Initial commit - 611 cybersecurity skills across all subdomains

This commit is contained in:
mukul975
2026-02-25 10:47:44 +01:00
commit 22a7ab1462
1765 changed files with 280648 additions and 0 deletions
@@ -0,0 +1,23 @@
# GuardDuty Findings Automation Template
## Configuration
| Setting | Value |
|---------|-------|
| Detector ID | |
| Publishing Frequency | 15min / 1hr / 6hr |
| Multi-Account | Yes / No |
| Security Hub Integration | Enabled / Disabled |
## EventBridge Rules
| Rule Name | Severity Threshold | Target | Status |
|-----------|-------------------|--------|--------|
| guardduty-critical | >= 8.0 | Lambda + PagerDuty | |
| guardduty-high | >= 7.0 | Lambda + SNS | |
| guardduty-medium | >= 4.0 | SNS | |
## Auto-Response Actions
| Finding Type | Action | Lambda Function | Tested |
|-------------|--------|----------------|--------|
| EC2 Compromise | Quarantine + Snapshot | [ ] | |
| IAM Credential | Deactivate + Deny | [ ] | |
| S3 Exfiltration | Block Public Access | [ ] | |