Use generative AI and Amazon Security Lake to enhance threat analysis
summary
Centralized logs land in Amazon Security Lake normalized to OCSF and stored as Parquet in S3 so analytics and cost-conscious federated queries can run without moving data. The demo wires that lake to Amazon Q in QuickSight, issues natural‑language questions (eg “how many distinct services by operation”), and auto‑generates visuals that pin to dashboards and a data‑story slide deck. Also shows architecture to feed Bedrock/Kendra for a virtual security assistant that answers and acts on incidents.
AI-written summary · about
chapters (7)
- 0:00Introduction
- 1:01Security data challenges
- 4:04Amazon Security Lake
- 7:21Data integration and access
- 10:49Gen AI for security analysis
- 14:28Interactive dashboard demo
- 20:31Conclusion and summary
related talks
17mUnifying Your Security Data with Amazon Security Lake and OCSF
54mBuild your security data lake w/ Amazon Security Lake, featuring
39mAmazon Security Lake: Analyze Multiple Security Events
13mCloud-powered security with Amazon Security Lake & PwC’s fusion center
17mArchitecting a security data lake at enterprise scale
38mGet the most out of Splunk Security, OCSF, and Amazon Security Lake
15mGet the most out of Splunk Enterprise, OCSF & Amazon Security Lake
55mStreamline security analysis with Amazon Detective