Accelerate Threat Investigation With Sophos and Amazon Web Services (AWS)
Transform threat prevention, detection, and response in the cloud
Combining the power of AI and automation, security findings across your AWS environments are now connected and brought to life with Sophos Cloud Optix and Amazon Detective.
Connecting Activity to Spot Threats Sooner
Sophos Cloud Optix and Amazon Detective enable security teams to rapidly investigate suspicious behavior across AWS accounts and identify the AWS resources being targeted. Connecting disparate actions such as failed logon attempts and suspicious API calls across on organizations AWS accounts, the service takes Cloud Optix threat hunting to a new level with an interactive and intuitive set of linked data, the Amazon Detection graph.
Interactive Data
The machine learning built into Amazon Detective allows you to follow event pathways through an interactive set of intuitive data, enabling teams to investigate how alerts relate to AWS resources.
Rapid Investigation
Connect disparate actions across your AWS accounts to rapidly investigate security findings, identify patterns that may indicate a connected security incident, and see all affected resources.
Fully Integrated
Amazon Detective is fully integrated with Amazon GuardDuty, allowing you to pivot from a security finding generated by GuardDuty in Cloud Optix to the Amazon Detective console for detailed investigation.
Secure Your Cloud With Sophos
Sophos Cloud Optix and Amazon Detective transform your AWS security posture, delivering the continuous analysis and visibility needed to detect, respond, and prevent hidden security and compliance gaps that leave them exposed. It provides a single view of security posture across AWS, native and managed Kubernetes clusters (Amazon EKS), and Infrastructure-as-Code environments.
* Access to the Amazon Detective console is available through Cloud Optix. Use of the Amazon Detective service requires an additional subscription via the Amazon Detective console.