Microsoft Advanced Threat Analytics multiple forest support

Q. Can a single Microsoft Advanced Threat Analytics Center deployment support multiple forests?

A. No. At time of writing an ATA Center instance supports a single forest. You would need a separate ATA Center instance for each forest that you wish to monitor. This will change in the future. Additionally at this time you cannot link multiple ATA Center instances.