Investigated AWS GuardDuty findings to determine whether detected activity represented a true security threat or expected behavior. Focused on analyzing cloud telemetry, identity usage, and network activity to validate alerts and reduce false positives.
