AWS Cloud Log Forensics with Athena

This skill empowers security engineers and incident responders to perform high-speed forensic investigations across massive AWS log datasets. By leveraging Amazon Athena with partition projection, it automates the creation of schemas for CloudTrail, VPC Flow Logs, S3, and ALB logs. It provides a library of forensic-grade SQL queries designed to detect critical threats such as privilege escalation, lateral movement, data exfiltration, and unauthorized API calls, allowing teams to reconstruct security events and hunt for indicators of compromise without manual data management overhead.

主要功能

使用场景