When Endpoint Threat Defense for Active Directory alarms are forwarded to Endpoint Protection Manager.