Tools/Amazon_Detective
Amazon Detective
Automated visualization and root-cause investigation of security findings, correlating VPC Flow Logs, CloudTrail, and GuardDuty data to speed up incident investigation. No single open-source tool auto-generates the same visual correlation graphs; the closest combination is Wazuh for log correlation plus TheHive (open-source incident-response case management/investigation platform) for structuring the investigation itself.