Manage Amazon GuardDuty detectors, findings, and IP lists across AWS accounts.
npx skills add https://github.com/david-2814/claw-aws --skill guardduty
Please help me install this Agent Skill. Skill: guardduty Source: https://github.com/david-2814/claw-aws/tree/main/skills/guardduty Command: npx skills add https://github.com/david-2814/claw-aws --skill guardduty
Helps security teams configure GuardDuty detectors, review findings, manage trusted IP lists and threat intel sets, and coordinate multi-account deployments via the AWS CLI.
Install and configure GuardDuty across regions with the AWS CLI to begin monitoring immediately.
High-intent search queries and answers about installing and using this skill.
Automate Amazon GuardDuty threat detection by applying the Skill to enable detectors and review findings across multiple regions and member accounts. It coordinates multi-account configurations via the AWS CLI to manage threat detection centrally.
The best way to manage GuardDuty findings is to inspect them and apply suppression or archival actions. This maintains incident response efficiency by archiving items as needed after reviewing the threat detection alerts.
Configure trusted IP lists and threat intel sets in GuardDuty by creating and managing these sets to tailor detections. The Skill handles IP and threat list management to customize threat detection behavior across your accounts.
Yes, you can manage GuardDuty member accounts across multiple regions using the AWS CLI. The Skill applies across regions and member accounts to coordinate multi-account deployments and manage detector lifecycles centrally.
You need to enable GuardDuty detectors per region when setting up threat detection monitoring. The Skill manages the detector lifecycle, allowing you to enable detectors region by region and immediately begin monitoring findings.
Yes, the GuardDuty automation tool includes safety prompts for incident response. It satisfies requirements for detector lifecycle management and finding inspection while providing safety prompts during suppression or archival actions.
YukiIto1999Automate AWS GuardDuty finding processing with EventBridge and Lambda.
claude-office-skillsAutomate security monitoring, threat detection, and incident response workflows.
tomzAutomates AWS security baselines and incident-response patterns across multi-account environments.
balsm-healthDetect AWS S3 data exfiltration attempts by analyzing CloudTrail logs.
