Amazon GuardDuty Extended Threat Detection now supports Amazon EC2 and Amazon ECS

This article announces enhancements to Amazon GuardDuty Extended Threat Detection, adding support for detecting multistage attacks on Amazon EC2 and Amazon ECS workloads.

• Detects multistage attacks targeting EC2 instances and ECS clusters on Fargate or EC2
• Uses AI/ML to correlate security signals across network, process, malware, and API activity
• Introduces two new critical-severity findings: CompromisedInstanceGroup and CompromisedCluster
• Provides attack sequence information, MITRE ATT&CK mappings, and remediation recommendations
• Automatically enabled for GuardDuty customers at no additional cost
• Enable Runtime Monitoring for EC2 or Fargate to improve detection coverage
• 30-day free trial available for new and existing customers

GuardDuty Extended Threat Detection now provides comprehensive multistage attack detection for EC2 and ECS workloads, reducing analysis time and improving threat response.