Searching and Correlating Security Threats Using Amazon Detective

In this lesson, we will discuss how Amazon Detective can be used to search and correlate security threats in your AWS environment.

Learning Objectives

• Define Amazon Detective
• Understand how Detective is used to search and correlate security threats when analyzing findings or investigating suspicious activity within your AWS accounts
• Describe Detective's pricing model along with some of its latest features

Intended Audience

• Anyone in a security role who may need to perform a root cause analysis or investigate security findings across AWS accounts
• Anyone who is preparing to take the AWS Certified Security - Specialty (SCS-C02) exam

Prerequisites

• Have a basic understanding of AWS security services like GuardDuty and Security Hub
• Have some experience designing, implementing, and securing solutions in the AWS Cloud