Windows 10 Advanced Threat Protection (ATP) allows anyone with an E5 license to see under the hood and review what an attacker did to a system. It relies on telemetry that is enabled when the computer is linked to the ATP service. ATP can be used with McAfee or third-party antivirus software, but you must configure Defender in passive mode. The service will use a daily average bandwidth of 5MB to upload the daily activity to the data collection site. You can choose the location of the storage of the data, whether in the U.S, Europe or UK.”]