Certified Security - Specialty

Sign Up Free or Log In to participate!

GuardDuty documentation

Does AWS have documentation that says GuardDuty takes 7-14 days? If so could someone post a link to it please? I’ve searched but can’t seem to find it. 

Thanks for the help

1 Answers

Hi there,

If you look at the Amazon GuardDuty FAQs, there is a question that mostly answers this.

Q: How quickly does GuardDuty start working?

Once enabled, Amazon GuardDuty immediately starts analyzing for malicious or unauthorized activity. The timeframe to begin receiving findings depends on the activity level in your account. GuardDuty does not look at historical data, only activity that starts after it is enabled. If GuardDuty identifies any potential threats, you’ll receive a finding in the GuardDuty console.

When Faye says 7-14 days, it’s not exact. This is the primary reason that GuardDuty is free for the first 30 days. They don’t want to charge you for it until it’s actually useable.

Tsmith74

Thanks T.J. I’m running a POC and was wondering why wasn’t seeing any results after 14 days. It makes more sense now.

T.J.

Yeah, you’ll want to make sure that plenty of traffic is going through that account for GuardDuty to really detect when things occur.

Sign In
Welcome Back!

Psst…this one if you’ve been moved to ACG!

Get Started
Who’s going to be learning?