domains / families / security / detecting-cryptomining-in-cloud

detecting-cryptomining-in-cloud

separate

'This skill teaches security teams how to detect and respond to unauthorized

When to use

• When cloud billing alerts indicate unexpected compute cost spikes
• When GuardDuty generates CryptoCurrency or Impact finding types
• When investigating compromised IAM credentials that may be used to launch mining instances
• When monitoring container workloads for unauthorized process execution
• When establishing proactive detection controls against resource hijacking attacks

When not to use

• legitimate cryptocurrency mining operations
• non-cloud mining detection on physical hardware
• general malware analysis unrelated to mining activity

Skill page

Source