SOP-03: Malware Alert Triage - EDR

EDR malware alert triage playbook for Microsoft Defender for Endpoint. Covers process tree analysis, FP/TP verdict framework with KQL, device isolation, investigation package collection, Live Response, and fleet-wide scope check.