Azure AD identity requirement in question
** Implement leaded credentials detection in the Azure AD tenant of Litware.
Answer: Azure AD identity protection
Reference: https://learn.microsoft.com/en-us/entra/id-protection/overview-identity-protection
Key worr: Leaked Credentials; Azure AD (Entra ID)

Azure AD DS identity requirement in question
** Detect brute force attacks that directly target AD DS user accounts.
** Prevent AD DS user accounts from being locked out by brute force attacks.
Answer:Azure account lockup policy in AD DS
Refernce: https://learn.microsoft.com/en-us/entra/identity/authentication/howto-password-smart-lockout
Key Words/sentence:
Smart lockout helps lock out bad actors that try to guess your users' passwords or use brute-force methods to get in. (Brute force)
This configuration would ensure smart lockout prevents your on-premises AD DS accounts from being locked out by brute force attacks on your Microsoft Entra accounts. (Prevent being locked out by brute force)...