• HOME
  • CATEGORIES

    • CATEGORIES

    • Browse All Categories
  • FOR VENDORS

    • FOR VENDORS

    • Log In to Vendor Portal
    • Get Started
  • REVIEWS

    • REVIEWS

    • Write a Review
    • Product Reviews
    • Vendor Directory
    • Product Comparisons
  • GARTNER PEER COMMUNITY™
  • GARTNER.COM
  • Community GuidelinesListing GuidelinesBrowse VendorsRules of EngagementFAQPrivacyTerms of Service
    ©2026 Gartner, Inc. and/or its affiliates.
    All rights reserved.
  • Categories

    • Loading categories...

      Browse All Categories

      Loading markets...

  • For Vendors

    • Log In to Vendor Portal 

    • Get Started 

  • Write a Review

Join / Sign In
  1. Home
  2. /
  3. Advanced Threat Analytics (ATA) (Legacy)
Logo of Advanced Threat Analytics (ATA) (Legacy)

Advanced Threat Analytics (ATA) (Legacy)

byMicrosoft
in Insider Risk Management Solutions
4.1

Overview

Product Information on Advanced Threat Analytics (ATA) (Legacy)

Updated 13th October 2025

What is Advanced Threat Analytics (ATA) (Legacy)?

Advanced Threat Analytics (ATA) is a software developed by Microsoft that provides on-premises security monitoring and detection capabilities for enterprise networks. The software analyzes user, device, and resource activities to identify suspicious behavior and known attack techniques, such as Pass-the-Ticket, Pass-the-Hash, and reconnaissance activities. ATA uses behavioral analytics and other detection methods to help organizations identify and respond to advanced threats, compromised identities, and insider actions. The software aims to reduce the risk of security breaches by offering clear threat timelines and actionable alerts, supporting security teams in investigating and mitigating breaches within their network environments.

Advanced Threat Analytics (ATA) (Legacy) Pricing

Advanced Threat Analytics (ATA) software is priced through a per-user or per-device subscription model as part of Microsoft’s enterprise security offerings, often bundled within certain Microsoft licensing plans. ATA is subject to enterprise agreements and may be available as part of broader security software packages rather than as a standalone purchase.

Overall experience with Advanced Threat Analytics (ATA) (Legacy)

INFO SECURITY ANALYST
10B - 30B USD, Finance (non-banking)
FAVORABLE

“Great product which provides analytics inside of the organization and protection”

4.0
Jun 3, 2023
The Microsoft ATA is an on-prem platform which organization in detecting advance cyber threats and behavior of the user. I really like the UI and features like dashboard creation and can be used as a centralized solution for managing threats.
Manager Networks & Systems Security Control
50M - 250M USD, Banking
CRITICAL

“Easy to use and deploy Advanced Threat Analytic”

3.0
Aug 1, 2022
Overall experience is great. We use a lot of Microsoft products within our Infrastructure making integration quite easy

About Company

Company Description

Updated 11th August 2023

Microsoft enables digital transformation for the era of an intelligent cloud and an intelligent edge. Its mission is to empower every person and every organization on the planet to achieve more. Microsoft is dedicated to advancing human and organizational achievement. Microsoft Security helps protect people and data against cyberthreats to give peace of mind.

Company Details

Updated 25th March 2024
Company type
Public
Year Founded
1975
Head office location
Redmond, Washington, United States
Number of employees
10000+
Annual Revenue
30B+ USD
Website
https://microsoft.com

Do You Manage Peer Insights at Microsoft?

Access Vendor Portal to update and manage your profile.

Key Insights

A Snapshot of What Matters - Based on Validated User Reviews

Reviewer Insights for: Advanced Threat Analytics (ATA) (Legacy)
Deciding Factors: Advanced Threat Analytics (ATA) (Legacy) Vs. Market Average
Performance of Advanced Threat Analytics (ATA) (Legacy) Across Market Features

Advanced Threat Analytics (ATA) (Legacy) Likes & Dislikes

Like

- it provides real-time visibility into suspicious activity and behavior - The UI is really simple and can be easily deployed - Feature like viewing all the attacks under single dashboard helps in incident response - The ability to track user account logins and movements

Like

Easy integration, deployment and support

Like

The built-in machine learning models learns from the data which is generated on the daily basis and hence evolves its algorithm to better gauge the common user behavior and detect any activity which deviates from the standard practice.

Dislike

-It generates a lot of False positive alerts and works best with other Microsoft solutions. -It does not provide feature to build custom rules for detecting suspicious behavior. -The frequent update of the tool takes a lot of time

Dislike

Challenges with integration with other non-Microsoft systems

Dislike

The platform is of course prone to false positives and has to allow few suspected behavior before reporting to the admins.

Top Advanced Threat Analytics (ATA) (Legacy) Alternatives

Logo of Varonis Data Security Platform
1. Varonis Data Security Platform
4.7
(259 Ratings)
Logo of Proofpoint Insider Threat Management
2. Proofpoint Insider Threat Management
4.6
(115 Ratings)
Logo of Microsoft Defender for Identity
3. Microsoft Defender for Identity
4.4
(99 Ratings)
View All Alternatives

Peer Discussions

Advanced Threat Analytics (ATA) (Legacy) Reviews and Ratings

4.1

(53 Ratings)

Rating Distribution

5 Star
28%
4 Star
64%
3 Star
6%
2 Star
2%
1 Star
0%
Why ratings and reviews count differ?

Customer Experience

Evaluation & Contracting

4.3

Integration & Deployment

4.2

Service & Support

4.2

Product Capabilities

4.2

Filter Reviews
Sort By:
Most helpful
Last 12 Months
Star Rating
Reviewer Type
Reviewer's Company Size
Reviewer's Industry
Reviewer's Region
Reviewer's Job Function
  • INFO SECURITY ANALYST
    10B+ USD
    Finance (non-banking)
    Review Source

    Great product which provides analytics inside of the organization and protection

    4.0
    Jun 2, 2023
    The Microsoft ATA is an on-prem platform which organization in detecting advance cyber threats and behavior of the user. I really like the UI and features like dashboard creation and can be used as a centralized solution for managing threats.
  • SENIOR MANAGER
    50M-1B USD
    Travel and Hospitality
    Review Source

    Check internal security posture by detecting malicious activity

    5.0
    Feb 5, 2023
    Advanced Threat Analytics is a solution that detects any suspicious activity performed by employees or partner within the organization. The tool immediately block the activity of the user and send the report about the security posture to the administrator to approve or decline the suspicious activity.
  • Manager Networks & Systems Security Control
    50M-1B USD
    Banking
    Review Source

    Easy to use and deploy Advanced Threat Analytic

    3.0
    Aug 1, 2022
    Overall experience is great. We use a lot of Microsoft products within our Infrastructure making integration quite easy
  • Lead Cyber Security Engineer
    1B-10B USD
    Insurance (except health)

    Overall good product but it's lacked feature releases and will be transitioning to AATP

    4.0
    Sep 29, 2020
    Overall good product but it's lacked feature releases and will be transitioning to Microsoft AATP. Product has good out of the box threat detection capabilities
  • Information Assurance Analyst
    Gov't/PS/Ed
    Education
    Review Source

    ATA Review

    5.0
    Feb 24, 2020
    ATA is a great product to give you analytic insights into your organization. I love how it analyzes user logins and computer access. It is helpful to be able to see suspicious activity on your network and have notifications sent so you can remediate issues. It is a very simple tool that gives you good insights and it has a super simple setup.
...
Showing Result 1-5 of 54

Recommended Gartner Research

  • Market Guide for Insider Risk Management Solutions

Gartner Peer Insights content consists of the opinions of individual end users based on their own experiences, and should not be construed as statements of fact, nor do they represent the views of Gartner or its affiliates. Gartner does not endorse any vendor, product or service depicted in this content nor makes any warranties, expressed or implied, with respect to this content, about its accuracy or completeness, including any warranties of merchantability or fitness for a particular purpose.

This site is protected by hCaptcha and its Privacy Policy and Terms of Use apply.


Software reviews and ratings for EMMS, BI, CRM, MDM, analytics, security and other platforms - Peer Insights by Gartner
Community GuidelinesListing GuidelinesBrowse VendorsRules of EngagementFAQsPrivacyTerms of Use

©2026 Gartner, Inc. and/or its affiliates.

All rights reserved.