Advanced threat detection use cases for Windows