fix broken image refs

Author: benironside

docs/serverless/AI-for-security/ai-assistant.asciidoc

@@ -9,7 +9,7 @@ preview:[]
 The Elastic AI Assistant utilizes generative AI to bolster your cybersecurity operations team. It allows users to interact with {elastic-sec} for tasks such as alert investigation, incident response, and query generation or conversion using natural language and much more.
 
 [role="screenshot"]
-image::images/ai-assistant/assistant-basic-view.png[Image of AI Assistant chat window]
+image::images/assistant-basic-view.png[Image of AI Assistant chat window]
 
 [IMPORTANT]
 ====
@@ -128,10 +128,10 @@ To modify Anonymization settings, you need the **Elastic AI Assistant: All** pri
 
 The **Anonymization** tab of the Security AI settings menu allows you to define default data anonymization behavior for events you send to AI Assistant. Fields with **Allowed** toggled on are included in events provided to AI Assistant. **Allowed** fields with **Anonymized** set to **Yes** are included, but with their values obfuscated.
 
-NOTE: You can access anonymization settings directly from the **Attack Discovery** page by clicking the settings (image:images/icon-settings.png[Settings icon,17,17]) button next to the model selection dropdown menu.
+NOTE: You can access anonymization settings directly from the **Attack Discovery** page by clicking the settings (image:images/icons/gear.svg[Settings icon,17,17]) button next to the model selection dropdown menu.
 
 [role="screenshot"]
-image::images/ai-assistant/assistant-anonymization-menu.png[AI Assistant's settings menu, open to the Anonymization tab]
+image::images/assistant-anonymization-menu.png[AI Assistant's settings menu, open to the Anonymization tab]
 
 The **Show anonymized** toggle controls whether you see the obfuscated or plaintext versions of the fields you sent to AI Assistant. It doesn't control what gets obfuscated — that's determined by the anonymization settings. It also doesn't affect how event fields appear _before_ being sent to AI Assistant. Instead, it controls how fields that were already sent and obfuscated appear to you.