Amazon Detective

Analyze and visualize security data to investigate potential security issues

Try a 30-day free trial

How it works

Amazon Detective simplifies the investigative process and helps security teams conduct faster and more effective investigations. With the Amazon Detective prebuilt data aggregations, summaries, and context, you can quickly analyze and determine the nature and extent of possible security issues.

Diagram showing how Amazon Detective investigates potential security issues.
什麼是 Amazon Detective? (01:34)
什麼是 Amazon Detective?
Amazon Detective 可自動從您的 AWS 資源中收集日誌資料,並使用機器學習 (ML)、統計分析和圖論來建置關聯的資料集,讓您能夠更有效地進行安全調查。

Use cases

Triage security findings

Verify or disprove suspicious findings by investigating AWS Identity and Access Management (IAM) roles, users, IP addresses, and AWS accounts.

Learn more about threat verification »

Investigate incidents

Determine the extent of malicious activity, its impact, and the underlying cause by analyzing relevant historical activities for patterns.

Learn more about investigating activity »

Track down threats

Focus on specific resources, such as Amazon Elastic Compute Cloud (EC2) instances, and review detailed visualizations of associated activities.

Learn more about discovering threats »

How to get started

Explore Amazon Detective

Learn how to use Amazon Detective to investigate suspicious activity.

Contact an expert

Triage security findings, pin down threats, and investigate suspicious activity.

Learn the basics

Gain a foundational understanding of Amazon Detective.


探索更多 AWS 服務