AWS security-ir documentation change
Summary
Replaced references to 'CIRT responders' and 'Customer Incident Response Team (CIRT)' with 'Security Incident Response engineers' terminology
Security assessment
Change involves terminology updates (CIRT to Security Incident Response engineers) without introducing new security concepts or addressing vulnerabilities.
Diff
diff --git a/security-ir/latest/userguide/external-tooling.md b/security-ir/latest/userguide/external-tooling.md index 832dccf03..0e8f12a2f 100644 --- a//security-ir/latest/userguide/external-tooling.md +++ b//security-ir/latest/userguide/external-tooling.md @@ -9 +9 @@ Security Incident Response integrates with external tools and partners in multip - * _SIEM integration:_ CIRT responders help analyze and investigate those findings in parallel with your team when you submit AWS-supported cases. We identify correlations across hybrid and multi-cloud environments, helping scope threat actor movements between providers. + * _SIEM integration:_ Security Incident Response engineers help analyze and investigate those findings in parallel with your team when you submit AWS-supported cases. We identify correlations across hybrid and multi-cloud environments, helping scope threat actor movements between providers. @@ -11 +11 @@ Security Incident Response integrates with external tools and partners in multip - * _Enhances your existing security operations:_ We replace traditional GuardDuty response workflows with a more efficient, parallel response model. Many organizations currently utilize SIEM technology for detection workflows through case management, this service provides a streamlined alternative specifically for GuardDuty (and select Security Hub) findings. The solution leverages sophisticated auto-triage technology with human oversight to create proactive cases in your portal, simultaneously alerting your response team and engaging our Customer Incident Response Team (CIRT) for coordinated remediation efforts. + * _Enhances your existing security operations:_ We replace traditional GuardDuty response workflows with a more efficient, parallel response model. Many organizations currently utilize SIEM technology for detection workflows through case management, this service provides a streamlined alternative specifically for GuardDuty (and select Security Hub) findings. The solution leverages sophisticated auto-triage technology with human oversight to create proactive cases in your portal, simultaneously alerting your response team and engaging our Security Incident Response engineers for coordinated remediation efforts. @@ -13 +13 @@ Security Incident Response integrates with external tools and partners in multip - * _Third-party investigation teams:_ Our CIRT responders collaborate directly with your partners and MDR providers. We offer tabletop exercises to establish effective processes and integration of mechanisms for your subscription. + * _Third-party investigation teams:_ Our Security Incident Response engineers collaborate directly with your partners and MDR providers. We offer tabletop exercises to establish effective processes and integration of mechanisms for your subscription.