Can Threat Explorer items from Microsoft Defender for Office 365 appear in Splunk? My client wants to check if there is an attachment for sending and receiving mail. I registered the WindowsDefenderATP app in Azure AD, is this correct?