A security operations team is investigating an attack that spread from a phishing email to a user's mailbox, then to their laptop, and finally attempted lateral movement using compromised credentials. They want a single console that automatically correlates the related alerts from email, endpoint, and identity signals into one incident so analysts do not have to piece the alerts together manually. Which Microsoft solution provides this unified, cross-domain incident view?