A security analyst needs a solution that continuously discovers software vulnerabilities and misconfigurations across the organization's endpoints, then prioritizes them based on risk so the team can remediate the most critical weaknesses first. Which Microsoft Defender capability should the analyst use?