Merge pull request #51073 from riswinto/patch-3

Update insider-risk-cases.md

Author: prmerger-automator[bot]

learn-pr/wwl-sci/purview-insider-risk-investigate-alerts/includes/insider-risk-cases.md

@@ -13,7 +13,11 @@ Creating a case is recommended when an alert involves serious risk, multiple inc
 
 ## Create and manage cases
 
-Cases are created from alerts when an incident needs further review or response. Once created, cases can be updated with new alerts and managed through their lifecycle. You can:
+Cases are created from alerts when an incident needs further review or response. Once created, cases can be updated with new alerts and managed throughout their lifecycle.
+
+:::image type="content" source="../media/insider-risk-create-case.png" alt-text="Screenshot showing how to create a case in Insider Risk Management." lightbox="../media/insider-risk-create-case.png":::
+
+You can:
 
 - Assign or reassign ownership
 - Send an email notice to the user
@@ -24,8 +28,6 @@ Cases are created from alerts when an incident needs further review or response.
 
 You can assign a case to any user with one of these roles: **Insider Risk Management**, **Analyst**, or **Investigator**.
 
-:::image type="content" source="../media/insider-risk-case-details.png" alt-text="Screenshot showing how to create a case in Insider Risk Management." lightbox="../media/insider-risk-case-details.png":::
-
 ## Use the Cases dashboard
 
 The Cases dashboard lists each case and includes key details: