[Docs migration] Cleans up investigation tools files - pt 1

[nastasha-solomon]

Addresses part of #559 by doing the following:

• Removes raw migrated Serverless files that are no longer being used.
  NOTE: With the exception of the Timeline page, I'm using this PR to remove raw migrated serverless files only. After all of the my pages have been properly aligned and version, I'll create a follow-up PR to remove the remaining serverless images that we're no longer using.
• Adds anchors where missing and updates anchors that start with an underscore.
• Makes minor inline adjustments to the files that were labeled as "lift-and-shift" where appropriate.

Affected pages:

• Investigation tools
  • Timeline (Some serverless images have been removed for this page only)
    • Timeline templates
  • Visual event analyzer
  • Session view
  • Osquery
    • Manage the Osquery integration
    • Add Osquery Response Actions
    • Run Osquery from investigation guides
    • Run Osquery from alerts
    • Examine Osquery results
    • Use placeholder fields in Osquery queries

[nastasha-solomon]

Had to re-add the following svg files because they were still being referenced in other raw migrated Serverless files.

serverless-plusInCircle.svg is referenced on:

• Line 56 in raw-migrated-files/docs-content/serverless/security-view-alert-details.md
• Line 57 in raw-migrated-files/docs-content/serverless/security-view-alert-details.md
• Line 73 in raw-migrated-files/docs-content/serverless/security-alerts-manage.md
• Line 224 in raw-migrated-files/docs-content/serverless/security-alerts-manage.md
• Line 58 in raw-migrated-files/docs-content/serverless/observability-discover-and-explore-logs.md

serverless-gear.svg is referenced on:

• Line 64 in raw-migrated-files/docs-content/serverless/attack-discovery.md
• Line 63 in raw-migrated-files/docs-content/serverless/security-session-view.md

serverless-cross.svg is referenced on:

• Line 71 in raw-migrated-files/docs-content/serverless/security-alerts-manage.md

serverless-timeline.svg is referenced on:

• Line 18 in raw-migrated-files/docs-content/serverless/security-detection-response-dashboard.md
• Line 51 in raw-migrated-files/docs-content/serverless/security-detection-entity-dashboard.md
• Line 71 in raw-migrated-files/docs-content/serverless/security-detection-entity-dashboard.md
• Line 37 in raw-migrated-files/docs-content/serverless/security-examine-osquery-results.md
• Line 20 in raw-migrated-files/docs-content/serverless/security-cases-open-manage.md
• Line 101 in raw-migrated-files/docs-content/serverless/security-ai-assistant.md

Commenting these refs out might be a temporary workaround. Another option is to remove the images in a separate PR.

In any case, we should only delete these images after we delete the raw migrated files that contain references to them.

[natasha-moore-elastic]

Looks great!
I noticed that inline images are displayed on a separate line – I think that might be a wider issue since it's the same in the internal docs.

[nastasha-solomon]

I noticed that inline images are displayed on a separate line – I think that might be a wider issue since it's the same in the internal docs.

It's a wider issue -- it appears across all of the pages that I've updated so far. I'll bring this up the V3 docs channel when I have a chance today.