Today I tried to get the new Microsoft Advanced Threat Analytics up and running within my LAB, since it’s released and also is included in the Enterprise Mobility Suite (EMS), you really should have a look on it.
For the Installation make sure that you can really check the following points:
- Only one Server is required (you can deploy the ATA Service and the Gateway(s) on different Servers
- You have to use Windows Server 2012 R2
- Be sure that you have updated your Server (especially KB2919355)
- The VM requires two Network Adapters