Your AD DS domain has three domain controllers (DC1, DC2, DC3). You connect Microsoft Defender for Identity to the domain. To onboard all domain controllers to Defender for Identity, which installer should you run on each domain controller?

To onboard domain controllers to Microsoft Defender for Identity (formerly Azure Advanced Threat Protection or Azure ATP), you must install the Defender for Identity sensor. The correct installer for this purpose is Azure ATP Sensor Setup.exe. This executable installs the necessary components on the domain controller to monitor network traffic and Windows events for suspicious activities, sending this data to the Defender for Identity cloud service. AzureConnectedMachineAgent.msi is used to install the Azure Connected Machine agent (Azure Arc agent) for managing servers outside of Azure. MARSAgentInstaller.exe is the Microsoft Azure Recovery Services (MARS) agent installer, used for backing up files and folders to Azure. MMASetup-AMD64.exe is the Microsoft Monitoring Agent (MMA) installer, used for connecting to Azure Log Analytics workspaces or System Center Operations Manager, which is not directly used for Defender for Identity sensor deployment.