Does it support container security for EKS and ECS?

Absolutely. It covers enabling EKS Audit Log Monitoring and Runtime Monitoring for both ECS Fargate and EC2-backed container workloads.

Can this skill help with multi-account AWS setups?

Yes, it includes instructions for designating a delegated administrator and automatically enrolling all member accounts within an AWS Organization.

Does this skill cover malware scanning?

Yes, it includes steps to enable Malware Protection for EBS volumes, allowing for agentless scanning of instances when suspicious behavior is detected.

Can I use this for automated remediation?

Yes, the skill provides specific patterns and Python code for using EventBridge and Lambda to automatically isolate resources or revoke credentials based on GuardDuty findings.

Is this skill compatible with other clouds like Azure or GCP?

No, this specific skill is purpose-built for Amazon GuardDuty on AWS. Separate skills are required for monitoring Azure or Google Cloud environments.

Amazon GuardDuty Threat Detection

Name: Amazon GuardDuty Threat Detection
Author: mukul975

bymukul975

•

4,121

•

安全与测试

Deploys and operationalizes Amazon GuardDuty to provide continuous, automated threat detection and incident response across AWS workloads.

This skill empowers security teams to implement a comprehensive cloud threat detection strategy using Amazon GuardDuty. It provides step-by-step guidance on enabling advanced protection plans for S3, EKS, and EC2 runtime environments, while also teaching users how to interpret complex finding types and severity levels. By leveraging EventBridge and Lambda, it enables the creation of automated remediation workflows—such as isolating compromised instances or revoking leaked credentials—ensuring rapid response to sophisticated cloud-native attacks like cryptocurrency mining and unauthorized data access.

主要功能

01Multi-account GuardDuty deployment via AWS Organizations

024,121 GitHub stars

03Runtime Monitoring configuration for EC2, ECS, and EKS workloads

04Integration with AWS Security Hub and Amazon Security Lake

05Automated incident response using EventBridge and Lambda functions

06Advanced Malware Protection and EBS volume scanning setup

使用场景

01Establishing a continuous threat monitoring baseline for new AWS accounts

02Automating the isolation of compromised EC2 instances and container clusters

03Investigating and responding to credential abuse or data exfiltration findings

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add mukul975/anthropic-cybersecurity-skills detecting-cloud-threats-with-guardduty

For use in Claude.ai and ChatGPT

主要功能

01Multi-account GuardDuty deployment via AWS Organizations

024,121 GitHub stars

03Runtime Monitoring configuration for EC2, ECS, and EKS workloads

04Integration with AWS Security Hub and Amazon Security Lake

05Automated incident response using EventBridge and Lambda functions

06Advanced Malware Protection and EBS volume scanning setup

使用场景

01Establishing a continuous threat monitoring baseline for new AWS accounts

02Automating the isolation of compromised EC2 instances and container clusters

03Investigating and responding to credential abuse or data exfiltration findings

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add mukul975/anthropic-cybersecurity-skills detecting-cloud-threats-with-guardduty

For use in Claude.ai and ChatGPT