Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
Examine and visualize security information to swiftly uncover the underlying causes of possible security threats. Amazon Detective simplifies the process of analyzing and investigating, allowing for a quick identification of the origins of potential security concerns or unusual behaviors. By automatically gathering log data from your AWS resources, Amazon Detective employs machine learning, statistical methods, and graph theory to create an interconnected dataset that facilitates quicker and more efficient security probes. Additionally, AWS security services, such as Amazon GuardDuty, Amazon Macie, and AWS Security Hub, along with third-party security solutions, can help recognize potential security issues or alerts. These tools are invaluable for notifying you of irregularities and guiding you on how to resolve them. However, there may be instances when a security alert requires a deeper investigation, necessitating a thorough analysis of additional information to pinpoint the root cause and take appropriate action. Such comprehensive investigations can enhance your overall security posture and responsiveness to threats.
Description
Incident Insight is a cloud-hosted software solution designed for incident investigation and root-cause analysis, allowing organizations to visually chart, assess, and derive lessons from previous incidents to implement preventive measures against future occurrences. This tool streamlines and speeds up the conventional process of incident investigation by providing features like drag-and-drop diagram creation, customizable metadata, and user-friendly tools for constructing diagrams that dissect various elements such as threats, events, barriers, causes, and root causes, thereby offering users a comprehensive understanding of what transpired and the reasons behind it. Teams can document barrier failures, incorporate supporting documents, and attach images or files, as well as analyze and compare data across different diagrams. Additionally, it facilitates the sharing of findings through live workspace links, downloadable images, or by exporting reports in Word or Excel formats, making it ideal for presentations and documentation. With its cloud-based nature, Incident Insight promotes seamless collaboration, allowing multiple team members to engage and cooperate from any location. This flexibility enhances teamwork and ultimately leads to more robust incident management practices.
API Access
Has API
No
API Access
Has API
No
Integrations
AWS App Mesh
Yes
AWS CloudTrail
Yes
AWS Security Hub
Yes
Amazon GuardDuty
Yes
Amazon Macie
Yes
Cority
No
Microsoft Excel
No
Microsoft Power BI
No
Microsoft Word
No
Sophos Cloud Optix
Yes
Integrations
AWS App Mesh
No
AWS CloudTrail
No
AWS Security Hub
No
Amazon GuardDuty
No
Amazon Macie
No
Cority
Yes
Microsoft Excel
Yes
Microsoft Power BI
Yes
Microsoft Word
Yes
Sophos Cloud Optix
No
Pricing Details
No price information available.
Free Trial
Yes
Free Version
No
Pricing Details
No price information available.
Free Trial
No
Free Version
No
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
Yes
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
Yes
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
No
In Person
No
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
Yes
In Person
No
Vendor Details
Company Name
Amazon
Founded
1994
Country
United States
Website
aws.amazon.com/detective/
Vendor Details
Company Name
Salus Suite
Country
United States
Website
incident-insight.com
Product Features
IT Security
Anti Spam
No
Anti Virus
No
Email Attachment Protection
No
Event Tracking
No
IP Protection
No
Internet Usage Monitoring
No
Intrusion Detection System
No
Spyware Removal
No
Two-Factor Authentication
No
Vulnerability Scanning
No
Web Threat Management
No
Web Traffic Reporting
No
Network Security
Access Control
No
Analytics / Reporting
No
Compliance Reporting
No
Firewalls
No
Internet Usage Monitoring
No
Intrusion Detection System
No
Threat Response
No
VPN
No
Vulnerability Scanning
No
Product Features
Incident Response
Attack Behavior Analytics
No
Automated Remediation
No
Compliance Reporting
No
Forensic Data Retention
No
Incident Alerting
No
Incident Database
No
Incident Logs
No
Incident Reporting
No
Privacy Breach Reporting
No
SIEM Data Ingestion / Correlation
No
SLA Tracking / Management
No
Security Orchestration
No
Threat Intelligence
No
Timeline Analysis
No
Workflow Automation
No
Workflow Management
No