Amazon GuardDuty AI-powered investigations accelerate threat response (Preview)
News
AWS announces the preview of AI-powered investigations in Amazon GuardDuty, automatically analyzing findings to help distinguish true threats from benign alerts.
- Examines finding context, related activity, affected resources, and threat indicators using knowledge graphs
- Provides disposition assessment with confidence scoring and MITRE ATT&CK technique classification
- Delivers actionable recommendations for suppression, containment, or remediation
- Completes investigations in minutes, reducing manual analysis time
- Available in 10 AWS Regions including US, Canada, Europe, and Asia Pacific
- Accessible via GuardDuty console, CLI, API, and AWS MCP Server
AI-powered investigations help security teams focus on genuine threats and accelerate mean time to resolution across individual accounts or entire AWS Organizations.
The AWS News Feed is currently looking for gold sponsors. If you want to support the AWS community and reach a large audience of AWS professionals, consider sponsoring the AWS News Feed.
Related articles
Jul 20
2026
2026
Introducing the Amazon GuardDuty investigation agent: on-demand AI-powered threat assessment
Dec 2
2024
2024
Amazon GuardDuty introduces GuardDuty Extended Threat Detection
Dec 2
2024
2024
Introducing Amazon GuardDuty Extended Threat Detection: AI/ML attack sequence identification for enhanced cloud security
Dec 2
2025
2025
Amazon GuardDuty adds Extended Threat Detection for Amazon EC2 and Amazon ECS
The AWS News Feed is currently looking for silver sponsors. If you want to support the AWS community and reach a large audience of AWS professionals, consider sponsoring the AWS News Feed.