Amazon GuardDuty enables you to configure automatic archiving when generating findings filter. It is beneficial when you have a unique use case in the environment that creates similar findings or in a scenario where you have reviewed class findings and don’t want to receive alerts again. After creating Amazon GuardDuty Filter you can select the filter criteria, name the filter and then enable the auto-archiving of findings that the filter matches. This will enable you to further continue the guard duty to the unique environment without compromising to identify threats.
No comments:
Post a Comment