Amazon Detective

MEDIUM

Amazon Detective aids in investigating security incidents identified by GuardDuty, analyzing billions of data points to enable forensic investigations and root cause analysis through graph modeling. (source_page 1)

Learning Objectives

Understand the primary purpose of Amazon Detective within AWS security.
Identify how Amazon Detective assists in investigating security incidents.
Recognize the analytical method Amazon Detective uses for threat analysis.

Core Functionality

Amazon Detective's primary role is to assist with security incident investigations.

Amazon Detective aids in investigating security incidents identified by GuardDuty.

Analytical Approach

Detective provides deep analytical capabilities for forensic investigations.

It analyzes billions of data points to investigate security incidents and potential threats. This process enables forensic investigations and root cause analysis through graph modeling.

Technical Specs: Analyzes billions of data points

Use Cases

Practical applications for Amazon Detective.

Amazon Detective is used for visual investigation of threats and understanding incident impact.

Content Sources

Security Services Review Automated and Repeatable Deployments Amazon Elastic Compute Cloud (EC2) Amazon Inspector: Automated Vulnerabi... AWS Config ⚙️ Extracted: 2026-03-25T01:05:05.967831+00:00 Model: gemini-2.5-flash