Feb 25 2020 05:59 AM
First of all I am grateful for the help that I have received when my basic doubts regarding the documentation of the Microsoft itself. But now I have a question regarding the user of the ATP Sensor, regarding the documentation https://docs.microsoft.com/en-us/advanced-threat-analytics/install-ata-step2 I have to create a user to read the Forest next to Azure ATP so far so good but referring to https://docs.microsoft.com/en-us/advanced-threat-analytics/install-ata-step9-samr this user AATP service is the same one that was created for reading the forest? or is it a user created when the sensor was installed?
Thanks for helping
Feb 25 2020 06:11 AM
@Valdoscarin it's the same user used for reading the AD forest.