incident-response 1 Microsoft Defender for Identity Deep Dive — Part 3: XDR Investigation, Hunting, and Response Apr 15, 2026