A security team has approved several SaaS applications for company use, including Salesforce and Box. They are worried about detecting suspicious behavior inside these sanctioned apps, such as impossible-travel logins and mass file downloads by a single user. Which Microsoft Defender XDR service is designed to monitor and detect these kinds of anomalous activities within cloud applications?