Microsoft has acquired Israeli cloud security vendor Aorato, to give its customers a new level of protection against threats through better visibility into their identity infrastructure. Aorato’s technology uses machine learning to detect suspicious activity on a company’s network. It understands what normal behavior is and then identifies anomalies, so a company can see suspicious behavior and take appropriate measures to help protect itself. Key to Aorato’s approach is the Organizational Security Graph, a continuously-updated view of all of the people and machines accessing an organization’s Windows Server Active Directory (AD). AD is used by most enterprises to store user identities and administer access to critical business applications and systems.