Closing the security visibility gap
summary
Claims a practical pipeline: ingest EDR, SIEM, vuln and TIP telemetry into Amazon Security Lake normalized by OCSF Common Data Framework, run AI/ML enrichment with external feeds from Kyndryl Threat Insights, surface prioritized findings into Kyndryl Bridge for analyst workflows and backported alerts to existing tools. Positions Security Lake as an optimization layer not a SIEM replacement, improves data quality, produces clearer risk-ranked actions for CISOs and daily analyst triage, and supports governance and retention while allowing iterative model tuning and proactive anomaly detection.
AI-written summary · about
chapters (6)
- 0:00Introduction to the story
- 1:03Identifying key personas
- 3:46Core security challenges
- 5:32The security lake approach
- 8:24Optimizing security posture
- 11:18Future outlook and conclusion
related talks
13mKyndryl security operations platform with AWS
17mUnifying Your Security Data with Amazon Security Lake and OCSF
39mAmazon Security Lake: Analyze Multiple Security Events
12mSecurity data gravity: Visibility & threat detection for data lakes
54mBuild your security data lake w/ Amazon Security Lake, featuring
13mCloud-powered security with Amazon Security Lake & PwC’s fusion center
42mThreat Detection across all environments with SnowflakeData Security Lake
17mArchitecting a security data lake at enterprise scale