Implement activity and event collection in Microsoft Sentinel