GuardDuty’s new Investigation Agent cuts AWS threat triage from hours to minutes
AWS’s GuardDuty Investigation Agent, now in public preview, auto‑correlates findings, 90‑day logs and resource topologies into risk‑rated, MITRE‑mapped reports. Accessible via console, CLI or API, it shrinks investigation time from hours to minutes, letting security teams focus on remediation instead of manual digging.