AWS GuardDuty Brute Force Activity Detected

Google SecOps@GoogleSecOps

•updated Jan 30, 2025•0•36

This rule detects brute force activity targeting Amazon EC2 or Amazon RDS instances, as reported by AWS GuardDuty. It specifically looks for GuardDuty findings where the product event type contains 'BruteForce' and filters out sample findings.