AWS Launches Amazon GuardDuty Investigation Agent to Automate Threat Triage

Steef-Jan Wiggers 2026年07月28日 15:14 8 次阅读来源：InfoQ

AWS released a public preview of the GuardDuty investigation agent, which correlates findings, 90-day activity logs, and resource topologies into structured reports with risk ratings, confidence scores, and MITRE ATT&CK classification. It is reachable through the AWS MCP Server, so investigations can run from agentic tooling. Preview quotas cap usage at 10 investigations per account per day. By Steef-Jan Wiggers

本文内容来源于互联网，版权归原作者所有

查看原文

# AWS # Information Security # Cloud # AI Architecture # AI # ML & Data Engineering