GuardDuty detection bypass via cloudtrail

[megiddoa]

https://www.cloudvulndb.org/guardduty-cloudtrail-bypass

Please note that this GuardDuty detection bypass was remediated shortly after identified by Rhino Labs 2 years ago. GuardDuty will detect if this technique is used to disable CloudTrail logging.

[korniko98]

Hi, looking for a public reference for this led me to Scott's tweet here, would you like to edit the issue and submit a PR?

[korniko98]

Updated the issue to reflect the fix, using Scott's tweet as a reference - It's a shame there's no public archive of SNS GuardDuty announcements