AWS GuardDuty Important Change — Detection Rule

Detects updates of the GuardDuty list of trusted IPs, perhaps to disable security alerts against malicious IPs.

Read the full analysis on IntelFusions