A user reports intermittent application crashes on a corporate Windows 11 laptop that is enrolled in Intune. The helpdesk needs to review Event Viewer logs, registry values, and the results of specific command-line queries from the device without interrupting the user or requiring them to manually export anything. From the Microsoft Intune admin center, which remote action should the technician use?