Microsoft Advanced Threat Analytics is a great tools which analyses the active directory traffic and take advantage of Machine learning technology in-order to understand the behavior of traffic or requests coming to active directory and give a red flag in case of any anomalies detected or observed.
There are 2 Major components in the Advanced Threat Analytics solution, which are:
1. ATA Center
2. ATA Gateway or ATA Light weight Gateway
ATA Light weight gateway is a new release with lighter version of Agent which can be deployed directly on the Domain controller, so that their is no need of maintaining a dedicated server ATA Gateway Application.
Here are some of the important docs to start with Microsoft Threat Analytics, Happy Learning.
Microsoft Advanced Threat Analytics