I got this
(repeat later)
I need practice
(repeat soon)
Forget this
(repeat never)
Which sources does GuardDuty monitor for threat detection?
GuardDuty monitors various logs, including:

  • CloudTrail logs
  • VPC Flow logs
  • DNS logs