Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/shiroinekotfs/ata-port-patch
Guide to patch Microsoft ATA to another port, not 443
https://github.com/shiroinekotfs/ata-port-patch
iis-net microsoft microsoft-ata
Last synced: about 2 months ago
JSON representation
Guide to patch Microsoft ATA to another port, not 443
- Host: GitHub
- URL: https://github.com/shiroinekotfs/ata-port-patch
- Owner: shiroinekotfs
- License: mit
- Created: 2024-10-16T13:29:20.000Z (2 months ago)
- Default Branch: main
- Last Pushed: 2024-10-18T06:12:01.000Z (2 months ago)
- Last Synced: 2024-10-19T07:25:08.966Z (2 months ago)
- Topics: iis-net, microsoft, microsoft-ata
- Homepage:
- Size: 747 KB
- Stars: 2
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# Microsoft ATA Port Patch
Guide to patch Microsoft ATA to another port, not 443
## About Microsoft ATA
According to Microsoft Documentation:
> Microsoft Advanced Threat Analytics (ATA) is an on-premises platform that helps protect your enterprise from multiple advanced targeted cyber attacks and insider threats.
Microsoft ATA works as the Microsoft Defender gateway, delivering security notifications and threat-resolving guidance for system administrators.
However, due to the release of Microsoft Defender XDR, ATA has reached its final release.
> ATA Mainstream Support ended on January 12, 2021. Extended Support will continue until January 2026. For more information, [read this blog from Microsoft](https://techcommunity.microsoft.com/t5/security-compliance-and-identity/end-of-mainstream-support-for-advanced-threat-analytics-january/ba-p/1539181).
>
> Do not click on the link highlighted by the word "try" - it is a logout button. 😂
## Perquisites
1. The primary target is running the ATA gateway with IIS Installed on Windows Server without removing or stopping the "Default Web Site" web service.
2. Security. You can move to another port that is hard to detect or is too far from any normal range of ports, preventing it from being a target of a potential attack.