1AWS🔍GuardDuty Findingthreat detection
2AWS📋Security Hubaggregated findings
3AWS🔒Macie PII Alertdata classification
ENRICHMENT
4AWS⚡EventBridgeevent routing
5AWS📚CloudTrail Enrich50 events context
6🌐Threat IntelIP reputation
AI TRIAGE
7CORE🎯MITRE ATT&CKTTP classification
8AWS📝Narrative Genplain-English report
9🔴Severity Checkscore >= 7.0?
RESPONSE
10AWS🚫Auto-Containisolate + snapshot
11AWS🔑IAM Analyzerleast-privilege
12📢Alert Routingseverity-based
13AWS📊Compliance SweepSOC 2 daily check