ATA non-domain devices

%3CLINGO-SUB%20id%3D%22lingo-sub-226954%22%20slang%3D%22en-US%22%3EATA%20non-domain%20devices%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-226954%22%20slang%3D%22en-US%22%3E%3CP%3EIn%20the%20FAQ%2C%20I%20read%20that%20ATA%20can%20leverage%20more%20than%20domain-joined%20devices%20but%20what%20type%20of%20alerts%20should%20I%20expect%20in%20this%20case%20%3F%3C%2FP%3E%3CP%3EHow%20would%20I%20be%20able%20to%20find%20those%20non-domain%20devices%20or%20accounts%20if%20they%20are%20not%20displayed%20in%20an%20alert%20%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThank%20you%20for%20your%20reply%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMarc%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-226954%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAdvanced%20Threat%20Analytics%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-227203%22%20slang%3D%22en-US%22%3ERe%3A%20ATA%20non-domain%20devices%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-227203%22%20slang%3D%22en-US%22%3E%3CP%3EWho%20said%20they%20won't%20be%20displayed%20in%20the%20alert%3F%3C%2FP%3E%0A%3CP%3EWe%20might%20not%20have%20full%20information%20on%20them%20like%20we%20have%20for%20AD%20devices%2C%3C%2FP%3E%0A%3CP%3Ebut%20mostly%20likely%20we%20will%20be%20able%20to%20display%20at%20least%20a%20machine%20name%20or%20ip%20address%20(sometimes%20both).%3C%2FP%3E%3C%2FLINGO-BODY%3E
Occasional Contributor

In the FAQ, I read that ATA can leverage more than domain-joined devices but what type of alerts should I expect in this case ?

How would I be able to find those non-domain devices or accounts if they are not displayed in an alert ?

 

Thank you for your reply,

 

Marc

1 Reply

Who said they won't be displayed in the alert?

We might not have full information on them like we have for AD devices,

but mostly likely we will be able to display at least a machine name or ip address (sometimes both).