Investigate threats and respond to incidents at petabyte scale through a comprehensive security data lake built specifically for AWS infrastructure. Ingest data from hundreds of security sources using prebuilt integrations and parsers automatically, detect threats using 800+ correlation rules tuned specifically for your environment, search across massive datasets using intuitive syntax compatible with Splunk SPL, store unlimited data in S3 for cost-effective long-term retention, enrich alerts automatically by pulling threat intelligence and asset context into a unified security graph, and modernize SOC operations without retraining analysts on new query languages or interfaces.