A security analyst notices that a company workstation, already infected with malware that bypassed the initial antivirus, is exhibiting suspicious behaviors such as lateral movement attempts and unusual process injection. The team wants a Microsoft Defender XDR service that provides endpoint detection and response (EDR) capabilities to detect, investigate, and respond to these advanced post-breach activities on the device. Which service should they use?