AWS GuardDuty detectors, threat findings, and response posture that stay operator-readable.

This control plane turns raw GuardDuty exports into one buyer-readable threat-operations surface: detector coverage, credential abuse, runtime compromise, exfiltration signals, stale findings, and the response packets needed before incidents, audits, or release windows drift.