Amazon GuardDuty offers extended coverage, allowing for ongoing monitoring and profiling of Amazon EKS cluster activities.   This involves identifying any potentially harmful or suspicious behavior that could pose threats to container workloads. The EKS Protection feature within Amazon GuardDuty delivers threat detection capabilities specifically designed to safeguard Amazon EKS clusters within your AWS setup. - Source: dev.to / about 2 months ago

Bearing that in mind, AWS help customers harden their infrastructure preventing cyber incidences by mitigating threats and compromises through detection with Amazon Guard Duty. - Source: dev.to / about 1 year ago

Hiya, I would advise not reinventing the wheel, here. If Amazon GuardDuty doesn't do what you need it to, you might want to look at using a third party, like Crowdstrike, for example (referring to the link you posted here). Source: over 1 year ago

Amazon GuardDuty (Security, Identity, and Compliance) Amazon GuardDuty is a threat detection service that continuously monitors for malicious activity and anomalous behavior to protect your AWS accounts, workloads, Kubernetes clusters, and data stored in Amazon Simple Storage Service (Amazon S3). The GuardDuty service monitors for activity such as unusual API calls, unauthorized deployments, and exfiltrated... - Source: dev.to / over 1 year ago

Identification: This involves detecting and identifying an incident as soon as possible, determining its scope and impact, and activating the incident response team. Using tools such as Amazon GuardDuty for threat and malicious activity detection. AWS WAF is also an effective managed service to protect web applications and environment. - Source: dev.to / over 1 year ago

The initial yes. Once encrypted you can trigger remote via intune/sccm/MDM https://docs.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-overview. - Source: Hacker News / almost 2 years ago

On linux it you can achive it via LUKS, on windows with the help of bitlocker or preferably veracrypt. Source: about 2 years ago

What os are you using? If it happens to be a “pro” version of windows you could use bitlocker full-drive encryption which is built-in. There is one known vulnerability which involves gaining access to the RAM within seconds of shutdown, but that’s easily averted by keeping the computer in your possession for a minute or two after shutting it down. Source: about 2 years ago

There's additional info about bitlocker and tpm here. Source: over 2 years ago

There is also bitlocker drive encryption. That is one way to secure your data if you are worried someone can physically remove your drives. https://docs.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-overview. Source: over 2 years ago