guardduty

Threat detection service that continuously monitors for malicious activity and unauthorized behavior in AWS accounts and workloads. It leverages machine learning, anomaly detection, and integrated threat intelligence to identify and prioritize potential threats, offering features such as continuous monitoring, threat intelligence integration, and automated response. AWS GuardDuty is primarily targeted at organizations using AWS services that require robust security measures to protect their cloud infrastructure.