Microsoft says the new service was developed for companies with a strong SOC that need help analyzing Defender data.