Episode #125 of the Stack Overflow podcast is here. We talk Tilde Club and mechanical keyboards. Listen now

Questions tagged [amazon-guardduty]

Amazon GuardDuty is a managed threat detection service that continuously monitors for malicious or unauthorized behavior to help you protect your AWS accounts and workloads

Filter by
Sorted by
Tagged with
0
votes
0answers
57 views

Understanding AWS GuardDuty NetworkPortUnusual findings

Today I received my first alert from AWS GuardDuty that concerns me though I'm not sure how to assess the severity. I received what appears to be an outgoing connection (or at least an attempt) to an ...
4
votes
2answers
2k views

CloudWatch trigger for a range of GuardDuty severities

I want to edit my CloudWatch rule so that it only triggers an SNS topic for "GuardDuty findings" that fall in the High severy range, defined by AWS as the value of the severity parameter in the ...