thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Cloud Computing · Intermediate

Amazon GuardDuty

AWS intelligent threat detection service analyzing CloudTrail, VPC Flow Logs and DNS logs to find malicious activity.

Definition

GuardDuty uses threat intelligence, anomaly detection and machine learning to produce findings such as cryptocurrency mining, credential exfiltration and reconnaissance. Optional protection plans cover S3, EKS, runtime monitoring, malware scanning, RDS login activity and Lambda. It requires no agents for foundational sources and can be managed across an organization.

Example

GuardDuty reports an EC2 instance communicating with a known command-and-control server.

Exam tip

GuardDuty detects threats; Inspector finds vulnerabilities; Macie finds sensitive data. Know which is which.

Related terms