Joining tables in KQL | Microsoft 365 Defender