< Back to rules search
AWS EC2 instance participating in a DoS attack
Set up the guardduty integration.
Detect when an EC2 instance is participating in a Denial of Service (DoS) attack.
This rule lets you monitor these GuardDuty integration findings:
Triage & Response
- Determine if the EC2 instance is compromised and participating in a DoS attack.
- If the instance is compromised:
- Review the AWS documentation on remediating a compromised EC2 instance.