Compromised | AWS Security Blog

Tag: Compromised

Recovering from a rough Monday morning: An HAQM GuardDuty threat detection and remediation scenario

HAQM GuardDuty is a managed threat detection service that continuously monitors for malicious or unauthorized behavior to help you protect your AWS accounts and workloads. Given the many log types that HAQM GuardDuty analyzes (HAQM Virtual Private Cloud (VPC) Flow Logs, AWS CloudTrail, and DNS logs), you never know what it might discover in your […]