Basics of Amazon Detective

In this course, you will gain a foundational understanding of Amazon Detective. This Amazon Web Services (AWS) security service makes it easy to analyze, investigate, and quickly identify the root cause of potential security issues or suspicious activities. Detective automatically collects log data from your AWS resources and uses machine learning, statistical analysis, and graph theory to build a linked set of data. This course provides familiarity with Detective and helps you to easily conduct faster and more efficient security investigations. Course provided by Amazon Web Services (AWS).

• Course level: Fundamental
• Duration: 20 minutes

Activities

This digital course includes presentations, demonstrations, and videos.

Course objectives

After completing this course, you should be able to:

• Identify how Detective addresses current security incidents and investigation challenges.
• Describe use cases and key concepts of the Detective service.
• Compare and contrast Detective with other AWS incident response services.
• Identify prerequisites and best practices to get started with Detective.
• Complete a walk-through demonstration of the Detective service.

Intended audience

This course is intended for:

• Cloud professionals
• Security investigators
• Software developers
• DevOps administrators
• IT administrators
• Network administrators

Prerequisites

We recommend that attendees of this course have:

• AWS Certified Cloud Practitioner (recommended)
• AWS Certified Security – Specialty (recommended)

Course outline

• Amazon Detective key concepts
• Incident investigation with Amazon Detective
• Amazon Detective benefits in incident response domain
• Amazon Detective pricing
• Prerequisites for adopting Amazon Detective
• Best practice recommendations
• Service walk-through demonstration