Azure Advanced Threat Protection

Azure Advanced Threat Protection (Azure ATP) is a Microsoft-hosted service that captures, parses, and analyzes Active Directory network traffic on Active Directory domain controllers. It examines authentication, authorization, and other activities for indicators of potentially suspicious behavior by a user or on a device within an organization. Azure ATP is a part of the Enterprise Mobility + Security (EMS) E5 and Microsoft 365 E5 suites of hosted services.

Become a DOM member or log in to read the full report