A security operations team wants a single portal where analysts can investigate an alert that spans a compromised user mailbox, a suspicious sign-in, and a malicious file that executed on a laptop — and see these signals automatically correlated into one incident. Which Microsoft solution provides this unified, correlated incident view across email, identity, and endpoint signals?