SyntheticSun is a defense-in-depth security automation and monitoring framework which utilizes threat intelligence, machine learning, managed AWS security services and, serverless technologies to continuously prevent, detect and respond to threats.

Infrastructure-as-Code in Terraform to enable Amazon GuardDuty for the given AWS Organizations organization.

Advanced AWS Security Automation Resources: Used by Udemy Course 🎓

Automated AWS Organizations configuration for security operations

A Step Functions microservice for remediating GuardDuty findings.

Automated Amazon GuardDuty Security Response

Automation ☁️AWS Security 👮- Incident Response using Lambda⚡️to prevent credential exfiltration

Proof of Value Terraform Scripts to utilize Amazon Web Services (AWS) Security, Identity & Compliance Services to Support your AWS Account Security Posture.

Lambda function to be called in CloudWatch when GuardDuty sends logs to CloudWatch. This script will write the malicious IP to a dedicated file in an S3 bucket. Firewall service (i.e. FortiOS) can pull this list, and add those malicious IPs to the blacklist.

A serverless application for processing AWS GuardDuty findings.

A Siem environment using Guard Duty + Kibana + S3 + ES + Cognito + Kinesis

Perform file-based malware scan on your on-prem servers with AWS

AWS multi-account, multi-region organization secure base

Go straight from Guard Duty alerts to Automated Investigations in AWS with Cado Response

Configure and deploy AWS GuardDuty.

Lambda for AWS GuardDuty Slack Notifications

Illustrate the capabilities of Amazon GuardDuty to detect EC2 threats

🛡️ Terraform module to provision multi-region AWS cloud security controls

Creates an AWS GuardDuty Detector