Deploying Microsoft Defender for Identity across a hybrid Active Directory environment of 18,000 identities — building detection coverage for credential theft, lateral movement, privilege escalation, and domain dominance attacks, integrated with Microsoft Sentinel for unified XDR response.