Detecting Cryptomining in Cloud When to Use - When cloud billing alerts indicate unexpected compute cost spikes - When GuardDuty generates CryptoCurrency or Impact finding types - When investigating compromised IAM credentials that may be used to launch mining instances - When monitoring container workloads for unauthorized process execution - When establishing proactive detection controls against resource hijacking attacks Do not use for legitimate cryptocurrency mining operations, for non-cloud mining detection on physical hardware, or for general malware analysis unrelated to mining activi…