Hello,
In the NTA we can see conversation traffic from our users to the internet, but the source is using ip address.
Can NTA showing the username by querying to the Active Directory or Azure Active Directory?
NTA doesn't have any capabilities to associate an IP with a username. In theory its possible to do such a thing, but NTA doesnt have it as a feature.