Scenario 2 – Monitoring with Windows Defender ATP