Update insider-risk-cases.md

Author: riswinto

learn-pr/wwl-sci/purview-insider-risk-investigate-alerts/includes/insider-risk-cases.md

@@ -15,15 +15,15 @@ Creating a case is recommended when an alert involves serious risk, multiple inc
 
 Cases are created from alerts when an incident needs further review or response. Once created, cases can be updated with new alerts and managed through their lifecycle. You can:
 
+:::image type="content" source="../media/insider-risk-create-case.png" alt-text="Screenshot showing how to create a case in Insider Risk Management." lightbox="../media/insider-risk-create-case.png":::
+
 - Assign or reassign ownership
 - Send an email notice to the user
 - Escalate to Microsoft Purview eDiscovery (Premium)
 - Run Power Automate flows
 - Create or view a connected Microsoft Teams team
 - Resolve the case with a classification of Benign or Confirmed policy violation
 
-:::image type="content" source="../media/insider-risk-create-case.png" alt-text="Screenshot showing how to create a case in Insider Risk Management." lightbox="../media/insider-risk-create-case.png":::
-
 You can assign a case to any user with one of these roles: **Insider Risk Management**, **Analyst**, or **Investigator**.
 
 ## Use the Cases dashboard