automated-investigation 1 Defender Endpoint SenseIR Events - AIR and Live Response Under the Hood Jul 10, 2026