Cloudtrail Dashboards

CloudTrail Monitoring and Alerting

• http://www.tenable.com/blog/amazon-cloudtrail-monitoring-with-securitycenter-continuous-view
• https://www.cloudlytics.com/product/index/aws-cloudtrail-log-analytics
• http://githublemming.github.io/
• https://twitter.com/BigsnarfDude/status/709270243202347010
• http://logz.io/blog/integrate-aws-cloudtrail-elk-stack/

Are Overview Reports helpful?

• Top 10 Events
• Top 10 Locations
• Top 10 Access Keys
• Top 10 Services
• Top 10 Ip Addresses
• Unauthorized Access

Activity reports helpful?

• List of Instances
• Errors
• Instance Activities

Audit reports helpful?

• List Users
• List Keys
• Access Keys Used
• Locations Used
• User activities
• User patterns

Machine Learning and Data Mining helpful?

• https://bigsnarf.wordpress.com/2016/05/11/identify-compromised-logins/