Join this session to learn about an investigation methodology for AWS control plane security incidents and a demonstration on a GuardDuty alert, while diving deep into technical aspects of CloudTrail logging. Attendees will also be able to see how these technical details can enable accurate and speedy threat investigations.