February 2020
Intermediate to advanced
440 pages
13h 51m
English
In this recipe, we will learn to set up and use Amazon GuardDuty. GuardDuty analyzes data from sources such as CloudTrail, VPC flow logs, and DNS logs, and uses machine learning, anomaly detection, and integrated threat intelligence to find malicious activities and unauthorized behavior. GuardDuty can be integrated with CloudWatch and SNS to raise alarms and send notifications. GuardDuty can also aggregate data from multiple accounts.
Read now
Unlock full access