(800) 849-6515
Microsoft released a PDF showing how to execute common attacks with PowerSploit, Mimikatz, etc and how ATA detects them.
More.