Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

Description of Update 1 for Microsoft Advanced Threat Analytics v1.6

View products that this article applies to.


After you run Microsoft Advanced Threat Analytics (ATA) v1.6 for several weeks, the ATA console may display many unexpected suspicious activities of type "Suspicion of identity theft based on abnormal behavior". If notification is configured, some unexpected health notifications may be generated.

↑ Back to the top


This issue occurs because the detection mechanism infrastructure does not work correctly.

↑ Back to the top


To resolve this issue, install the update described in the article. The build number of this update is 1.6.4317.10945.

How to get this update

Method 1: Microsoft Update

This update is available on Microsoft Update. For more information about how to run Microsoft Update, see How to get an update through Windows Update.

Method 2: Microsoft Download Center

The following file is available for download from the Microsoft Download Center:
Download Download the ATA v1.6 Update 1 package now.

↑ Back to the top

Update detail information


To install this update, you should first install ATA v1.6 (1.6.4103.64991) or ATA v1.5 (1.5.2946.21571).

Note If you upgrade from ATA v1.6, selecting the Update ATA Gateway automatically option will automatically upgrade all ATA gateway machines. If you upgrade from ATA v1.5, manual upgrade of the ATA Gateways is required.

Registry information

To apply this update, you don't have to make any changes to the registry.

Restart requirement

You may have to restart the computer after you apply this update.

Update replacement information

This update doesn't replace a previously released update.


Microsoft has confirmed that this is an update in the Microsoft products that are listed in the "Applies to" section.


Learn about the terminology that Microsoft uses to describe software updates.

↑ Back to the top

Keywords: kbqfe, kbsurveynew, atdownload, kbexpertiseadvanced, kb

↑ Back to the top

Article Info
Article ID : 3172500
Revision : 1
Created on : 1/7/2017
Published on : 6/29/2016
Exists online : False
Views : 300