Sign in with Microsoft
Sign in or create an account.
Select a different account.
You have multiple accounts
Choose the account you want to sign in with.

About this update

This article describes the enhancements in Microsoft Advanced Threat Analytics (ATA) v1.7.

Detection enhancements:

  • Adds detection of reconnaissance through directory services enumeration

  • Improves Pass-the-Hash enhancements

  • Improves Pass-the-Ticket enhancements

  • Improves Unusual Protocol Implementation enhancements

Adds support for:

  • Role-based access control

  • Windows Server core support

Redesign of the user experience:

  • Configuration navigation experience

  • Gateway configuration and update pages

General bug fixes and performance improvements

For details, see What’s new in ATA 1.7.

How to get this update

Method 1: Microsoft Update

This update is available on Microsoft Update. For more information, see How to get an update through Windows Update.

Method 2: Microsoft Download Center

The following file is available for download from the Microsoft Download Center:

DownloadDownload the ATA v1.7 package now.

For more information about how to download Microsoft support files, click the following article number to view the article in the Microsoft Knowledge Base:

119591 How to obtain Microsoft support files from online services Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.

Update detail information


To install this update, you should first install Microsoft Advanced Threat Analytics v1.6 (1.6.4103) or v1.6 with Update 1 (1.6.4317).

Registry information

To apply this update, you don't have to make any changes to the registry.

Restart requirement

You may have to restart the computer after you apply this update.

Update replacement information

This update doesn't replace a previously released update.


Learn about the terminology that Microsoft uses to describe software updates.

Need more help?

Want more options?

Explore subscription benefits, browse training courses, learn how to secure your device, and more.

Communities help you ask and answer questions, give feedback, and hear from experts with rich knowledge.

Was this information helpful?

What affected your experience?
By pressing submit, your feedback will be used to improve Microsoft products and services. Your IT admin will be able to collect this data. Privacy Statement.

Thank you for your feedback!