According to UBA document, looks like UBA's machine learning is based on on-prem Microsoft Active Directory and corresponding event code. I'm wondering if UBA's capable to deal with AAD events when now many organizations have been shifted to Azure AD/Entra.
