Deploying Microsoft Advanced Threat Analytics in the Real World

No ratings

Presented at BSidesNashville 2018 by

Russell Butturini

Introductions/Why give a talk on ATA? -An overview of Advanced Threat Analytics (What it is, and what it is not) -ATA architecture -ATA Center overview, deployment guidelines, and security considerations -ATA Gateway architecture and deployment -Overview of ATA incidents, reports, rules, behavioral analytics, and tuning. -Advanced usage of the ATA database for threat hunting -Troubleshooting and getting help -ATA alternatives for non Microsoft shops -Time for questions/comments