Microsoft Defender status retrieval: Add 'not running' status

[sratz]

Fixes #2447

[github-actions]

Test Results

 1 821 files  ±0   1 821 suites  ±0   1h 50m 44s ⏱️ + 2m 46s
 7 714 tests ±0   7 486 ✅ ±0  228 💤 ±0  0 ❌ ±0 
24 303 runs  ±0  23 556 ✅ ±0  747 💤 ±0  0 ❌ ±0 

Results for commit 6048bfb. ± Comparison against base commit 4fbbe1b.

♻️ This comment has been updated with latest results.

[HannesWell]

Looks good to me, thanks.

I wonder: Maybe this method should be more graceful to unknown statuses, e.g. log them and return false instead of throwing an Exception.

Regarding that question from your issue: I considered that as well, but deliberately decided against it, because an unknown value could also mean the defender is active, e.g. if the defender is changed in a documented way in the future.
Then we would at least notice it even if none monitors the defender doc.
So while this is a bit more cumbersome in the beginning I think it's the saver way on the long run.

[HannesWell]

Looks good, thanks for the update.

Ideally squash locally and force push as one commit, for context see the discussion at eclipse-pde/eclipse.pde#1455 (comment)