A security operations team needs a cloud-native solution that can collect log and event data from Azure resources, on-premises servers, and third-party firewalls into a single workspace, then use analytics rules to correlate signals and raise incidents for investigation. Which Microsoft solution should they deploy?