Advanced Threat Analytics

Advanced Threat Analytics (ATA) is a Windows Server-based security application that can help to identify compromised user accounts and other breaches before serious damage occurs. It relies on machine learning to continuously understand and interpret normal user activity patterns from Windows Server Active Directory (AD) domain access, looking for unusual user activity and notifying IT staff if anomalies occur.

The technology behind ATA was acquired from Aorato in Nov. 2014 and made available from Microsoft in Aug. 2015. The product’s retirement was announced in July 2020.

Servicing, Support, Roadmap

The last version of Advanced Threat Analytics (ATA) exited Mainstream support in Jan. 2021 and will leave Extended support in Jan. 2026. The final new version of ATA is 1.9.3, released in Sept. 2020.

Microsoft originally released multiple new versions of ATA annually. However, the company has announced the retirement of the product. The most current version is eligible for bug fixes and security fixes, while past versions qualify for security fixes (only) for up to 12 months after their general availability dates.