Patch 540 (#561)

* Update auto-provisioning-enabled.md

* Update auto-provisioning-enabled.md

* Images updated for all steps

* Update auto-provisioning-enabled.md

* Apply suggestions from code review

Co-authored-by: alphadev4 <[email protected]>

en/azure/securitycenter/auto-provisioning-enabled.md

@@ -16,13 +16,13 @@
 
 ## Detailed Remediation Steps
 
-1. Log into the Microsoft Azure Management Console.
-2. Select the "Search resources, services, and docs" option at the top and search for Security Center. </br> <img src="/resources/azure/securitycenter/auto-provisioning-enabled/step2.png"/>
-3. On the "Security Center" page scroll down the left navigation panel and choose "Pricing and Settings."</br> <img src="/resources/azure/securitycenter/auto-provisioning-enabled/step3.png"/>
-4. On the "Security Center - Pricing & settings" page, select the "Subscription" by clicking on the "Name."</br> <img src="/resources/azure/securitycenter/auto-provisioning-enabled/step4.png"/>
-5. Under the "Settings - Pricing tier", click on the "Data Collection" options and if the "Auto Provisioning" is turned off then the "Automatic provisioning" of the monitoring agent is not enable.</br> <img src="/resources/azure/securitycenter/auto-provisioning-enabled/step5.png"/>
-6. Repeat steps number 2 - 5 to verify other Azure accounts for "Auto Provisioning Enabled."</br>
-7. Navigate to Security center, choose "Pricing and Settings", select the "Subscription" by clicking on the "Name" and click on the "Data Collection" options.</br> <img src="/resources/azure/securitycenter/auto-provisioning-enabled/step7.png"/>
-8. On the "Settings - Data Collection" page, click on the "ON" option next to the "Auto Provisioning."</br> <img src="/resources/azure/securitycenter/auto-provisioning-enabled/step8.png"/>
-9. On the "Settings - Data Collection" page, select the "Workspace configuration" and click on the "All Events" under the "Windows security events". Click on the "Save" button at the top to make the changes.</br> <img src="/resources/azure/securitycenter/auto-provisioning-enabled/step9.png"/>
-10. Repeat steps number 7 - 9 to ensure that the data collection settings of the subscription have Auto Provisioning set to enabled.</br>
+1. Log in to the Microsoft Azure Management Console.
+2. Select the "Search resources, services, and docs" option at the top and search for "Microsoft Defender for Cloud". </br> <img src="/resources/azure/securitycenter/auto-provisioning-enabled/step2.png"/>
+3. On the "Microsoft Defender for Cloud" page scroll down the left navigation panel and choose "Environment Settings".</br> <img src="/resources/azure/securitycenter/auto-provisioning-enabled/step3.png"/>
+4. On the "Environment Settings" page, select the "Subscription" by clicking on its "Name".</br> <img src="/resources/azure/securitycenter/auto-provisioning-enabled/step4.png"/>
+5. Under the "Settings" page, click on "Auto Provisioning" </br> <img src="/resources/azure/securitycenter/auto-provisioning-enabled/step5.png"/>
+6. On the "Settings | Auto provisioning" page, if the "Log Analytics agent for Azure VMs" shows status as turned off, then the "Automatic provisioning" of the monitoring agent is not enabled.</br> <img src="/resources/azure/securitycenter/auto-provisioning-enabled/step6.png"/>
+7. On the "Settings | Auto provisioning" page, turn the status "ON" for "Log Analytics agent for Azure VMs" by toggling it.</br> <img src="/resources/azure/securitycenter/auto-provisioning-enabled/step7.png"/>
+8. To the right under "Configuration" click on "Edit configuration". </br> <img src="/resources/azure/securitycenter/auto-provisioning-enabled/step8.png"/>
+9. On the "Extension deployment configuration" page, select the "Workspace configuration" and click on the "All Events" under the "Windows security events". Click on the "Apply" button to make the changes.</br> <img src="/resources/azure/securitycenter/auto-provisioning-enabled/step9.png"/>
+10. Repeat step number 3 - 9 to ensure that the data collection settings of the subscription have Auto Provisioning set to enabled.</br>