A security analyst wants a solution that monitors on-premises Active Directory Domain Services signals to detect identity-based attacks such as pass-the-hash, lateral movement, and domain dominance techniques against domain controllers. Which Microsoft Defender XDR service should be used?