Which of the following alert sources can provide identity-based alerts?

Cortex XDR provides identity-based alerts through its Identity Analytics engine, which leverages User and Entity Behavior Analytics (UEBA). A fundamental prerequisite for this capability is the integration with directory services, such as Microsoft Active Directory. By synchronizing user, group, and computer account information, Cortex XDR can build behavioral profiles for users and entities. The Identity Analytics engine then analyzes this data, along with endpoint and network activity, to detect anomalous behaviors and identity-based threats like credential-based attacks or insider threats, subsequently generating specific identity-based alerts.