Microsoft Defender for Identity, utilizing your on-premises Active Directory signals to identify, detect, and investigate advanced threats.