ATA on Technet: https://technet.microsoft.com/en-us/library/dn707706.aspx
ATA deployment demo: https://www.youtube.com/watch?v=xvWJssUpU6w
Blog: https://social.technet.microsoft.com/Forums/security/en-US/home?forum=mata
Additional resources:
Powershell windows forensics: https://github.com/Invoke-IR/PowerForensics
Powershell windows forensics: https://github.com/gfoss/PSRecon
Powershell windows forensics: https://github.com/davehull/Kansa
http://www.powershellmagazine.com/2014/07/18/kansa-a-powershell-based-incident-response-framework/
