A security analyst deploys Cisco Secure Endpoint connectors across the enterprise. During an incident, a file that was previously allowed on hundreds of endpoints is later confirmed to be malicious by Cisco Talos and reclassified in the cloud. The analyst wants the connectors to automatically quarantine that file wherever it exists—including on endpoints that executed it days ago—without pushing a new custom detection or scanning every disk again. Which Secure Endpoint capability delivers this outcome?