Azure Threat Protection (ATP)

Azure Threat Protection (ATP)

What is ATP

ATP is Azure Threat Protection cloud service that helps protect your organization from insider threats and compromised identities. It constantly monitors the domain controllers and analyzes events. It identifies threat patterns and their source, both on-premises and in the cloud.

In other words, ATP helps make sure that data is checked for security vulnerability when it comes in, goes out, or when it's just sitting around.


In Azure portal you might find costs about ATP. Costs that are calculated by MSFT. They can get generated because of the amount of data ingresses and egresses out of a storage account for malware scanning and reporting.
Azure Defender is a set of security scanning and reporting tools. There are Defender offerings for Compute, Storage, Networking etc. ATP for Storage is part of Defender for Storage offering, it covers Vulnerability scanning and specifically Malware detection for content coming in and out of a storage account.
This is part of Azure Defender for Storage and you can find more about Pricing—Microsoft Defender | Microsoft Azure

Microsoft Defender is enabled by default for all workspaces and these costs are part of the consumption for the workspace. 

Find more about Workspace costs

    • Related Articles

    • Using the Azure Portal

      DRE is suitable for any type of user. However, perhaps you already have lots of IT experience and you know your way around Azure. That's when it might be interesting to know that you can also access your workspace resources through the Azure Portal. ...
    • Azure Monitor Agent (AMA)

      Azure Monitor Agent (AMA) collects monitoring data from the guest operating system of Azure and hybrid virtual machines and delivers it to Azure Monitor for use by features, insights, and other services, such as Microsoft Sentinel and Microsoft ...
    • [Resolved] Microsoft Azure issues

      At this moment Microsoft Azure is experiencing issues which might impact several services, including starting, stopping and creation of Virtual Machines (VMs) and anything storage-related such as reaching the Z-drive. As myDRE is dependent on ...
    • FAQ

      In this article, we collect Frequently Asked Questions. Please create a ticket on this website or mail us at in case your question is not in this list, and you think it should be. The myDRE platform and anDREa What is ...
    • What is a workspace?

      A DRE workspace is a self-contained island where you can work and collaborate on your own data. Workspaces are especially suited for the analytical phase of your research; when you already have your data, and you need to prepare, combine and/or ...