AWS

Guardduty

Active GuardDuty threats: crypto-mining, credential exfiltration, unusual API patterns and more.

Tier Explorer

Category Security & Identity

Refresh every 5 min

Scope regional

Live preview — demo data

What this pane shows

All active GuardDuty findings for the account: cryptocurrency-mining instances, credential exfiltration to known-bad IPs, unusual API behaviour patterns, instances communicating with command-and-control servers, and other detector categories. Severity (LOW / MEDIUM / HIGH), affected resource, first-seen and last-seen timestamps are shown.

Key use cases

Daily security triage — new HIGH findings should never sit unread.
Investigate a finding's full context (target, source IP, attack type) on one screen.
Confirm GuardDuty is actually enabled and reporting in every region you care about.
Track resolution progress on long-running findings.

How to embed

Drop this snippet on any HTML page that loads lp-embed.js. The pane mounts itself wherever the matching <div> is in the DOM.

<div class="lp-guardduty-panel"
     data-lp-account="<your-account-alias>"></div>
<script src="https://lightpane.io/embed/lp-embed.js"
        data-lp-key="<your-access-key>"></script>
<script src="https://lightpane.io/_pane-tests/aws/guardduty/guardduty.js"
        defer></script>

Tier

Available on Explorer and above.

Build notes

Mock-only at the moment — live-wiring tracked in the roadmap.