GuardDuty Gets Smarter Runtime Threat Detection

Amazon GuardDuty now lets you enable 50+ optional Runtime Monitoring rules to catch suspicious process, file, and network activity across EC2, EKS, and ECS workloads. You can test these detections in dry-run mode first, and they're available everywhere AWS operates, including GovCloud.