Ep167: Leveraging Amazon Bedrock and Agents for Accelerating Innovation and Engineering with Trellix

** AWS re:Invent 2025 Dec 1-5, Las Vegas - Register Here! **Trellix's Director of Strategy Zak Krider reveals how they automated tedious security tasks like event parsing and threat detection using Amazon Bedrock's multi-model approach, achieving 100% accuracy while eliminating bottlenecks in their development lifecycle.Topics Include:Trellix merged FireEye and McAfee Enterprise, combining two decades of cybersecurity AI expertiseProcessing thousands of daily security events revealed traditional ML's weakness: overwhelming false positivesTwo years ago, they integrated generative AI to automate threat investigation workflowsAmazon Bedrock's multi-model access enabled rapid testing and "fail fast, learn fast" methodologyBuilt custom cybersecurity testing framework since public benchmarks don't reflect domain-specific needsAgentic AI now autonomously investigates threats across dark web, CVEs, and telemetry dataAWS NOVA builds investigation plans while Claude executes detailed threat research analysisLaunched "Sidekick" internal tool with agents mimicking human developer onboarding processesChose prompt engineering over fine-tuning for flexibility, cost-effectiveness, and faster iterationAutomated security rule generation across multiple languages that typically require unicorn developersAchieved 100% accuracy in automated event parsing, eliminating tedious manual SOC workKey lesson: don't default to one model; test and mix for optimal resultsParticipants:Zak Krider - Director of Strategy & AI, TrellixSee how Amazon Web Services gives you the freedom to migrate, innovate, and scale your software company at https://aws.amazon.com/isv/

There are no comments yet.

Please log in to write the first comment.