Forum Discussion
Is Azure ATP an update/replacement for ATA?
its a cloud version of the ATA product. so you will run ATA OR Azure ATP
ATA is analysing trafik / logons to Domain controlers in AD
ATP is sandboxing attachements and Links in e-mails
nothing to do with each other at all.Was just made aware that MS is using ATP for 3 different products at least
Windows Defender ATP: https://www.microsoft.com/en-us/windowsforbusiness/windows-atp
Office 365 ATP: https://technet.microsoft.com/en-us/library/exchange-online-advanced-threat-protection-service-description.aspx?f=255&MSPPError=-2147217396
Azure ATP: https://cloudblogs.microsoft.com/enterprisemobility/2017/09/27/introducing-azure-advanced-threat-protection/
So it looks like MS is doing whatever they can to confuse people ;)
This may clear the confusion :)
- Windows Defender Advanced Threat Protection: Allows IT Admins to view Advanced Persistent Malware in an Enterprise network post breach scenario (what malware is there, what it is doing/what it did and actions to take)
- Microsoft Advanced Threat Analytics: Allows IT Admins to monitor hackers/attackers who are inside a network (not malware), what they are doing/what they did and actions to take. Monitors PtH attacks, persistence, golden tickets etc.
- Office 365 Advanced Threat Protection: Detects and dynamically blocks malware laden emails - what malware it is, what it did/what it tried to do and who received the email etc.
Ayesha Imtiaz
Microsoft Technology Associate
http://www.communicationsquare.com
