Analyzing entities in Amazon Detective
An entity is a single object extracted from the source data. Examples include a specific IP address, Amazon EC2 instance, or AWS account. For a list of entity types, see Types of entities in the behavior graph data structure.
An Amazon Detective entity profile is a single page that provides detailed information about the entity and its activity. You might use an entity profile to get supporting details for an investigation into a finding or as part of a general hunt for suspicious activity.
Contents
- Using entity profiles
- Viewing and interacting with Detective profile panels
- Navigating directly to an entity profile or finding overview
- Pivoting from a profile panel to another console
- Exploring activity details on a profile panel
- Managing the scope time
- Viewing details for associated findings in Detective
- Viewing details for high-volume entities in Detective