Azure Advanced Threat Protection, also known as Azure ATP or AATP, is a Microsoft Azure service that pre-detects and pre-analyzes suspicious information indicating a possible attack in an on-premises Active Directory. In general terms, ATP is capable of: Detecting suspicious activities from user accounts and devices through Artificial Intelligence using Microsoft Services. Analyzing information in real-time, which allows quick identification in case of a possible attack. Sending alerts based on information analysis. The Azure ATP Architecture consists of the following components: Azure ATP Portal: ATP service has its own portal: https://portal.atp.azure.com. On this portal, you can
