A security analyst asks you to identify all corporate Windows devices whose BIOS/firmware version is older than a specific build so they can be prioritized for updates. You want to retrieve this data on demand for a single device to validate the reporting logic before scaling out. From the Intune admin center, which remote action lets you run a live KQL-based query against an individual managed device to return its firmware details immediately?