Amazon Detective
Amazon Detective is a fully managed AWS security service that automatically collects log data from your AWS resources and uses machine learning, graph theory, and tailored visualizations to help security analysts investigate and identify the root cause of potential security issues or suspicious…
Key facts
- First appeared
- 2019
- Category
- technology
- Problem solved
- Before Amazon Detective, security analysts spent significant time manually collecting, correlating, and analyzing disparate log data from various AWS services (like CloudTrail, VPC Flow Logs, and GuardDuty findings) to understand the scope and root cause of security incidents. This process was time-consuming, prone to human error, and difficult to scale, especially in large and complex AWS environments. Detective was created to automate this aggregation and analysis, providing an integrated, behavior-based view to drastically reduce investigation time.
- Platforms
- AWS Cloud
Related technologies
Notable users
- Companies with dedicated Security Operations Centers (SOCs)
- Enterprises and organizations leveraging AWS for their infrastructure
- Cloud security practitioners
- Incident Response teams in cloud environments