Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

Description of Microsoft Advanced Threat Analytics v1.9

View products that this article applies to.


This article describes the improvements that are included in Microsoft Advanced Threat Analytics (ATA) version 1.9.

↑ Back to the top

Improvements in ATA v1.9

Detection improvements

  • Adds detection of suspicious service creation on domain controllers.

General improvements

  • Adds report of lateral movement paths.
  • Adds report of passwords exposed in cleartext.
  • Adds feature to manually tag entities as sensitive.
  • Improves investigation capabilities on new entity profile pages.

Infrastructure improvements

  • Improves performance in the Center and Gateways to handle more network traffic.

For more information, see What's new in ATA 1.9

↑ Back to the top

How to get this update

Microsoft Update

This update is available on Microsoft Update. For more information about how to use Microsoft Update, see How to get an update through Windows Update.

Microsoft Download Center

To get the stand-alone package for this update, go to the Microsoft Download Center website:

 Download the ATA v1.9 package now.

For more information about how to download Microsoft support files, click the following article number to view the article in the Microsoft Knowledge Base:

119591 How to obtain Microsoft support files from online services

Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.


To install this update, you should first install Microsoft Advanced Threat Analytics v1.8 (1.8.6645) or v1.8.1 (1.8.6765). If you use an older ATA version, you must first upgrade to 1.8.6645.

Restart requirement

You may have to restart the computer after you apply this update.

Update replacement information

This update does not replace a previously released update.

↑ Back to the top


Learn about the terminology that Microsoft uses to describe software updates.

↑ Back to the top

Keywords: kbsurveynew, kbexpertiseinter, kbbug, ATDownload, kbfix, kbqfe

↑ Back to the top

Article Info
Article ID : 4092172
Revision : 19
Created on : 4/10/2020
Published on : 4/10/2020
Exists online : False
Views : 216