• Identify suspicious user and device activity with both known-technique detection and behavioral analytics
• Analyze threat intelligence from the cloud and on-premises
• Protect user identities and credentials stored in Active directory        

• View clear attack information on a simple timeline for fast triage
• Monitor multiple entry points through integration with Windows Defender Advanced Threat Protection     

With Azure Advanced Threat Protection, the power and scale of the cloud help you safeguard against threats that are increasing in frequency, severity, and sophistication.  Detect and investigate security incidents across your enterprise with a cloud-based security solution that supports the most demanding security analytics workloads.

Azure Advanced Threat Protection monitors user, device, and resource behaviors and detects anomalies right away.  Using built-in adaptive intelligence, you gain fast insight into advanced threats both on-premises and in the cloud.

Stay focused on what's important

Get a clear, efficient, and convenient feed that surfaces the right issues on a simple attack timeline.  Gain powerful perspective on what's happening throughout your enterprise and get detailed information for next steps.  Pivot to Windows Defender Advanced Threat Protection to remediate malicious attacks.