How can I integrate GuardDuty findings with Microsoft Sentinel?

Johnstone Oloo 20

GuardDuty - Sentinel Integration

Accepted answer

Clive Watson 7,866 Reputation points MVP Volunteer Moderator

2024-04-08T15:00:41.64+00:00

Hello,

You will need to install the "Amazon Web Services" solution from Content Hub

https://learn.microsoft.com/en-us/azure/sentinel/data-connectors/amazon-web-services-s3 and
https://learn.microsoft.com/en-gb/azure/sentinel/connect-aws?tabs=s3
Please sign in to rate this answer.
Johnstone Oloo 20 Reputation points

2024-04-09T06:37:07.9033333+00:00

Got an error message.

Clive Watson 7,866 Reputation points MVP Volunteer Moderator

2024-04-09T08:15:04.0566667+00:00

Hello,
Please take a look at https://learn.microsoft.com/en-us/azure/sentinel/aws-s3-troubleshoot

https://techcommunity.microsoft.com/t5/microsoft-sentinel-blog/troubleshoot-amazon-web-services-s3-connector-issues/ba-p/3608072

https://learn.microsoft.com/en-us/azure/sentinel/connect-aws?tabs=s3

I dont know about "Event notifications" hopefully others here will do...
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

0 additional answers

Your answer