Advanced Threat Analytics has been added to the Enterprise CAL Suite, the ECAL Bridges, as well as the Enterprise Mobility Suite and the Enterprise Cloud Suite. However, it’s also available as a standalone offering and there’s a new licensing datasheet explaining all. Essentially it’s a Client Management Licence model which can be purchased, as usual, by user or OSE.
The licensing datasheet also has a useful FAQ page – find it here in the Core Infrastructure section: http://bit.ly/MSlicensingguides.