A security operations team is overwhelmed by the volume of low-level malware alerts on managed Windows devices. They want a capability within Microsoft Defender for Endpoint that can automatically investigate these alerts, determine whether a threat is real, and take remediation actions such as quarantining files without waiting for an analyst. Which Defender for Endpoint capability meets this need?