Bridging AD Security Gaps with Identity Threat Detection and Response