@@ -1,6 +1,6 @@ --- layout: Conceptual-title: Review remediation actions in Microsoft Defender for Business - Microsoft Defender for Business | Microsoft Learn+title: Review Remediation Actions in Microsoft Defender for Business - Microsoft Defender for Business | Microsoft Learn canonicalUrl: https://learn.microsoft.com/en-us/defender-business/mdb-review-remediation-actions breadcrumb_path: /defender-business/breadcrumb/toc.json feedback_system: Standard@@ -45,24 +45,24 @@ spProducts: platformId: 4b237734-b5c2-1ec5-b6c9-2bb3446ba484 --- -# Review remediation actions in Microsoft Defender for Business - Microsoft Defender for Business | Microsoft Learn+# Review Remediation Actions in Microsoft Defender for Business - Microsoft Defender for Business | Microsoft Learn -As threats are detected, remediation actions come into play. Depending on the particular threat and how your security settings are configured, remediation actions might be taken automatically or only upon approval. Examples of remediation actions include stopping a process from running or removing a scheduled task.
+As the system detects threats, remediation actions address them. Depending on the particular threat and your security settings, the system might take remediation actions automatically or wait for your approval. Examples of remediation actions include stopping a process from running or removing a scheduled task.
 
-All remediation actions are tracked in the Action Center.
+The Action Center tracks all remediation actions.
 
 [![Screenshot of the location of the Action Center in the Microsoft Defender portal.](media/mdb-actioncenter.png)](media/mdb-actioncenter.png#lightbox)
 
-This article describes how to use the Action Center to review pending and completed remediation actions in Defender for Business.
+Use the Action Center to review pending and completed remediation actions in Microsoft Defender for Business.
 
 ## How to use the Action Center
 
 Use the following steps to open and review the Action Center.
 
-1. In the Defender portal at https://security.microsoft.com, go to **Actions & submissions** > **Action Center**. Or, to go directly to the **Action Center** page, use https://security.microsoft.com/action-center.
+1. In the [Defender portal](https://security.microsoft.com), go to **Actions & submissions** > **Action Center**. Or, go directly to the **Action Center**[page](https://security.microsoft.com/action-center).
 2. On the **Action Center** page, use the available tabs:
 
-    - **Pending**: View and approve (or reject) any pending actions. Actions on the **Pending** tab can arise from anti-virus protection, anti-malware protection, automated investigations, manual response activities, or live response sessions.
+    - **Pending**: View and approve or reject any pending actions. Actions on the **Pending** tab can arise from virus protection, malware protection, automated investigations, manual response activities, or live response sessions.
     - **History**: View completed actions.
 
 ## Remediation actions
@@ -73,7 +73,12 @@ The following table lists remediation actions that are available. 
 | Source | Actions |
 | --- | --- |
-| [Automatic attack disruption](mdb-attack-disruption) | Contain a device- Contain a user account on a device<br>- Disable a user account |
-| [Automated investigations](/en-us/defender-endpoint/automated-investigations) | Quarantine a file- Remove a registry key<br>- Kill a process<br>- Stop a service<br>- Disable a driver<br>- Remove a scheduled task |
-| [Manual response actions](/en-us/defender-endpoint/respond-machine-alerts) | Run antivirus scan- Isolate a device<br>- Add an indicator to block or allow a file |
-| [Live response](/en-us/defender-endpoint/live-response) | Collect forensic data- Analyze a file<br>- Run a script<br>- Send a suspicious entity to Microsoft for analysis<br>- Remediate a file<br>- Proactively hunt for threats |\ No newline at end of file+| [Automatic attack disruption](mdb-attack-disruption) | - Contain a device<br>- Contain a user account on a device<br>- Disable a user account |
+| [Automated investigations](/en-us/defender-endpoint/automated-investigations) | - Quarantine a file<br>- Remove a registry key<br>- Kill a process<br>- Stop a service<br>- Disable a driver<br>- Remove a scheduled task |
+| [Manual response actions](/en-us/defender-endpoint/respond-machine-alerts) | - Run antivirus scan<br>- Isolate a device<br>- Add an indicator to block or allow a file |
+| [Live response](/en-us/defender-endpoint/live-response) | - Collect forensic data<br>- Analyze a file<br>- Run a script<br>- Send a suspicious entity to Microsoft for analysis<br>- Remediate a file<br>- Proactively hunt for threats |
+
+## Related concepts
+
+- [Respond to and mitigate threats in Defender for Business](mdb-respond-mitigate-threats)
+- [Manage devices in Defender for Business](mdb-manage-devices)\ No newline at end of file