locked
ATA with non-DCs RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote

    Does ATA only work with Domain Controllers (i.e. Active Directory)or can it be used for other high value infrastructure?

    Thanks,

    Monday, October 12, 2015 8:25 AM

All replies

  • Question
    Sign in to vote
    1
    Sign in to vote

    Hi ddcosta,

    ATA currently uses network traffic, SIEM data (syslog), Event data (WEF) and Active-Directory (LDAP) to analyze the users and entities behavior in the organization. In case other OS devices communicate with the domain controller via relevant protocols, ATA will analyze those as well, but ATA require to have a DC to function properly.

    Thanks,

    Microsoft ATA Team. 

    Wednesday, October 14, 2015 3:23 PM