GuardDuty analyzes tens of billions of events across multiple AWS data sources, such as [[AWS CloudTrail]] event logs, Amazon VPC Flow Logs, and DNS logs.