During an active investigation, your SOC team develops a KQL hunting query in Microsoft Sentinel that detects a suspicious PowerShell download pattern tied to an emerging threat. The team wants to continuously test this query against incoming data in near real time to see if the pattern reappears over the next few hours, without saving the query as an analytics rule and without generating incidents. Which Microsoft Sentinel hunting capability should they use?