Findings that invoke GuardDuty-initiated malware scan
A GuardDuty-initiated malware scan gets invoked when GuardDuty detects suspicious behavior indicative of malware on Amazon EC2 instance or container workloads.
-
Impact:EC2/WinRMBruteForce (Outbound only)
-
UnauthorizedAccess:EC2/RDPBruteForce (Outbound only)
-
UnauthorizedAccess:EC2/SSHBruteForce (Outbound only)