Analyze and visualize security data to investigate potential security issues

What is Detective?

Amazon Detective automatically collects log data from your AWS resources and uses machine learning (ML), statistical analysis, and graph theory to build a dataset that you can use to conduct more efficient security investigations.

Benefits of Detective

Security investigations

Determine potential security issues through a unified view of user and resource interactions.

Save time

Save time and effort with graph models that automatically summarize security-related relationships running on AWS.

Investigate and respond

Investigate and respond to security findings with streamlined visualizations.

Accelerate investigations

Accelerate security investigations with generative AI insights to more quickly comprehend threats

Use cases

Triage security findings

Verify or disprove suspicious findings by investigating AWS Identity and Access Management (IAM) roles, users, IP addresses, and AWS accounts.

Investigate incidents with interactive visualizations

Determine the extent of malicious activity, its impact, and the underlying cause by analyzing relevant historical activities for patterns.

Track down threats

Focus on specific resources, such as Amazon Elastic Compute Cloud (EC2) instances, and review detailed visualizations of associated activities.

Scale efficiency in security investigations with generative AI

Analyze, summarize, and more rapidly comprehend threats for security investigations.