Your organization uses Microsoft Defender XDR as the primary console for security operations. A security analyst reports that Data Loss Prevention (DLP) alerts generated by Microsoft Purview are appearing in the Defender XDR portal, but the analyst wants these Purview alerts to be automatically grouped with related endpoint and identity alerts into a single investigation unit so analysts can see the full attack story in one place. Which capability of Defender XDR provides this behavior for the surfaced Purview DLP alerts?