
Explanation:
For Sentinel1, configure the Microsoft defender for identity connector.
This will allow you to sync user entities from on-premises Active Directory, using Microsoft Defender for Identity.
To the AD DS Domain, deploy Microsoft Defender for Identity.
You need to install the MDI sensor on your Active Directory domain controller to enable UEBA to collect security events from your on-premises AD DS domain.
For Sentinel1, enable UEBA.
You need to switch the toggle to On and select the data sources on which you want to enable UEBA.