AWS GuardDuty Cryptocurrency Activity Detected

Google SecOps@GoogleSecOps

•updated Jan 30, 2025•1•0•47

This rule detects cryptocurrency mining activity within Amazon EC2, AWS Lambda, or Amazon EKS Runtimes, as reported by AWS GuardDuty. It specifically looks for GuardDuty findings related to 'CryptoCurrency', 'CryptoMinerExecuted', or 'BitcoinDomainRequest' and filters out sample findings.