Something on the eu-v20.events.endpoint.security.microsoft.com report look wrong? Let us know what to fix.