fix blocking issues

Author: ceperezb

learn-pr/wwl-sci/security-copilot-exercises/includes/2-first-run-experience.md

@@ -3,7 +3,9 @@ The organization you work for wants to increase the efficiency and capabilities
 In this exercise, you go through the first run experience of Security Copilot to provision Copilot with one security compute unit (SCU).
 
 > [!NOTE]
->The environment for this exercise is a simulation generated from the product. As a limited simulation, links on a page may not be enabled and text-based inputs that fall outside of the specified script may not be supported. A pop-up message displays stating, "This feature is not available within the simulation." When this occurs, select OK and continue the exercise steps. 
+>The environment for this exercise is a simulation generated from the product. As a limited simulation, links on a page may not be enabled and text-based inputs that fall outside of the specified script may not be supported. A pop-up message displays stating, "This feature is not available within the simulation." When this occurs, select OK and continue the exercise steps.
+>
+>
 >:::image type="content" source="../media/simulation-pop-up-error.png" alt-text="Screenshot of pop-up screen indicating that this feature isn't available within the simulation.":::
 
 ### Exercise

learn-pr/wwl-sci/security-copilot-exercises/includes/3-explore-standalone-experience.md

@@ -6,6 +6,8 @@ In this exercise, you explore all the key landmarks in the landing page of the s
 
 > [!NOTE]
 > The environment for this exercise is a simulation generated from the product. As a limited simulation, links on a page may not be enabled and text-based inputs that fall outside of the specified script may not be supported. A pop-up message displays stating, "This feature isn't available within the simulation." When this occurs, select OK and continue the exercise steps. 
+>
+>
 >:::image type="content" source="../media/simulation-pop-up-error.png" alt-text="Screenshot of pop-up screen indicating that this feature is not available within the simulation.":::
 
 
@@ -58,7 +60,7 @@ In this task, you start your exploration in the home menu.
 1. Select **Plugin settings**
 
     1. For plugins for Security Copilot, select the drop-down for Who can add and manage their own custom plugins to view the available options. Select each available option to see how it impacts the option below.
-    1. Select drop-down for Who can add and manage custom plugins for users of this workspace to view the available options. Note, this option is greyed out if Who can add and manage their own custom plugins is set to owners only.
+    1. Select drop-down for Who can add and manage custom plugins for users of this workspace to view the available options. Note, this option is grayed out if Who can add and manage their own custom plugins is set to owners only.
     1. Manage plugin availability and restrict access:
         1. Review the description. Selecting the toggle opens a new window, review the description and enable the toggle. All plugins are restricted to owners only. You can manually change this for each plugin. 
         1. Disable the toggle to remove the restriction.

learn-pr/wwl-sci/security-copilot-exercises/includes/3a-explore-workspaces.md

@@ -4,6 +4,8 @@ As a security administrator for your organization, you have permission to create
 
 > [!NOTE]
 > The environment for this exercise is a simulation generated from the product. As a limited simulation, links on a page may not be enabled and text-based inputs that fall outside of the specified script may not be supported. A pop-up message displays stating, "This feature is not available within the simulation." When this occurs, select OK and continue the exercise steps. 
+>
+>
 >:::image type="content" source="../media/simulation-pop-up-error.png" alt-text="Screenshot of pop-up screen indicating that this feature isn't available within the simulation.":::
 
 

learn-pr/wwl-sci/security-copilot-exercises/includes/4-configure-plugin.md

@@ -2,6 +2,8 @@ In this exercise, you configure the Microsoft Sentinel plugin and run some test
 
 > [!NOTE]
 > The environment for this exercise is a simulation generated from the product. As a limited simulation, links on a page may not be enabled and text-based inputs that fall outside of the specified script may not be supported. A pop-up message displays stating, "This feature is not available within the simulation." When this occurs, select OK and continue the exercise steps.  
+>
+>
 >:::image type="content" source="../media/simulation-pop-up-error.png" alt-text="Screenshot of pop-up screen indicating that this feature isn't available within the simulation.":::
 
 

learn-pr/wwl-sci/security-copilot-exercises/includes/5-enable-custom-plugin.md

@@ -4,6 +4,8 @@ The creation of the YAML or JSON plugin manifest file, which describes metadata
 
 > [!NOTE]
 > The environment for this exercise is a simulation generated from the product. As a limited simulation, links on a page may not be enabled and text-based inputs that fall outside of the specified script may not be supported. A pop-up message displays stating, "This feature is not available within the simulation." When this occurs, select OK and continue the exercise steps.  
+>
+>
 >:::image type="content" source="../media/simulation-pop-up-error.png" alt-text="Screenshot of pop-up screen indicating that this feature isn't available within the simulation.":::
 
 ### Exercise

learn-pr/wwl-sci/security-copilot-exercises/includes/6-explore-knowledge-base-file-upload.md

@@ -2,6 +2,8 @@ In this exercise, you go through the process of integrating a knowledge base int
 
 > [!NOTE]
 > The environment for this exercise is a simulation generated from the product. As a limited simulation, links on a page may not be enabled and text-based inputs that fall outside of the specified script may not be supported. A pop-up message displays stating, "This feature is not available within the simulation." When this occurs, select OK and continue the exercise steps.  
+>
+>
 >:::image type="content" source="../media/simulation-pop-up-error.png" alt-text="Screenshot of pop-up screen indicating that this feature isn't available within the simulation.":::
 
 ### Exercise

learn-pr/wwl-sci/security-copilot-exercises/includes/7-create-custom-promptbook.md

@@ -2,6 +2,8 @@ In this exercise, you create a custom promptbook from an existing session and th
 
 > [!NOTE]
 > The environment for this exercise is a simulation generated from the product. As a limited simulation, links on a page may not be enabled and text-based inputs that fall outside of the specified script may not be supported. A pop-up message displays stating, "This feature is not available within the simulation." When this occurs, select OK and continue the exercise steps.  
+>
+>
 >:::image type="content" source="../media/simulation-pop-up-error.png" alt-text="Screenshot of pop-up screen indicating that this feature isn't available within the simulation.":::
 
 

learn-pr/wwl-sci/security-copilot-exercises/includes/8-explore-embedded-defender-xdr.md

@@ -2,6 +2,8 @@ In this exercise, you investigate an incident in Microsoft Defender XDR. As part
 
 > [!NOTE]
 > The environment for this exercise is a simulation generated from the product. As a limited simulation, links on a page may not be enabled and text-based inputs that fall outside of the specified script may not be supported. A pop-up message displays stating, "This feature is not available within the simulation." When this occurs, select OK and continue the exercise steps.  
+>
+>
 >:::image type="content" source="../media/simulation-pop-up-error.png" alt-text="Screenshot of pop-up screen indicating that this feature isn't available within the simulation.":::
 
 
@@ -109,17 +111,17 @@ Copilot chooses Natural language to KQL for advanced hunting.
 
 1. Copilot generates a KQL query and a response:
 
-- **Read through the Explanation of the Kusto Query.**
+    1. Read through the Explanation of the Kusto Query.
 
-- **Review the Breakdown of the Kusto Query.** This is very helpful if you’re just getting started with KQL.
+    1. Review the Breakdown of the Kusto Query. This is very helpful if you’re just getting started with KQL.
 
 1. Copy the KQL query Copilot generated and return to the Defender XDR portal.
-*Note:* Copying the query into Notepad or another editor first can reduce formatting problems.
+***It's recommended that you copy the query into Notepad or another editor first to reduce formatting problems***.
 
 1. Defender XDR should still have the Investigations & response section open. Select **Hunting** and then **Advanced hunting** from the navigation menu.
 
 1. In Advanced hunting, select the **New query +** to open a new window and paste the KQL query generated by Copilot into the form.
-*Note:* You may need to make some edits to the query if there are errors. You may also need to adjust the time range if no results are found.
+***It's recommended that you copy the query into Notepad or another editor first to reduce formatting problems***.
 
 1. After running the KQL query, you can return to Copilot to refine the query or select the Copilot icon on the Advanced hunting query page to fine-tune hunting queries.
 

learn-pr/wwl-sci/security-copilot-exercises/includes/9-explore-embedded-purview.md

@@ -4,6 +4,8 @@ In this exercise, you explore the Copilot summarization capabilities available i
 
 > [!NOTE]
 > The environment for this exercise is a simulation generated from the product. As a limited simulation, links on a page might not be enabled and text-based inputs that fall outside of the specified script might not be supported. A pop-up message displays stating, "This feature is not available within the simulation." When this message occurs, select OK and continue the exercise steps.  
+>
+>
 >:::image type="content" source="../media/simulation-pop-up-error.png" alt-text="Screenshot of pop-up screen indicating that this feature isn't available within the simulation.":::
 
 ### Exercise

learn-pr/wwl-sci/security-copilot-exercises/includes/9a-explore-embedded-entra.md

@@ -2,6 +2,8 @@ In this exercise, you explore multiple, real world scenarios that highlight the
 
 > [!NOTE]
 > The environment for this exercise is a simulation generated from the product. As a limited simulation, links on a page may not be enabled and text-based inputs that fall outside of the specified script may not be supported. A pop-up message displays stating, "This feature is not available within the simulation." When this occurs, select OK and continue the exercise steps.  
+>
+>
 >:::image type="content" source="../media/simulation-pop-up-error.png" alt-text="Screenshot of pop-up screen indicating that this feature isn't available within the simulation.":::
 
 
@@ -14,7 +16,7 @@ This exercise should take approximately **30** minutes to complete.
 > [!NOTE]
 > When a lab instruction calls for opening a link to the simulated environment, it's recommended that you open the link in a new browser window so that you can simultaneously view the instructions and the exercise environment. To do so, select the right mouse key and select the option.
 
-### Task: Research and remediation of risky users with copilot in Microsoft Entra
+#### Task: Research and remediation of risky users with Copilot in Microsoft Entra
 
 You're an identity admin with Woodgrove. You believe there are some users at the company that might be compromised by phishing attacks. You want to use Copilot in Microsoft Entra to review any risky users. If you find any, you can use Copilot to help you remediate the issue and prevent future occurrences. The primary user you suspect at being compromised is Serena Markunaite.