Enhancing threat detection with Amazon GuardDuty new custom entity lists

AWS has announced the general availability of Amazon GuardDuty custom entity lists for enhanced threat detection.

• Allows users to incorporate custom domain-based threat intelligence
• Introduces new finding type *Impact:EC2/MaliciousDomainRequest.Custom*
• Enables detection of threats using custom lists of malicious domains or IP addresses
• Provides ability to suppress alerts from trusted sources
• Offers more flexible entity lists that can include IP addresses, domains, or both
• Simplifies permission management across AWS Regions

Available in most AWS Regions, excluding China and GovCloud (US) Regions, this feature gives users greater control over threat detection strategies.