5 minutes
Introduction
- Guard Duty, Macie, Security Hub, are used to identify potential security issues or findings.
- Some security findings require deeper interoperation / analysis to isolate the root cause & take action - its a complete process.
- it investigates, analyzes & quickly identifies the root cause of security issue or suspecious activities (using ML or graphs)
- Automatically collects & process events from VPC flow logs, Cloud Trail, Guard Duty, & create a unified view.
- Produces Visualizations. (graphs)