aws-guardduty

Code examples for the AWS Security Blog post: How to use CI/CD to deploy and configure AWS security services with Terraform

A Lambda-powered Security Orchestration framework for AWS GuardDuty

Enables AWS GuardDuty and sends findings to an SNS topic.

Deep Security's APIs make it simple to integration with a variety of AWS Services

Perform file-based malware scan on your on-prem servers with AWS

Configure and deploy AWS GuardDuty.

Go straight from Guard Duty alerts to Automated Investigations in AWS with Cado Response

CloudFormation Template that leverages a Custom Resource to invoke a Lambda Function that configures Amazon GuardDuty across the Organization. Specifically this has been designed for the purpose of implementing via Customisations for Control Tower

This repo contains the lambda function code that can leverage AWS GuardDuty findings to prevent malicious IPs and domains from accessing your AWS hosted applications by using threat intel from the GuardDuty findings and using it to complement Illumio policy rules

🛡️ Splunk SIEM — I am build SOC Analyst Portfolio project ya lab | 8 Dashboards with step-by-step lab guides covering SSH brute-force, Web Traffic, DNS, FTP, SMTP, DHCP, Tunnel & AWS GuardDuty cloud threat detection. Includes SPL queries, importable XML, 8,701 sample events & MITRE ATT&CK mapping.

Easily identify IAM users that have triggered GuardDuty findings.

This project showcases the process of assessing the security state of a sample web app deployed in AWS and the process of hardening its security. Project 3 from the AWS Cloud Architect Nanodegree from Udacity. Misc: Security Monitoring in AWS.

AWS Professional Services Hub

batCAVE Security Data Lake daily reporting automation

Cloud-native SOAR pipeline: GuardDuty + EventBridge + Lambda auto-remediation | IAM misconfiguration + S3 exfiltration detection | 10 AWS services | MTTR < 30s

Provisioning AWS Landing Zone with AWS CLI

AWS GuardDuty demo with S3, RDS, EC2

Demonstrates enabling GuardDuty S3 Malware Protection for an S3 bucket.

In this project, I deploy and assess a simple web application environment’s security posture. I have a chance to test the security of the environment by simulating an attack scenario and exploiting cloud configuration vulnerabilities. Similarly, I set up monitoring to identify suspicious behavior and vulnerable configurations and will remediate …