Questions tagged with Threat Detection

AWS Community, I am very new to working with AWS so forgive my ignorance. I am working on an app that uses Guard Duty (GD) to scan S3 for malware. In order to test some features for the app, I need to...

Hello, I'm encountering an issue with Amazon Cognito’s advanced security features. When a user receives an Account Takeover notification email and clicks the “This was me” or “This wasn’t me” link (...

We have an EC2 Linux (Ubuntu 22.04) t.2 medium instance running a Node based backend service with one port open (behind our LB and WAF & Shield protection). Recently we noticed intermittent CPU usage ...

Hi all I've configured Cognito to remember devices and allow device auth (DEVICE_SRP_AUTH) once an initial login **with** email MFA has occurred. What I'd now like to do is use adaptive authenticati...

Is there any way to enable guard duty's S3 protection for only some buckets? As an example I have a bucket that stores company logos and profile pictures. I don't want all these access events monitor...

Per the recommendations from the Security pillar of a Well Architected Review conducted on our accounts, our company enabled Security Hub for a centralized view of security findings and Guard Duty for...

In the Windows log, I noticed an error 36874; "An TLS 1.2 connection request was received from a remote client application, but none of the cipher suites supported by the client application are suppor...

When I signed up for AWS there was already configurations that were being used that I did not set up at all, I had never used the service before. There was Kubernetes, Lambda, VPC set up and activate...

Hi Team, Im aware Guardduty is used for threat detection based on the API calls. Im struck where not all logs are appearing in the Guardduty. I have a control tower setup with organization enabled wh...

Our company is considering purchasing a partner threat list for GuardDuty to generate additional findings. What has been others experience with that? Is the default Amazon threat list good enough? ...

Hello All, Does anyone experience False Positives with GuardDuty? If yes, what do you do to tune or update false positive findings? What options do customers have? Recently, i've notice a lot o...