How do we configure AWS GuardDuty and Security Hub to automatically isolate EC2 instances showing ransomware encryption behaviors?
Download run
Fan-out diagram
The searches the AI actually ran for this prompt.
SEED QUERY
How do we configure AWS GuardDuty and Security Hub to automatically isolate EC2 instances showing ransomware encryption behaviors?
3 real searches · 1 real-search pass
AWS GuardDuty ransomware EC2 findings automated response isolate instance EventBridge Security Hub documentationGoogle ↗
OBSERVED
AWS Security Hub EventBridge findings automation rule GuardDuty finding workflow documentationGoogle ↗
OBSERVED
AWS Systems Manager Automation isolate EC2 instance security group incident response official documentationGoogle ↗
OBSERVED
Badge and edge weight = share of passes that produced the query. Hover a query for its intent and routing format.
Query classes
Google's semantic query class for every sub-query: what kind of answer each search is after, simulated vs real.
Classifying 3 queries…
Searches and sources
ChatGPT3 real searches · gpt-6
AWS GuardDuty ransomware EC2 findings automated response isolate instance EventBridge Security Hub documentation Google ↗
AWS Security Hub EventBridge findings automation rule GuardDuty finding workflow documentation Google ↗
AWS Systems Manager Automation isolate EC2 instance security group incident response official documentation Google ↗
- Amazon GuardDuty documentation · docs.aws.amazon.com
- Security Hub automation documentation · docs.aws.amazon.com
- Security Hub EventBridge automation · docs.aws.amazon.com
- Processing GuardDuty findings with EventBridge · docs.aws.amazon.com
- AWS automated incident response architecture · aws.amazon.com
- Systems Manager Automation · docs.aws.amazon.com
Queries
3 queries · click a column to sort
| Query / type | Search | Intent | Query class | Routing format | Cluster | Freq ↓ | Weight |
|---|---|---|---|---|---|---|---|
AWS GuardDuty ransomware EC2 findings automated response isolate instance EventBridge Security Hub documentation OBSERVED | Google ↗ AI Mode ↗ | — | — | — | — | 1x of 1 | |
AWS Security Hub EventBridge findings automation rule GuardDuty finding workflow documentation OBSERVED | Google ↗ AI Mode ↗ | — | — | — | — | 1x of 1 | |
AWS Systems Manager Automation isolate EC2 instance security group incident response official documentation OBSERVED | Google ↗ AI Mode ↗ | — | — | — | — | 1x of 1 |