During a threat hunt in Microsoft Defender XDR Advanced Hunting, you need to find devices where a suspicious process created or modified an autostart registry value under the Run key, and you must correlate each change with the initiating process file name and command line. Which single table provides both the registry modification details and the initiating process context needed for this hunt?