommended that you open the link in a new browser window so that you can simultaneously view the instructions and the exercise environment. To do so, select the right mouse key and select the option.
 
 #### Task: Explore Incident summary and guided responses
 
@@ -44,7 +43,7 @@ This exercise should take approximately **30** minutes to complete.
 
 1. There's much information on the page, so to get a better view of this alert, select **Open alert page**. It's on the third panel on the alert page, next to the incident graph and below the alert title.
 
-1. On the top of the page, is card for the device **parkcity-win10v**. Select the ellipses and note the options. Select **Summarize**. Copilot generates a **Device summary**. It's worth nothing that there are many ways you can access device summary and this way is just one convenient method. The summary shows the device is a VM, identifies the owner of the device, it shows its compliance status against Intune policies, and more.
+1. On the top of the page, is card for the device parkcity-win10v. Select the ellipses and note the options. Select **Summarize**. Copilot generates a **Device summary**. It's worth nothing that there are many ways you can access device summary and this way is just one convenient method. The summary shows the device is a VM, identifies the owner of the device, it shows its compliance status against Intune policies, and more.
 
 1. Next to the device card is a card for the owner of the device. Select **parkcity\jonaw**. The third panel on the page updates from showing details of the alert to providing information about the user. In this case, *Jonathan Wolcott*, an account executive, whose Insider risk severity is classified as *High*. These details aren't surprising given what you learned from the Copilot incident and alert summaries. Select **Summarize** to obtain an identity summary generated by Copilot.
 
@@ -88,7 +87,6 @@ This task is complex and requires the involvement of more senior analysts. In th
 1. Select the ellipses next to Copilot's Incident summary and select **Open in Security Copilot**.
 
 1. Copilot opens in the standalone experience and shows the incident summary. You can also run more prompts. In this case, you run the promptbook for an incident. Select the **prompt icon** ![prompt icon](../media/prompt-icon.png).
-    <!--- 1. Select **See all promptbooks**. Not functional in the simulation -->
     1. Select the **Microsoft 365 Defender incident investigation** promptbook.
     1. The promptbook page opens and asks for the Defender Incident ID. Enter **185856**, then select the **Submit** button.
     1. Review the information provided. When you pivot to the standalone experience and run the promptbook, the investigation is able to invoke capabilities from a broader set security solution, beyond just Defender XDR, based on the plugins enabled.