A security team wants a single view that continuously discovers software installed across their managed endpoints, identifies known vulnerabilities and misconfigurations, and prioritizes remediation based on active exploitability and the organization's exposure. Which Microsoft Defender capability provides this?