Add check for DC https://learn.microsoft.com/en-us/defender-for-identity/configure-windows-event-collection#event-id-8004
