A company routes all outbound internet traffic from its Azure virtual networks through Azure Firewall. The security team wants the firewall to automatically alert on and block traffic to and from IP addresses and domains that Microsoft has identified as malicious, without manually maintaining any address lists. Which Azure Firewall capability should they enable?