Dear,
Have you seen the contribution "A preemptive MDR for your Microsoft ecosystem"? I think this might be interesting for you.
Best regards,