{"id":1102,"date":"2017-11-29T11:32:03","date_gmt":"2017-11-29T15:32:03","guid":{"rendered":"https:\/\/solutionsreview.com\/security-information-event-management\/?p=1102"},"modified":"2017-11-29T12:03:35","modified_gmt":"2017-11-29T16:03:35","slug":"aws-announces-threat-detection-service-amazonguard","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/security-information-event-management\/aws-announces-threat-detection-service-amazonguard\/","title":{"rendered":"AWS Announces Threat Detection Service Amazon GuardDuty"},"content":{"rendered":"

\"\"<\/a><\/p>\n

Online retail and cloud-computing giant Amazon.com has\u00a0announced\u00a0Amazon\u00a0GuardDuty<\/a>, a fully managed intelligent threat detection service that helps customers protect their AWS accounts and workloads by continuously monitoring account activity for malicious or unauthorized behavior.<\/p>\n

Once activated, Amazon GuardDuty begins analyzing network activity to establish baseline behavior for each AWS client.\u00a0It\u00a0utilizes\u00a0AWS\u00a0CloudTrail\u00a0and Amazon VPC Flow\u00a0Logs\u00a0and\u00a0applies machine learning algorithms to identify any\u00a0discrepancies\u00a0or abnormal\u00a0behavior; this can\u00a0include\u00a0an unusual instance type being deployed in a region that has never been used\u00a0or an attempt to obscure user activity by disabling AWS\u00a0CloudTrail\u00a0logging.<\/p>\n

When\u00a0anomalies are detected, Amazon\u00a0GuardDuty\u00a0delivers\u00a0a\u00a0security\u00a0alert to the AWS account owner and offers recommendations to\u00a0quarantine\u00a0or remove the issue.\u00a0Amazon\u00a0GuardDuty\u00a0operates completely on the AWS\u00a0infrastructure\u00a0and does\u00a0not require\u00a0hardware or software updates or\u00a0installations.\u00a0It can be activated instantly via the AWS Management Console.<\/p>\n

Amazon GuardDuty can send all findings to AWS CloudWatch Events and supports API endpoints, allowing for interoperability with third-party solutions. Amazon GuardDuty also incorporates threat intelligence feeds from CrowdStrike<\/a>, Proofpoint<\/a>, and the AWS Security Team to help identify and protect customers from known bad actors.<\/p>\n

“Amazon\u00a0GuardDuty\u00a0intelligently identifies hard-to-detect threats that might slip through the cracks of other security products and easily scales to meet the needs of any organization, whether they have two AWS accounts or two thousand,” says\u00a0Stephen Schmidt, Chief Information Security Officer for\u00a0Amazon Web Services.<\/p>\n","protected":false},"excerpt":{"rendered":"

Online retail and cloud-computing giant Amazon.com has\u00a0announced\u00a0Amazon\u00a0GuardDuty, a fully managed intelligent threat detection service that helps customers protect their AWS accounts and workloads by continuously monitoring account activity for malicious or unauthorized behavior. Once activated, Amazon GuardDuty begins analyzing network activity to establish baseline behavior for each AWS client.\u00a0It\u00a0utilizes\u00a0AWS\u00a0CloudTrail\u00a0and Amazon VPC Flow\u00a0Logs\u00a0and\u00a0applies machine learning algorithms […]<\/p>\n","protected":false},"author":41,"featured_media":1103,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[3],"tags":[469,61,60,374,468,343,470,22],"acf":[],"yoast_head":"\nAWS Announces Threat Detection Service Amazon GuardDuty<\/title>\n<meta name=\"description\" content=\"AWS announces fully managed threat detection service Amazon GuardDuty to help customers protect their workloads and monitor their accounts.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/security-information-event-management\/aws-announces-threat-detection-service-amazonguard\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"AWS Announces Threat Detection Service Amazon GuardDuty\" \/>\n<meta property=\"og:description\" content=\"AWS announces fully managed threat detection service Amazon GuardDuty to help customers protect their workloads and monitor their accounts.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/solutionsreview.com\/security-information-event-management\/aws-announces-threat-detection-service-amazonguard\/\" \/>\n<meta property=\"og:site_name\" content=\"SIEM Tools & Security Event Management | Solutions Review\" \/>\n<meta property=\"article:published_time\" content=\"2017-11-29T15:32:03+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2017-11-29T16:03:35+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2017\/11\/AmazonGuard-HQ-photo-reuse-resized.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"800\" \/>\n\t<meta property=\"og:image:height\" content=\"400\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Ben Canner\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ben Canner\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/aws-announces-threat-detection-service-amazonguard\/\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/aws-announces-threat-detection-service-amazonguard\/\",\"name\":\"AWS Announces Threat Detection Service Amazon GuardDuty\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/aws-announces-threat-detection-service-amazonguard\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/aws-announces-threat-detection-service-amazonguard\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2017\/11\/AmazonGuard-HQ-photo-reuse-resized.jpg\",\"datePublished\":\"2017-11-29T15:32:03+00:00\",\"dateModified\":\"2017-11-29T16:03:35+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\"},\"description\":\"AWS announces fully managed threat detection service Amazon GuardDuty to help customers protect their workloads and monitor their accounts.\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/aws-announces-threat-detection-service-amazonguard\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/security-information-event-management\/aws-announces-threat-detection-service-amazonguard\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/aws-announces-threat-detection-service-amazonguard\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2017\/11\/AmazonGuard-HQ-photo-reuse-resized.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2017\/11\/AmazonGuard-HQ-photo-reuse-resized.jpg\",\"width\":800,\"height\":400},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/aws-announces-threat-detection-service-amazonguard\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/security-information-event-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"AWS Announces Threat Detection Service Amazon GuardDuty\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/\",\"name\":\"SIEM Tools & Security Event Management | Solutions Review\",\"description\":\"Evaluating Enterprise SIEM Systems, Log Management Analytics & SOAR Platforms.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/security-information-event-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\",\"name\":\"Ben Canner\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"caption\":\"Ben Canner\"},\"description\":\"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/author\/bcanner\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"AWS Announces Threat Detection Service Amazon GuardDuty","description":"AWS announces fully managed threat detection service Amazon GuardDuty to help customers protect their workloads and monitor their accounts.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/security-information-event-management\/aws-announces-threat-detection-service-amazonguard\/","og_locale":"en_US","og_type":"article","og_title":"AWS Announces Threat Detection Service Amazon GuardDuty","og_description":"AWS announces fully managed threat detection service Amazon GuardDuty to help customers protect their workloads and monitor their accounts.","og_url":"https:\/\/solutionsreview.com\/security-information-event-management\/aws-announces-threat-detection-service-amazonguard\/","og_site_name":"SIEM Tools & Security Event Management | Solutions Review","article_published_time":"2017-11-29T15:32:03+00:00","article_modified_time":"2017-11-29T16:03:35+00:00","og_image":[{"width":800,"height":400,"url":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2017\/11\/AmazonGuard-HQ-photo-reuse-resized.jpg","type":"image\/jpeg"}],"author":"Ben Canner","twitter_misc":{"Written by":"Ben Canner","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/aws-announces-threat-detection-service-amazonguard\/","url":"https:\/\/solutionsreview.com\/security-information-event-management\/aws-announces-threat-detection-service-amazonguard\/","name":"AWS Announces Threat Detection Service Amazon GuardDuty","isPartOf":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/aws-announces-threat-detection-service-amazonguard\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/aws-announces-threat-detection-service-amazonguard\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2017\/11\/AmazonGuard-HQ-photo-reuse-resized.jpg","datePublished":"2017-11-29T15:32:03+00:00","dateModified":"2017-11-29T16:03:35+00:00","author":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541"},"description":"AWS announces fully managed threat detection service Amazon GuardDuty to help customers protect their workloads and monitor their accounts.","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/aws-announces-threat-detection-service-amazonguard\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/security-information-event-management\/aws-announces-threat-detection-service-amazonguard\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/aws-announces-threat-detection-service-amazonguard\/#primaryimage","url":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2017\/11\/AmazonGuard-HQ-photo-reuse-resized.jpg","contentUrl":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2017\/11\/AmazonGuard-HQ-photo-reuse-resized.jpg","width":800,"height":400},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/aws-announces-threat-detection-service-amazonguard\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/security-information-event-management\/"},{"@type":"ListItem","position":2,"name":"AWS Announces Threat Detection Service Amazon GuardDuty"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#website","url":"https:\/\/solutionsreview.com\/security-information-event-management\/","name":"SIEM Tools & Security Event Management | Solutions Review","description":"Evaluating Enterprise SIEM Systems, Log Management Analytics & SOAR Platforms.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/security-information-event-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541","name":"Ben Canner","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","caption":"Ben Canner"},"description":"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.","url":"https:\/\/solutionsreview.com\/security-information-event-management\/author\/bcanner\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts\/1102"}],"collection":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/users\/41"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/comments?post=1102"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts\/1102\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/media\/1103"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/media?parent=1102"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/categories?post=1102"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/tags?post=1102"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}