Record · corpus.blog/posts/01a08783-2996-72ba-a876-ac53e3024835

Amazon GuardDuty Extended Threat Detection Architecture - Attack Sequences, Runtime Monitoring, and Response Automation | hidekazu-konishi.com

hidekazu-konishi.com · published 6 August 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at hidekazu-konishi.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
External links: 52
Words captured: 12,974

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://docs.aws.amazon.com/guardduty/latest/ug/what-is-guardduty.html

docs.aws.amazon.com

https://docs.aws.amazon.com/guardduty/latest/ug/guardduty-extended-threat-detection.html

docs.aws.amazon.com

https://docs.aws.amazon.com/guardduty/latest/ug/guardduty-attack-sequence-finding-types.html

docs.aws.amazon.com

https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_data-sources.html

docs.aws.amazon.com

https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_finding-types-active.html

docs.aws.amazon.com

https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_findings.html

docs.aws.amazon.com

https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_findings-summary.html

docs.aws.amazon.com

https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_findings-severity.html

docs.aws.amazon.com

https://docs.aws.amazon.com/guardduty/latest/ug/findings_suppression-rule.html

docs.aws.amazon.com

https://docs.aws.amazon.com/guardduty/latest/ug/create-suppression-rules-guardduty.html

docs.aws.amazon.com

https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_upload-lists.html

docs.aws.amazon.com

https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_findings_eventbridge.html

docs.aws.amazon.com

https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_exportfindings.html

docs.aws.amazon.com

https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_organizations.html

docs.aws.amazon.com

https://docs.aws.amazon.com/guardduty/latest/ug/runtime-monitoring.html

docs.aws.amazon.com

https://docs.aws.amazon.com/guardduty/latest/ug/how-does-runtime-monitoring-work.html

docs.aws.amazon.com

https://docs.aws.amazon.com/guardduty/latest/ug/how-runtime-monitoring-works-ec2.html

docs.aws.amazon.com

https://docs.aws.amazon.com/guardduty/latest/ug/manage-agent-ec2-standalone-account.html

docs.aws.amazon.com

https://docs.aws.amazon.com/guardduty/latest/ug/runtime-monitoring-shared-vpc.html

docs.aws.amazon.com

https://docs.aws.amazon.com/guardduty/latest/ug/runtime-monitoring-agent-release-history.html

docs.aws.amazon.com

https://docs.aws.amazon.com/guardduty/latest/ug/guardduty-investigation.html

docs.aws.amazon.com

https://docs.aws.amazon.com/guardduty/latest/ug/securityhub-integration.html

docs.aws.amazon.com

https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_integrations.html

docs.aws.amazon.com

https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_remediate.html

docs.aws.amazon.com

https://docs.aws.amazon.com/guardduty/latest/ug/compromised-ec2.html

docs.aws.amazon.com

https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_limits.html

docs.aws.amazon.com

https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_regions.html

docs.aws.amazon.com

https://docs.aws.amazon.com/guardduty/latest/ug/doc-history.html

docs.aws.amazon.com

https://docs.aws.amazon.com/guardduty/latest/APIReference/API_Sequence.html

docs.aws.amazon.com

https://docs.aws.amazon.com/guardduty/latest/APIReference/API_Signal.html

docs.aws.amazon.com

https://docs.aws.amazon.com/guardduty/latest/APIReference/API_Indicator.html

docs.aws.amazon.com

https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ResourceV2.html

docs.aws.amazon.com

https://docs.aws.amazon.com/guardduty/latest/APIReference/API_Finding.html

docs.aws.amazon.com

https://docs.aws.amazon.com/guardduty/latest/APIReference/API_Actor.html

docs.aws.amazon.com

https://docs.aws.amazon.com/guardduty/latest/APIReference/API_NetworkEndpoint.html

docs.aws.amazon.com

https://docs.aws.amazon.com/guardduty/latest/APIReference/API_GetFindings.html

docs.aws.amazon.com

https://docs.aws.amazon.com/guardduty/latest/APIReference/API_UpdateDetector.html

docs.aws.amazon.com

https://docs.aws.amazon.com/securityhub/latest/userguide/exposure-findings-supported-traits.html

docs.aws.amazon.com

https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-internal-providers.html

docs.aws.amazon.com

https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-setup-prereqs.html

docs.aws.amazon.com

https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-create-pattern-operators.html

docs.aws.amazon.com

https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-event-patterns.html

docs.aws.amazon.com

https://docs.aws.amazon.com/step-functions/latest/dg/callback-task-sample-sqs.html

docs.aws.amazon.com

https://aws.amazon.com/blogs/aws/introducing-amazon-guardduty-extended-threat-detection-aiml-attack-sequence-identification-for-enhanced-cloud-security/

aws.amazon.com

https://aws.amazon.com/blogs/aws/amazon-guardduty-adds-extended-threat-detection-for-amazon-ec2-and-amazon-ecs/

aws.amazon.com

https://aws.amazon.com/blogs/security/navigating-amazon-guardduty-protection-plans-and-extended-threat-detection/

aws.amazon.com

https://aws.amazon.com/about-aws/whats-new/2025/06/amazon-guardduty-threat-detection-eks/

aws.amazon.com

https://aws.amazon.com/about-aws/whats-new/2025/12/guardduty-extended-threat-detection-ec2-ecs/

aws.amazon.com

https://aws.amazon.com/about-aws/whats-new/2025/09/threat-detection-amazon-guardduty-custom-entity-lists/

aws.amazon.com

https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-guardduty/

aws.amazon.com

https://aws.amazon.com/about-aws/whats-new/2026/07/amazon-guardduty-sfm/

aws.amazon.com

https://aws.amazon.com/about-aws/whats-new/2026/07/amazon-guardduty-ai-protection-aws/

aws.amazon.com

Elsewhere on hidekazu-konishi.com (17)

AWS Security Incident Response Playbooks - First-Response Runbooks for Common Scenarios | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

Incident Triage Flowcharts - Network, DB, and Application Layer | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

Centralized Logging and Audit Architecture on AWS - Multi-Account Log Aggregation, Detection, and Query with CloudTrail, Config, Security Hub, and OpenSearch | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

Workload Isolation Levels on Amazon EKS - Which Level You Stopped At, and What That Level Does Not Stop | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

eBPF on Amazon EKS - What Loads Into Your Nodes, When a Network Policy Starts Enforcing, and Where the Coverage Stops | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

Threat Detection for AI Workloads on AWS - What GuardDuty AI Protection Detects, What It Does Not, and How to Read a Finding | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

IAM Anti-Patterns - Real-World Mistakes and Their Root Causes | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

AI Bill of Materials on AWS - Discovering Models, Agents, and External Endpoints | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

AWS Config Rules and Conformance Packs - Compliance Detection, Automated Remediation, and Organizations Deployment | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

AWS Multi-Account Operational Patterns - Control Tower, Organizations, SCPs | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

AWS Organization Guardrails - Service Control Policies, Resource Control Policies, and Data Perimeter Design | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

EventBridge Pipes Event-Driven Architecture Implementation Patterns | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

EventBridge Pattern Tester - Test Event Patterns Against Multiple Sample Events | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

CloudWatch Logs Insights Query Cookbook: Practical Recipes for Incident Investigation, Cost Analysis, and Security Audits | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

CloudTrail Event Viewer - Highlight, Filter, and Search AWS CloudTrail Events | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

AWS History and Timeline regarding AWS CloudTrail - Overview, Functions, Features, Summary of Updates, and Introduction | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

Detection Engineering on AWS - What a Custom Source Must Satisfy Before a Detection Can Be Written, and What the Detection Still Does Not See | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com