Our team just added AWS GuardDuty Alerts to our ever-increasing collection of Attacker Behavior Analytics!! Simply login to IDR, visit your Detection Rules, and under the Threat Filter select AWS GuardDuty!
Having these alerts under ABA means that not only can you tweak their Priority and Rule Actions (Create Investigation or Track as Notable Behavior), you can add Exceptions to them as well in order to fine-tune them for your environment!
