AWS wants GuardDuty to automate the first steps of threat investigations
ID: 585d91d0-95b3-5be0-baea-18033512e5fb
STIX ID: report--585d91d0-95b3-5be0-baea-18033512e5fb
Feed Name: Help Net Security
Amazon announced the GuardDuty investigation agent is available in public preview across 10 AWS Regions, offering AI-powered, asynchronous investigations of GuardDuty findings for accounts and organizations. The preview includes usage quotas, required permissions for administrator and member accounts, API/CLI support (CreateInvestigation, GetInvestigation, ListInvestigations), EventBridge integration, MITRE ATT&CK mappings, and MCP compatibility for integrating results into AI assistants and security workflows.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.