domains / families / security / performing-cloud-native-threat-hunting-with-aws-detective

performing-cloud-native-threat-hunting-with-aws-detective

separate

Investigate AWS security incidents using Amazon Detective's behavior graphs,

When to use

• triaging GuardDuty findings
• investigating a suspected AWS compromise
• reconstructing an attacker's activity timeline
• tracing entity timelines
• profiling IAM users, roles, EC2 instances, and IP addresses
• detecting lateral movement between accounts
• correlating GuardDuty findings into coherent attack narratives

Skill page

Source