AWS GuardDuty must be enabled

Tenacity Id

Risk Level

Categories

account-017

Last Updated:

April 21, 2022

GuardDuty is a threat detection service that continuously monitors for malicious or unauthorized behavior to help you protect your AWS accounts and workloads. It monitors for activity such as unusual API calls or potentially unauthorized deployments that indicate a possible account compromise. GuardDuty also detects potentially compromised instances or reconnaissance by attackers.