A company runs several Linux and Windows virtual machines in Azure that host business-critical applications. The security team wants a solution that provides runtime threat protection for these server workloads, alerting them to suspicious processes, brute-force login attempts, and malware on the VMs. Which capability should they enable?