[20:56][INFO]Vector store compacted: segments=3, freed=1.2GB
[20:56][WARN]CloudTrail gap detected (late delivery 45s)
[20:56][INFO]SQS redrive completed for dlq-processing-queue
[20:56][WARN]WAF challenge rate increased on /login (bot wave?)
[20:56][INFO]Glue job ETL-dedupe succeeded (dur=3m12s)
[20:56][CRIT]RCE signature triggered on api-gateway stage prod
[20:56][INFO]Threat intel feed synced (12 new IoCs, 2 expired)
[20:57][WARN]Unusual DNS request volume to rare domain *.cn
[20:57][INFO]Remediation: disabled key KMS/ci-old expired
[20:57][CRIT]Multiple failed root MFA attempts within 60s window
[20:57][WARN]Egress spike detected on subnet sn-08b3a1 (x3 stddev)
[20:57][INFO]IAM AccessAnalyzer flagged unused admin policy
[20:57][WARN]S3 PutObject errors > 2% in bucket sc-datalake-logs
[20:57][INFO]Shard rebalance complete: topic=telemetry, partitions=64
[20:57][CRIT]Privileged token used from anomalous ASN (AS4134)
[20:57][INFO]GuardDuty anomaly score returned to baseline
[20:57][WARN]High auth failure rate from IP 185.23.7.12 (geo: DE)
[20:57][INFO]Auto-scaler added 2 pods to ingestion-workers
[20:57][WARN]Elevated P95 latency on /ingest endpoint (312ms)
[20:58][CRIT]Suspicious lateral movement detected in VPC-east-1a
[20:58][INFO]Vector store compacted: segments=3, freed=1.2GB
[20:58][WARN]CloudTrail gap detected (late delivery 45s)
[20:58][INFO]SQS redrive completed for dlq-processing-queue
[20:58][WARN]WAF challenge rate increased on /login (bot wave?)