SyntheticSun is a defense-in-depth security automation and monitoring framework which utilizes threat intelligence, machine learning, managed AWS security services and, serverless technologies to continuously prevent, detect and respond to threats.

Using Terraform to enable Amazon GuardDuty for accounts in AWS Organizations.

Advanced AWS Security Automation Resources: Used by Udemy Course 🎓

Automated AWS Organizations configuration for security operations

Automated Amazon GuardDuty Security Response

A Step Functions microservice for remediating GuardDuty findings.

Automation ☁️AWS Security 👮- Incident Response using Lambda⚡️to prevent credential exfiltration

Proof of Value Terraform Scripts to utilize Amazon Web Services (AWS) Security, Identity & Compliance Services to Support your AWS Account Security Posture.

Lambda function to be called in CloudWatch when GuardDuty sends logs to CloudWatch. This script will write the malicious IP to a dedicated file in an S3 bucket. Firewall service (i.e. FortiOS) can pull this list, and add those malicious IPs to the blacklist.

A serverless application for processing AWS GuardDuty findings.

Perform file-based malware scan on your on-prem servers with AWS

A Siem environment using Guard Duty + Kibana + S3 + ES + Cognito + Kinesis

Configure and deploy AWS GuardDuty.

AWS multi-account, multi-region organization secure base

Go straight from Guard Duty alerts to Automated Investigations in AWS with Cado Response

Lambda for AWS GuardDuty Slack Notifications

Illustrate the capabilities of Amazon GuardDuty to detect EC2 threats

🛡️ Terraform module to provision multi-region AWS cloud security controls

Creates an AWS GuardDuty Detector