Doubts as to the user created by the sensor

Copper Contributor

First of all I am grateful for the help that I have received when my basic doubts regarding the documentation of the Microsoft itself. But now I have a question regarding the user of the ATP Sensor, regarding the documentation https://docs.microsoft.com/en-us/advanced-threat-analytics/install-ata-step2 I have to create a user to read the Forest next to Azure ATP so far so good but referring to https://docs.microsoft.com/en-us/advanced-threat-analytics/install-ata-step9-samr this user AATP service is the same one that was created for reading the forest? or is it a user created when the sensor was installed?

 

Thanks for helping

1 Reply

@Valdoscarin it's the same user  used for reading the AD forest.