A security operations team currently switches between separate consoles to review email threats, endpoint alerts, identity anomalies, and cloud app activity. They want a single web portal where all Microsoft Defender XDR signals are consolidated and analysts can investigate correlated incidents from one place. Which resource should they use?