A security analyst at Contoso notices that when malware executes on a managed laptop, they want a single Microsoft Defender XDR workload that can detect the malicious process, isolate the device from the network, and provide investigation timeline data about what the file did on the endpoint. Which Defender XDR component provides these endpoint detection and response capabilities?