GuardDuty Investigation Agent
AssessTools
An AWS agent that automates security investigation and threat triage from GuardDuty data.
Why it's here
Placed in Assess: 1 article(s) of evidence from 1 source(s), led by product launches, with 1 in the last 30 days. Confidence 24%. Low accumulated evidence, so it defaults conservatively pending more signal.
Evidence (1)
- 7InfoQ·7/28/2026product_launchAWS Previews GuardDuty Investigation Agent
AWS has released a public preview of the GuardDuty investigation agent to automate threat triage. The agent correlates findings, 90-day activity logs, and resource topologies into structured reports with risk ratings, confidence scores, and MITRE ATT&CK mapping, and can be used through the AWS MCP Server.