formatting fixes

Author: natasha-moore-elastic

release-notes/elastic-security/index.md

@@ -154,9 +154,9 @@ To check for security updates, go to [Security announcements for the Elastic sta
 
 ### Features and enhancements [elastic-security-9.0.6-features-enhancements]
 * Improves the reliability of {{elastic-defend}}'s connection to its kernel driver. This should reduce the instances of temporary `DEGRADED` policy statuses at boot due to `connect_kernel` failures.
-* Makes {elastic-defend} malware scan queue operate more efficiently by not blocking scan requests when an oplock for the file being scanned cannot be acquired.
-* To help identify which parts of elastic-endpoint.exe are using a significant amount of CPU, {elastic-defend} on Windows can now include CPU profiling data in diagnostics.  To request CPU profiling data via the command line, see the [Agent command reference](https://www.elastic.co/docs/reference/fleet/agent-command-reference#_options).  To request CPU profiling data via Kibana, check the "Collect additional CPU metrics" box when requesting Agent diagnostics.
-* Enriches {elastic-defend} macOS network connect events with `network.direction`. Possible values are ingress and egress.
+* Improves {{elastic-defend}} malware scan queue efficiency by not blocking scan requests when an oplock for the file being scanned cannot be acquired.
+* To help identify which parts of `elastic-endpoint.exe` are using a significant amount of CPU, {{elastic-defend}} on Windows can now include CPU profiling data in diagnostics. To request CPU profiling data using the command line, refer to [{{agent}} command reference](/reference/fleet/agent-command-reference.md#_options). To request CPU profiling data using {{kib}}, check the **Collect additional CPU metrics** box when requesting {{agent}} diagnostics.
+* Enriches {{elastic-defend}} macOS network connect events with `network.direction`. Possible values are `ingress` and `egress`.
 
 ### Fixes [elastic-security-9.0.6-fixes]
 * Prevents the {{esql}} form from locking in read-only mode in the rule upgrade flyout [#231699]({{kib-pull}}231699).