Trellix expands support for Amazon Security Lake to improve visibility, threat detection

Cybersecurity firm Trellix has expanded its support for Amazon Security Lake, a service that centralizes security data from cloud, on-premises, and custom sources. This will provide customers with centralized visibility and quick resolution of security issues.
Amazon Security Lake is a fully-managed service that makes it easy to collect, store, and analyze security data from a variety of sources.

Trellix said this will allow its enterprise customers to share security events across their AWS environments. This will give them a complete view of their security posture and make it easier to detect and respond to threats more effectively.

Britt Norwood, senior vice president (global channels and commercial) at Trellix, points out, the amount of data available to any enterprise today is “staggering”.

“Without a way to centralize the management and storage of that data, it’s difficult for customers to glean the insights needed to keep data safe. Our integration with Amazon Security Lake provides customers with more centralized visibility and quick resolution of their security issues,” he added.

Further Trellix said that the expanded support will allow AWS customers to integrate their security data lake into Trellix's extended detection and response (XDR) security operations platform using the Open Cybersecurity Schema Framework (OCSF) open standard.  
It will also allow customers to seamlessly apply Trellix’s machine learning (ML), based threat intelligence and predictive analytics to draw insights for faster threat mitigation.
Amazon Security Lake converts the incoming security data to OCSF standards, making it easier for security teams to collect, combine, and analyse security data from over 80 sources, including AWS.

Developed by Amazon, along with its cybersecurity partners, OCSF is a standard industry framework for common security events.