Microsoft Advanced Threat Analytics public preview release is now available!

ronjor · May 5, 2015

Alex_SimonsMS
4 May 2015 9:13 AM

We've just released the preview of Microsoft Advanced Threat Analytics (ATA). Microsoft ATA is a new on-premises product that brings Azure AD style security monitoring and anomaly detection on-premises. Microsoft ATA is based on the innovative work done by Aorato, a startup company we acquired in November.
Click to expand...

http://blogs.technet.com/b/ad/archi...-public-preview-release-is-now-available.aspx

WildByDesign · May 5, 2015

Here is a decent article from Ars Techinca as well: http://arstechnica.com/information-...security-drum-with-advanced-threat-analytics/

Microsoft announced a raft of security and data protection software on the first day of its Ignite conference. The company said that attacks on companies were increasingly using legitimate tools: organizations are being compromised through access made with valid (albeit stolen or otherwise compromised) user credentials, rather than malware, with a Verizon report saying that more than 75 percent of breaches occur this way.

This needs a different approach to network security, Microsoft says, and new software built to sniff out anomalous activity, even if it looks superficially legitimate. In November last year, Microsoft bought enterprise security firm Aorata, and at ignite it announced a product based on this purchase: Microsoft Advanced Threat Analytics (ATA), now available in preview.

ATA uses a combination of log file analysis, deep packet inspection, and data from Active Directory to detect inappropriate access to corporate networks. Log files can reveal, for example, users logging on at unusual times, from unusual machines, or from unexpected locations. Deep Packet inspection (DPI) can show more obviously malicious behavior, such as attempts to use Pass-the-Hash or other credential-reuse attacks.
Click to expand...

FreddyFreeloader · May 5, 2015

Microsoft Advanced Threat Analytics

https://www.youtube.com/watch?v=-MGg_07MkgY

Log in or Sign up

Microsoft Advanced Threat Analytics public preview release is now available!

ronjor Global Moderator

WildByDesign Registered Member

FreddyFreeloader Registered Member

Log in or Sign up

Microsoft Advanced Threat Analytics public preview release is now available!

ronjor Global Moderator

WildByDesign Registered Member

FreddyFreeloader Registered Member

Useful Searches