What feature in Microsoft Defender for Endpoint provides the first line of defense against cyberthreats by reducing the attack surface?