AWS security-ir documentation change
Summary
Updated references from 'AWS CIRT team' to 'Security Incident Response engineers' and fixed typo
Security assessment
Terminology updates and typo correction without security implications or new security documentation.
Diff
diff --git a/security-ir/latest/userguide/monitoring-and-investigation.md b/security-ir/latest/userguide/monitoring-and-investigation.md index e083852d2..603aa3844 100644 --- a//security-ir/latest/userguide/monitoring-and-investigation.md +++ b//security-ir/latest/userguide/monitoring-and-investigation.md @@ -7 +7 @@ -AWS Security Incident Response reviews and triages security alerts from Amazon GuardDuty and AWS Security Hub CSPM, then configures suppression rules based on your environment to prevent unnecessary alerts. The AWS CIRT team investigates non-triaged findings and quickly escalates and guides your team to rapidly contain potential issues. If desired, you can grant AWS Security Incident Response permission to implement containment actions on your behalf. +AWS Security Incident Response reviews and triages security alerts from Amazon GuardDuty and AWS Security Hub CSPM, then configures suppression rules based on your environment to prevent unnecessary alerts. Security Indcident Response engineers investigate findings and quickly escalates and guides your team to rapidly contain potential issues. If desired, you can grant AWS Security Incident Response permission to implement containment actions on your behalf. @@ -11 +11 @@ AWS Security Incident Response aligns to the NIST 800-61r2 [_Computer Security e -When the AWS Security Incident Response service identifies a security alert or you request security assistance, the AWS CIRT investigates. The team collects log events and service data such as GuardDuty alerts, triages and analyzes that data, performs remediation and containment activities, and provides post-incident reporting. +When the AWS Security Incident Response service identifies a security alert or you request security assistance, Security Indcident Response engineers investigate. The team collects log events and service data such as GuardDuty alerts, triages and analyzes that data, performs remediation and containment activities, and provides post-incident reporting.