Azure Advanced Threat Protection (Azure ATP) is a cloud service that helps protect your enterprise hybrid environments from multiple types of advanced targeted cyber-attacks and insider threats, leve...
Updated May 11, 2021
Version 8.0
Blog Post
3 MIN READ
Azure Advanced Threat Protection Expands Integrations, Detections, and Forensic Capabilities
Jason Wilson In the screenshot of the potential DcShadow attack, CLIENT1 registers at 2:55:17pm and then unregisters one second later. Is that the normal replication behaviour of the attack being shown in the evidence chain, or is that the result of an automated enforcement action by Azure ATP because CLIENT1 is not a Windows Server machine?