locked
ATA with non-DCs RRS feed

  • Question

  • Does ATA only work with Domain Controllers (i.e. Active Directory)or can it be used for other high value infrastructure?

    Thanks,

    Monday, October 12, 2015 8:25 AM

All replies

  • Hi ddcosta,

    ATA currently uses network traffic, SIEM data (syslog), Event data (WEF) and Active-Directory (LDAP) to analyze the users and entities behavior in the organization. In case other OS devices communicate with the domain controller via relevant protocols, ATA will analyze those as well, but ATA require to have a DC to function properly.

    Thanks,

    Microsoft ATA Team. 

    Wednesday, October 14, 2015 3:23 PM