Detecting Lateral Movement in AWS VPC Using Flow Logs + GuardDuty

How We Caught an Attacker Moving Across Our AWS Network Before They Reached Production