What is the Difference between McAfee ATP and ATD. What are the recommendations to do it. Why we are using ATP when we have ATD. Can some one help me, does both are doing same job or where we can find differces between the job nature.
Differences are that ATP is optional ENS module while ATD is separate sandboxing appliance(virtual or physical). Another one is their analysis type and results - ATD is much more detailed and configurable but lacks some options like Dynamic Application Containment. In short - ATD is more advance and extends ATP basic functions as you can see below:
On the other side, they both share GTI reputation checks for optimizing machine learning and they both have similar analysis order: