Advanced Threat Protection (ATP)

  • Cloud-based security solution that identifies, detects, and helps you investigate advanced threats, compromised identities, and malicious insider actions directed at your organization.

  • Capable of detecting known malicious attacks and techniques, security issues, and risks against your network.

  • Azure Advanced Threat Protection (ATP) portal - Azure ATP has its own portal, through which you can monitor and respond to suspicious activity.

  • Azure Advanced Threat Protection (ATP) sensor - Installed directly on your domain controllers. The sensor monitors domain controller traffic without requiring a dedicated server or configuring port mirroring.

  • Azure Advanced Threat Protection (ATP) cloud service - Runs on Azure infrastructure and is currently deployed in the United States, Europe, and Asia. Azure ATP cloud service is connected to Microsoft's intelligent security graph.

Last updated