Process and remediate GuardDuty detections received via AWS Security Hub

Process security alerts from AWS Security Hub and gather additional information from AWS GuardDuty. Notify security teams via Slack, automatically stop compromised EC2 instances, submit suspicious URLs to URLScan.io for analysis, and document in Jira.

Tools

Amazon GuardDuty, AWS, AWS Security Hub, Jira Software, URLScan.io

Created by

André Srinivasan

How it works

Import this story to your tenant, from where you can adapt it to meet your unique needs.

Import

Loading story...