This user guide covers the features, configuration steps, usage instructions, and terminology for Amazon GuardDuty.
Amazon GuardDuty is a threat detection service that continuously monitors your AWS accounts for malicious or unauthorized activity. This document serves as a comprehensive user manual, detailing how to enable the service, generate sample findings, and configure alerts via SNS.
The guide provides in-depth instructions on configuring protection for various data sources including Amazon CloudTrail, VPC Flow Logs, DNS logs, EKS, Lambda, RDS, S3, and Malware Protection. It also explains how to interpret investigation results, understand finding types, and manage service settings. This manual is written in Chinese.
GuardDuty is a threat detection service that continuously monitors your AWS accounts for malicious or unauthorized activity.
To begin, you must prepare by enabling the service and then generating sample findings to explore basic operations.