Azure Advanced Threat Protection is a new offering from Microsoft that pulls in data from your domain controllers using multiple protocols and event log parsing to identify potential threats and account compromises with data from your environment, the Microsoft Security Graph, and machine learning to help protect your environment.