Study Guides/AWS Cybersecurity Notes/Amazon Detective

Study Guides > AWS Cybersecurity Notes > Amazon Detective

• Allows analysis of security issues.

• Makes understanding the nature and scope of incidents easier.

Tool uses:

• Machine Learning

• Stastical Analysis

• Graph theory

Gaters data from:

• AWS CLoudTrail logs

• VPC Flow Logs

• Guard Duty Findings

Data is aggregated into interactive dashboards.

Aims to reduce the time it takes to investigate an incident.

• Places the information in context.

• Allows teams to take the correct action.

• Provides a central view of security information.