/AWS1/CL_DET=>GETINVESTIGATION()
¶
About GetInvestigation¶
Detective investigations lets you investigate IAM users and IAM roles using indicators of compromise. An indicator of compromise (IOC) is an artifact observed in or on a network, system, or environment that can (with a high level of confidence) identify malicious activity or a security incident. GetInvestigation
returns the investigation results of an investigation for a behavior graph.
Method Signature¶
IMPORTING¶
Required arguments:¶
IV_GRAPHARN
TYPE /AWS1/DETGRAPHARN
/AWS1/DETGRAPHARN
¶
The Amazon Resource Name (ARN) of the behavior graph.
IV_INVESTIGATIONID
TYPE /AWS1/DETINVESTIGATIONID
/AWS1/DETINVESTIGATIONID
¶
The investigation ID of the investigation report.