From the course: AWS Administration: Security Operations

Unlock the full course today

Join today to access over 22,500 courses taught by industry experts or purchase this course individually.

Monitor activity with GuardDuty

Monitor activity with GuardDuty - Amazon Web Services (AWS) Tutorial

From the course: AWS Administration: Security Operations

Start my 1-month free trial

Monitor activity with GuardDuty

“

- [Instructor] One of the big changes you're starting to see with Amazon is the combination of jobs or tasks by larger services. GuardDuty is one of these services which allows you to turn over control of specific logs to GuardDuty to do continual analysis. You probably heard the term of machine learning which really means, a ton of compute power and because there's so much massive compute power, we can carry out millions upon millions of permutations looking at the data in many different ways. So what sort of data we're using to actually perform this GuardDuty analysis? Well we'll get to that but Amazon relies on their knowledge and some third-party companies to actually provide the baseline of information to do an analysis against your logs. So it's called Intelligent Threat Detection and it's continually monitoring and protecting your AWS workloads. The logs it's going to look at are CloudTrail logs which, of course…

Contents