{"id":6048,"date":"2026-01-22T13:55:59","date_gmt":"2026-01-22T05:55:59","guid":{"rendered":"https:\/\/www.elite.cloud\/?p=6048"},"modified":"2026-01-22T13:56:04","modified_gmt":"2026-01-22T05:56:04","slug":"guardduty-extended-threat-detection-for-ec2-and-ecs","status":"publish","type":"post","link":"https:\/\/www.elite.cloud\/zh\/post\/guardduty-extended-threat-detection-for-ec2-and-ecs\/","title":{"rendered":"AWS GuardDuty \u5ef6\u4f38\u5f0f\u5a01\u8105\u5075\u6e2c\u5347\u7d1a\uff1a\u5f37\u5316 EC2 \u8207 ECS \u8cc7\u5b89\u9632\u8b77"},"content":{"rendered":"\n<figure class=\"wp-block-embed is-type-video is-provider-youtube wp-block-embed-youtube wp-embed-aspect-16-9 wp-has-aspect-ratio\"><div class=\"wp-block-embed__wrapper\">\n<iframe loading=\"lazy\" title=\"\u99ed\u5ba2\u653b\u64ca\u4e0d\u662f\u4e00\u6b21\u7d50\u675f\uff1aGuardDuty \u600e\u9ebc\u6293\u5230 EC2\u3001ECS \u591a\u968e\u6bb5\u5165\u4fb5\" width=\"500\" height=\"281\" src=\"https:\/\/www.youtube.com\/embed\/zSVR593qTdM?feature=oembed\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share\" referrerpolicy=\"strict-origin-when-cross-origin\" allowfullscreen><\/iframe>\n<\/div><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">\u5ef6\u4f38\u5f0f\u5a01\u8105\u5075\u6e2c\u7684\u5fc5\u8981\u6027\uff1a\u4f01\u696d\u5982\u4f55\u56e0\u61c9\u591a\u968e\u6bb5\u96f2\u7aef\u653b\u64ca<\/h2>\n\n\n\n<p>\u5728\u5be6\u969b\u7684\u96f2\u7aef\u653b\u64ca\u60c5\u5883\u4e2d\uff0c\u99ed\u5ba2\u884c\u70ba<strong>\u5e7e\u4e4e\u4e0d\u6703\u4e00\u6b21\u5b8c\u6210<\/strong>\uff0c\u800c\u662f\u6703\u5206\u6563\u5728\u4e0d\u540c\u6642\u9593\u9ede\u3001\u4e0d\u540c\u8cc7\u6e90\u4e0a\uff0c\u9010\u6b65\u63a8\u9032\u3002\u4f8b\u5982\uff1a<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>\u7aca\u53d6\u6216\u6feb\u7528 IAM \u6191\u8b49\u53d6\u5f97\u521d\u59cb\u5b58\u53d6\u6b0a<\/li>\n\n\n\n<li>\u5728 <a href=\"https:\/\/www.elite.cloud\/zh\/post\/aws-ec2-overview-features-pricing-use-cases\/\" target=\"_blank\" rel=\"noopener\" title=\"\">EC2<\/a> \u6216 ECS \u74b0\u5883\u4e2d\u5efa\u7acb\u5b58\u6d3b\u6a5f\u5236\uff08Persistence\uff09<\/li>\n\n\n\n<li>\u6a6b\u5411\u79fb\u52d5\u81f3\u5176\u4ed6\u96f2\u7aef\u8cc7\u6e90\u6216\u670d\u52d9<\/li>\n\n\n\n<li>\u5b58\u53d6\u3001\u7ac4\u6539\u6216\u5916\u6d29\u654f\u611f\u8cc7\u6599<\/li>\n<\/ul>\n\n\n\n<p>\u9019\u4e9b\u884c\u70ba\u5f80\u5f80\u5206\u6563\u5728 <strong>CloudTrail\u3001VPC Flow Logs\u3001DNS \u67e5\u8a62\u8207 Runtime \u57f7\u884c\u884c\u70ba<\/strong> \u4e2d\uff0c\u82e5\u53ea\u6aa2\u8996\u55ae\u4e00\u4e8b\u4ef6\uff0c\u4f01\u696d\u5f88\u96e3\u5224\u65b7\u9019\u662f\u5426\u53ea\u662f\u5076\u767c\u7570\u5e38\uff0c\u9084\u662f\u6b63\u5728\u767c\u751f\u7684\u771f\u5be6\u653b\u64ca\u3002<strong>\u5ef6\u4f38\u5f0f\u5a01\u8105\u5075\u6e2c\u7684\u6838\u5fc3\u50f9\u503c<\/strong>\uff0c\u5728\u65bc\u900f\u904e AWS \u898f\u6a21\u4e0b\u8a13\u7df4\u7684 <strong>AI \u8207\u6a5f\u5668\u5b78\u7fd2\u6a21\u578b<\/strong>\uff0c\u81ea\u52d5\u95dc\u806f\u591a\u500b\u770b\u4f3c\u96f6\u6563\u7684\u5b89\u5168\u8a0a\u865f\uff0c\u5c07\u5176\u6574\u5408\u70ba<strong>\u9ad8\u4fe1\u5fc3\u5ea6\u7684\u591a\u968e\u6bb5\u653b\u64ca\u5e8f\u5217<\/strong>\u3002\u9019\u4e0d\u50c5\u80fd\u5e6b\u52a9\u4f01\u696d\u66f4\u5feb\u638c\u63e1\u653b\u64ca\u8108\u7d61\uff0c\u4e5f\u80fd\u5927\u5e45\u964d\u4f4e\u8aa4\u5224\u98a8\u96aa\u8207\u8cc7\u5b89\u4eba\u54e1\u7684\u4eba\u5de5\u5206\u6790\u6210\u672c\uff0c\u8b93\u9632\u79a6\u6c7a\u7b56\u66f4\u5373\u6642\u3001\u66f4\u7cbe\u6e96\u3002<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u5ef6\u4f38\u5f0f\u5a01\u8105\u5075\u6e2c\u662f\u5982\u4f55\u904b\u4f5c\u7684\uff1f<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">\u529f\u80fd\u904b\u4f5c\u539f\u7406\uff1a\u5f9e\u96f6\u6563\u4e8b\u4ef6\u5230\u653b\u64ca\u5e8f\u5217<\/h3>\n\n\n\n<p>\u5ef6\u4f38\u5f0f\u5a01\u8105\u5075\u6e2c\u7684\u6838\u5fc3\u6982\u5ff5\uff0c\u5728\u65bc<strong>\u5c07\u539f\u672c\u5f7c\u6b64\u7368\u7acb\u7684\u5b89\u5168\u4e8b\u4ef6\uff0c\u81ea\u52d5\u95dc\u806f\u6210\u5b8c\u6574\u7684\u591a\u968e\u6bb5\u653b\u64ca\u5e8f\u5217<\/strong>\u3002\u7cfb\u7d71\u6703\u540c\u6642\u5206\u6790\u591a\u7a2e\u96f2\u7aef\u5b89\u5168\u8a0a\u865f\u4f86\u6e90\uff0c\u5305\u62ec\uff1a<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>\u57f7\u884c\u968e\u6bb5\uff08Runtime\uff09\u6d3b\u52d5\u8207\u7a0b\u5e8f\u884c\u70ba<\/li>\n\n\n\n<li>\u60e1\u610f\u7a0b\u5f0f\uff08Malware\uff09\u5075\u6e2c\u7d50\u679c<\/li>\n\n\n\n<li>VPC Flow Logs \u7db2\u8def\u6d41\u91cf\u7d00\u9304<\/li>\n\n\n\n<li>DNS \u67e5\u8a62\u884c\u70ba<\/li>\n\n\n\n<li>AWS CloudTrail API \u547c\u53eb\u4e8b\u4ef6<\/li>\n<\/ul>\n\n\n\n<p>\u9019\u4e9b\u8cc7\u6599\u6703\u900f\u904e AWS \u898f\u6a21\u4e0b\u8a13\u7df4\u7684 AI \u8207\u6a5f\u5668\u5b78\u7fd2\u6a21\u578b\u9032\u884c\u4ea4\u53c9\u6bd4\u5c0d\u8207\u95dc\u806f\u5206\u6790\uff0c\u5224\u65b7\u662f\u5426\u5b58\u5728\u7b26\u5408\u653b\u64ca\u6a21\u5f0f\u7684\u884c\u70ba\u93c8\u3002\u76f8\u8f03\u65bc\u50b3\u7d71\u53ea\u986f\u793a\u55ae\u7b46\u544a\u8b66\uff0c\u5ef6\u4f38\u5f0f\u5a01\u8105\u5075\u6e2c\u6703\u76f4\u63a5\u7522\u51fa<strong>\u9ad8\u4fe1\u5fc3\u5ea6\u7684\u653b\u64ca\u5e8f\u5217\uff08Attack Sequence\uff09<\/strong>\uff0c\u5e6b\u52a9\u8cc7\u5b89\u5718\u968a\u5feb\u901f\u7406\u89e3\u4e8b\u4ef6\u8108\u7d61\uff0c\u964d\u4f4e\u8aa4\u5224\u8207\u544a\u8b66\u75b2\u52de\u3002<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">EC2 \u8207 ECS \u653b\u64ca\u5e8f\u5217\u5982\u4f55\u4ee5\u300c\u7fa4\u7d44\u8207\u53e2\u96c6\u300d\u5224\u65b7<\/h3>\n\n\n\n<p>\u672c\u6b21\u529f\u80fd\u66f4\u65b0\u7684\u95dc\u9375\uff0c\u5728\u65bc <strong>\u653b\u64ca\u5e8f\u5217\u5206\u6790\u6b63\u5f0f\u64f4\u5c55\u81f3 EC2 \u8207 ECS \u74b0\u5883<\/strong>\uff0c\u800c\u4e14\u4e0d\u518d\u50c5\u91dd\u5c0d\u55ae\u4e00\u8cc7\u6e90\uff0c\u800c\u662f\u4ee5\u300c\u7fa4\u7d44\u300d\u8207\u300c\u53e2\u96c6\u300d\u70ba\u5224\u65b7\u55ae\u4f4d\u3002\u5728\u5be6\u52d9\u4e0a\uff0cEC2 \u8207 ECS \u8cc7\u6e90\u591a\u534a\u900f\u904e Auto Scaling\u3001\u5171\u7528 AMI\u3001Launch Template\u3001IAM Instance Profile\uff0c\u6216\u53e2\u96c6\u5c64\u7d1a\u90e8\u7f72\u81ea\u52d5\u5efa\u7acb\u8207\u66ff\u63db\u3002GuardDuty \u6703\u5206\u6790\u9019\u4e9b\u5171\u901a\u5c6c\u6027\uff0c\u5224\u65b7\u591a\u500b\u8cc7\u6e90\u4e0a\u7684\u7570\u5e38\u884c\u70ba\uff0c\u662f\u5426\u6e90\u81ea<strong>\u540c\u4e00\u500b\u5e95\u5c64\u5165\u4fb5\u4e8b\u4ef6<\/strong>\u3002\u7576\u7cfb\u7d71\u5075\u6e2c\u5230\u7b26\u5408\u689d\u4ef6\u7684\u884c\u70ba\u6a21\u5f0f\u6642\uff0c\u4fbf\u6703\u5c07\u6a6b\u8de8\u591a\u500b EC2 \u57f7\u884c\u500b\u9ad4\u6216 ECS \u4efb\u52d9\u7684\u6d3b\u52d5\uff0c\u6574\u5408\u70ba\u4e00\u689d <strong>Critical \u7b49\u7d1a\u7684\u653b\u64ca\u5e8f\u5217<\/strong>\uff0c\u4e26\u63d0\u4f9b\uff1a<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>\u4e8b\u4ef6\u6458\u8981\u8207\u5f71\u97ff\u7bc4\u570d<\/li>\n\n\n\n<li>\u653b\u64ca\u884c\u70ba\u7684\u6642\u9593\u6f14\u9032<\/li>\n\n\n\n<li>\u5c0d\u61c9\u7684 MITRE ATT&amp;CK \u6280\u8853\u8207\u6230\u8853<\/li>\n\n\n\n<li>\u660e\u78ba\u7684\u4fee\u5fa9\u8207\u7de9\u89e3\u5efa\u8b70<\/li>\n<\/ul>\n\n\n\n<p>\u8b93\u4f01\u696d\u80fd\u66f4\u5feb\u638c\u63e1\u865b\u64ec\u6a5f\u8207\u5bb9\u5668\u74b0\u5883\u7684\u5be6\u969b\u98a8\u96aa\uff0c\u4e26\u512a\u5148\u8655\u7406\u6700\u5177\u5f71\u97ff\u6027\u7684\u8cc7\u5b89\u4e8b\u4ef6\u3002<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">GuardDuty \u7d50\u5408 AWS Security Hub \u7684\u6574\u5408\u512a\u52e2<\/h2>\n\n\n\n<p>\u7576 GuardDuty \u5075\u6e2c\u5230 EC2 \u6216 ECS \u7684\u653b\u64ca\u5e8f\u5217\u6642\uff0c\u76f8\u95dc\u7d50\u679c\u6703\u540c\u6b65\u986f\u793a\u5728 <strong>AWS Security Hub<\/strong> \u7684\u66dd\u96aa\u5100\u8868\u677f\u4e2d\uff0c\u4e26\u8207\u5176\u4ed6 GuardDuty Finding \u4e00\u4f75\u5448\u73fe\u3002\u5c0d\u4f01\u696d\u800c\u8a00\uff0c\u9019\u4ee3\u8868\u8cc7\u5b89\u5718\u968a\u4e0d\u9700\u8981\u518d\u5206\u5225\u67e5\u770b\u591a\u500b\u670d\u52d9\u6216\u544a\u8b66\u4f86\u6e90\uff0c\u5c31\u80fd\u5728\u540c\u4e00\u500b\u4ecb\u9762\u4e2d\u638c\u63e1\u6574\u9ad4\u96f2\u7aef\u98a8\u96aa\u72c0\u6cc1\u3002<\/p>\n\n\n\n<p>\u5728\u5be6\u969b\u71df\u904b\u5834\u666f\u4e2d\uff0c\u9019\u6a23\u7684\u96c6\u4e2d\u8996\u89d2\u7279\u5225\u9069\u5408\u4ee5\u4e0b\u60c5\u5883\uff1a<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>\u591a\u5e33\u865f\u3001\u591a\u5340\u57df AWS \u74b0\u5883\u7684\u7d71\u4e00\u8cc7\u5b89\u76e3\u63a7<\/li>\n\n\n\n<li>SOC \u5718\u968a\u9700\u8981\u5feb\u901f\u5224\u65b7\u54ea\u4e9b\u4e8b\u4ef6\u300c\u771f\u7684\u6709\u98a8\u96aa\u300d<\/li>\n\n\n\n<li>\u7ba1\u7406\u968e\u5c64\u5e0c\u671b\u5373\u6642\u638c\u63e1\u6574\u9ad4\u8cc7\u5b89\u66dd\u96aa\u7a0b\u5ea6<\/li>\n<\/ul>\n\n\n\n<p>\u900f\u904e\u5c07\u96f6\u6563\u7684\u5a01\u8105\u8cc7\u8a0a\u6574\u5408\u70ba\u653b\u64ca\u5e8f\u5217\uff0cSecurity Hub \u4e0d\u518d\u53ea\u662f\u544a\u8b66\u6e05\u55ae\uff0c\u800c\u662f\u6210\u70ba<strong>\u53ef\u76f4\u63a5\u7528\u65bc\u6c7a\u7b56\u8207\u61c9\u8b8a\u7684\u98a8\u96aa\u7e3d\u89bd<\/strong>\u3002<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">GuardDuty \u5be6\u969b\u80fd\u5e6b\u4f01\u696d\u89e3\u6c7a\u54ea\u4e9b\u8cc7\u5b89\u554f\u984c\uff1f<\/h2>\n\n\n\n<p>\u5728\u6c92\u6709\u653b\u64ca\u5e8f\u5217\u6574\u5408\u7684\u60c5\u6cc1\u4e0b\uff0c\u8cc7\u5b89\u5718\u968a\u5e38\u6703\u9762\u81e8\u5927\u91cf\u544a\u8b66\u537b\u7121\u6cd5\u5224\u65b7\u512a\u5148\u9806\u5e8f\u7684\u554f\u984c\u3002GuardDuty \u8207 Security Hub \u7684\u6574\u5408\uff0c\u80fd\u76f4\u63a5\u5448\u73fe\u653b\u64ca\u884c\u70ba\u7684\u5b8c\u6574\u8108\u7d61\u8207\u5f71\u97ff\u7bc4\u570d\uff0c\u8b93\u5718\u968a\u66f4\u5bb9\u6613\u505a\u51fa\u5be6\u969b\u884c\u52d5\u5224\u65b7\u3002<\/p>\n\n\n\n<p>\u5728\u61c9\u7528\u5834\u666f\u4e0a\uff0c\u4f01\u696d\u53ef\u4ee5\uff1a<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>\u5feb\u901f\u8fa8\u8b58\u6a6b\u8de8 EC2 \u8207 ECS \u7684\u591a\u968e\u6bb5\u653b\u64ca\u884c\u70ba<\/li>\n\n\n\n<li>\u5224\u65b7\u662f\u5426\u70ba\u540c\u4e00\u4e8b\u4ef6\u5c0e\u81f4\u591a\u500b\u8cc7\u6e90\u7570\u5e38<\/li>\n\n\n\n<li>\u512a\u5148\u8655\u7406 Critical \u7b49\u7d1a\u3001\u5f71\u97ff\u7bc4\u570d\u5ee3\u7684\u98a8\u96aa<\/li>\n\n\n\n<li>\u5c07\u7d50\u679c\u76f4\u63a5\u7d0d\u5165\u65e2\u6709\u7684\u4e8b\u4ef6\u56de\u61c9\uff08IR\uff09\u8207\u4fee\u5fa9\u6d41\u7a0b<\/li>\n<\/ul>\n\n\n\n<p>\u9019\u6a23\u7684\u6574\u5408\uff0c\u80fd\u6709\u6548\u964d\u4f4e\u544a\u8b66\u75b2\u52de\uff0c\u8b93\u8cc7\u5b89\u4eba\u54e1\u628a\u6642\u9593\u82b1\u5728<strong>\u771f\u6b63\u9700\u8981\u8655\u7406\u7684\u653b\u64ca\u8def\u5f91\u8207\u4fee\u5fa9\u884c\u52d5<\/strong>\u4e0a\uff0c\u800c\u4e0d\u662f\u53cd\u8986\u8ffd\u8e64\u55ae\u4e00\u4e8b\u4ef6\u3002<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">\u52e4\u82f1\u79d1\u6280\u89c0\u9ede<\/h3>\n\n\n\n<p>\u5f9e\u5be6\u52d9\u5c0e\u5165\u7d93\u9a57\u4f86\u770b\uff0c\u8a31\u591a\u4f01\u696d\u4e26\u975e\u7f3a\u4e4f\u8cc7\u5b89\u5de5\u5177\uff0c\u800c\u662f<strong>\u7f3a\u4e4f\u80fd\u5c07\u8cc7\u5b89\u4e8b\u4ef6\u8f49\u5316\u70ba\u53ef\u6c7a\u7b56\u8cc7\u8a0a\u7684\u8996\u89d2<\/strong>\u3002\u5ef6\u4f38\u5f0f\u5a01\u8105\u5075\u6e2c\u7684\u50f9\u503c\uff0c\u5728\u65bc\u5354\u52a9\u4f01\u696d\u5feb\u901f\u91d0\u6e05\u300c\u54ea\u4e9b\u4e8b\u4ef6\u9700\u8981\u7acb\u5373\u8655\u7406\u300d\uff0c\u907f\u514d\u8cc7\u5b89\u5718\u968a\u88ab\u5927\u91cf\u4f4e\u95dc\u806f\u5ea6\u544a\u8b66\u6df9\u6c92\u3002<strong>\u52e4\u82f1\u79d1\u6280<\/strong>\u5728\u5354\u52a9\u4f01\u696d\u5c0e\u5165 GuardDuty \u6642\uff0c\u901a\u5e38\u6703\u540c\u6b65\u5f9e\u4e09\u500b\u5c64\u9762\u8a55\u4f30\uff1a<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>\u67b6\u69cb\u5c64\uff1a\u8a55\u4f30 EC2\u3001ECS \u8207\u5e33\u865f\u7d50\u69cb\u662f\u5426\u9069\u5408\u555f\u7528\u591a\u968e\u6bb5\u5075\u6e2c<\/li>\n\n\n\n<li>\u71df\u904b\u5c64\uff1a\u5354\u52a9\u8cc7\u5b89\u8207\u7dad\u904b\u5718\u968a\u5efa\u7acb\u6e05\u695a\u7684\u4e8b\u4ef6\u5224\u8b80\u6d41\u7a0b<\/li>\n\n\n\n<li>\u6210\u672c\u5c64\uff1a\u91d0\u6e05\u8cc7\u5b89\u670d\u52d9\u7684\u5be6\u969b\u8a08\u50f9\u65b9\u5f0f\uff0c\u907f\u514d\u5f8c\u7e8c\u5e33\u55ae\u8a8d\u77e5\u843d\u5dee<\/li>\n<\/ul>\n\n\n\n<p>\u9019\u6a23\u7684\u5c0e\u5165\u65b9\u5f0f\uff0c\u80fd\u8b93 GuardDuty \u4e0d\u53ea\u662f\u300c\u958b\u555f\u4e00\u500b\u8cc7\u5b89\u670d\u52d9\u300d\uff0c\u800c\u662f\u771f\u6b63\u878d\u5165\u4f01\u696d\u9577\u671f\u7684\u96f2\u7aef\u6cbb\u7406\u8207\u71df\u904b\u6d41\u7a0b\u4e2d\u3002\u52e4\u82f1\u79d1\u6280\u53ef\u5354\u52a9\u4f01\u696d\u5f9e\u67b6\u69cb\u898f\u5283\u3001\u8cc7\u5b89\u5075\u6e2c\u3001\u5230\u5e33\u55ae\u8207\u6210\u672c\u63a7\u7ba1\uff0c\u5efa\u7acb\u771f\u6b63\u53ef\u843d\u5730\u7684\u96f2\u7aef\u8cc7\u5b89\u9632\u7dda\u3002<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u7e3d\u7d50<\/h2>\n\n\n\n<p>Amazon GuardDuty Extended Threat Detection \u7684\u6838\u5fc3\u50f9\u503c\uff0c\u5728\u65bc<strong>\u628a\u539f\u672c\u5206\u6563\u3001\u96e3\u4ee5\u7406\u89e3\u7684\u8cc7\u5b89\u8a0a\u865f\uff0c\u6574\u5408\u70ba\u4e00\u689d\u53ef\u5224\u65b7\u3001\u53ef\u6c7a\u7b56\u7684\u653b\u64ca\u8108\u7d61<\/strong>\u3002\u96a8\u8457 EC2 \u8207 ECS \u6b63\u5f0f\u7d0d\u5165\u591a\u968e\u6bb5\u653b\u64ca\u5206\u6790\uff0c\u4f01\u696d\u7d42\u65bc\u80fd\u4ee5\u4e00\u81f4\u7684\u65b9\u5f0f\uff0c\u770b\u61c2\u865b\u64ec\u6a5f\u8207\u5bb9\u5668\u74b0\u5883\u4e2d\u7684\u771f\u5be6\u5a01\u8105\uff0c\u5c07\u8cc7\u5b89\u5f9e\u88ab\u52d5\u56de\u61c9\uff0c\u63d0\u5347\u70ba\u53ef\u6cbb\u7406\u3001\u53ef\u9810\u5224\u7684\u80fd\u529b\u3002<\/p>\n\n\n\n<p>\u5728\u5c0e\u5165\u8cc7\u5b89\u670d\u52d9\u6642\uff0c\u529f\u80fd\u9069\u914d\u8207\u6210\u672c\u900f\u660e\u540c\u6a23\u95dc\u9375\u3002\u52e4\u82f1\u79d1\u6280\u8eab\u70ba <a href=\"https:\/\/www.elite.cloud\/zh\/aws\/\" target=\"_blank\" rel=\"noopener\" title=\"\">AWS \u8a8d\u8b49\u4ee3\u7406\u5546<\/a>\uff0c\u53ef\u5354\u52a9\u4f01\u696d\u91d0\u6e05 GuardDuty \u7684\u555f\u7528\u7bc4\u570d\u3001\u8a08\u50f9\u65b9\u5f0f\u8207\u5e33\u55ae\u7d50\u69cb\uff0c\u907f\u514d\u8cc7\u5b89\u6295\u8cc7\u6210\u70ba\u9577\u671f\u8ca0\u64d4\u3002<a href=\"https:\/\/www.elite.cloud\/zh\/contact-us\/\" target=\"_blank\" rel=\"noopener\" title=\"\">\u6b61\u8fce\u8207\u52e4\u82f1\u79d1\u6280\u806f\u7e6b<\/a>\uff0c\u5354\u52a9\u4f60\u8a55\u4f30\u73fe\u6709 AWS \u67b6\u69cb\u4e26\u898f\u5283\u5408\u9069\u7684\u8cc7\u5b89\u5c0e\u5165\u65b9\u6848\u3002<\/p>\n\n\n\n<p><strong>\u6587\u7ae0\u4f86\u6e90\u5f15\u7528\u65bc\uff1a<\/strong><a href=\"https:\/\/aws.amazon.com\/tw\/blogs\/aws\/amazon-guardduty-adds-extended-threat-detection-for-amazon-ec2-and-amazon-ecs\/\" target=\"_blank\" rel=\"noopener\" title=\"\">Amazon GuardDuty adds Extended Threat Detection for Amazon EC2 and Amazon ECS<\/a><br><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u96a8\u8457\u4f01\u696d\u5728 AWS \u4e0a\u540c\u6642\u904b\u884c EC2 \u8207 ECS\uff0c\u96f2\u7aef\u653b\u64ca\u9762\u6301\u7e8c\u64f4\u5927\uff0c\u8cc7\u5b89\u4e8b\u4ef6\u4e5f\u4e0d\u518d\u53ea\u662f\u55ae\u4e00\u7570\u5e38\uff0c\u800c\u662f\u6a6b\u8de8\u591a\u500b\u8cc7\u6e90\u3001\u5206\u968e\u6bb5\u767c\u751f\u7684\u8907\u5408\u5f0f\u653b\u64ca\u3002\u82e5\u50c5\u4f9d\u8cf4\u96f6\u6563\u544a\u8b66\uff0c\u5f80\u5f80\u96e3\u4ee5\u53ca\u6642\u5224\u65b7\u5be6\u969b\u98a8\u96aa\u3002AWS \u8fd1\u671f\u5ba3\u5e03\uff0cAmazon GuardDuty \u7684 Extended Threat Detection \uff08\u5ef6\u4f38\u5f0f\u5a01\u8105\u5075\u6e2c\uff09 \u6b63\u5f0f\u652f\u63f4 EC2 \u8207 ECS\uff0c\u8b93\u4f01\u696d\u80fd\u4ee5\u300c\u653b\u64ca\u5e8f\u5217\u300d\u7684\u89d2\u5ea6\uff0c\u638c\u63e1\u8de8\u865b\u64ec\u6a5f\u8207\u5bb9\u5668\u7684\u591a\u968e\u6bb5\u5a01\u8105\u884c\u70ba\u3002<\/p>\n","protected":false},"author":7,"featured_media":6143,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[90],"tags":[29,75,303],"class_list":["post-6048","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-90","tag-aws","tag-aws-ec2","tag-aws-ecs"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO Pro 4.9.6.2 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u96f2\u7aef\u544a\u8b66\u592a\u591a\u537b\u770b\u4e0d\u51fa\u771f\u6b63\u98a8\u96aa\uff1f\u4e86\u89e3 Amazon GuardDuty Extended Threat Detection \u5982\u4f55\u6574\u5408 EC2\u3001ECS \u8cc7\u5b89\u4e8b\u4ef6\uff0c\u8fa8\u8b58\u591a\u968e\u6bb5\u653b\u64ca\uff0c\u4e26\u517c\u9867\u5c0e\u5165\u6210\u672c\u8207\u5e33\u55ae\u900f\u660e\u3002\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Nick Lan\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/www.elite.cloud\/zh\/post\/guardduty-extended-threat-detection-for-ec2-and-ecs\/\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO Pro (AIOSEO) 4.9.6.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"zh_CN\" \/>\n\t\t<meta property=\"og:site_name\" content=\"Elite Cloud |\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"AWS GuardDuty \u5ef6\u4f38\u5f0f\u5a01\u8105\u5075\u6e2c\u5347\u7d1a\uff1a\u5f37\u5316 EC2 \u8207 ECS \u8cc7\u5b89\u9632\u8b77\" \/>\n\t\t<meta property=\"og:description\" content=\"\u96f2\u7aef\u544a\u8b66\u592a\u591a\u537b\u770b\u4e0d\u51fa\u771f\u6b63\u98a8\u96aa\uff1f\u4e86\u89e3 Amazon GuardDuty Extended Threat Detection \u5982\u4f55\u6574\u5408 EC2\u3001ECS \u8cc7\u5b89\u4e8b\u4ef6\uff0c\u8fa8\u8b58\u591a\u968e\u6bb5\u653b\u64ca\uff0c\u4e26\u517c\u9867\u5c0e\u5165\u6210\u672c\u8207\u5e33\u55ae\u900f\u660e\u3002\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/www.elite.cloud\/zh\/post\/guardduty-extended-threat-detection-for-ec2-and-ecs\/\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/www.elite.cloud\/wp-content\/uploads\/2026\/01\/vseo_0121_blog-scaled.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/www.elite.cloud\/wp-content\/uploads\/2026\/01\/vseo_0121_blog-scaled.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"2560\" \/>\n\t\t<meta property=\"og:image:height\" content=\"1440\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-01-22T05:55:59+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-01-22T05:56:04+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/people\/Elite-Cloud\/61567962807760\/\" \/>\n\t\t<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n\t\t<meta name=\"twitter:title\" content=\"AWS GuardDuty \u5ef6\u4f38\u5f0f\u5a01\u8105\u5075\u6e2c\u5347\u7d1a\uff1a\u5f37\u5316 EC2 \u8207 ECS \u8cc7\u5b89\u9632\u8b77\" \/>\n\t\t<meta name=\"twitter:description\" content=\"\u96f2\u7aef\u544a\u8b66\u592a\u591a\u537b\u770b\u4e0d\u51fa\u771f\u6b63\u98a8\u96aa\uff1f\u4e86\u89e3 Amazon GuardDuty Extended Threat Detection \u5982\u4f55\u6574\u5408 EC2\u3001ECS \u8cc7\u5b89\u4e8b\u4ef6\uff0c\u8fa8\u8b58\u591a\u968e\u6bb5\u653b\u64ca\uff0c\u4e26\u517c\u9867\u5c0e\u5165\u6210\u672c\u8207\u5e33\u55ae\u900f\u660e\u3002\" \/>\n\t\t<meta name=\"twitter:image\" content=\"https:\/\/www.elite.cloud\/wp-content\/uploads\/2026\/01\/vseo_0121_blog-scaled.jpg\" \/>\n\t\t<script type=\"application\/ld+json\" class=\"aioseo-schema\">\n\t\t\t{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"BlogPosting\",\"@id\":\"https:\\\/\\\/www.elite.cloud\\\/zh\\\/post\\\/guardduty-extended-threat-detection-for-ec2-and-ecs\\\/#blogposting\",\"name\":\"AWS GuardDuty \\u5ef6\\u4f38\\u5f0f\\u5a01\\u8105\\u5075\\u6e2c\\u5347\\u7d1a\\uff1a\\u5f37\\u5316 EC2 \\u8207 ECS \\u8cc7\\u5b89\\u9632\\u8b77\",\"headline\":\"AWS GuardDuty \\u5ef6\\u4f38\\u5f0f\\u5a01\\u8105\\u5075\\u6e2c\\u5347\\u7d1a\\uff1a\\u5f37\\u5316 EC2 \\u8207 ECS \\u8cc7\\u5b89\\u9632\\u8b77\",\"author\":{\"@id\":\"https:\\\/\\\/www.elite.cloud\\\/zh\\\/post\\\/author\\\/nick\\\/#author\"},\"publisher\":{\"@id\":\"https:\\\/\\\/www.elite.cloud\\\/zh\\\/#organization\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/www.elite.cloud\\\/wp-content\\\/uploads\\\/2026\\\/01\\\/vseo_0121_blog-scaled.jpg\",\"width\":2560,\"height\":1440},\"datePublished\":\"2026-01-22T13:55:59+08:00\",\"dateModified\":\"2026-01-22T13:56:04+08:00\",\"inLanguage\":\"zh\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.elite.cloud\\\/zh\\\/post\\\/guardduty-extended-threat-detection-for-ec2-and-ecs\\\/#webpage\"},\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.elite.cloud\\\/zh\\\/post\\\/guardduty-extended-threat-detection-for-ec2-and-ecs\\\/#webpage\"},\"articleSection\":\"\\u96f2\\u7aef\\u65b0\\u77e5, AWS, AWS EC2, AWS ECS, Optional\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.elite.cloud\\\/zh\\\/post\\\/guardduty-extended-threat-detection-for-ec2-and-ecs\\\/#breadcrumblist\",\"itemListElement\":[{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.elite.cloud\\\/zh\\\/#listItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.elite.cloud\\\/zh\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.elite.cloud\\\/zh\\\/blog\\\/categories\\\/%e9%9b%b2%e7%ab%af%e6%96%b0%e7%9f%a5\\\/#listItem\",\"name\":\"\\u96f2\\u7aef\\u65b0\\u77e5\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.elite.cloud\\\/zh\\\/blog\\\/categories\\\/%e9%9b%b2%e7%ab%af%e6%96%b0%e7%9f%a5\\\/#listItem\",\"position\":2,\"name\":\"\\u96f2\\u7aef\\u65b0\\u77e5\",\"item\":\"https:\\\/\\\/www.elite.cloud\\\/zh\\\/blog\\\/categories\\\/%e9%9b%b2%e7%ab%af%e6%96%b0%e7%9f%a5\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.elite.cloud\\\/zh\\\/post\\\/guardduty-extended-threat-detection-for-ec2-and-ecs\\\/#listItem\",\"name\":\"AWS GuardDuty \\u5ef6\\u4f38\\u5f0f\\u5a01\\u8105\\u5075\\u6e2c\\u5347\\u7d1a\\uff1a\\u5f37\\u5316 EC2 \\u8207 ECS \\u8cc7\\u5b89\\u9632\\u8b77\"},\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.elite.cloud\\\/zh\\\/#listItem\",\"name\":\"Home\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.elite.cloud\\\/zh\\\/post\\\/guardduty-extended-threat-detection-for-ec2-and-ecs\\\/#listItem\",\"position\":3,\"name\":\"AWS GuardDuty \\u5ef6\\u4f38\\u5f0f\\u5a01\\u8105\\u5075\\u6e2c\\u5347\\u7d1a\\uff1a\\u5f37\\u5316 EC2 \\u8207 ECS \\u8cc7\\u5b89\\u9632\\u8b77\",\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.elite.cloud\\\/zh\\\/blog\\\/categories\\\/%e9%9b%b2%e7%ab%af%e6%96%b0%e7%9f%a5\\\/#listItem\",\"name\":\"\\u96f2\\u7aef\\u65b0\\u77e5\"}}]},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.elite.cloud\\\/zh\\\/#organization\",\"name\":\"Elite Cloud\",\"url\":\"https:\\\/\\\/www.elite.cloud\\\/zh\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/www.elite.cloud\\\/wp-content\\\/uploads\\\/2025\\\/12\\\/android-chrome-512x512-1.png\",\"@id\":\"https:\\\/\\\/www.elite.cloud\\\/zh\\\/post\\\/guardduty-extended-threat-detection-for-ec2-and-ecs\\\/#organizationLogo\",\"width\":112,\"height\":112},\"image\":{\"@id\":\"https:\\\/\\\/www.elite.cloud\\\/zh\\\/post\\\/guardduty-extended-threat-detection-for-ec2-and-ecs\\\/#organizationLogo\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/people\\\/Elite-Cloud\\\/61567962807760\\\/\",\"https:\\\/\\\/www.instagram.com\\\/elite_cloud_ai\\\/\",\"https:\\\/\\\/www.youtube.com\\\/@EliteCloudsg\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/elite-cloud-pte-ltd\\\/\",\"https:\\\/\\\/www.threads.net\\\/@elite_cloud_ai\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.elite.cloud\\\/zh\\\/post\\\/author\\\/nick\\\/#author\",\"url\":\"https:\\\/\\\/www.elite.cloud\\\/zh\\\/post\\\/author\\\/nick\\\/\",\"name\":\"Nick Lan\",\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/www.elite.cloud\\\/wp-content\\\/uploads\\\/2025\\\/12\\\/nick-lan_avatar-96x96.png\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.elite.cloud\\\/zh\\\/post\\\/guardduty-extended-threat-detection-for-ec2-and-ecs\\\/#webpage\",\"url\":\"https:\\\/\\\/www.elite.cloud\\\/zh\\\/post\\\/guardduty-extended-threat-detection-for-ec2-and-ecs\\\/\",\"name\":\"AWS GuardDuty \\u5ef6\\u4f38\\u5f0f\\u5a01\\u8105\\u5075\\u6e2c\\u5347\\u7d1a\\uff1a\\u5f37\\u5316 EC2 \\u8207 ECS \\u8cc7\\u5b89\\u9632\\u8b77\",\"description\":\"\\u96f2\\u7aef\\u544a\\u8b66\\u592a\\u591a\\u537b\\u770b\\u4e0d\\u51fa\\u771f\\u6b63\\u98a8\\u96aa\\uff1f\\u4e86\\u89e3 Amazon GuardDuty Extended Threat Detection \\u5982\\u4f55\\u6574\\u5408 EC2\\u3001ECS \\u8cc7\\u5b89\\u4e8b\\u4ef6\\uff0c\\u8fa8\\u8b58\\u591a\\u968e\\u6bb5\\u653b\\u64ca\\uff0c\\u4e26\\u517c\\u9867\\u5c0e\\u5165\\u6210\\u672c\\u8207\\u5e33\\u55ae\\u900f\\u660e\\u3002\",\"inLanguage\":\"zh\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.elite.cloud\\\/zh\\\/#website\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.elite.cloud\\\/zh\\\/post\\\/guardduty-extended-threat-detection-for-ec2-and-ecs\\\/#breadcrumblist\"},\"author\":{\"@id\":\"https:\\\/\\\/www.elite.cloud\\\/zh\\\/post\\\/author\\\/nick\\\/#author\"},\"creator\":{\"@id\":\"https:\\\/\\\/www.elite.cloud\\\/zh\\\/post\\\/author\\\/nick\\\/#author\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/www.elite.cloud\\\/wp-content\\\/uploads\\\/2026\\\/01\\\/vseo_0121_blog-scaled.jpg\",\"@id\":\"https:\\\/\\\/www.elite.cloud\\\/zh\\\/post\\\/guardduty-extended-threat-detection-for-ec2-and-ecs\\\/#mainImage\",\"width\":2560,\"height\":1440},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.elite.cloud\\\/zh\\\/post\\\/guardduty-extended-threat-detection-for-ec2-and-ecs\\\/#mainImage\"},\"datePublished\":\"2026-01-22T13:55:59+08:00\",\"dateModified\":\"2026-01-22T13:56:04+08:00\"},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.elite.cloud\\\/zh\\\/#website\",\"url\":\"https:\\\/\\\/www.elite.cloud\\\/zh\\\/\",\"name\":\"Elite Cloud\",\"inLanguage\":\"zh\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.elite.cloud\\\/zh\\\/#organization\"}}]}\n\t\t<\/script>\n\t\t<!-- All in One SEO Pro -->\r\n\t\t<title>AWS GuardDuty \u5ef6\u4f38\u5f0f\u5a01\u8105\u5075\u6e2c\u5347\u7d1a\uff1a\u5f37\u5316 EC2 \u8207 ECS \u8cc7\u5b89\u9632\u8b77<\/title>\n\n","aioseo_head_json":{"title":"AWS GuardDuty \u5ef6\u4f38\u5f0f\u5a01\u8105\u5075\u6e2c\u5347\u7d1a\uff1a\u5f37\u5316 EC2 \u8207 ECS \u8cc7\u5b89\u9632\u8b77","description":"\u96f2\u7aef\u544a\u8b66\u592a\u591a\u537b\u770b\u4e0d\u51fa\u771f\u6b63\u98a8\u96aa\uff1f\u4e86\u89e3 Amazon GuardDuty Extended Threat Detection \u5982\u4f55\u6574\u5408 EC2\u3001ECS \u8cc7\u5b89\u4e8b\u4ef6\uff0c\u8fa8\u8b58\u591a\u968e\u6bb5\u653b\u64ca\uff0c\u4e26\u517c\u9867\u5c0e\u5165\u6210\u672c\u8207\u5e33\u55ae\u900f\u660e\u3002","canonical_url":"https:\/\/www.elite.cloud\/zh\/post\/guardduty-extended-threat-detection-for-ec2-and-ecs\/","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"BlogPosting","@id":"https:\/\/www.elite.cloud\/zh\/post\/guardduty-extended-threat-detection-for-ec2-and-ecs\/#blogposting","name":"AWS GuardDuty \u5ef6\u4f38\u5f0f\u5a01\u8105\u5075\u6e2c\u5347\u7d1a\uff1a\u5f37\u5316 EC2 \u8207 ECS \u8cc7\u5b89\u9632\u8b77","headline":"AWS GuardDuty \u5ef6\u4f38\u5f0f\u5a01\u8105\u5075\u6e2c\u5347\u7d1a\uff1a\u5f37\u5316 EC2 \u8207 ECS \u8cc7\u5b89\u9632\u8b77","author":{"@id":"https:\/\/www.elite.cloud\/zh\/post\/author\/nick\/#author"},"publisher":{"@id":"https:\/\/www.elite.cloud\/zh\/#organization"},"image":{"@type":"ImageObject","url":"https:\/\/www.elite.cloud\/wp-content\/uploads\/2026\/01\/vseo_0121_blog-scaled.jpg","width":2560,"height":1440},"datePublished":"2026-01-22T13:55:59+08:00","dateModified":"2026-01-22T13:56:04+08:00","inLanguage":"zh","mainEntityOfPage":{"@id":"https:\/\/www.elite.cloud\/zh\/post\/guardduty-extended-threat-detection-for-ec2-and-ecs\/#webpage"},"isPartOf":{"@id":"https:\/\/www.elite.cloud\/zh\/post\/guardduty-extended-threat-detection-for-ec2-and-ecs\/#webpage"},"articleSection":"\u96f2\u7aef\u65b0\u77e5, AWS, AWS EC2, AWS ECS, Optional"},{"@type":"BreadcrumbList","@id":"https:\/\/www.elite.cloud\/zh\/post\/guardduty-extended-threat-detection-for-ec2-and-ecs\/#breadcrumblist","itemListElement":[{"@type":"ListItem","@id":"https:\/\/www.elite.cloud\/zh\/#listItem","position":1,"name":"Home","item":"https:\/\/www.elite.cloud\/zh\/","nextItem":{"@type":"ListItem","@id":"https:\/\/www.elite.cloud\/zh\/blog\/categories\/%e9%9b%b2%e7%ab%af%e6%96%b0%e7%9f%a5\/#listItem","name":"\u96f2\u7aef\u65b0\u77e5"}},{"@type":"ListItem","@id":"https:\/\/www.elite.cloud\/zh\/blog\/categories\/%e9%9b%b2%e7%ab%af%e6%96%b0%e7%9f%a5\/#listItem","position":2,"name":"\u96f2\u7aef\u65b0\u77e5","item":"https:\/\/www.elite.cloud\/zh\/blog\/categories\/%e9%9b%b2%e7%ab%af%e6%96%b0%e7%9f%a5\/","nextItem":{"@type":"ListItem","@id":"https:\/\/www.elite.cloud\/zh\/post\/guardduty-extended-threat-detection-for-ec2-and-ecs\/#listItem","name":"AWS GuardDuty \u5ef6\u4f38\u5f0f\u5a01\u8105\u5075\u6e2c\u5347\u7d1a\uff1a\u5f37\u5316 EC2 \u8207 ECS \u8cc7\u5b89\u9632\u8b77"},"previousItem":{"@type":"ListItem","@id":"https:\/\/www.elite.cloud\/zh\/#listItem","name":"Home"}},{"@type":"ListItem","@id":"https:\/\/www.elite.cloud\/zh\/post\/guardduty-extended-threat-detection-for-ec2-and-ecs\/#listItem","position":3,"name":"AWS GuardDuty \u5ef6\u4f38\u5f0f\u5a01\u8105\u5075\u6e2c\u5347\u7d1a\uff1a\u5f37\u5316 EC2 \u8207 ECS \u8cc7\u5b89\u9632\u8b77","previousItem":{"@type":"ListItem","@id":"https:\/\/www.elite.cloud\/zh\/blog\/categories\/%e9%9b%b2%e7%ab%af%e6%96%b0%e7%9f%a5\/#listItem","name":"\u96f2\u7aef\u65b0\u77e5"}}]},{"@type":"Organization","@id":"https:\/\/www.elite.cloud\/zh\/#organization","name":"Elite Cloud","url":"https:\/\/www.elite.cloud\/zh\/","logo":{"@type":"ImageObject","url":"https:\/\/www.elite.cloud\/wp-content\/uploads\/2025\/12\/android-chrome-512x512-1.png","@id":"https:\/\/www.elite.cloud\/zh\/post\/guardduty-extended-threat-detection-for-ec2-and-ecs\/#organizationLogo","width":112,"height":112},"image":{"@id":"https:\/\/www.elite.cloud\/zh\/post\/guardduty-extended-threat-detection-for-ec2-and-ecs\/#organizationLogo"},"sameAs":["https:\/\/www.facebook.com\/people\/Elite-Cloud\/61567962807760\/","https:\/\/www.instagram.com\/elite_cloud_ai\/","https:\/\/www.youtube.com\/@EliteCloudsg","https:\/\/www.linkedin.com\/company\/elite-cloud-pte-ltd\/","https:\/\/www.threads.net\/@elite_cloud_ai"]},{"@type":"Person","@id":"https:\/\/www.elite.cloud\/zh\/post\/author\/nick\/#author","url":"https:\/\/www.elite.cloud\/zh\/post\/author\/nick\/","name":"Nick Lan","image":{"@type":"ImageObject","url":"https:\/\/www.elite.cloud\/wp-content\/uploads\/2025\/12\/nick-lan_avatar-96x96.png"}},{"@type":"WebPage","@id":"https:\/\/www.elite.cloud\/zh\/post\/guardduty-extended-threat-detection-for-ec2-and-ecs\/#webpage","url":"https:\/\/www.elite.cloud\/zh\/post\/guardduty-extended-threat-detection-for-ec2-and-ecs\/","name":"AWS GuardDuty \u5ef6\u4f38\u5f0f\u5a01\u8105\u5075\u6e2c\u5347\u7d1a\uff1a\u5f37\u5316 EC2 \u8207 ECS \u8cc7\u5b89\u9632\u8b77","description":"\u96f2\u7aef\u544a\u8b66\u592a\u591a\u537b\u770b\u4e0d\u51fa\u771f\u6b63\u98a8\u96aa\uff1f\u4e86\u89e3 Amazon GuardDuty Extended Threat Detection \u5982\u4f55\u6574\u5408 EC2\u3001ECS \u8cc7\u5b89\u4e8b\u4ef6\uff0c\u8fa8\u8b58\u591a\u968e\u6bb5\u653b\u64ca\uff0c\u4e26\u517c\u9867\u5c0e\u5165\u6210\u672c\u8207\u5e33\u55ae\u900f\u660e\u3002","inLanguage":"zh","isPartOf":{"@id":"https:\/\/www.elite.cloud\/zh\/#website"},"breadcrumb":{"@id":"https:\/\/www.elite.cloud\/zh\/post\/guardduty-extended-threat-detection-for-ec2-and-ecs\/#breadcrumblist"},"author":{"@id":"https:\/\/www.elite.cloud\/zh\/post\/author\/nick\/#author"},"creator":{"@id":"https:\/\/www.elite.cloud\/zh\/post\/author\/nick\/#author"},"image":{"@type":"ImageObject","url":"https:\/\/www.elite.cloud\/wp-content\/uploads\/2026\/01\/vseo_0121_blog-scaled.jpg","@id":"https:\/\/www.elite.cloud\/zh\/post\/guardduty-extended-threat-detection-for-ec2-and-ecs\/#mainImage","width":2560,"height":1440},"primaryImageOfPage":{"@id":"https:\/\/www.elite.cloud\/zh\/post\/guardduty-extended-threat-detection-for-ec2-and-ecs\/#mainImage"},"datePublished":"2026-01-22T13:55:59+08:00","dateModified":"2026-01-22T13:56:04+08:00"},{"@type":"WebSite","@id":"https:\/\/www.elite.cloud\/zh\/#website","url":"https:\/\/www.elite.cloud\/zh\/","name":"Elite Cloud","inLanguage":"zh","publisher":{"@id":"https:\/\/www.elite.cloud\/zh\/#organization"}}]},"og:locale":"zh_CN","og:site_name":"Elite Cloud |","og:type":"article","og:title":"AWS GuardDuty \u5ef6\u4f38\u5f0f\u5a01\u8105\u5075\u6e2c\u5347\u7d1a\uff1a\u5f37\u5316 EC2 \u8207 ECS \u8cc7\u5b89\u9632\u8b77","og:description":"\u96f2\u7aef\u544a\u8b66\u592a\u591a\u537b\u770b\u4e0d\u51fa\u771f\u6b63\u98a8\u96aa\uff1f\u4e86\u89e3 Amazon GuardDuty Extended Threat Detection \u5982\u4f55\u6574\u5408 EC2\u3001ECS \u8cc7\u5b89\u4e8b\u4ef6\uff0c\u8fa8\u8b58\u591a\u968e\u6bb5\u653b\u64ca\uff0c\u4e26\u517c\u9867\u5c0e\u5165\u6210\u672c\u8207\u5e33\u55ae\u900f\u660e\u3002","og:url":"https:\/\/www.elite.cloud\/zh\/post\/guardduty-extended-threat-detection-for-ec2-and-ecs\/","og:image":"https:\/\/www.elite.cloud\/wp-content\/uploads\/2026\/01\/vseo_0121_blog-scaled.jpg","og:image:secure_url":"https:\/\/www.elite.cloud\/wp-content\/uploads\/2026\/01\/vseo_0121_blog-scaled.jpg","og:image:width":"2560","og:image:height":"1440","article:published_time":"2026-01-22T05:55:59+00:00","article:modified_time":"2026-01-22T05:56:04+00:00","article:publisher":"https:\/\/www.facebook.com\/people\/Elite-Cloud\/61567962807760\/","twitter:card":"summary_large_image","twitter:title":"AWS GuardDuty \u5ef6\u4f38\u5f0f\u5a01\u8105\u5075\u6e2c\u5347\u7d1a\uff1a\u5f37\u5316 EC2 \u8207 ECS \u8cc7\u5b89\u9632\u8b77","twitter:description":"\u96f2\u7aef\u544a\u8b66\u592a\u591a\u537b\u770b\u4e0d\u51fa\u771f\u6b63\u98a8\u96aa\uff1f\u4e86\u89e3 Amazon GuardDuty Extended Threat Detection \u5982\u4f55\u6574\u5408 EC2\u3001ECS \u8cc7\u5b89\u4e8b\u4ef6\uff0c\u8fa8\u8b58\u591a\u968e\u6bb5\u653b\u64ca\uff0c\u4e26\u517c\u9867\u5c0e\u5165\u6210\u672c\u8207\u5e33\u55ae\u900f\u660e\u3002","twitter:image":"https:\/\/www.elite.cloud\/wp-content\/uploads\/2026\/01\/vseo_0121_blog-scaled.jpg"},"aioseo_meta_data":{"post_id":"6048","title":"#post_title","description":"\u96f2\u7aef\u544a\u8b66\u592a\u591a\u537b\u770b\u4e0d\u51fa\u771f\u6b63\u98a8\u96aa\uff1f\u4e86\u89e3 Amazon GuardDuty Extended Threat Detection \u5982\u4f55\u6574\u5408 EC2\u3001ECS \u8cc7\u5b89\u4e8b\u4ef6\uff0c\u8fa8\u8b58\u591a\u968e\u6bb5\u653b\u64ca\uff0c\u4e26\u517c\u9867\u5c0e\u5165\u6210\u672c\u8207\u5e33\u55ae\u900f\u660e\u3002","keywords":null,"keyphrases":{"focus":{"keyphrase":"","score":0,"analysis":{"keyphraseInTitle":{"score":0,"maxScore":9,"error":1}}},"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"featured","og_image_url":"https:\/\/www.elite.cloud\/wp-content\/uploads\/2026\/01\/vseo_0121_blog-scaled.jpg","og_image_width":"2560","og_image_height":"1440","og_image_custom_url":null,"og_image_custom_fields":null,"og_video":"","og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"summary_large_image","twitter_image_type":"featured","twitter_image_url":"https:\/\/www.elite.cloud\/wp-content\/uploads\/2026\/01\/vseo_0121_blog-scaled.jpg","twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"BlogPosting","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":"-1","robots_max_videopreview":"-1","robots_max_imagepreview":"large","priority":null,"frequency":"default","local_seo":null,"seo_analyzer_scan_date":"2026-01-22 06:10:17","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":"0","open_ai":null,"ai":{"faqs":[],"keyPoints":[],"titles":[],"descriptions":[],"socialPosts":{"email":[],"linkedin":[],"twitter":[],"facebook":[],"instagram":[]}},"created":"2026-01-16 06:57:24","updated":"2026-01-22 06:10:17"},"aioseo_breadcrumb":"<div class=\"aioseo-breadcrumbs\"><span class=\"aioseo-breadcrumb\">\n\t<a href=\"https:\/\/www.elite.cloud\/zh\/\" title=\"Home\">Home<\/a>\n<\/span><span class=\"aioseo-breadcrumb-separator\">&raquo;<\/span><span class=\"aioseo-breadcrumb\">\n\t<a href=\"https:\/\/www.elite.cloud\/zh\/blog\/categories\/%e9%9b%b2%e7%ab%af%e6%96%b0%e7%9f%a5\/\" title=\"\u96f2\u7aef\u65b0\u77e5\">\u96f2\u7aef\u65b0\u77e5<\/a>\n<\/span><span class=\"aioseo-breadcrumb-separator\">&raquo;<\/span><span class=\"aioseo-breadcrumb\">\n\tAWS GuardDuty \u5ef6\u4f38\u5f0f\u5a01\u8105\u5075\u6e2c\u5347\u7d1a\uff1a\u5f37\u5316 EC2 \u8207 ECS \u8cc7\u5b89\u9632\u8b77\n<\/span><\/div>","aioseo_breadcrumb_json":[{"label":"Home","link":"https:\/\/www.elite.cloud\/zh\/"},{"label":"\u96f2\u7aef\u65b0\u77e5","link":"https:\/\/www.elite.cloud\/zh\/blog\/categories\/%e9%9b%b2%e7%ab%af%e6%96%b0%e7%9f%a5\/"},{"label":"AWS GuardDuty \u5ef6\u4f38\u5f0f\u5a01\u8105\u5075\u6e2c\u5347\u7d1a\uff1a\u5f37\u5316 EC2 \u8207 ECS \u8cc7\u5b89\u9632\u8b77","link":"https:\/\/www.elite.cloud\/zh\/post\/guardduty-extended-threat-detection-for-ec2-and-ecs\/"}],"_links":{"self":[{"href":"https:\/\/www.elite.cloud\/zh\/wp-json\/wp\/v2\/posts\/6048","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.elite.cloud\/zh\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.elite.cloud\/zh\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.elite.cloud\/zh\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/www.elite.cloud\/zh\/wp-json\/wp\/v2\/comments?post=6048"}],"version-history":[{"count":9,"href":"https:\/\/www.elite.cloud\/zh\/wp-json\/wp\/v2\/posts\/6048\/revisions"}],"predecessor-version":[{"id":6146,"href":"https:\/\/www.elite.cloud\/zh\/wp-json\/wp\/v2\/posts\/6048\/revisions\/6146"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.elite.cloud\/zh\/wp-json\/wp\/v2\/media\/6143"}],"wp:attachment":[{"href":"https:\/\/www.elite.cloud\/zh\/wp-json\/wp\/v2\/media?parent=6048"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.elite.cloud\/zh\/wp-json\/wp\/v2\/categories?post=6048"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.elite.cloud\/zh\/wp-json\/wp\/v2\/tags?post=6048"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}