Amazon GuardDuty introduces GuardDuty Extended Threat Detection

AWS has announced Amazon GuardDuty Extended Threat Detection, a new capability for identifying sophisticated, multi-stage attacks across AWS environments.

• Uses AI and machine learning to correlate security signals across AWS services
• Detects complex attack sequences like credential compromise and data exfiltration
• Generates single, critical-severity findings with incident summaries and timelines
• Provides MITRE ATT&CK® tactic mapping and remediation recommendations
• Automatically enabled for all GuardDuty customers at no additional cost
• Available in all AWS commercial regions

The new feature helps security teams quickly identify and respond to critical threats by providing comprehensive, context-rich security insights.