Microsoft Advanced Threat Analytics v1.9 released

[Server Man]

This post is authored by Yoni Goldblat, Senior Program Manager, Microsoft ATA.

We are pleased to announce a new release of Microsoft Advanced Threat Analytics (ATA) version 1.9. This release includes numerous new features and performance enhancements, making it an even more powerful security solution.

These are some of the exciting new features in v1.9:

• New Detection: Detect suspicious service creation on your domain controllers
• New Report: Monitor accounts sending credentials in cleartext to mitigate the use of simple LDAP bind in your environments
• Improved Investigation Capabilities: Generate lateral movement reports showing vulnerable paths an attacker can use to move through your network,
• Manually tag sensitive identities for an additional layer of security monitoring

Version 1.9 also adds to the investigation experience with refined user and entity profile pages, which have been designed for full deep-dive investigation of users, the resources they accessed, and their history as well as additional Windows Server Active Directory data.

Additionally, new performance enhancements in the ATA center and lightweight gateway allow you to handle increased network traffic.

You can find more information about all the improvements by reading What’s new in ATA version 1.9.

What’s new in Microsoft Advanced Threat Analytics is an on-premises product and is part of the Enterprise Mobility + Security suite. Start a trial or deploy it now by downloading a 90-day evaluation version. Learn more about Microsoft ATA here.

Continue reading...