1
Custom data collection in Microsoft Defender for Endpoint - Microsoft Defender for Endpoint
(learn.microsoft.com)
For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.