3 ms·
Microsoft Advanced Threat Analytics
- mattdeboard 11y agoThey say they're doing port mirroring of AD traffic for gathering data to analyze. What kinds of information is in AD traffic? I know basically nothing about AD.
- generalpf 11y agoAD is an LDAP implementation, so stuff like LDAP authentication and queries will go in, and LDAP entities will come out.
- utefan001 11y agoAfter watching the video and looking at the pricing it feels like Microsoft wants its customers to pay for several windows password hash issues that Microsoft should have fixed a long time ago.
- Zenst 11y agoBe interesting to compare this with other IDS offerings.