The new integration improves functionality with access to AI-driven Security Attack Signal Intelligence™
Vectra AI, a leader in AI-driven cyber threat detection and remediation for hybrid and multicloud enterprises, announced the general availability of AI integration Vectra Cloud Detection and Response with Amazon Security Lake from Amazon Web Services (AWS). As an AWS Security Competency Partner, Vectra provides support for Amazon Security Lake that continues to improve solution capabilities and customer success on AWS. The new integration allows organizations to:
- have access to Security AI-driven Attack Signal Intelligence™ di Vectra for customers worldwide using Amazon Security Lake;
- simplify native support from the Vectra platform to Amazon Security Lake;
- Consolidate data stores to give security teams standardized access to real-world threat data.
Amazon Security Lake automatically centralizes an organization's security data from AWS environments, leading SaaS providers, on-premise and cloud sources into a purpose-built data lake, so customers can act on security data faster and simplify management of that data across hybrid and multi-cloud environments. Amazon Security Lake manages data throughout its lifecycle with customizable data retention settings and converts incoming security data to the community-wide Open Cybersecurity Schema Framework (OCSF), making it easy to automatically normalize security data from AWS and combine it with dozens of pre-integrated third-party security data sources. With Amazon Security Lake, customers can aggregate and optimize large volumes of disparate log and event data, enabling faster threat detection, investigation, and incident responses, so organizations can effectively and quickly address potential issues using their preferred analytics tools. Security findings from Vectra's industry-leading Attack Signal Intelligence will now be available in Amazon Security Lake.
Vectra's Attack Signal Intelligence™ (ASI).
Vectra's Attack Signal Intelligence™, powered by Security-AI, automates threat detection, triage and prioritization for Security Operation Centers (SOCs). At a time when organizations are facing ever-increasing unknown cyber threats targeting on-premise and cloud infrastructure, SaaS applications, and data and identity systems, SOC teams are struggling to keep up. A greater attack surface to cover, combined with more advanced, elusive and sophisticated attackers, has led to an increase in manual time spent maintaining detection rules, selecting alerts and prioritizing them, resulting in analyst fatigue and burnout. Vectra's AI-driven Security Attack Signal Intelligence frees security analysts from these mundane, daily manual tasks and empowers them to do what they do best: investigate and respond to real attacks. At the heart of Vectra's ever-expanding platform, services and ecosystem, Attack Signal Intelligence enables security analysts to:
- Think like an attacker, thanks to detections based on Artificial Intelligence that go beyond signatures and anomalies to understand the attacker's behavior and identify their TTPs (tactics, techniques and procedures) along the entire cyber kill chain.
- Know what is harmful analyzing detection patterns unique to an organization's environment to surface relevant events and reduce background noise.
- Focus on the urgency with AI-based prioritization, which provides insight into threats based on severity and impact, allowing analysts to focus on responding to critical threats and reducing business risk.
"The biggest challenge customers face today is unknown threats. As the scale and intensity of cyber attacks increases, customers need best-of-breed ecosystem solutions to streamline security processes that focus on real threats and extend coverage to global networks," he said Sachin Saranathan, Director for Cloud and Technology Alliances di Vectra AI. “We are pleased to partner with AWS to address these challenges and provide solutions that bring rapid time to value to customers.”
"The best thing about this integration is that Vectra on AWS offers permission correlation. It's notoriously difficult to understand and track who is doing what. Vectra puts the spotlight on the specific user, so we can immediately investigate detected threats," he said Mantas Marcinkevicius, Information Technology Security Manager at The Hyde Group, UK.
"One of the key goals of CISOs and security teams is to reduce the complexity they face when faced with non-integrated cybersecurity offerings. They want to deliver simplified, streamlined solutions that ensure more effective, efficient and resilient security operations," he explained Rod Wallace, General Manager Amazon Security Lake di AWS. “The integration between Amazon Security Lake and Vectra Attack Signal Intelligence delivers a powerful combination of advanced threat detection, faster incident response, and enhanced forensic capabilities, which can help organizations improve their security posture and meet compliance requirements.”
A perfect integration
Vectra® is available with Amazon Security Lake after a simple installation process. After deploying Vectra Detect for AWS in just 15 minutes, customers will be able to send high-fidelity alerts to Amazon Security Lake as a custom source using a dedicated AWS CloudFormation template. Once installed, alerts will immediately appear in Amazon Security Lake in OCSF format.
