Merge pull request #1225 from MicrosoftDocs/main

Publish main to live, 08/27, 11:00 AM IST

defender-office-365/anti-spoofing-spoof-intelligence.md

@@ -94,7 +94,7 @@ The rest of this article explains how to use the spoof intelligence insight in t
 
 3. On the **Spoofed senders** tab, the spoof intelligence insight looks like this:
 
-   :::image type="content" source="media/m365-sc-spoof-intelligence-insight.png" alt-text="The Spoof intelligence insight on the Anti-phishing policy page" lightbox="media/m365-sc-spoof-intelligence-insight.png":::
+   :::image type="content" source="media/m365-sc-spoof-intelligence-insight.png" alt-text="The Spoof intelligence insight on the Anti-phishing policy page":::
 
    The insight has two modes:
 

defender-office-365/attack-simulation-training-get-started.md

@@ -49,6 +49,7 @@ Watch this short video to learn more about Attack simulation training.
 - For more information about the availability of Attack simulation training across different Microsoft 365 subscriptions, see [Microsoft Defender for Office 365 service description](/office365/servicedescriptions/office-365-advanced-threat-protection-service-description).
 
 - You need to be assigned permissions before you can do the procedures in this article. You have the following options:
+
   - [Microsoft Entra permissions](/entra/identity/role-based-access-control/manage-roles-portal): You need membership in one of the following roles:
     - **Global Administrator**¹
     - **Security Administrator**
@@ -57,8 +58,8 @@ Watch this short video to learn more about Attack simulation training.
 
     > [!IMPORTANT]
     > ¹ Microsoft recommends that you use roles with the fewest permissions. Using lower permissioned accounts helps improve security for your organization. Global Administrator is a highly privileged role that should be limited to emergency scenarios when you can't use an existing role.
-
-    ² Adding users to this role group in [Email & collaboration permissions in the Microsoft Defender portal](mdo-portal-permissions.md) is currently unsupported.
+    >
+    > ² Adding users to this role group in [Email & collaboration permissions in the Microsoft Defender portal](mdo-portal-permissions.md) is currently unsupported.
 
     Currently, [Microsoft Defender XDR Unified role based access control (RBAC)](/defender-xdr/manage-rbac) isn't supported.
 

defender-office-365/attack-simulation-training-insights.md

@@ -71,15 +71,15 @@ Selecting **View all simulations** takes you to the **Simulations** tab.
 
 Selecting **Launch a simulation** starts the new simulation wizard. For more information, see [Simulate a phishing attack in Defender for Office 365](attack-simulation-training-simulations.md).
 
-:::image type="content" source="media/attack-sim-training-overview-recent-simulations-card.png" alt-text="The Recent simulations card on the Overview tab in Attack simulation training in the Microsoft Defender portal." lightbox="media/attack-sim-training-overview-recent-simulations-card.png":::
+:::image type="content" source="media/attack-sim-training-overview-recent-simulations-card.png" alt-text="The Recent simulations card on the Overview tab in Attack simulation training in the Microsoft Defender portal.":::
 
 ### Recommendations card
 
 The **Recommendations** card on the **Overview** tab suggests different types of simulations to run.
 
 Selecting **Launch now** starts the new simulation wizard with the specified simulation type automatically selected on the **Select technique** page. For more information, see [Simulate a phishing attack in Defender for Office 365](attack-simulation-training-simulations.md).
 
-:::image type="content" source="media/attack-sim-training-overview-recommendations-card.png" alt-text="The Recommendations card on the Overview tab in Attack simulation training in the Microsoft Defender portal." lightbox="media/attack-sim-training-overview-recommendations-card.png":::
+:::image type="content" source="media/attack-sim-training-overview-recommendations-card.png" alt-text="The Recommendations card on the Overview tab in Attack simulation training in the Microsoft Defender portal.":::
 
 ### Simulation coverage card
 
@@ -89,7 +89,7 @@ Selecting **View simulation coverage report** takes you to the [User coverage ta
 
 Selecting **Launch simulation for non-simulated users** starts the new simulation wizard where the users who didn't receive the simulation are automatically selected on the **Target user** page. For more information, see [Simulate a phishing attack in Defender for Office 365](attack-simulation-training-simulations.md).
 
-:::image type="content" source="media/attack-sim-training-overview-sim-coverage-card.png" alt-text="The Simulation coverage card on the Overview tab in Attack simulation training in the Microsoft Defender portal." lightbox="media/attack-sim-training-overview-sim-coverage-card.png":::
+:::image type="content" source="media/attack-sim-training-overview-sim-coverage-card.png" alt-text="The Simulation coverage card on the Overview tab in Attack simulation training in the Microsoft Defender portal.":::
 
 ### Training completion card
 
@@ -103,7 +103,7 @@ You can hover over a section in the chart to see the actual number of users in e
 
 Selecting **View training completion report** takes you to the [Training completion tab for the Attack simulation report](#training-completion-tab-for-the-attack-simulation-report).
 
-:::image type="content" source="media/attack-sim-training-overview-training-complete-card.png" alt-text="The Training completion card on the Overview tab in Attack simulation training in the Microsoft Defender portal." lightbox="media/attack-sim-training-overview-training-complete-card.png":::
+:::image type="content" source="media/attack-sim-training-overview-training-complete-card.png" alt-text="The Training completion card on the Overview tab in Attack simulation training in the Microsoft Defender portal.":::
 
 ### Repeat offenders card
 
@@ -120,7 +120,7 @@ The chart organizes repeat offender data by [simulation type](attack-simulation-
 
 Selecting **View repeat offender report** takes you to the [Repeat offenders tab for the Attack simulation report](#repeat-offenders-tab-for-the-attack-simulation-report).
 
-:::image type="content" source="media/attack-sim-training-overview-repeat-offenders-card.png" alt-text="The Repeat offenders card on the Overview tab in Attack simulation training in the Microsoft Defender portal" lightbox="media/attack-sim-training-overview-repeat-offenders-card.png":::
+:::image type="content" source="media/attack-sim-training-overview-repeat-offenders-card.png" alt-text="The Repeat offenders card on the Overview tab in Attack simulation training in the Microsoft Defender portal":::
 
 ### Behavior impact on compromise rate card
 
@@ -135,7 +135,7 @@ If you hover over a data point in the chart, the actual percentage values are sh
 
 To see a detailed report, select **View simulations and training efficacy report**. This report is explained [later in this article](#training-efficacy-tab-for-the-attack-simulation-report).
 
-:::image type="content" source="media/attack-sim-training-overview-behavior-impact-card.png" alt-text="The Behavior impact on compromise rate card on the Overview tab in Attack simulation training in the Microsoft Defender portal." lightbox="media/attack-sim-training-overview-behavior-impact-card.png":::
+:::image type="content" source="media/attack-sim-training-overview-behavior-impact-card.png" alt-text="The Behavior impact on compromise rate card on the Overview tab in Attack simulation training in the Microsoft Defender portal.":::
 
 ## Attack simulation report
 
@@ -250,7 +250,7 @@ The simulation report shows the details of in-progress or completed simulations
 
 - On the **Overview** tab of the **Attack simulation training** page at <https://security.microsoft.com/attacksimulator?viewid=overview>, select a simulation from the [Recent simulations card](#recent-simulations-card).
 
-  :::image type="content" source="media/attack-sim-training-overview-recent-simulations-card.png" alt-text="The Recent simulations card on the Overview tab in Attack simulation training in the Microsoft Defender portal." lightbox="media/attack-sim-training-overview-recent-simulations-card.png":::
+  :::image type="content" source="media/attack-sim-training-overview-recent-simulations-card.png" alt-text="The Recent simulations card on the Overview tab in Attack simulation training in the Microsoft Defender portal.":::
 
 - On the **Simulations** tab of the **Attack simulation training** page at <https://security.microsoft.com/attacksimulator?viewid=simulations>, select a simulation by clicking anywhere in the row other than the check box next to the name. For more information, see [View simulation reports](attack-simulation-training-simulations.md#view-simulation-reports).
 
@@ -305,7 +305,7 @@ Select **View compromised users** to go to the [Users tab](attack-simulation-tra
 
 Select **View users who reported** to go to the [Users tab](attack-simulation-training-simulations.md#users-tab) tab in the report where the results are filtered by **Reported message: Yes**.
 
-:::image type="content" source="media/attack-sim-report-simulation-report-tab-simulation-impact.png" alt-text="The Simulation impact section on the Report tab of a simulation report for a simulation." lightbox="media/attack-sim-report-simulation-report-tab-simulation-impact.png":::
+:::image type="content" source="media/attack-sim-report-simulation-report-tab-simulation-impact.png" alt-text="The Simulation impact section on the Report tab of a simulation report for a simulation.":::
 
 #### All user activity section in the report for simulations
 
@@ -321,7 +321,7 @@ The **All user activity** section on **Report** tab** for a simulation shows num
 
 Select **View all users** to go to the [Users tab](attack-simulation-training-simulations.md#users-tab) tab in the report where the results are unfiltered.
 
-:::image type="content" source="media/attack-sim-report-simulation-report-tab-all-user-activity.png" alt-text="The All users activity section on the Report tab of a simulation report for a simulation." lightbox="media/attack-sim-report-simulation-report-tab-all-user-activity.png":::
+:::image type="content" source="media/attack-sim-report-simulation-report-tab-all-user-activity.png" alt-text="The All users activity section on the Report tab of a simulation report for a simulation.":::
 
 #### Delivery status section in the report for simulations
 
@@ -335,15 +335,15 @@ Select **View users to whom message delivery failed** to go to the [Users tab](a
 
 Select **View excluded users or groups** to open an **Excluded users or groups** flyout that shows the users or groups that were excluded from the simulation.
 
-:::image type="content" source="media/attack-sim-report-simulation-report-tab-delivery-status.png" alt-text="The Delivery status section on the Report tab of a simulation report for a simulation." lightbox="media/attack-sim-report-simulation-report-tab-delivery-status.png":::
+:::image type="content" source="media/attack-sim-report-simulation-report-tab-delivery-status.png" alt-text="The Delivery status section on the Report tab of a simulation report for a simulation.":::
 
 #### Training completion section in the report for simulations
 
 The **Training completion** section on the simulation details page shows the trainings that are required for the simulation, and how many users completed the trainings.
 
 If no trainings were included in the simulation, the only value in this section is **Trainings were not part of this simulation**.
 
-:::image type="content" source="media/attack-sim-report-simulation-report-tab-training-completion.png" alt-text="The Training completion section on the Report tab of a simulation report for a simulation." lightbox="media/attack-sim-report-simulation-report-tab-training-completion.png":::
+:::image type="content" source="media/attack-sim-report-simulation-report-tab-training-completion.png" alt-text="The Training completion section on the Report tab of a simulation report for a simulation.":::
 
 #### First & average instance section in the report for simulations
 
@@ -354,13 +354,13 @@ The **First & average instance** section on **Report** tab** for a simulation sh
 - **First credential entered**
 - **Avg. credential entered**
 
-:::image type="content" source="media/attack-sim-report-simulation-report-tab-first-and-average-instances.png" alt-text="The First & average instance section on the Report tab of a simulation report for a simulation." lightbox="media/attack-sim-report-simulation-report-tab-first-and-average-instances.png":::
+:::image type="content" source="media/attack-sim-report-simulation-report-tab-first-and-average-instances.png" alt-text="The First & average instance section on the Report tab of a simulation report for a simulation.":::
 
 #### Recommendations section in the report for simulations
 
 The **Recommendations** section on **Report** tab** for a simulation shows recommendations for using Attack simulation training to help secure your organization.
 
-:::image type="content" source="media/attack-sim-report-simulation-report-tab-recommendations.png" alt-text="The Recommendations section on the Report tab of a simulation report for a simulation." lightbox="media/attack-sim-report-simulation-report-tab-recommendations.png":::
+:::image type="content" source="media/attack-sim-report-simulation-report-tab-recommendations.png" alt-text="The Recommendations section on the Report tab of a simulation report for a simulation.":::
 
 ### Simulation report for Training campaigns
 
@@ -372,7 +372,7 @@ This section describes the information in the simulation report for Training cam
 
 The **Training completion classification** section on **Report** tab** for a Training campaign shows information about the completed Training modules in the Training campaign.
 
-:::image type="content" source="media/attack-sim-report-training-campaign-report-tab-training-completion-classification.png" alt-text="The Training completion classification section on the Report tab in the Training campaign report in Attack simulation training." lightbox="media/attack-sim-report-training-campaign-report-tab-training-completion-classification.png":::
+:::image type="content" source="media/attack-sim-report-training-campaign-report-tab-training-completion-classification.png" alt-text="The Training completion classification section on the Report tab in the Training campaign report in Attack simulation training.":::
 
 #### Training completion summary section in the report for Training campaigns
 
@@ -386,15 +386,15 @@ The **Training completion summary** section on **Report** tab** for a Training c
 
 You can hover over a section in the chart to see the actual percentage in each category.
 
-:::image type="content" source="media/attack-sim-report-training-campaign-report-tab-training-completion-summary.png" alt-text="The Training completion summary section on the Report tab in the Training campaign report in Attack simulation training." lightbox="media/attack-sim-report-training-campaign-report-tab-training-completion-summary.png":::
+:::image type="content" source="media/attack-sim-report-training-campaign-report-tab-training-completion-summary.png" alt-text="The Training completion summary section on the Report tab in the Training campaign report in Attack simulation training.":::
 
 #### All user activity section in the report for Training campaigns
 
 The **All user activity** section on **Report** tab** for a Training campaign uses a bar graph to shows how main people **Successfully received training notification** (number of users / total number of users).
 
 You can hover over a section in the chart to see the actual numbers in each category.
 
-:::image type="content" source="media/attack-sim-report-training-campaign-report-tab-all-user-activity.png" alt-text="The All user activity section on the Report tab in the Training campaign report in Attack simulation training." lightbox="media/attack-sim-report-training-campaign-report-tab-all-user-activity.png":::
+:::image type="content" source="media/attack-sim-report-training-campaign-report-tab-all-user-activity.png" alt-text="The All user activity section on the Report tab in the Training campaign report in Attack simulation training.":::
 
 ## Appendix