GuardDuty Extended Threat Detection Gets Five New Attack Indicators
Amazon GuardDuty now tags attack sequences with five new indicator types—MALICIOUS_PACKAGE, MISCONFIGURATION, REACHABILITY, SENSITIVE_DATA, and VULNERABILITY—making it easier to spot the full picture of threats in your cloud environment. As a cloud engineer, you should review your GuardDuty findings to leverage these richer signals and catch attack chains earlier before they escalate.
source: [aws/security-blog]