AWS GuardDuty Denial of Service Activity Detected

Google SecOps@GoogleSecOps

•updated Jan 30, 2025•1•0•41

This rule detects Denial of Service (DoS) activity originating from an Amazon EC2 instance, as identified by AWS GuardDuty. It specifically looks for GuardDuty findings where the product event type indicates a DenialOfService event and filters out any sample findings.