Advanced Threat Analytics

Wes Miller analyzes and writes about Microsoft’s security, identity management, and systems management technologies. Before joining Directions on Microsoft, Wes... more

Advanced Threat Analytics (ATA) is a Windows Server-based security application that can help to identify compromised user accounts and other breaches before serious damage occurs.

ATA has been replaced by Microsoft Defender for Identity, has exited Extended support as of Jan. 2026, and is no longer receiving updates. Customers should now migrate to Defender for Identity or a comparable third-party solution.

Product: Advanced Threat Analytics

Licensing: Advanced Threat Analytics

The technology behind ATA was acquired from Aorato in Nov. 2014 and made available from Microsoft in Aug. 2015. The product’s retirement was announced in July 2020. The product has left support as of Jan. 2026.

Roadmap and Servicing

All future development will continue to focus on Microsoft Defender for Identity, which performs similar analysis to ATA, and is derived from ATA technology. However, Microsoft Defender for Identity gathers information from on-premises and processes it using a Microsoft-hosted analysis service.

Atlas Members have full access

Get access to this and thousands of other unbiased analyses, roadmaps, decision kits, infographics, reference guides, and more, all included with membership. Comprehensive access to the most in-depth and unbiased expertise for Microsoft enterprise decision-making is waiting.

Membership Options

Already have an account? Login Now