ARCHITECT
FEATURED ANALYSIS
AWS Launches Amazon GuardDuty Investigation Agent to Automate Threat Triage
BY
Steef-Jan Wiggers
SOURCE
InfoQ - Architecture & Design - News
DATE
READ
1 min read
AWS released a public preview of the GuardDuty investigation agent, which correlates findings, 90-day activity logs, and resource topologies into structured reports with risk ratings, confidence scores, and MITRE …
AWS released a public preview of the GuardDuty investigation agent, which correlates findings, 90-day activity logs, and resource topologies into structured reports with risk ratings, confidence scores, and MITRE ATT&CK classification. It is reachable through the AWS MCP Server, so investigations can run from agentic tooling. Preview quotas cap usage at 10 investigations per account per day. By Steef-Jan Wiggers