Advanced Threat Analytics

by
Wes Miller

by
Wes Miller

Wes Miller analyzes and writes about Microsoft’s security, identity management, and systems management technologies. Before joining Directions on Microsoft, Wes... more

Advanced Threat Analytics (ATA) is a Windows Server-based security application that can help to identify compromised user accounts and other breaches before serious damage occurs.

ATA has been replaced by Microsoft Defender for Identity, is no longer receiving updates, and will exit Extended support in Jan. 2026.

Product: Advanced Threat Analytics

Licensing: Advanced Threat Analytics

The technology behind ATA was acquired from Aorato in Nov. 2014 and made available from Microsoft in Aug. 2015. The product’s retirement was announced in July 2020.

Near- and Long-Term Roadmap

All future development will continue to focus on Microsoft Defender for Identity, which performs similar analysis to ATA, and is derived from ATA technology. However, Microsoft Defender for Identity gathers information from on-premises and processes it using a Microsoft-hosted analysis service.

Microsoft Defender for Identity may not be ideal for very privacy-conscious organizations, but it will allow Microsoft to build new analysis features into the service that would not have been possible using the ATA infrastructure.