Amazon Detective - Reduce time to investigate Amazon GuardDuty findings by grouping related findings

Опубликовано 6 января 2023, 22:30

Amazon Detective automatically groups related GuardDuty findings to help security analysts reduce triage time and create a more comprehensive security investigation. Detective uses machine learning (ML) to group related GuardDuty findings that in isolation may have been ignored but together show the lifecycle of an attack, which can help security analysts identify advanced threats more easily. Available under the Summary page, Detective shows groups of related GuardDuty findings with severity, all affected AWS accounts, and resources. In addition, Detective maps the evolution of findings to tactics, techniques, and procedures (TTP) from the MITRE ATT&CK framework - a well adopted framework for security and threat detection.

Learn more at: go.aws/3VR9I7R

Interested in self-paced digital training on this service? Visit AWS Skill Builder to take the Getting Started with Amazon Detective course: explore.skillbuilder.aws/learn...

Subscribe:
More AWS videos - bit.ly/2O3zS75
More AWS events videos - bit.ly/316g9t4

ABOUT AWS
Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform, offering over 200 fully featured services from data centers globally. Millions of customers — including the fastest-growing startups, largest enterprises, and leading government agencies — are using AWS to lower costs, become more agile, and innovate faster.

#AmazonDetective #AmazonGuardDuty #ThreatIntelligence #IncidentResponse #SecurityIncidentResponse, #TTP #Detective #AWS #AmazonWebServices #CloudComputing