Patch 538

en/azure/securitycenter/admin-security-alerts-enabled.md

@@ -16,13 +16,12 @@
 
 ## Detailed Remediation Steps
 
-1. Log into the Microsoft Azure Management Console.
-2. Select the "Search resources, services, and docs" option at the top and search for Security Center. </br> <img src="/resources/azure/securitycenter/admin-security-alerts-enabled/step2.png"/>
-3. On the "Security Center" page scroll down the left navigation panel and choose "Pricing and Settings."</br> <img src="/resources/azure/securitycenter/admin-security-alerts-enabled/step3.png"/>
-4. On the "Security Center - Pricing & settings" page, select the "Subscription" by clicking on the "Name."</br> <img src="/resources/azure/securitycenter/admin-security-alerts-enabled/step4.png"/>
-5. Under the "Settings - Pricing tier", click on the "Email Notifications" options and if the "Email notification settings" are turned off then the security alerts are not configured to be sent to admins.</br> <img src="/resources/azure/securitycenter/admin-security-alerts-enabled/step5.png"/>
-6. Repeat steps number 2 - 5 to verify other Azure accounts for "Admin Security Alerts."</br>
-7. Navigate to Security center, choose "Pricing and Settings", select the "Subscription" by clicking on the "Name" and click on the "Email Notifications" options.</br> <img src="/resources/azure/securitycenter/admin-security-alerts-enabled/step7.png"/>
-8. On the "Settings - Email notifications" page, enter the "Email address" and if there are more than 1 "Email address" then separate the email addresses by "comma."</br> <img src="/resources/azure/securitycenter/admin-security-alerts-enabled/step8.png"/>
-9. On the "Email notification settings" click on "ON" option next to "Send email notification for high severity alerts."Click on the Save button to make the changes.</br> <img src="/resources/azure/securitycenter/admin-security-alerts-enabled/step9.png"/>
-10. Repeat steps number 7 - 9 to ensure that security alerts are configured to be sent to subscription owners.</br>
+1. Log in to the Microsoft Azure Management Console.
+2. Select the "Search resources, services, and docs" option at the top and search for "Microsoft Defender for Cloud". </br> <img src="/resources/azure/securitycenter/admin-security-alerts-enabled/step2.png"/>
+3. On the "Microsoft Defender for Cloud" page scroll down the left navigation panel and choose "Environment Settings".</br> <img src="/resources/azure/securitycenter/admin-security-alerts-enabled/step3.png"/>
+4. On the "Environment Settings" page, select the "Subscription" by clicking on the "Name".</br> <img src="/resources/azure/securitycenter/admin-security-alerts-enabled/step4.png"/>
+5. Under the "Settings | Defender plans " page, click on the "Email Notifications"</br> <img src="/resources/azure/securitycenter/admin-security-alerts-enabled/step5.png"/>
+6. On the "Settings | Email notifications" page under "Email recipients" if the "Additional email addresses (separated by commas)" is empty and only "owner" is selected in "All users with the following roles" then the security alerts are not configured to be sent to admins.</br> <img src="/resources/azure/securitycenter/admin-security-alerts-enabled/step6.png"/>
+7. Under "Email recipients", click the dropdown for "All users with the following roles" and check mark "AccountAdmin and Service"Admin" along with owner and enter one or more than one "Email addressess" separated by "comma in section "Additional email addresses (separated by commas)".</br> <img src="/resources/azure/securitycenter/admin-security-alerts-enabled/step7.png"/>
+8. Under "Notification types" select "High" from the dropdown next to "Notify about alerts with the following severity (or higher). Click on the "Save" button to make the changes.</br> <img src="/resources/azure/securitycenter/admin-security-alerts-enabled/step8.png"/>
+9. Repeat step number 3 - 8 to ensure that security alerts are configured to be sent to subscription owners.</br>