🧰 Amazon GuardDuty

The items that name it 6

• GuardDuty Extended Threat Detection has added five new indicators to surface attack sequences
  articleas classification.technologies2026-10-12
• Exploring the new AWS Sign Up experience
  writeupas tools2026-09-17

  Threat detection service, denied in sandbox

• Architecting a secure landing zone in the AWS European Sovereign Cloud
  articleas tools2026-09-16

  Threat detection service, administered via delegated Security Tooling account

• Orca Security: AI Threat Detection
  articleas tools2026-07-30

  Cloud threat detection service; anomaly model tracks user, request location, and specific API requested, names findings by tactic (e.g. Discovery:IAMUser/AnomalousBehavior)

• AWS Well-Architected: Software Supply Chain Security
  articleas tools2026-06-04

  Detect abnormal IAM activity and malicious/anomalous API calls

• AWS EKS Forensics: Data Sources and Investigation Tooling
  articleas toolsIt is written here as Amazon GuardDuty (EKS Protection / Runtime Monitoring).

  Managed threat detection producing Kubernetes-contextualized findings (privilege escalation, sensitive mounts, reverse shells, credential exfiltration, anomalous workload deployment)