Your organization's Windows 11 devices are onboarded to Microsoft Defender for Endpoint Plan 2. A non-Microsoft antivirus product is the primary antivirus on the devices, so Microsoft Defender Antivirus runs in passive mode. You need Defender for Endpoint to block or remediate malicious files and processes on the devices without replacing the non-Microsoft product as the primary antivirus. Which capability should you use?