ConceptsAWS CloudTrail Investigation
AWS CloudTrail Investigation
Using AWS CloudTrail logs, which record API calls and account activity, to investigate a cloud incident: who did what, from where, and when. It is the primary evidence source for AWS control-plane actions.
0 direct links6 lessons
Concept Neighborhood
No connected concepts linked yet.
Related Lessons
6 lessons cover this conceptCloud IR Versus on-Premises IR
Cloud Security Engineer
AWS Incident Investigation
Cloud Security Engineer
Azure Incident Investigation
Cloud Security Engineer
Cloud Forensics: Collection and Preservation
Cloud Security Engineer
Cloud-Specific Incident Types
Cloud Security Engineer
Cloud IR Playbooks and Automation
Cloud Security Engineer
Sign in to open lesson content directly.