detecting-cryptomining-in-cloud

What problem does it solve?

Detect unauthorized cloud cryptomining activity and provide rapid containment guidance and forensics preparation to minimize impact.

Core Features & Use Cases

• Multi-signal detection across AWS using GuardDuty cryptocurrency findings, Cost Anomaly Detection, VPC Flow Logs, and runtime process monitoring to identify cryptomining across EC2, ECS, and EKS workloads.
• Incident response guidance with evidence preservation steps and quick isolation of affected resources to prevent lateral movement.
• Container and network monitoring for mining tools and unusual process execution to reduce resource hijacking.

Quick Start

Run the detection agent to generate a live cryptomining security report and trigger containment when threats are detected.