Security data gravity: Visibility & threat detection for data lakes
summary
Centralizes SaaS, AWS Security Lake and endpoint data into an OCSF-formatted data lake with bidirectional feeds so detections and enrichments flow in and out; integrations install in ~30 seconds or “two clicks.” Trellix XDR correlates identities, Okta, Tenable and even mainframe transaction fields to trace a phishing-to-funds path, then runs local AI on Trellix XDR on SageMaker to automatically execute investigative queries, surface missed low‑level alerts (SolarWinds‑style), and raise risk scores from low to high.
AI-written summary · about
chapters (5)
- 0:00The security factory concept
- 1:41Data integration strategies
- 3:01Identity-based threat hunting
- 5:48Advanced asset management
- 7:09AI-powered threat analysis
related talks
13mClosing the security visibility gap
19mOCSF for security at the edge with AWS AppFabric and Barracuda XDR
42mThreat Detection across all environments with SnowflakeData Security Lake
17mArchitecting a security data lake at enterprise scale
17mUnifying Your Security Data with Amazon Security Lake and OCSF
20mData lake deep dive: Using accelerated indexing for threat detection
22mUse generative AI and Amazon Security Lake to enhance threat analysis
31mSecuring hybrid cloud environments