Advanced Threat Assessment Service is installed on a server and the assessment tool is downloaded from the server web console and deployed to endpoints on the network. You can deploy the assessment tool using Microsoft Active Directory or System Center Configuration Manager (SCCM).
The following summarizes the installation process:
Install Advanced Threat Assessment Service on a server.
Deploy the assessment tool to endpoints using Active Directory or SCCM to scan files and process, and generate a scan report. See Assessment Tool Deployment.
The assessment tool runs in the background on endpoints and sends scan reports to the server.