Amazon GuardDuty × Tines

Integrating Tines’ automation capabilities with Amazon GuardDuty enhances your security operations by automating threat detection and response workflows, reducing the time to mitigate risks.

Book a demo Sign up free

Pre-built templates

With Tines, you can easily take any action that has a defined API. We've already pre-built some of the most popular ones for you, so you can build quickly.

Update threat intel set in AWS GuardDuty

Update publishing destination in AWS GuardDuty

Update organization configuration in AWS GuardDuty

Update member detectors in AWS GuardDuty

Update malware scan settings in AWS GuardDuty

Update ip set in AWS GuardDuty

Update findings feedback in AWS GuardDuty

Update filter in AWS GuardDuty

Update detector in AWS GuardDuty

Untag resource in AWS GuardDuty

Unarchive findings in AWS GuardDuty

Tag resource in AWS GuardDuty

Stop monitoring members in AWS GuardDuty

Start monitoring members in AWS GuardDuty

List threat intel sets in AWS GuardDuty

List tags for resource in AWS GuardDuty

List publishing destinations in AWS GuardDuty

List organization admin accounts in AWS GuardDuty

List members in AWS GuardDuty

List ip sets in AWS GuardDuty

Build your own connections

With Tines, you can easily take any action that has a defined API using an HTTP request. To build even more quickly, copy a cURL command and paste it into the storyboard.

cURL request

curl -v   -X GET   --location   "https://api.nasa.gov/neo/rest/v1/neo/browse?api_key=DEMO_KEY"   -H 'Content-Type: application/json'

Paste in your Tines story

Full workflow examples

Explore pre-built workflows for Amazon GuardDuty. Use them for inspiration or as a starting point to build your custom automation solution.

Explore all →

Check if new AWS GuardDuty findings are malicious

Receive new AWS GuardDuty findings, capture the details and run the domain through URLScan to check if it's malicious. Get the results via email and also add them to Jira.

Tools: Amazon GuardDuty, AWS, Jira Software, URLScan.io

Track AWS GuardDuty alerts in Jira and remediate

Enrich AWS alerts with more context using GuardDuty, then take action to isolate new connections, lock attackers down, review credential usage, or re-apply restrictions, all while managing a case in Jira with this Story.

Tools: Amazon GuardDuty, AWS, Jira Software