You are a SOC analyst hunting in Microsoft Defender XDR Advanced Hunting. Threat analytics reports a new campaign exploiting devices running an outdated OS build. You need to produce a live list of currently onboarded devices, including their operating system platform, OS version, and current onboarding/health status, so you can prioritize patching. Which table should you query?