Amazon GuardDuty

FireEye Helps You Respond Faster with AWS GuardDuty

FireEye leverages GuardDuty as potential triggers for investigation to help customers prioritize cloud events and respond effectivly. FireEye Helix Security Operations Platform layers on comprehensive contextual information around SaaS, directory, and cloud infrastructure events to provide the basis for automated triage. It allows mutual customers to continuously monitor malicious activity and unauthorized behavior in your AWS accounts, workloads, and data stored in Amazon S3. AWS GuardDuty alerts are evaluated with behavior analysis and machine learning to prioritize those alerts that are most actionable. FireEye Helix provides investigate content and rules against this alert, derived from our frontline Mandiant expertise.