AWSGuardDuty - Classifier

Classifies AWSGuardDuty incidents.

AWS - GuardDuty Classification

Details

IDAWSGuardDuty - Classifier
Typeclassification
Version-1
From Version6.5.0
Default Incident Type—
FeedNo

Key Type Map

KeyIncident Type
AccessKey AWS Guard Duty IAM Finding
Container AWS Guard Duty Malware Protection Finding
ECSCluster AWS Guard Duty Malware Protection Finding
EKSCluster AWS Guard Duty Kubernetes Finding
Instance AWS Guard Duty EC2 Finding
S3Bucket AWS Guard Duty S3 Finding