Edits

Author: Brenduns

memdocs/intune/protect/atp-manage-vulnerabilities.md

@@ -2,12 +2,12 @@
 # required metadata
 
 title: Use Intune to remediate vulnerabilities found by Microsoft Defender for Endpoint
-description: See how to manage security tasks from  and Threat & vulnerability Management, part of Microsoft Defender for Endpoint from within the Intune console.
+description: See how to manage security tasks from and Threat & vulnerability Management, part of Microsoft Defender for Endpoint from within the Intune console.
 keywords:
 author: brenduns 
 ms.author: brenduns
 manager: dougeby
-ms.date: 05/01/2021
+ms.date: 11/30/2021
 ms.topic: how-to
 ms.service: microsoft-intune
 ms.subservice: protect
@@ -40,7 +40,7 @@ After you connect Intune to Microsoft Defender for Endpoint, Defender for Endpoi
 - Vulnerabilities that are discovered are not based on configurations from Intune. They are based on Microsoft Defender for Endpoint configurations and scan details.
 - Only issues that can be remediated by Intune are raised as security tasks for Intune.
 
-In the Microsoft Defender Security Center console, Defender for Endpoint security admins review data about endpoint vulnerabilities. The admins then use a single-click to create security tasks that flag the vulnerable devices for remediation. The security tasks are immediately passed to the Intune console where Intune admins can view them. The security task identifies the type of vulnerability, priority, status, and the steps to take to remediate the vulnerability. The Intune admin chooses to accept or reject the task.
+In the Microsoft Defender Security Center console, Defender for Endpoint security admins review data about endpoint vulnerabilities. The admins then use a a few clicks to create security tasks that flag the vulnerable devices for remediation. The security tasks are immediately passed to the Microsoft Endpoint Manager admin center where Intune admins can view them. The security task identifies the type of vulnerability, priority, status, and the steps to take to remediate the vulnerability. The Intune admin chooses to accept or reject the task.
 
 When a task is accepted, the Intune admin then acts to remediate the vulnerability through Intune, using the guidance provided as part of the security task.
 
@@ -76,7 +76,7 @@ Following is an example workflow for an application. This same general workflow
 
   Because the media player in this example isn't a managed app, Intune can only provide text instructions. If the app was managed, Intune could provide instructions to download an updated version, and provide a link to open the deployment for the app so that the updated files can be added to the deployment.
 
-- After completing the remediation, the Intune admin opens the security task and selects **Complete Task**.  The remediation status is updated for Intune and in Defender for Endpoint, where security admins confirm the revised status for the vulnerability.
+- After completing the remediation, the Intune admin opens the security task and selects **Complete Task**. The remediation status is updated for Intune and in Defender for Endpoint, where security admins confirm the revised status for the vulnerability.
 
 ## Prerequisites  
 
@@ -94,6 +94,10 @@ Following is an example workflow for an application. This same general workflow
 
 ## Work with security tasks
 
+Before you can work with security tasks, they must be created from within the Defender Security Center. For information on using the Microsoft Defender Security Center to create security tasks, see [Remediate vulnerabilities with threat and vulnerability management](/microsoft-365/security/defender-endpoint/tvm-remediation?view=o365-worldwide#request-remediation) in the Defender for Endpoint documentation.
+
+To manage security tasks:
+
 1. Sign in to the [Microsoft Endpoint Manager admin center](https://go.microsoft.com/fwlink/?linkid=2109431).
 
 2. Select **Endpoint security** > **Security tasks**.
@@ -113,7 +117,7 @@ Following is an example workflow for an application. This same general workflow
 
    When it's possible to do so, the remediation instructions include links that open the relevant configuration objects in the Intune console.
 
-6. After completing the remediation steps, open the security task and select **Complete Task**.  This action updates the security task status in both Intune and Defender for Endpoint.
+6. After completing the remediation steps, open the security task and select **Complete Task**. This action updates the security task status in both Intune and Defender for Endpoint.
 
 After remediation is successful, the risk exposure score in Microsoft Defender for Endpoint can drop, based on new information from the remediated devices.