{ "schemaVersion": "deck-intelligence.v1", "id": "019dd923-5f69-752d-a9b7-1a6457da629a", "slug": "NpPUn0PvtOoIzh8zzEXl", "title": "This pitch deck helped a cyber startup that counts former Wall Street and CIA execs as advisors raise a $16 million Series A", "subtitle": "Reveal Security", "author": "Reveal Security", "pageCount": 27, "kind": "pitchdeck", "orientation": "landscape", "aspectRatio": 1.782, "document": { "id": "019dd923-5f69-752d-a9b7-1a6457da629a", "slug": "NpPUn0PvtOoIzh8zzEXl", "title": "This pitch deck helped a cyber startup that counts former Wall Street and CIA execs as advisors raise a $16 million Series A", "rawTitle": "This pitch deck helped a cyber startup that counts former Wall Street and CIA execs as advisors raise a $16 million Series A", "authorId": "Pitchdecks", "authorName": "Reveal Security", "authorDisplay": "Reveal Security", "kind": { "slug": "pitchdeck", "label": "Pitch deck" }, "sourceType": { "slug": "strategy_consulting", "label": "Strategy consulting" }, "fileName": "Cybersecurity-Reveal-NpPUn0Pv.pdf", "sourceUrl": "https://www.businessinsider.com/cybersecurity-reveal-security-pitch-deck-for-series-a-2022-6", "sourceDate": "2022-07-06 00:00:00", "presentationDate": null, "ingestedAt": "2026-04-27 08:54:18.464+00", "status": "ready", "pageCount": 27, "orientation": "landscape", "aspectRatio": 1.782, "targetCompany": null, "targetTicker": null, "metadata": { "local_root": "/tmp/legacy-images/NpPUn0PvtOoIzh8zzEXl", "origin_corpus": "consulting" } }, "coverage": { "pageCount": 27, "pagesIndexed": 27, "pagesWithImages": 27, "pagesWithMetadata": 27, "imageCoveragePct": 100, "metadataCoveragePct": 100, "componentCount": 115, "chartCount": 5, "metricSlides": 0, "toolMatches": 13, "documentToolMatches": 0, "frameworkMatches": 11, "arcMatches": 1, "beatMatches": 3, "loopMatches": 2, "patternMatches": 0, "storymakersMatch": false, "scoreAvailable": false, "reviewAvailable": false, "activistThesisAvailable": false, "pitchdeckMetadataAvailable": true, "pitchdeckProfileAvailable": true }, "blocks": [], "matches": { "arcs": [ { "arc": { "name": "Problem-Agitate-Solution", "slug": "problem-agitate-solution", "status": "active", "bestFor": "Sales pitches, urgency-driven, competitive displacement", "canonId": "019dd956-5ec6-70f9-9fd8-fdbaaff39acf", "version": 1, "bodyDocId": "019df22a-2356-73eb-8061-d8c81dc0aa49", "structure": "Problem (Identify pain) -> Agitate (Make it worse) -> Solution (Provide relief)", "description": null, "familyLabel": null, "categoryName": "Strategy & Business", "categorySlug": "strategy-business" }, "matchId": "a20f9e35-108f-42d1-b072-600aef38185c", "evidence": "The deck follows a clear problem-agitate-solution structure, with a focus on insider threats and application breaches.", "isPrimary": true, "confidence": 0.9, "extraction": { "at": "2026-07-16 21:34:15.152809+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": "doc-narrative-v1" } } ], "beats": [ { "to": 10, "arc": { "name": "Problem-Agitate-Solution", "slug": "problem-agitate-solution", "status": "active", "bestFor": "Sales pitches, urgency-driven, competitive displacement", "canonId": "019dd956-5ec6-70f9-9fd8-fdbaaff39acf", "version": 1, "bodyDocId": "019df22a-2356-73eb-8061-d8c81dc0aa49", "structure": "Problem (Identify pain) -> Agitate (Make it worse) -> Solution (Provide relief)", "description": null, "familyLabel": null, "categoryName": "Strategy & Business", "categorySlug": "strategy-business" }, "from": 3, "name": "Problem", "beatId": "ee9de9f9-3989-47f3-af47-12f35fbfb963", "matchId": "a20f9e35-108f-42d1-b072-600aef38185c", "beatType": { "name": "Problem (Identify pain)", "slug": "problem-agitate-solution-problem-identify-pain", "status": "active", "canonId": "019dd9b8-0e78-74bb-b8f6-54348367a131", "version": 1, "description": null }, "evidence": "Slides 3-10 focus on identifying the pain points and challenges of insider threats and application breaches.", "position": 0, "isPrimaryArc": true, "parentBeatType": { "name": "Complication", "slug": "complication", "status": "active", "canonId": "019dd9b8-0275-7709-b2d6-4f77c3fc7579", "version": 1, "description": "The point in the narrative where the audience should feel discomfort. Required for argumentative arcs." }, "alignedBlockIds": null, "matchConfidence": 0.9 }, { "to": 14, "arc": { "name": "Problem-Agitate-Solution", "slug": "problem-agitate-solution", "status": "active", "bestFor": "Sales pitches, urgency-driven, competitive displacement", "canonId": "019dd956-5ec6-70f9-9fd8-fdbaaff39acf", "version": 1, "bodyDocId": "019df22a-2356-73eb-8061-d8c81dc0aa49", "structure": "Problem (Identify pain) -> Agitate (Make it worse) -> Solution (Provide relief)", "description": null, "familyLabel": null, "categoryName": "Strategy & Business", "categorySlug": "strategy-business" }, "from": 11, "name": "Agitate", "beatId": "21401159-1169-4bad-8944-de6a28c2046c", "matchId": "a20f9e35-108f-42d1-b072-600aef38185c", "beatType": { "name": "Agitate (Make it worse)", "slug": "problem-agitate-solution-agitate-make-it-worse", "status": "active", "canonId": "019dd9b8-0f5a-71dd-bae7-8fadb0d09456", "version": 1, "description": null }, "evidence": "Slides 11-14 agitate the problem by highlighting the consequences of not detecting insider threats and application breaches.", "position": 1, "isPrimaryArc": true, "parentBeatType": { "name": "Development", "slug": "development", "status": "active", "canonId": "019dd9b8-0332-7008-b3aa-11b0840a57b1", "version": 1, "description": "The middle stretch in arcs that have one. Often where length problems creep in." }, "alignedBlockIds": null, "matchConfidence": 0.9 }, { "to": 24, "arc": { "name": "Problem-Agitate-Solution", "slug": "problem-agitate-solution", "status": "active", "bestFor": "Sales pitches, urgency-driven, competitive displacement", "canonId": "019dd956-5ec6-70f9-9fd8-fdbaaff39acf", "version": 1, "bodyDocId": "019df22a-2356-73eb-8061-d8c81dc0aa49", "structure": "Problem (Identify pain) -> Agitate (Make it worse) -> Solution (Provide relief)", "description": null, "familyLabel": null, "categoryName": "Strategy & Business", "categorySlug": "strategy-business" }, "from": 15, "name": "Solution", "beatId": "2473b956-4123-4eb2-a1a6-cc81159dff24", "matchId": "a20f9e35-108f-42d1-b072-600aef38185c", "beatType": { "name": "Solution (Provide relief)", "slug": "problem-agitate-solution-solution-provide-relief", "status": "active", "canonId": "019dd9b8-0fee-73e9-9ae5-799c7f3895cd", "version": 1, "description": null }, "evidence": "Slides 15-24 provide relief by introducing TrackerIQ's ADR capabilities and value proposition.", "position": 2, "isPrimaryArc": true, "parentBeatType": { "name": "Resolution", "slug": "resolution", "status": "active", "canonId": "019dd9b8-045d-703b-8dd7-e92aba3ba91b", "version": 1, "description": "How the deck ends. Required in 19/20 arcs. The exception (Sparkline) ends with new bliss which is functionally a resolution." }, "alignedBlockIds": null, "matchConfidence": 0.9 } ], "loops": [ { "to": 10, "from": 4, "loop": { "name": "27_cost_of_inaction", "slug": "27-cost-of-inaction", "status": "active", "bestFor": "Urgent budget requests, compliance, risk mitigation", "canonId": "019dd956-70d1-7395-a15b-857ba858b394", "version": 1, "bodyDocId": "019df22a-2420-77be-bc41-ded96d08cb21", "structure": "The Status Quo -> The Hidden Costs Accumulating -> The Future State of Inaction -> The Tipping Point", "description": "Quantify what happens if the audience does nothing", "familyLabel": null, "categoryName": "Urgency", "categorySlug": "urgency" }, "matchId": "5ed838cd-599f-4cd2-b558-d80d37f005c7", "evidence": "The deck highlights the consequences of not detecting insider threats and application breaches, including increased costs and risks.", "position": 0, "objective": "What is the cost of inaction in detecting insider threats and application breaches?", "confidence": 0.8, "extraction": { "at": "2026-07-16 21:34:15.302021+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": "doc-narrative-v1" } }, { "to": 14, "from": 13, "loop": { "name": "11_golden_circle", "slug": "11-golden-circle", "status": "active", "bestFor": "Visionary leadership, brand positioning, mission statements", "canonId": "019dd956-6a50-7202-882d-505fcb9922ed", "version": 1, "bodyDocId": "019df22a-2420-77be-bc41-ded96d08cb21", "structure": "The Why (Belief) -> The How (Process) -> The What (Result)", "description": "Invert the typical pitch by starting with why you exist, rather than what you do", "familyLabel": null, "categoryName": "Vision", "categorySlug": "vision" }, "matchId": "f6acd24d-7018-475f-a96c-c5dea5061171", "evidence": "The deck provides context on why now is the time for a new approach, including Gartner's identification of application behavior monitoring as an emerging trend.", "position": 1, "objective": "Why now is the time for a new approach to detecting insider threats and application breaches?", "confidence": 0.7, "extraction": { "at": "2026-07-16 21:34:15.340181+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": "doc-narrative-v1" } } ], "tools": [ { "tool": { "name": "Slide recipe: Cover", "slug": "cover-slide", "status": "active", "bestFor": null, "canonId": "019df269-2a08-767d-9128-e7431e6fe8a3", "version": 1, "bodyDocId": "019df269-29e5-7738-b5fa-6892e5dc8e65", "description": "The first ten seconds. Build it deliberately.", "familyLabel": "slide-recipe", "categoryName": "Slide", "categorySlug": "slide" }, "agent": "designer", "layer": "slide", "agents": [ "designer" ], "matchId": "43dea7ee-f1b8-417b-83b6-647f85115653", "evidence": "ADR – Application Detection and Response", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 0.9, "extraction": { "at": "2026-07-16 22:25:22.170157+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 1, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Slide recipe: Cover", "slug": "cover-slide", "status": "active", "bestFor": null, "canonId": "019df269-2a08-767d-9128-e7431e6fe8a3", "version": 1, "bodyDocId": "019df269-29e5-7738-b5fa-6892e5dc8e65", "description": "The first ten seconds. Build it deliberately.", "familyLabel": "slide-recipe", "categoryName": "Slide", "categorySlug": "slide" }, "agent": "designer", "layer": "slide", "agents": [ "designer" ], "matchId": "8e5ae2d4-4ab0-4d7d-95a8-44c75347158d", "evidence": "TrackerIQ", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 0.9, "extraction": { "at": "2026-07-16 22:25:22.23478+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 2, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "2x2 matrix", "slug": "matrix-2x2", "status": "active", "bestFor": null, "canonId": "019dd9e1-50ab-72d1-8afb-3ab0a38e32a8", "version": 1, "bodyDocId": null, "description": "BCG matrix, importance/urgency, any axes-and-quadrants frame.", "familyLabel": null, "categoryName": null, "categorySlug": null }, "agent": null, "layer": "slide", "agents": null, "matchId": "37cfac09-51f8-4c87-a124-710026cb3e0f", "evidence": "The Cyber Defense Matrix shows a 2x2 or similar matrix structure with NIST functions vs Assets.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 0.7, "extraction": { "at": "2026-07-16 22:25:17.277217+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 8, "whyItWorks": null, "antipattern": null, "cardinality": "common", "narrativePurpose": null }, { "tool": { "name": "Table data", "slug": "table-data", "status": "active", "bestFor": null, "canonId": "019dd9e1-4fab-7168-a82f-b847350a006d", "version": 1, "bodyDocId": null, "description": "Tabular layouts of structured data.", "familyLabel": null, "categoryName": null, "categorySlug": null }, "agent": null, "layer": "slide", "agents": null, "matchId": "7cc66139-2bfc-4edd-96b5-7ca5ea5f8a6c", "evidence": "The slide includes a table with data on domain, examples of logged activity/telemetry, protection technology, and detection and response technology.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 0.7, "extraction": { "at": "2026-07-16 22:25:17.454183+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 12, "whyItWorks": null, "antipattern": null, "cardinality": "common", "narrativePurpose": null }, { "tool": { "name": "Maturity model", "slug": "maturity-model", "status": "active", "bestFor": null, "canonId": "019de52d-1923-75fc-9be0-131883ed3458", "version": 1, "bodyDocId": null, "description": null, "familyLabel": null, "categoryName": null, "categorySlug": null }, "agent": null, "layer": "slide", "agents": null, "matchId": "85e9f7f6-b10f-44ca-9579-b3e8337afd6a", "evidence": "The slide includes a maturity model comparing generations of security detection.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 0.7, "extraction": { "at": "2026-07-16 22:25:17.584579+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 15, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Maturity model", "slug": "maturity-model", "status": "active", "bestFor": null, "canonId": "019de52d-1923-75fc-9be0-131883ed3458", "version": 1, "bodyDocId": null, "description": null, "familyLabel": null, "categoryName": null, "categorySlug": null }, "agent": null, "layer": "slide", "agents": null, "matchId": "28643096-f520-423e-ab24-4ff92955d4f2", "evidence": "The slide includes a maturity model showing evolution from Rules to Volumetric Analysis to Activity Flow Based Anomaly Detection.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 0.7, "extraction": { "at": "2026-07-16 22:25:17.650188+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 16, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Problem Statement Canvas", "slug": "problem-statement-canvas", "status": "active", "bestFor": null, "canonId": "019dd956-839d-744b-ad11-9bf3e3642a18", "version": 1, "bodyDocId": null, "description": "Structured definition of the problem: What? Who? Where? When? Scale?", "familyLabel": null, "categoryName": "Block", "categorySlug": "block" }, "agent": "Architect", "layer": "slide", "agents": [ "Architect" ], "matchId": "503757aa-bbb8-4d12-9406-00f4a25c9c20", "evidence": "Visual representation of 12 user journeys (A-L) as vertical sequences of numbered steps.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 0.7, "extraction": { "at": "2026-07-16 22:25:24.911245+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 19, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Canvas framework", "slug": "canvas-framework", "status": "active", "bestFor": null, "canonId": "019dd9e1-5005-762c-82f8-265b08436ca1", "version": 1, "bodyDocId": null, "description": "Named canvas (business model canvas, value prop canvas, etc.).", "familyLabel": null, "categoryName": null, "categorySlug": null }, "agent": null, "layer": "slide", "agents": null, "matchId": "cf1b0e7e-5815-4299-bf0c-e2c061b269dd", "evidence": "Network graph visualization of clustered user journeys", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 0.7, "extraction": { "at": "2026-07-16 22:25:24.977244+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 20, "whyItWorks": null, "antipattern": null, "cardinality": "optional", "narrativePurpose": null }, { "tool": { "name": "Before-After-Bridge", "slug": "before-after-bridge", "status": "active", "bestFor": null, "canonId": "019dd956-8604-7188-883f-42370288ad05", "version": 1, "bodyDocId": null, "description": "Narrative structure: Paint the before, show the after, explain the bridge", "familyLabel": null, "categoryName": "Block", "categorySlug": "block" }, "agent": "Storyteller", "layer": "slide", "agents": [ "Storyteller" ], "matchId": "75515a5e-f5cf-4579-af23-8b8a0f60c50f", "evidence": "Learned User Journey Profiles Enable Accurate Detection of an Anomalous Session", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 0.6, "extraction": { "at": "2026-07-16 22:25:25.045267+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 21, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Waterfall chart", "slug": "waterfall-chart", "status": "active", "bestFor": null, "canonId": "e2799da3-725f-44a9-a093-570f1f388e64", "version": 1, "bodyDocId": null, "description": null, "familyLabel": null, "categoryName": null, "categorySlug": null }, "agent": null, "layer": "slide", "agents": null, "matchId": "3c2d3036-a6f3-44de-abdf-bc7e2d41805b", "evidence": "Risk score is computed according to the sensitivity of the activities performed", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 0.8, "extraction": { "at": "2026-07-16 22:25:25.11006+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 22, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Action Titles", "slug": "action-titles", "status": "active", "bestFor": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "canonId": "019dd956-ac70-700b-a608-ba58e78f5dcc", "version": 1, "bodyDocId": "816dad3c-9983-41c1-a86e-978ebd582841", "description": "The McKinsey-bred discipline of writing every slide title as a complete declarative sentence with a verb and an insight, not a topic label. Each title is a sub-claim that ladders up to the deck's governing thought; read in sequence, the titles reconstruct the executive summary.", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Architect", "layer": "slide", "agents": [ "Architect" ], "matchId": "7fd08fc0-31b4-422e-a2ac-796dcf525abd", "evidence": "Significantly reducing the meantime to respond by over 75% and improving operational efficiency", "pageRefs": null, "priority": "Core", "whenToUse": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "confidence": 0.9, "extraction": { "at": "2026-07-16 22:25:25.177201+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 23, "whyItWorks": "Solves two failure modes at once. (1) The buried claim: action titles place the conclusion on the page before any analysis is read, so a busy reader doesn't reverse-engineer it from the chart. (2) The spineless deck: because each title is a claim, slides have to ladder up to the governing thought; logical gaps become visible as topic-shaped titles in a sequence that no longer reads as a story.", "antipattern": "Topic labels disguised as titles — Volume by quarter, Key findings, Pricing strategy, Margins have been impacted. No verb, or a passive verb with no agent, or a fact (Revenue grew 12%) without the so-what. Also: titles that overreach the chart's evidence, multi-claim X-grew-but-Y-fell welded titles, and mechanical repetition of the same X-drove-Y template across the deck.", "cardinality": null, "narrativePurpose": "Forces the deck to carry its argument in the title bar so a senior reader can extract the recommendation without opening a single slide; converts a binder of topics into a navigable pyramid where every slide is a node defending the apex." }, { "tool": { "name": "Value Proposition Canvas", "slug": "value-proposition-canvas", "status": "active", "bestFor": null, "canonId": "019dd956-85a9-713f-8a1c-b6e5af5cc6cd", "version": 1, "bodyDocId": null, "description": "Mapping customer jobs/pains/gains to your value proposition", "familyLabel": null, "categoryName": "Block", "categorySlug": "block" }, "agent": "Storyteller", "layer": "slide", "agents": [ "Storyteller" ], "matchId": "d1ffa99d-ff11-4c31-b335-2b2321bac47b", "evidence": "Detect the unknown; Highly accurate; Generic Solution across any Application; Faster incident investigation", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 0.7, "extraction": { "at": "2026-07-16 22:25:25.248194+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 24, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Storytelling: the closing ask", "slug": "closing-ask", "status": "active", "bestFor": null, "canonId": "019df269-24e0-70ab-8dd9-983832c1c665", "version": 1, "bodyDocId": "019df269-24bc-7554-b88d-245127606b8d", "description": "The single most important slide in the deck — after the cover. The final", "familyLabel": "narrative-block", "categoryName": "Narrative & Transformation", "categorySlug": "narrative-transformation" }, "agent": "storyteller", "layer": "slide", "agents": [ "storyteller" ], "matchId": "f90dbbc4-fc0e-4553-b1ad-6b1170eb6206", "evidence": "doron@trackerdetect.com", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 0.9, "extraction": { "at": "2026-07-16 22:25:25.379124+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 27, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null } ], "frameworks": [ { "matchId": "9019a7ca-5815-43b8-af60-f954c07213cb", "evidence": "Frames the problem as a correlation between time-to-detect and cost, implying a solution is needed.", "framework": null, "confidence": 0.8, "extraction": { "at": "2026-05-02 16:34:45.975+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 4, "frameworkName": "before-after-framing" }, { "matchId": "0cfd03e7-8ee5-435a-8502-a0b928170f25", "evidence": "The slide explicitly maps security functions against asset categories using the standard NIST-based matrix layout.", "framework": null, "confidence": 1, "extraction": { "at": "2026-05-02 16:34:46.597+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 8, "frameworkName": "cyber-defense-matrix" }, { "matchId": "399a79c5-0de4-449e-8a2f-f3389ef09104", "evidence": "The slide explicitly uses the Cyber Defense Matrix structure (Identify, Protect, Detect, Respond, Recover vs Devices, Applications, Networks, Data, Users).", "framework": null, "confidence": 1, "extraction": { "at": "2026-05-02 16:34:59.211+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 10, "frameworkName": "cyber-defense-matrix" }, { "matchId": "50ffa6c1-010b-4d95-a1bf-450b19943a38", "evidence": "The table attempts to categorize security domains into a mutually exclusive and collectively exhaustive set.", "framework": null, "confidence": 0.7, "extraction": { "at": "2026-05-02 16:34:47.173+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 12, "frameworkName": "mece-principle" }, { "matchId": "92e5d977-5f2c-4280-a611-b142523d9eb5", "evidence": "The chart visualizes technology trends by time range and mass.", "framework": null, "confidence": 1, "extraction": { "at": "2026-05-02 16:34:50.562+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 14, "frameworkName": "Gartner Impact Radar" }, { "matchId": "70ed9f4d-4b33-49b2-955e-760e6194faf7", "evidence": "The slide explicitly categorizes security detection into 1st, 2nd, and 3rd generations, implying a progression of capability.", "framework": null, "confidence": 1, "extraction": { "at": "2026-05-02 16:34:50.061+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 15, "frameworkName": "maturity-model" }, { "matchId": "5f5f4f62-47e0-414b-8ac9-5fc5ea47abf2", "evidence": "The slide explicitly categorizes security detection into 1st, 2nd, and 3rd generations, implying a progression of capability.", "framework": null, "confidence": 0.9, "extraction": { "at": "2026-05-02 16:34:51.462+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 16, "frameworkName": "maturity-model" }, { "matchId": "163f196f-7047-4d42-a50a-2b8eab0c23ec", "evidence": "Uses a grocery store shopper journey to explain software analytics", "framework": null, "confidence": 1, "extraction": { "at": "2026-05-02 16:34:48.778+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 17, "frameworkName": "metaphor-analogy" }, { "matchId": "eaa7215f-9aea-45d5-b99b-0d044b4c4582", "evidence": "The slide explicitly defines a 'Ubiquitous User Journey Model' based on behavioral sequences.", "framework": null, "confidence": 0.8, "extraction": { "at": "2026-05-02 16:34:53.307+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 18, "frameworkName": "customer-journey-map" }, { "matchId": "2de55a4c-f9fe-4e64-87e7-b0b16f5a8fb1", "evidence": "Uses a visual puzzle to represent the abstract problem of anomaly detection.", "framework": null, "confidence": 0.9, "extraction": { "at": "2026-05-02 16:34:58.473+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 19, "frameworkName": "metaphor-analogy" }, { "matchId": "ed27955b-c817-4d6f-b1e3-bcd0af9e634e", "evidence": "Visualizes user flow profiles as sequences of actions", "framework": null, "confidence": 0.8, "extraction": { "at": "2026-05-02 16:34:49.71+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 21, "frameworkName": "customer-journey-map" } ], "patterns": [] }, "storymakers": null, "score": null, "review": null, "activistThesis": null, "pitchdeck": { "metadata": { "author": "Asia Martin", "fireId": "NpPUn0PvtOoIzh8zzEXl", "sector": "cybersecurity", "deckKind": "fundraise", "roundRaw": "Series A", "amountRaw": "$16 million", "amountUsd": "16000000", "scrapedAt": "2026-04-27 08:54:18.464+00", "sectorRaw": "cyber startup", "sourceUrl": "https://www.businessinsider.com/cybersecurity-reveal-security-pitch-deck-for-series-a-2022-6", "deckKindAt": "2026-04-28 07:19:06+00", "highlights": "Cybersecurity startup RevealSecurity monitors user activity for irregularities. The Tel Aviv-based startup counts former Wall Street and CIA execs as advisors. Check out the pitch deck it used to raise its Series A round.", "slideCount": 27, "companyName": "Cybersecurity Reveal", "description": "Cybersecurity startup RevealSecurity monitors user activity for irregularities. The Tel Aviv-based startup counts former Wall Street and CIA execs as advisors. Check out the pitch deck it used to raise its Series A round. An encounter with an impersonation hacker led Doron Hendler to found RevealSecurity;; a Tel Aviv-based cybersecurity startup that monitors for insider threats. Two years ago;; a woman impersonating an insurance-agency representative called Hendler and convinced him that he made a mistake with his recent health insurance policy upgrade. She got him to share his login information for his insurer's website;; even getting him to give the one-time passcode sent to his phone. Once the hacker got what she needed;; she disconnected the call;; prompting Hendler to call back. When no one picked up the phone;; he realized he had been conned. He immediately called his insurance company to check on his account. Nothing seemed out of place to the representative. But Hendler;; who was previously a vice president of a software company;; suspected something intangible could have been collected;; so he reset his credentials. \"The chief of information security;; who was on the call;; he asked me;; 'So;; how do you want me to identify you? You gave your credentials; you gave your ID; you gave the one time password. How the hell can I identify that it's not you?' And I told him;; 'But I never behave like this;;'\" Hendler recalled of the conversation. The manager told Hendler that this kind of incident happens often;; and the company didn't have a system to monitor such occurrences. Not long after;; the light bulb went off with Hendler that he could be the person to develop a solution. He partnered with Reveal's cofounder and chief technology officer David Movshovitz;; who had fallen into similar trouble;; and chief architect Adi DeGani;; and launched the company in 2021. RevealSecurity's main offering is TrackerIQ;; which surveils enterprise software applications for irregular user activity. The tool learns the behavior of users;; profiles them based on their habits;; and then logs their activity to help detect any abnormalities. Reveal touts the product as the missing layer to enterprise cybersecurity. \"The uniqueness of what we do is that we have developed a solution;; which is fully automated. You don't have to define anything;;\" Hendler told Insider. Reveal has nabbed former Wall Street and CIA execs In June;; RevealSecurity announced its most recent raise;; a $16 million Series A led by SYN Ventures;; a venture capital firm headquartered in West Palm Beach;; Fla. World Trade Ventures;; Hanaco Venture Capital;; and Silvertech Ventures also participated in the raise. To date;; RevealSecurity has raised $23 million;; including a $7 million seed round. It has about 30 employees and 15 enterprise clients across regulated industries;; including utilities;; banking;; health;; and pharmaceutical. The company has attracted former Wall Street and CIA execs to its advisory board like Citi Bank's former global head of information security;; Charles Blauner; Bank of America's former chief security scientist;; Sounil Yu; and the CIA's former director of the Center for Cyber Intelligence;; Bonnie Stith;; to name a few. \"If you have the very strong investors and well recognized;; respectable advisors;; as we have;; that's positioning us in a very good spot. In the US;; this is very important;;\" Hendler said;; referring to the country's B2B marketing style as word of mouth. Funds from the most recent round will be used towards its global expansion efforts;; which include the US;; UK;; Germany;; Switzerland;; and the Netherlands to start. RevealSecurity will be looking to hire 20 to 30 more employees as sales executives;; vice presidents;; system engineers;; and to fill positions in pre-sales;; product delivery;; and marketing. The other portion of funding is going towards building up support around RevealSecurity's ability to integrate with SaaS applications;; cloud-service providers like Microsoft's Azure;; Google Cloud Platform;; and Amazon Web Services;; and legacy systems at large institutions. Business Insider previously reported RevealSecurity had $40 million in total funding. That has been corrected to $23 million. Check out the 27-page pitch deck used by Reveal Security to raise its Series A.", "displayName": "Cybersecurity Reveal", "publishDate": "2022-07-06", "roundSeries": "series_a", "articleTitle": "This pitch deck helped a cyber startup that counts former Wall Street and CIA execs as advisors raise a $16 million Series A", "leadInvestors": "Citi", "deckKindSignal": "raise", "metaExtractedAt": "2026-04-28 07:16:02+00" }, "profile": { "scores": { "yc": 0.3167, "a16z": 0.3167, "docsend": 0.2926, "hoffman": 0.3649, "mcclure": 0.3667, "sequoia": 0.4926, "kawasaki": 0.3167, "nextview": 0.3256, "slidebean": 0.3154, "founder_institute": 0.2889 }, "nSlides": 27, "sequence": [ "cover", "cover", "problem_statement", "problem_statement", "pain_points", "pain_points", "pain_points", "problem_statement", "pain_points", "problem_statement", "solution", "pain_points", "section_divider", "why_now", "framework_other", "solution", "solution", "solution", "customer_journey", "unfair_advantage", "solution", "solution", "section_divider", "solution", "team_bio", "team_bio", "closing_ask" ], "breakdown": { "yc": { "order": 0.5, "signal": 0, "jaccard": 0.3333 }, "a16z": { "order": 0.5, "signal": 0, "jaccard": 0.3333 }, "docsend": { "order": 0.4545, "signal": 0, "jaccard": 0.3125 }, "hoffman": { "order": 0.4545, "signal": 0.05, "jaccard": 0.3571 }, "mcclure": { "order": 0.5, "signal": 0.05, "jaccard": 0.3333 }, "sequoia": { "order": 0.4545, "signal": 0.2, "jaccard": 0.3125 }, "kawasaki": { "order": 0.5, "signal": 0, "jaccard": 0.3333 }, "nextview": { "order": 0.4444, "signal": 0, "jaccard": 0.3846 }, "slidebean": { "order": 0.3846, "signal": 0, "jaccard": 0.4 }, "founder_institute": { "order": 0.3333, "signal": 0.05, "jaccard": 0.2778 } }, "matchedAt": "2026-04-27 21:51:54+00", "noveltyScore": 0.8074, "primaryScore": 0.4926, "noveltySignals": [ "rare slide types: why_now", "duplicated ≥3×: problem_statement, pain_points, solution", "non-canonical types: customer_journey, framework_other, pain_points", "unusual length: 27 slides" ], "primaryProfile": "sequoia", "secondaryScore": 0.3667, "secondaryProfile": "mcclure" } }, "slides": [ { "page": 1, "type": "setup", "function": "front_matter", "imagePath": "https://imgproxy.kitesheet.com/xbFECW56Llc8gkt_HK8xRGZWLn0FGrODyE0msD2End8/rs:fit:1200:1200:0/q:82/f:webp/czM6Ly9raXRlc2hlZXQvY29ycHVzL3NsaWRlcy9OcFBVbjBQdnRPb0l6aDh6ekVYbC9wMDAxLmpwZw", "rawType": "cover", "block": null, "metadata": { "slideType": "cover", "slideTypeCanon": { "name": "Cover", "slug": "cover", "status": "active", "canonId": "019de52d-05f2-729d-9f93-e0504f0a2410", "version": 1, "description": null }, "function": "front_matter", "functionCanon": { "name": "Front matter", "slug": "front_matter", "status": "active", "canonId": "019de52d-133d-73f0-9e26-201eda96b098", "version": 1, "description": null }, "density": "sparse", "densityScore": 6, "componentCount": 2, "textChars": 55, "nDataPoints": 0, "notes": null, "elementsJson": [ "headline_text" ], "confidence": 1, "extraction": { "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "at": "2026-05-02 16:34:44.19+00", "seconds": 1.783, "promptVersion": "v2-canon-conditioned" } }, "links": { "slide": "/slides/019dd923-5f69-752d-a9b7-1a6457da629a/1", "deck": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a", "deckAnchor": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a#slide-1", "deckJson": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a.json" }, "components": [ { "bbox": { "h": 0.08, "w": 0.15, "x": 0.075, "y": 0.05 }, "kind": "image", "text": "Reveal Security", "attrs": null, "canon": { "kind": { "name": "Image", "slug": "image", "status": "active", "canonId": "019de52c-f978-701f-a720-51d029d769e7", "version": 1, "description": "Photo, illustration, screenshot or icon." }, "tool": null, "subkind": { "name": "Logo", "slug": "logo", "status": "active", "canonId": "019de52c-fdaf-743d-94c4-d7c6a0e55302", "version": 1, "description": null }, "framework": null }, "subkind": "logo", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:44.19+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "7c4f939b-2360-42d0-b645-dd40f860e7aa", "parentComponentId": null }, { "bbox": { "h": 0.2, "w": 0.5, "x": 0.1, "y": 0.25 }, "kind": "title", "text": "ADR – Application Detection and Response", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:44.19+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "6bf9a88a-8b8e-49d9-969f-9668afa181e3", "parentComponentId": null } ], "metrics": [], "tools": [ { "tool": { "name": "Slide recipe: Cover", "slug": "cover-slide", "status": "active", "bestFor": null, "canonId": "019df269-2a08-767d-9128-e7431e6fe8a3", "version": 1, "bodyDocId": "019df269-29e5-7738-b5fa-6892e5dc8e65", "description": "The first ten seconds. Build it deliberately.", "familyLabel": "slide-recipe", "categoryName": "Slide", "categorySlug": "slide" }, "agent": "designer", "layer": "slide", "agents": [ "designer" ], "matchId": "43dea7ee-f1b8-417b-83b6-647f85115653", "evidence": "ADR – Application Detection and Response", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 0.9, "extraction": { "at": "2026-07-16 22:25:22.170157+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 1, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null } ], "frameworks": [], "arcBeats": [], "loops": [], "thumbSrc": "https://imgproxy.kitesheet.com/xVfaMUCB4O-CukEJJokDtpMFpk0CoAmamMS1gDRkvTs/rs:fit:480:480:0/q:78/f:webp/czM6Ly9raXRlc2hlZXQvY29ycHVzL3NsaWRlcy9OcFBVbjBQdnRPb0l6aDh6ekVYbC9wMDAxLmpwZw", "imagePathAlt": "https://imgproxy.kitesheet.com/3Im5I_LDigkCklgUI_gmKW4dzF0qq2-Czn67N2B6WUQ/rs:fit:1200:1200:0/q:82/f:webp/czM6Ly9raXRlc2hlZXQvY29ycHVzL3NsaWRlcy9OcFBVbjBQdnRPb0l6aDh6ekVYbC9wMDAxLnBuZw", "thumbSrcAlt": "https://imgproxy.kitesheet.com/AitQXlz3vG-8mWlCYglahCF3PI-a7NDxehUVNrTRO7A/rs:fit:480:480:0/q:78/f:webp/czM6Ly9raXRlc2hlZXQvY29ycHVzL3NsaWRlcy9OcFBVbjBQdnRPb0l6aDh6ekVYbC9wMDAxLnBuZw" }, { "page": 2, "type": "setup", "function": "front_matter", "rawType": "cover", "block": null, "metadata": { "slideType": "cover", "slideTypeCanon": { "name": "Cover", "slug": "cover", "status": "active", "canonId": "019de52d-05f2-729d-9f93-e0504f0a2410", "version": 1, "description": null }, "function": "front_matter", "functionCanon": { "name": "Front matter", "slug": "front_matter", "status": "active", "canonId": "019de52d-133d-73f0-9e26-201eda96b098", "version": 1, "description": null }, "density": "balanced", "densityScore": 25, "componentCount": 4, "textChars": 166, "nDataPoints": 0, "notes": null, "elementsJson": [ "headline_text" ], "confidence": 1, "extraction": { "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "at": "2026-05-02 16:34:46.906+00", "seconds": 4.443, "promptVersion": "v2-canon-conditioned" } }, "links": { "slide": "/slides/019dd923-5f69-752d-a9b7-1a6457da629a/2", "deck": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a", "deckAnchor": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a#slide-2", "deckJson": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a.json" }, "components": [ { "bbox": null, "kind": "callout", "text": "Protect Your Organization Against Insider Threats in business processes", "attrs": null, "canon": { "kind": { "name": "Callout", "slug": "callout", "status": "active", "canonId": "019de52c-f8d3-761a-8953-7d37080de5e2", "version": 1, "description": "Highlighted callout box." }, "tool": { "name": "Visual emphasis", "slug": "visual-emphasis", "status": "active", "bestFor": null, "canonId": "019dd9e1-474b-736b-a8eb-a794dd88241c", "version": 1, "bodyDocId": null, "description": "Drawing the eye to one element above the rest of the slide.", "familyLabel": null }, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-04-27 14:42:15+00", "model": "or:google/gemini-3.1-flash-lite-preview", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "019dd952-a28a-716a-b4af-a101917069d5", "parentComponentId": null }, { "bbox": { "h": 0.08, "w": 0.15, "x": 0.07, "y": 0.06 }, "kind": "image", "text": "Reveal Security", "attrs": null, "canon": { "kind": { "name": "Image", "slug": "image", "status": "active", "canonId": "019de52c-f978-701f-a720-51d029d769e7", "version": 1, "description": "Photo, illustration, screenshot or icon." }, "tool": null, "subkind": { "name": "Logo", "slug": "logo", "status": "active", "canonId": "019de52c-fdaf-743d-94c4-d7c6a0e55302", "version": 1, "description": null }, "framework": null }, "subkind": "logo", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:46.906+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "9e7664bd-fde7-4cbc-88bc-a7df4ba11124", "parentComponentId": null }, { "bbox": { "h": 0.15, "w": 0.45, "x": 0.11, "y": 0.4 }, "kind": "title", "text": "Protect Your Organization Against Insider Threats in business processes", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Action title", "slug": "action-title", "status": "active", "canonId": "019de52c-fb31-734c-a0f5-a3935b73135d", "version": 1, "description": null }, "framework": null }, "subkind": "action-title", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:46.906+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "2c3c3c48-a24a-4508-a445-12d8bcdc56b9", "parentComponentId": null }, { "bbox": { "h": 0.08, "w": 0.2, "x": 0.11, "y": 0.225 }, "kind": "title", "text": "TrackerIQ", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:46.906+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "d40e54a7-cec2-4234-ba4b-1dbb56f3df09", "parentComponentId": null } ], "metrics": [], "tools": [ { "tool": { "name": "Slide recipe: Cover", "slug": "cover-slide", "status": "active", "bestFor": null, "canonId": "019df269-2a08-767d-9128-e7431e6fe8a3", "version": 1, "bodyDocId": "019df269-29e5-7738-b5fa-6892e5dc8e65", "description": "The first ten seconds. Build it deliberately.", "familyLabel": "slide-recipe", "categoryName": "Slide", "categorySlug": "slide" }, "agent": "designer", "layer": "slide", "agents": [ "designer" ], "matchId": "8e5ae2d4-4ab0-4d7d-95a8-44c75347158d", "evidence": "TrackerIQ", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 0.9, "extraction": { "at": "2026-07-16 22:25:22.23478+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 2, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null } ], "frameworks": [], "arcBeats": [], "loops": [], "locked": true }, { "page": 3, "type": "tension", "title": "The slide uses a visual transition from dark/obscured faces to clear/highlighted faces to emphasize the 'detection' aspect of the problem.", "function": "frame_problem", "rawType": "problem_statement", "block": null, "metadata": { "slideType": "problem_statement", "slideTypeCanon": { "name": "Problem statement", "slug": "problem_statement", "status": "active", "canonId": "019de52d-0879-768d-bba8-8da8a5a121d4", "version": 1, "description": null }, "function": "frame_problem", "functionCanon": { "name": "Frame problem", "slug": "frame_problem", "status": "active", "canonId": "019de52d-13db-753e-ad70-e9b2d0dab398", "version": 1, "description": null }, "density": "sparse", "densityScore": 17, "componentCount": 3, "textChars": 163, "nDataPoints": 0, "notes": "The slide uses a visual transition from dark/obscured faces to clear/highlighted faces to emphasize the 'detection' aspect of the problem.", "elementsJson": [ "headline_text", "photo" ], "confidence": 1, "extraction": { "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "at": "2026-05-02 16:34:47.644+00", "seconds": 5.142, "promptVersion": "v2-canon-conditioned" } }, "links": { "slide": "/slides/019dd923-5f69-752d-a9b7-1a6457da629a/3", "deck": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a", "deckAnchor": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a#slide-3", "deckJson": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a.json" }, "components": [ { "bbox": { "h": 1, "w": 1, "x": 0, "y": 0 }, "kind": "image", "text": "Collage of diverse professional headshots", "attrs": null, "canon": { "kind": { "name": "Image", "slug": "image", "status": "active", "canonId": "019de52c-f978-701f-a720-51d029d769e7", "version": 1, "description": "Photo, illustration, screenshot or icon." }, "tool": null, "subkind": { "name": "Icon grid", "slug": "icon-grid", "status": "active", "canonId": "019de52c-fdfe-749d-9990-1db465a3eed4", "version": 1, "description": null }, "framework": null }, "subkind": "icon-grid", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:47.644+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "0d08389d-0908-4c7c-b9ba-4ab41cd8647a", "parentComponentId": null }, { "bbox": { "h": 0.08, "w": 0.15, "x": 0.03, "y": 0.89 }, "kind": "image", "text": "Reveal Security logo", "attrs": null, "canon": { "kind": { "name": "Image", "slug": "image", "status": "active", "canonId": "019de52c-f978-701f-a720-51d029d769e7", "version": 1, "description": "Photo, illustration, screenshot or icon." }, "tool": null, "subkind": { "name": "Logo", "slug": "logo", "status": "active", "canonId": "019de52c-fdaf-743d-94c4-d7c6a0e55302", "version": 1, "description": null }, "framework": null }, "subkind": "logo", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:47.644+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "404cdbaf-adb5-4fe1-8b22-73808f29499c", "parentComponentId": null }, { "bbox": { "h": 0.3, "w": 0.45, "x": 0.08, "y": 0.11 }, "kind": "title", "text": "Do you know if you have a rogue insider in your current organization? How quickly can you detect them?", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:47.644+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "8304bc88-7b97-4a7c-a8ff-bbbef461c74d", "parentComponentId": null } ], "metrics": [], "tools": [], "frameworks": [], "arcBeats": [ { "to": 10, "arc": { "name": "Problem-Agitate-Solution", "slug": "problem-agitate-solution", "status": "active", "bestFor": "Sales pitches, urgency-driven, competitive displacement", "canonId": "019dd956-5ec6-70f9-9fd8-fdbaaff39acf", "version": 1, "bodyDocId": "019df22a-2356-73eb-8061-d8c81dc0aa49", "structure": "Problem (Identify pain) -> Agitate (Make it worse) -> Solution (Provide relief)", "description": null, "familyLabel": null }, "from": 3, "name": "Problem", "beatId": "ee9de9f9-3989-47f3-af47-12f35fbfb963", "matchId": "a20f9e35-108f-42d1-b072-600aef38185c", "beatType": { "name": "Problem (Identify pain)", "slug": "problem-agitate-solution-problem-identify-pain", "status": "active", "canonId": "019dd9b8-0e78-74bb-b8f6-54348367a131", "version": 1, "description": null }, "evidence": "Slides 3-10 focus on identifying the pain points and challenges of insider threats and application breaches.", "position": 0, "isPrimaryArc": true, "parentBeatType": { "name": "Complication", "slug": "complication", "status": "active", "canonId": "019dd9b8-0275-7709-b2d6-4f77c3fc7579", "version": 1, "description": "The point in the narrative where the audience should feel discomfort. Required for argumentative arcs." }, "alignedBlockIds": null, "matchConfidence": 0.9 } ], "loops": [], "locked": true }, { "page": 4, "type": "tension", "title": "The chart compares breach costs in millions for two categories: Lifecycle < 200 days vs Lifecycle > 200 days from 2015 to 2021.", "function": "frame_problem", "rawType": "problem_statement", "block": null, "metadata": { "slideType": "problem_statement", "slideTypeCanon": { "name": "Problem statement", "slug": "problem_statement", "status": "active", "canonId": "019de52d-0879-768d-bba8-8da8a5a121d4", "version": 1, "description": null }, "function": "frame_problem", "functionCanon": { "name": "Frame problem", "slug": "frame_problem", "status": "active", "canonId": "019de52d-13db-753e-ad70-e9b2d0dab398", "version": 1, "description": null }, "density": "dense", "densityScore": 70, "componentCount": 7, "textChars": 410, "nDataPoints": 14, "notes": "The chart compares breach costs in millions for two categories: Lifecycle < 200 days vs Lifecycle > 200 days from 2015 to 2021.", "elementsJson": [ "headline_text", "action_title", "bar_chart_grouped", "footnote" ], "confidence": 1, "extraction": { "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "at": "2026-05-02 16:34:45.975+00", "seconds": 3.289, "promptVersion": "v2-canon-conditioned" } }, "links": { "slide": "/slides/019dd923-5f69-752d-a9b7-1a6457da629a/4", "deck": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a", "deckAnchor": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a#slide-4", "deckJson": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a.json" }, "components": [ { "bbox": null, "kind": "callout", "text": "The Longer It Takes to Detect Malicious Activities, The More Costly the Breach", "attrs": null, "canon": { "kind": { "name": "Callout", "slug": "callout", "status": "active", "canonId": "019de52c-f8d3-761a-8953-7d37080de5e2", "version": 1, "description": "Highlighted callout box." }, "tool": { "name": "Visual emphasis", "slug": "visual-emphasis", "status": "active", "bestFor": null, "canonId": "019dd9e1-474b-736b-a8eb-a794dd88241c", "version": 1, "bodyDocId": null, "description": "Drawing the eye to one element above the rest of the slide.", "familyLabel": null }, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-04-27 14:42:12+00", "model": "or:google/gemini-3.1-flash-lite-preview", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "019dd952-a28a-716a-b4ad-22681fe0f9ac", "parentComponentId": null }, { "bbox": { "h": 0.45, "w": 0.55, "x": 0.42, "y": 0.3 }, "kind": "chart", "text": "Cost of data breach by lifecycle duration (2015-2021)", "attrs": null, "canon": { "kind": { "name": "Chart", "slug": "chart", "status": "active", "canonId": "019de52c-f9a0-76ef-adc6-0b859109d1f8", "version": 1, "description": "Quantitative chart." }, "tool": null, "subkind": { "name": "Grouped bar chart", "slug": "bar-grouped", "status": "active", "canonId": "019de52c-ff3b-751e-a8ff-f21ff11097b1", "version": 1, "description": null }, "framework": null }, "subkind": "bar-grouped", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:45.975+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "100b572c-ad06-4b71-8679-ad55dc455ade", "parentComponentId": null }, { "bbox": { "h": 0.25, "w": 0.25, "x": 0.07, "y": 0.62 }, "kind": "image", "text": "Coins and arrow graphic", "attrs": null, "canon": { "kind": { "name": "Image", "slug": "image", "status": "active", "canonId": "019de52c-f978-701f-a720-51d029d769e7", "version": 1, "description": "Photo, illustration, screenshot or icon." }, "tool": null, "subkind": { "name": "Illustration", "slug": "illustration", "status": "active", "canonId": "019de52c-fe76-7772-a5ac-c0b7294d7615", "version": 1, "description": null }, "framework": null }, "subkind": "illustration", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:45.975+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "101c13a4-10a5-428a-af80-5a0266b4325e", "parentComponentId": null }, { "bbox": null, "kind": "metric", "text": "Cost of data breach: $4.87M", "attrs": null, "canon": { "kind": { "name": "Metric", "slug": "metric", "status": "active", "canonId": "019de52c-f923-73bf-8081-d0b1a8c5264d", "version": 1, "description": "Big-number or KPI value." }, "tool": { "name": "Quantification", "slug": "quantification", "status": "active", "bestFor": null, "canonId": "019dd9e1-47ab-72ce-a079-aab1f5299e88", "version": 1, "bodyDocId": null, "description": "Translating a claim into numbers, charts, or tables.", "familyLabel": null }, "subkind": null, "framework": null }, "subkind": "primary", "groupRole": null, "confidence": null, "extraction": { "at": "2026-04-27 14:42:12+00", "model": "or:google/gemini-3.1-flash-lite-preview", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "019dd952-a28a-716a-b4ad-264f0ff38bfa", "parentComponentId": null }, { "bbox": { "h": 0.02, "w": 0.3, "x": 0.42, "y": 0.91 }, "kind": "source-note", "text": "Source: IBM Security, Cost of Data Breach Report, 2021", "attrs": null, "canon": { "kind": { "name": "Source note", "slug": "source-note", "status": "active", "canonId": "23484952-494b-4a5e-b1ad-550d0d70e948", "version": 1, "description": "Attribution / source / caveat placed at the slide footer. Numbered footnotes use attrs.numbered." }, "tool": null, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:45.975+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "8d4e6e7f-3002-4e03-be66-c5cb39a8c062", "parentComponentId": null }, { "bbox": { "h": 0.15, "w": 0.3, "x": 0.07, "y": 0.325 }, "kind": "title", "text": "The Longer It Takes to Detect Malicious Activities, The More Costly the Breach", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Action title", "slug": "action-title", "status": "active", "canonId": "019de52c-fb31-734c-a0f5-a3935b73135d", "version": 1, "description": null }, "framework": null }, "subkind": "action-title", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:45.975+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "6191f137-9af8-4457-921b-cae960ad3047", "parentComponentId": null }, { "bbox": { "h": 0.08, "w": 0.85, "x": 0.07, "y": 0.18 }, "kind": "title", "text": "Enterprises need proactive solutions for detecting Insider Threats in their business applications", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:45.975+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "336d9293-dfd2-4941-a1ee-0c86a90f277d", "parentComponentId": null } ], "metrics": [], "tools": [], "frameworks": [ { "matchId": "9019a7ca-5815-43b8-af60-f954c07213cb", "evidence": "Frames the problem as a correlation between time-to-detect and cost, implying a solution is needed.", "framework": null, "confidence": 0.8, "extraction": { "at": "2026-05-02 16:34:45.975+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 4, "frameworkName": "before-after-framing" } ], "arcBeats": [ { "to": 10, "arc": { "name": "Problem-Agitate-Solution", "slug": "problem-agitate-solution", "status": "active", "bestFor": "Sales pitches, urgency-driven, competitive displacement", "canonId": "019dd956-5ec6-70f9-9fd8-fdbaaff39acf", "version": 1, "bodyDocId": "019df22a-2356-73eb-8061-d8c81dc0aa49", "structure": "Problem (Identify pain) -> Agitate (Make it worse) -> Solution (Provide relief)", "description": null, "familyLabel": null }, "from": 3, "name": "Problem", "beatId": "ee9de9f9-3989-47f3-af47-12f35fbfb963", "matchId": "a20f9e35-108f-42d1-b072-600aef38185c", "beatType": { "name": "Problem (Identify pain)", "slug": "problem-agitate-solution-problem-identify-pain", "status": "active", "canonId": "019dd9b8-0e78-74bb-b8f6-54348367a131", "version": 1, "description": null }, "evidence": "Slides 3-10 focus on identifying the pain points and challenges of insider threats and application breaches.", "position": 0, "isPrimaryArc": true, "parentBeatType": { "name": "Complication", "slug": "complication", "status": "active", "canonId": "019dd9b8-0275-7709-b2d6-4f77c3fc7579", "version": 1, "description": "The point in the narrative where the audience should feel discomfort. Required for argumentative arcs." }, "alignedBlockIds": null, "matchConfidence": 0.9 } ], "loops": [ { "to": 10, "from": 4, "loop": { "name": "27_cost_of_inaction", "slug": "27-cost-of-inaction", "status": "active", "bestFor": "Urgent budget requests, compliance, risk mitigation", "canonId": "019dd956-70d1-7395-a15b-857ba858b394", "version": 1, "bodyDocId": "019df22a-2420-77be-bc41-ded96d08cb21", "structure": "The Status Quo -> The Hidden Costs Accumulating -> The Future State of Inaction -> The Tipping Point", "description": "Quantify what happens if the audience does nothing", "familyLabel": null }, "matchId": "5ed838cd-599f-4cd2-b558-d80d37f005c7", "evidence": "The deck highlights the consequences of not detecting insider threats and application breaches, including increased costs and risks.", "position": 0, "objective": "What is the cost of inaction in detecting insider threats and application breaches?", "confidence": 0.8, "extraction": { "at": "2026-07-16 21:34:15.302021+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": "doc-narrative-v1" } } ], "locked": true }, { "page": 5, "type": "tension", "title": "The slide uses a callout box to emphasize the top-ranked threat (31% insider threats).", "function": "frame_problem", "rawType": "pain_points", "block": null, "metadata": { "slideType": "pain_points", "slideTypeCanon": { "name": "Pain points", "slug": "pain_points", "status": "active", "canonId": "019de52d-08a0-761d-a14f-1dbc5e447381", "version": 1, "description": null }, "function": "frame_problem", "functionCanon": { "name": "Frame problem", "slug": "frame_problem", "status": "active", "canonId": "019de52d-13db-753e-ad70-e9b2d0dab398", "version": 1, "description": null }, "density": "balanced", "densityScore": 48, "componentCount": 5, "textChars": 281, "nDataPoints": 6, "notes": "The slide uses a callout box to emphasize the top-ranked threat (31% insider threats).", "elementsJson": [ "bar_chart_horizontal", "callout_box" ], "confidence": 1, "extraction": { "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "at": "2026-05-02 16:34:45.472+00", "seconds": 2.381, "promptVersion": "v2-canon-conditioned" } }, "links": { "slide": "/slides/019dd923-5f69-752d-a9b7-1a6457da629a/5", "deck": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a", "deckAnchor": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a#slide-5", "deckJson": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a.json" }, "components": [ { "bbox": { "h": 0.35, "w": 0.22, "x": 0.7, "y": 0.28 }, "kind": "callout", "text": "31% of CISOs are wary of insider threats", "attrs": null, "canon": { "kind": { "name": "Callout", "slug": "callout", "status": "active", "canonId": "019de52c-f8d3-761a-8953-7d37080de5e2", "version": 1, "description": "Highlighted callout box." }, "tool": null, "subkind": { "name": "Primary callout", "slug": "primary", "status": "active", "canonId": "019de52c-fbd1-70eb-a9ce-8997f8674c1d", "version": 1, "description": null }, "framework": null }, "subkind": "primary", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:45.472+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "b3f28cb0-6d84-42e0-bc8a-c22955a0facb", "parentComponentId": null }, { "bbox": { "h": 0.45, "w": 0.52, "x": 0.08, "y": 0.33 }, "kind": "chart", "text": "Insider threats 31%, DDoS attaches 30%, Business email fraud 30%, Cloud account compromise 30%, Malware 29%, Ransomware attacks 28%", "attrs": null, "canon": { "kind": { "name": "Chart", "slug": "chart", "status": "active", "canonId": "019de52c-f9a0-76ef-adc6-0b859109d1f8", "version": 1, "description": "Quantitative chart." }, "tool": null, "subkind": { "name": "Horizontal bar chart", "slug": "bar-horizontal", "status": "active", "canonId": "019de52c-fec4-7221-986b-1cb5f5e84b1f", "version": 1, "description": null }, "framework": null }, "subkind": "bar-horizontal", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:45.472+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "9ee9b62f-54e0-4d37-b05f-e588936a1035", "parentComponentId": null }, { "bbox": null, "kind": "metric", "text": "CISO concern: 31%", "attrs": null, "canon": { "kind": { "name": "Metric", "slug": "metric", "status": "active", "canonId": "019de52c-f923-73bf-8081-d0b1a8c5264d", "version": 1, "description": "Big-number or KPI value." }, "tool": { "name": "Quantification", "slug": "quantification", "status": "active", "bestFor": null, "canonId": "019dd9e1-47ab-72ce-a079-aab1f5299e88", "version": 1, "bodyDocId": null, "description": "Translating a claim into numbers, charts, or tables.", "familyLabel": null }, "subkind": null, "framework": null }, "subkind": "primary", "groupRole": null, "confidence": null, "extraction": { "at": "2026-04-27 14:42:15+00", "model": "or:google/gemini-3.1-flash-lite-preview", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "019dd952-a28a-716a-b4ae-d21a1dd15364", "parentComponentId": null }, { "bbox": { "h": 0.03, "w": 0.25, "x": 0.7, "y": 0.9 }, "kind": "source-note", "text": "Source: survey of 1400 Chief Information Security Officers", "attrs": null, "canon": { "kind": { "name": "Source note", "slug": "source-note", "status": "active", "canonId": "23484952-494b-4a5e-b1ad-550d0d70e948", "version": 1, "description": "Attribution / source / caveat placed at the slide footer. Numbered footnotes use attrs.numbered." }, "tool": null, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:45.472+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "effaa9b6-5ab5-43f1-89d4-12eb472cd1ba", "parentComponentId": null }, { "bbox": { "h": 0.05, "w": 0.4, "x": 0.07, "y": 0.195 }, "kind": "title", "text": "Biggest Security Threats – May 2022", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:45.472+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "359da61c-6471-422e-8e8e-e8066f1b6253", "parentComponentId": null } ], "metrics": [], "tools": [], "frameworks": [], "arcBeats": [ { "to": 10, "arc": { "name": "Problem-Agitate-Solution", "slug": "problem-agitate-solution", "status": "active", "bestFor": "Sales pitches, urgency-driven, competitive displacement", "canonId": "019dd956-5ec6-70f9-9fd8-fdbaaff39acf", "version": 1, "bodyDocId": "019df22a-2356-73eb-8061-d8c81dc0aa49", "structure": "Problem (Identify pain) -> Agitate (Make it worse) -> Solution (Provide relief)", "description": null, "familyLabel": null }, "from": 3, "name": "Problem", "beatId": "ee9de9f9-3989-47f3-af47-12f35fbfb963", "matchId": "a20f9e35-108f-42d1-b072-600aef38185c", "beatType": { "name": "Problem (Identify pain)", "slug": "problem-agitate-solution-problem-identify-pain", "status": "active", "canonId": "019dd9b8-0e78-74bb-b8f6-54348367a131", "version": 1, "description": null }, "evidence": "Slides 3-10 focus on identifying the pain points and challenges of insider threats and application breaches.", "position": 0, "isPrimaryArc": true, "parentBeatType": { "name": "Complication", "slug": "complication", "status": "active", "canonId": "019dd9b8-0275-7709-b2d6-4f77c3fc7579", "version": 1, "description": "The point in the narrative where the audience should feel discomfort. Required for argumentative arcs." }, "alignedBlockIds": null, "matchConfidence": 0.9 } ], "loops": [ { "to": 10, "from": 4, "loop": { "name": "27_cost_of_inaction", "slug": "27-cost-of-inaction", "status": "active", "bestFor": "Urgent budget requests, compliance, risk mitigation", "canonId": "019dd956-70d1-7395-a15b-857ba858b394", "version": 1, "bodyDocId": "019df22a-2420-77be-bc41-ded96d08cb21", "structure": "The Status Quo -> The Hidden Costs Accumulating -> The Future State of Inaction -> The Tipping Point", "description": "Quantify what happens if the audience does nothing", "familyLabel": null }, "matchId": "5ed838cd-599f-4cd2-b558-d80d37f005c7", "evidence": "The deck highlights the consequences of not detecting insider threats and application breaches, including increased costs and risks.", "position": 0, "objective": "What is the cost of inaction in detecting insider threats and application breaches?", "confidence": 0.8, "extraction": { "at": "2026-07-16 21:34:15.302021+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": "doc-narrative-v1" } } ], "locked": true }, { "page": 6, "type": "tension", "function": "frame_problem", "rawType": "pain_points", "block": null, "metadata": { "slideType": "pain_points", "slideTypeCanon": { "name": "Pain points", "slug": "pain_points", "status": "active", "canonId": "019de52d-08a0-761d-a14f-1dbc5e447381", "version": 1, "description": null }, "function": "frame_problem", "functionCanon": { "name": "Frame problem", "slug": "frame_problem", "status": "active", "canonId": "019de52d-13db-753e-ad70-e9b2d0dab398", "version": 1, "description": null }, "density": "balanced", "densityScore": 43, "componentCount": 3, "textChars": 816, "nDataPoints": 0, "notes": null, "elementsJson": [ "headline_text", "bullet_list" ], "confidence": 1, "extraction": { "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "at": "2026-05-02 16:34:46.375+00", "seconds": 2.695, "promptVersion": "v2-canon-conditioned" } }, "links": { "slide": "/slides/019dd923-5f69-752d-a9b7-1a6457da629a/6", "deck": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a", "deckAnchor": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a#slide-6", "deckJson": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a.json" }, "components": [ { "bbox": null, "kind": "callout", "text": "Insider threats are generally much harder to detect because these people know their organization pretty-well and have access to critical business applications", "attrs": null, "canon": { "kind": { "name": "Callout", "slug": "callout", "status": "active", "canonId": "019de52c-f8d3-761a-8953-7d37080de5e2", "version": 1, "description": "Highlighted callout box." }, "tool": { "name": "Visual emphasis", "slug": "visual-emphasis", "status": "active", "bestFor": null, "canonId": "019dd9e1-474b-736b-a8eb-a794dd88241c", "version": 1, "bodyDocId": null, "description": "Drawing the eye to one element above the rest of the slide.", "familyLabel": null }, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-04-27 14:42:12+00", "model": "or:google/gemini-3.1-flash-lite-preview", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "019dd952-a28a-716a-b4ac-e598fe57d61e", "parentComponentId": null }, { "bbox": { "h": 0.5, "w": 0.85, "x": 0.08, "y": 0.28 }, "kind": "list", "text": "Inside users taking advantage of their rights in corporate enterprise applications to perform malicious operations in business processes\nInternal fraud in custom build business applications\nEmbezzlement, Payment, procurement, Wages, HR\nData modification, changes, exfiltration maliciously\nAccess data not meant for the employee ..... different accounts, branches, countries\nDetection anomalies for 3rd parties that uses your APIs / Open Banking\nInsider threats are generally much harder to detect because these people know their organization pretty-well and have access to critical business applications", "attrs": null, "canon": { "kind": { "name": "List", "slug": "list", "status": "active", "canonId": "019de52c-f94b-779b-a53b-fd4904a5f4d2", "version": 1, "description": "Bullet or numbered list." }, "tool": null, "subkind": { "name": "Bullet list", "slug": "bullet", "status": "active", "canonId": "019de52c-fc98-7169-a083-5cab805076ca", "version": 1, "description": null }, "framework": null }, "subkind": "bullet", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:46.375+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "a052d630-3728-4259-83d7-6c3e116aa111", "parentComponentId": null }, { "bbox": { "h": 0.05, "w": 0.8, "x": 0.07, "y": 0.2 }, "kind": "title", "text": "The Insider Threat Challenge in Your Business Processes", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:46.375+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "798d28c4-dc50-408d-a44d-0c17fafcf581", "parentComponentId": null } ], "metrics": [], "tools": [], "frameworks": [], "arcBeats": [ { "to": 10, "arc": { "name": "Problem-Agitate-Solution", "slug": "problem-agitate-solution", "status": "active", "bestFor": "Sales pitches, urgency-driven, competitive displacement", "canonId": "019dd956-5ec6-70f9-9fd8-fdbaaff39acf", "version": 1, "bodyDocId": "019df22a-2356-73eb-8061-d8c81dc0aa49", "structure": "Problem (Identify pain) -> Agitate (Make it worse) -> Solution (Provide relief)", "description": null, "familyLabel": null }, "from": 3, "name": "Problem", "beatId": "ee9de9f9-3989-47f3-af47-12f35fbfb963", "matchId": "a20f9e35-108f-42d1-b072-600aef38185c", "beatType": { "name": "Problem (Identify pain)", "slug": "problem-agitate-solution-problem-identify-pain", "status": "active", "canonId": "019dd9b8-0e78-74bb-b8f6-54348367a131", "version": 1, "description": null }, "evidence": "Slides 3-10 focus on identifying the pain points and challenges of insider threats and application breaches.", "position": 0, "isPrimaryArc": true, "parentBeatType": { "name": "Complication", "slug": "complication", "status": "active", "canonId": "019dd9b8-0275-7709-b2d6-4f77c3fc7579", "version": 1, "description": "The point in the narrative where the audience should feel discomfort. Required for argumentative arcs." }, "alignedBlockIds": null, "matchConfidence": 0.9 } ], "loops": [ { "to": 10, "from": 4, "loop": { "name": "27_cost_of_inaction", "slug": "27-cost-of-inaction", "status": "active", "bestFor": "Urgent budget requests, compliance, risk mitigation", "canonId": "019dd956-70d1-7395-a15b-857ba858b394", "version": 1, "bodyDocId": "019df22a-2420-77be-bc41-ded96d08cb21", "structure": "The Status Quo -> The Hidden Costs Accumulating -> The Future State of Inaction -> The Tipping Point", "description": "Quantify what happens if the audience does nothing", "familyLabel": null }, "matchId": "5ed838cd-599f-4cd2-b558-d80d37f005c7", "evidence": "The deck highlights the consequences of not detecting insider threats and application breaches, including increased costs and risks.", "position": 0, "objective": "What is the cost of inaction in detecting insider threats and application breaches?", "confidence": 0.8, "extraction": { "at": "2026-07-16 21:34:15.302021+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": "doc-narrative-v1" } } ], "locked": true }, { "page": 7, "type": "tension", "function": "frame_problem", "rawType": "problem_statement", "block": null, "metadata": { "slideType": "problem_statement", "slideTypeCanon": { "name": "Problem statement", "slug": "problem_statement", "status": "active", "canonId": "019de52d-0879-768d-bba8-8da8a5a121d4", "version": 1, "description": null }, "function": "frame_problem", "functionCanon": { "name": "Frame problem", "slug": "frame_problem", "status": "active", "canonId": "019de52d-13db-753e-ad70-e9b2d0dab398", "version": 1, "description": null }, "density": "balanced", "densityScore": 35, "componentCount": 2, "textChars": 642, "nDataPoints": 0, "notes": null, "elementsJson": [ "bullet_list" ], "confidence": 1, "extraction": { "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "at": "2026-05-02 16:34:46.495+00", "seconds": 2.751, "promptVersion": "v2-canon-conditioned" } }, "links": { "slide": "/slides/019dd923-5f69-752d-a9b7-1a6457da629a/7", "deck": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a", "deckAnchor": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a#slide-7", "deckJson": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a.json" }, "components": [ { "bbox": { "h": 0.6, "w": 0.8, "x": 0.08, "y": 0.28 }, "kind": "list", "text": "Attackers impersonating legitimate users and performing malicious activities\nStolen credential or credential stuffing\nBypassing MFA is complex but feasible - Social engineering\nAttackers are focused on privileged users for cloud platforms and SaaS applications\nCorporate SaaS applications - attackers impersonate an employee/administrator\nCorporate Cloud platforms - attackers impersonate administrators\nCustomer facing portals - attackers impersonate a customer\nGrowing attack surface due to digital transformation transitions\nShift from on-prem to SaaS applications\nThe shift to remote work", "attrs": null, "canon": { "kind": { "name": "List", "slug": "list", "status": "active", "canonId": "019de52c-f94b-779b-a53b-fd4904a5f4d2", "version": 1, "description": "Bullet or numbered list." }, "tool": null, "subkind": { "name": "Bullet list", "slug": "bullet", "status": "active", "canonId": "019de52c-fc98-7169-a083-5cab805076ca", "version": 1, "description": null }, "framework": null }, "subkind": "bullet", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:46.495+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "2dc6e2c4-062e-496e-8b9c-9e2711f79369", "parentComponentId": null }, { "bbox": { "h": 0.05, "w": 0.7, "x": 0.07, "y": 0.195 }, "kind": "title", "text": "Compromised Accounts – The Impersonation Challenge", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:46.495+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "eed53eca-6793-4000-861e-9ba4e16fb6b9", "parentComponentId": null } ], "metrics": [], "tools": [], "frameworks": [], "arcBeats": [ { "to": 10, "arc": { "name": "Problem-Agitate-Solution", "slug": "problem-agitate-solution", "status": "active", "bestFor": "Sales pitches, urgency-driven, competitive displacement", "canonId": "019dd956-5ec6-70f9-9fd8-fdbaaff39acf", "version": 1, "bodyDocId": "019df22a-2356-73eb-8061-d8c81dc0aa49", "structure": "Problem (Identify pain) -> Agitate (Make it worse) -> Solution (Provide relief)", "description": null, "familyLabel": null }, "from": 3, "name": "Problem", "beatId": "ee9de9f9-3989-47f3-af47-12f35fbfb963", "matchId": "a20f9e35-108f-42d1-b072-600aef38185c", "beatType": { "name": "Problem (Identify pain)", "slug": "problem-agitate-solution-problem-identify-pain", "status": "active", "canonId": "019dd9b8-0e78-74bb-b8f6-54348367a131", "version": 1, "description": null }, "evidence": "Slides 3-10 focus on identifying the pain points and challenges of insider threats and application breaches.", "position": 0, "isPrimaryArc": true, "parentBeatType": { "name": "Complication", "slug": "complication", "status": "active", "canonId": "019dd9b8-0275-7709-b2d6-4f77c3fc7579", "version": 1, "description": "The point in the narrative where the audience should feel discomfort. Required for argumentative arcs." }, "alignedBlockIds": null, "matchConfidence": 0.9 } ], "loops": [ { "to": 10, "from": 4, "loop": { "name": "27_cost_of_inaction", "slug": "27-cost-of-inaction", "status": "active", "bestFor": "Urgent budget requests, compliance, risk mitigation", "canonId": "019dd956-70d1-7395-a15b-857ba858b394", "version": 1, "bodyDocId": "019df22a-2420-77be-bc41-ded96d08cb21", "structure": "The Status Quo -> The Hidden Costs Accumulating -> The Future State of Inaction -> The Tipping Point", "description": "Quantify what happens if the audience does nothing", "familyLabel": null }, "matchId": "5ed838cd-599f-4cd2-b558-d80d37f005c7", "evidence": "The deck highlights the consequences of not detecting insider threats and application breaches, including increased costs and risks.", "position": 0, "objective": "What is the cost of inaction in detecting insider threats and application breaches?", "confidence": 0.8, "extraction": { "at": "2026-07-16 21:34:15.302021+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": "doc-narrative-v1" } } ], "locked": true }, { "page": 8, "type": "tension", "title": "Uses the Cyber Defense Matrix framework.", "function": "frame_problem", "rawType": "problem_statement", "block": null, "metadata": { "slideType": "problem_statement", "slideTypeCanon": { "name": "Problem statement", "slug": "problem_statement", "status": "active", "canonId": "019de52d-0879-768d-bba8-8da8a5a121d4", "version": 1, "description": null }, "function": "frame_problem", "functionCanon": { "name": "Frame problem", "slug": "frame_problem", "status": "active", "canonId": "019de52d-13db-753e-ad70-e9b2d0dab398", "version": 1, "description": null }, "density": "balanced", "densityScore": 32, "componentCount": 4, "textChars": 269, "nDataPoints": 0, "notes": "Uses the Cyber Defense Matrix framework.", "elementsJson": [ "action_title", "data_table", "infographic" ], "confidence": 1, "extraction": { "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "at": "2026-05-02 16:34:46.597+00", "seconds": 2.7, "promptVersion": "v2-canon-conditioned" } }, "links": { "slide": "/slides/019dd923-5f69-752d-a9b7-1a6457da629a/8", "deck": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a", "deckAnchor": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a#slide-8", "deckJson": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a.json" }, "components": [ { "bbox": null, "kind": "framework", "text": "Cyber Defense Matrix", "attrs": null, "canon": { "kind": { "name": "Framework", "slug": "framework", "status": "active", "canonId": "019de52c-fa18-77c6-b10a-ccb8277ac0fa", "version": 1, "description": "Named conceptual framework instance." }, "tool": null, "subkind": { "name": "Framework instance", "slug": "instance", "status": "active", "canonId": "019de52d-05a2-72af-be0b-7edc60708a03", "version": 1, "description": null }, "framework": null }, "subkind": "instance", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:46.597+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "20f75215-c5fe-48d9-bcc6-6fd4c6f01775", "parentComponentId": null }, { "bbox": { "h": 0.02, "w": 0.25, "x": 0.67, "y": 0.88 }, "kind": "source-note", "text": "Source: https://cyberdefensematrix.com", "attrs": null, "canon": { "kind": { "name": "Source note", "slug": "source-note", "status": "active", "canonId": "23484952-494b-4a5e-b1ad-550d0d70e948", "version": 1, "description": "Attribution / source / caveat placed at the slide footer. Numbered footnotes use attrs.numbered." }, "tool": null, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:46.597+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "54a03340-2617-4401-afda-399d5899c9bd", "parentComponentId": null }, { "bbox": { "h": 0.5, "w": 0.84, "x": 0.08, "y": 0.34 }, "kind": "table", "text": "Cyber Defense Matrix showing NIST functions (Identify, Protect, Detect, Respond, Recover) vs Assets (Devices, Applications, Networks, Data, Users)", "attrs": null, "canon": { "kind": { "name": "Table", "slug": "table", "status": "active", "canonId": "019de52c-f9c8-7148-8119-eaac9594cd28", "version": 1, "description": "Tabular data layout." }, "tool": null, "subkind": { "name": "Data table", "slug": "data", "status": "active", "canonId": "019de52d-02d5-75b8-8abf-88e92bf63569", "version": 1, "description": null }, "framework": null }, "subkind": "data", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:46.597+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "f967981d-2982-4448-a238-2bfd06615caa", "parentComponentId": null }, { "bbox": { "h": 0.04, "w": 0.86, "x": 0.07, "y": 0.19 }, "kind": "title", "text": "Application Detection And Response (ADR) Capabilities Are Missing", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:46.597+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "22c2ddda-13f2-4d6b-88b1-0b059d4ab2e8", "parentComponentId": null } ], "metrics": [], "tools": [ { "tool": { "name": "2x2 matrix", "slug": "matrix-2x2", "status": "active", "bestFor": null, "canonId": "019dd9e1-50ab-72d1-8afb-3ab0a38e32a8", "version": 1, "bodyDocId": null, "description": "BCG matrix, importance/urgency, any axes-and-quadrants frame.", "familyLabel": null, "categoryName": null, "categorySlug": null }, "agent": null, "layer": "slide", "agents": null, "matchId": "37cfac09-51f8-4c87-a124-710026cb3e0f", "evidence": "The Cyber Defense Matrix shows a 2x2 or similar matrix structure with NIST functions vs Assets.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 0.7, "extraction": { "at": "2026-07-16 22:25:17.277217+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 8, "whyItWorks": null, "antipattern": null, "cardinality": "common", "narrativePurpose": null } ], "frameworks": [ { "matchId": "0cfd03e7-8ee5-435a-8502-a0b928170f25", "evidence": "The slide explicitly maps security functions against asset categories using the standard NIST-based matrix layout.", "framework": null, "confidence": 1, "extraction": { "at": "2026-05-02 16:34:46.597+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 8, "frameworkName": "cyber-defense-matrix" } ], "arcBeats": [ { "to": 10, "arc": { "name": "Problem-Agitate-Solution", "slug": "problem-agitate-solution", "status": "active", "bestFor": "Sales pitches, urgency-driven, competitive displacement", "canonId": "019dd956-5ec6-70f9-9fd8-fdbaaff39acf", "version": 1, "bodyDocId": "019df22a-2356-73eb-8061-d8c81dc0aa49", "structure": "Problem (Identify pain) -> Agitate (Make it worse) -> Solution (Provide relief)", "description": null, "familyLabel": null }, "from": 3, "name": "Problem", "beatId": "ee9de9f9-3989-47f3-af47-12f35fbfb963", "matchId": "a20f9e35-108f-42d1-b072-600aef38185c", "beatType": { "name": "Problem (Identify pain)", "slug": "problem-agitate-solution-problem-identify-pain", "status": "active", "canonId": "019dd9b8-0e78-74bb-b8f6-54348367a131", "version": 1, "description": null }, "evidence": "Slides 3-10 focus on identifying the pain points and challenges of insider threats and application breaches.", "position": 0, "isPrimaryArc": true, "parentBeatType": { "name": "Complication", "slug": "complication", "status": "active", "canonId": "019dd9b8-0275-7709-b2d6-4f77c3fc7579", "version": 1, "description": "The point in the narrative where the audience should feel discomfort. Required for argumentative arcs." }, "alignedBlockIds": null, "matchConfidence": 0.9 } ], "loops": [ { "to": 10, "from": 4, "loop": { "name": "27_cost_of_inaction", "slug": "27-cost-of-inaction", "status": "active", "bestFor": "Urgent budget requests, compliance, risk mitigation", "canonId": "019dd956-70d1-7395-a15b-857ba858b394", "version": 1, "bodyDocId": "019df22a-2420-77be-bc41-ded96d08cb21", "structure": "The Status Quo -> The Hidden Costs Accumulating -> The Future State of Inaction -> The Tipping Point", "description": "Quantify what happens if the audience does nothing", "familyLabel": null }, "matchId": "5ed838cd-599f-4cd2-b558-d80d37f005c7", "evidence": "The deck highlights the consequences of not detecting insider threats and application breaches, including increased costs and risks.", "position": 0, "objective": "What is the cost of inaction in detecting insider threats and application breaches?", "confidence": 0.8, "extraction": { "at": "2026-07-16 21:34:15.302021+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": "doc-narrative-v1" } } ], "locked": true }, { "page": 9, "type": "tension", "title": "The diagram is a complex flow/sankey-style visualization showing many-to-many relationships between users and applications.", "function": "frame_problem", "rawType": "problem_statement", "block": null, "metadata": { "slideType": "problem_statement", "slideTypeCanon": { "name": "Problem statement", "slug": "problem_statement", "status": "active", "canonId": "019de52d-0879-768d-bba8-8da8a5a121d4", "version": 1, "description": null }, "function": "frame_problem", "functionCanon": { "name": "Frame problem", "slug": "frame_problem", "status": "active", "canonId": "019de52d-13db-753e-ad70-e9b2d0dab398", "version": 1, "description": null }, "density": "balanced", "densityScore": 41, "componentCount": 5, "textChars": 289, "nDataPoints": 0, "notes": "The diagram is a complex flow/sankey-style visualization showing many-to-many relationships between users and applications.", "elementsJson": [ "headline_text", "bullet_list", "sankey" ], "confidence": 1, "extraction": { "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "at": "2026-05-02 16:34:47.578+00", "seconds": 3.542, "promptVersion": "v2-canon-conditioned" } }, "links": { "slide": "/slides/019dd923-5f69-752d-a9b7-1a6457da629a/9", "deck": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a", "deckAnchor": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a#slide-9", "deckJson": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a.json" }, "components": [ { "bbox": null, "kind": "callout", "text": "Each line represents a person-to-app relationship.", "attrs": null, "canon": { "kind": { "name": "Callout", "slug": "callout", "status": "active", "canonId": "019de52c-f8d3-761a-8953-7d37080de5e2", "version": 1, "description": "Highlighted callout box." }, "tool": { "name": "Visual emphasis", "slug": "visual-emphasis", "status": "active", "bestFor": null, "canonId": "019dd9e1-474b-736b-a8eb-a794dd88241c", "version": 1, "bodyDocId": null, "description": "Drawing the eye to one element above the rest of the slide.", "familyLabel": null }, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-04-27 14:42:14+00", "model": "or:google/gemini-3.1-flash-lite-preview", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "019dd952-a28a-716a-b4ae-8c45541b239c", "parentComponentId": null }, { "bbox": { "h": 0.6, "w": 0.38, "x": 0.57, "y": 0.27 }, "kind": "chart", "text": "Visualization of person-to-app relationships", "attrs": null, "canon": { "kind": { "name": "Chart", "slug": "chart", "status": "active", "canonId": "019de52c-f9a0-76ef-adc6-0b859109d1f8", "version": 1, "description": "Quantitative chart." }, "tool": null, "subkind": { "name": "Sankey diagram", "slug": "sankey", "status": "active", "canonId": "019de52d-0145-711d-a871-198a7a06733b", "version": 1, "description": null }, "framework": null }, "subkind": "sankey", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:47.578+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "4793f5b8-8838-4a06-8b69-0ed6270338b4", "parentComponentId": null }, { "bbox": { "h": 0.2, "w": 0.45, "x": 0.07, "y": 0.31 }, "kind": "list", "text": "Each application has a unique set of business logic (operations)\nEach user has many activity profiles per application", "attrs": null, "canon": { "kind": { "name": "List", "slug": "list", "status": "active", "canonId": "019de52c-f94b-779b-a53b-fd4904a5f4d2", "version": 1, "description": "Bullet or numbered list." }, "tool": null, "subkind": { "name": "Bullet list", "slug": "bullet", "status": "active", "canonId": "019de52c-fc98-7169-a083-5cab805076ca", "version": 1, "description": null }, "framework": null }, "subkind": "bullet", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:47.578+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "8154c1c8-ee98-4e17-8d16-50f46f91461e", "parentComponentId": null }, { "bbox": { "h": 0.03, "w": 0.3, "x": 0.6, "y": 0.88 }, "kind": "source-note", "text": "Each line represents a person-to-app relationship.", "attrs": null, "canon": { "kind": { "name": "Source note", "slug": "source-note", "status": "active", "canonId": "23484952-494b-4a5e-b1ad-550d0d70e948", "version": 1, "description": "Attribution / source / caveat placed at the slide footer. Numbered footnotes use attrs.numbered." }, "tool": null, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:47.578+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "24cb3a5b-e779-4997-b58b-7612849cdc33", "parentComponentId": null }, { "bbox": { "h": 0.05, "w": 0.45, "x": 0.07, "y": 0.19 }, "kind": "title", "text": "The Technological Challenges", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:47.578+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "042f07b5-4c32-4543-9586-47425b9318ec", "parentComponentId": null } ], "metrics": [], "tools": [], "frameworks": [], "arcBeats": [ { "to": 10, "arc": { "name": "Problem-Agitate-Solution", "slug": "problem-agitate-solution", "status": "active", "bestFor": "Sales pitches, urgency-driven, competitive displacement", "canonId": "019dd956-5ec6-70f9-9fd8-fdbaaff39acf", "version": 1, "bodyDocId": "019df22a-2356-73eb-8061-d8c81dc0aa49", "structure": "Problem (Identify pain) -> Agitate (Make it worse) -> Solution (Provide relief)", "description": null, "familyLabel": null }, "from": 3, "name": "Problem", "beatId": "ee9de9f9-3989-47f3-af47-12f35fbfb963", "matchId": "a20f9e35-108f-42d1-b072-600aef38185c", "beatType": { "name": "Problem (Identify pain)", "slug": "problem-agitate-solution-problem-identify-pain", "status": "active", "canonId": "019dd9b8-0e78-74bb-b8f6-54348367a131", "version": 1, "description": null }, "evidence": "Slides 3-10 focus on identifying the pain points and challenges of insider threats and application breaches.", "position": 0, "isPrimaryArc": true, "parentBeatType": { "name": "Complication", "slug": "complication", "status": "active", "canonId": "019dd9b8-0275-7709-b2d6-4f77c3fc7579", "version": 1, "description": "The point in the narrative where the audience should feel discomfort. Required for argumentative arcs." }, "alignedBlockIds": null, "matchConfidence": 0.9 } ], "loops": [ { "to": 10, "from": 4, "loop": { "name": "27_cost_of_inaction", "slug": "27-cost-of-inaction", "status": "active", "bestFor": "Urgent budget requests, compliance, risk mitigation", "canonId": "019dd956-70d1-7395-a15b-857ba858b394", "version": 1, "bodyDocId": "019df22a-2420-77be-bc41-ded96d08cb21", "structure": "The Status Quo -> The Hidden Costs Accumulating -> The Future State of Inaction -> The Tipping Point", "description": "Quantify what happens if the audience does nothing", "familyLabel": null }, "matchId": "5ed838cd-599f-4cd2-b558-d80d37f005c7", "evidence": "The deck highlights the consequences of not detecting insider threats and application breaches, including increased costs and risks.", "position": 0, "objective": "What is the cost of inaction in detecting insider threats and application breaches?", "confidence": 0.8, "extraction": { "at": "2026-07-16 21:34:15.302021+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": "doc-narrative-v1" } } ], "locked": true }, { "page": 10, "type": "tension", "title": "Uses the Cyber Defense Matrix framework to highlight the market gap.", "function": "frame_problem", "rawType": "problem_statement", "block": null, "metadata": { "slideType": "problem_statement", "slideTypeCanon": { "name": "Problem statement", "slug": "problem_statement", "status": "active", "canonId": "019de52d-0879-768d-bba8-8da8a5a121d4", "version": 1, "description": null }, "function": "frame_problem", "functionCanon": { "name": "Frame problem", "slug": "frame_problem", "status": "active", "canonId": "019de52d-13db-753e-ad70-e9b2d0dab398", "version": 1, "description": null }, "density": "sparse", "densityScore": 24, "componentCount": 4, "textChars": 138, "nDataPoints": 0, "notes": "Uses the Cyber Defense Matrix framework to highlight the market gap.", "elementsJson": [ "headline_text", "action_title", "data_table", "other" ], "confidence": 1, "extraction": { "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "at": "2026-05-02 16:34:59.211+00", "seconds": 14.963, "promptVersion": "v2-canon-conditioned" } }, "links": { "slide": "/slides/019dd923-5f69-752d-a9b7-1a6457da629a/10", "deck": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a", "deckAnchor": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a#slide-10", "deckJson": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a.json" }, "components": [ { "bbox": { "h": 0.55, "w": 0.74, "x": 0.18, "y": 0.34 }, "kind": "framework", "text": "Cyber Defense Matrix", "attrs": null, "canon": { "kind": { "name": "Framework", "slug": "framework", "status": "active", "canonId": "019de52c-fa18-77c6-b10a-ccb8277ac0fa", "version": 1, "description": "Named conceptual framework instance." }, "tool": null, "subkind": { "name": "Framework instance", "slug": "instance", "status": "active", "canonId": "019de52d-05a2-72af-be0b-7edc60708a03", "version": 1, "description": null }, "framework": null }, "subkind": "instance", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:59.211+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "896ec408-d32f-48a1-b6f6-4f971182184b", "parentComponentId": null }, { "bbox": { "h": 0.06, "w": 0.16, "x": 0.55, "y": 0.465 }, "kind": "image", "text": "Reveal Security", "attrs": null, "canon": { "kind": { "name": "Image", "slug": "image", "status": "active", "canonId": "019de52c-f978-701f-a720-51d029d769e7", "version": 1, "description": "Photo, illustration, screenshot or icon." }, "tool": null, "subkind": { "name": "Logo", "slug": "logo", "status": "active", "canonId": "019de52c-fdaf-743d-94c4-d7c6a0e55302", "version": 1, "description": null }, "framework": null }, "subkind": "logo", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:59.211+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "0c6a7626-4160-4f22-94de-1c5e1504c180", "parentComponentId": null }, { "bbox": { "h": 0.02, "w": 0.25, "x": 0.67, "y": 0.88 }, "kind": "source-note", "text": "Source: https://cyberdefensematrix.com", "attrs": null, "canon": { "kind": { "name": "Source note", "slug": "source-note", "status": "active", "canonId": "23484952-494b-4a5e-b1ad-550d0d70e948", "version": 1, "description": "Attribution / source / caveat placed at the slide footer. Numbered footnotes use attrs.numbered." }, "tool": null, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:59.211+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "4a3bb724-1da1-4844-9974-cb4876f7c64d", "parentComponentId": null }, { "bbox": { "h": 0.05, "w": 0.86, "x": 0.07, "y": 0.19 }, "kind": "title", "text": "Application Detection And Response (ADR) Capabilities Are Missing", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:59.211+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "dc64469a-aba8-477e-9b9c-d1ff42bf1a49", "parentComponentId": null } ], "metrics": [], "tools": [], "frameworks": [ { "matchId": "399a79c5-0de4-449e-8a2f-f3389ef09104", "evidence": "The slide explicitly uses the Cyber Defense Matrix structure (Identify, Protect, Detect, Respond, Recover vs Devices, Applications, Networks, Data, Users).", "framework": null, "confidence": 1, "extraction": { "at": "2026-05-02 16:34:59.211+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 10, "frameworkName": "cyber-defense-matrix" } ], "arcBeats": [ { "to": 10, "arc": { "name": "Problem-Agitate-Solution", "slug": "problem-agitate-solution", "status": "active", "bestFor": "Sales pitches, urgency-driven, competitive displacement", "canonId": "019dd956-5ec6-70f9-9fd8-fdbaaff39acf", "version": 1, "bodyDocId": "019df22a-2356-73eb-8061-d8c81dc0aa49", "structure": "Problem (Identify pain) -> Agitate (Make it worse) -> Solution (Provide relief)", "description": null, "familyLabel": null }, "from": 3, "name": "Problem", "beatId": "ee9de9f9-3989-47f3-af47-12f35fbfb963", "matchId": "a20f9e35-108f-42d1-b072-600aef38185c", "beatType": { "name": "Problem (Identify pain)", "slug": "problem-agitate-solution-problem-identify-pain", "status": "active", "canonId": "019dd9b8-0e78-74bb-b8f6-54348367a131", "version": 1, "description": null }, "evidence": "Slides 3-10 focus on identifying the pain points and challenges of insider threats and application breaches.", "position": 0, "isPrimaryArc": true, "parentBeatType": { "name": "Complication", "slug": "complication", "status": "active", "canonId": "019dd9b8-0275-7709-b2d6-4f77c3fc7579", "version": 1, "description": "The point in the narrative where the audience should feel discomfort. Required for argumentative arcs." }, "alignedBlockIds": null, "matchConfidence": 0.9 } ], "loops": [ { "to": 10, "from": 4, "loop": { "name": "27_cost_of_inaction", "slug": "27-cost-of-inaction", "status": "active", "bestFor": "Urgent budget requests, compliance, risk mitigation", "canonId": "019dd956-70d1-7395-a15b-857ba858b394", "version": 1, "bodyDocId": "019df22a-2420-77be-bc41-ded96d08cb21", "structure": "The Status Quo -> The Hidden Costs Accumulating -> The Future State of Inaction -> The Tipping Point", "description": "Quantify what happens if the audience does nothing", "familyLabel": null }, "matchId": "5ed838cd-599f-4cd2-b558-d80d37f005c7", "evidence": "The deck highlights the consequences of not detecting insider threats and application breaches, including increased costs and risks.", "position": 0, "objective": "What is the cost of inaction in detecting insider threats and application breaches?", "confidence": 0.8, "extraction": { "at": "2026-07-16 21:34:15.302021+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": "doc-narrative-v1" } } ], "locked": true }, { "page": 11, "type": "resolution", "title": "The slide uses a 2x3 grid of cards, each containing an icon, a category title, and supporting sub-text or logos.", "function": "present_solution", "rawType": "solution", "block": null, "metadata": { "slideType": "solution", "slideTypeCanon": { "name": "Solution", "slug": "solution", "status": "active", "canonId": "019de52d-0eb5-72ff-8b70-ba70a4199282", "version": 1, "description": null }, "function": "present_solution", "functionCanon": { "name": "Present solution", "slug": "present_solution", "status": "active", "canonId": "019de52d-15b8-71da-bd23-2b767850cbce", "version": 1, "description": null }, "density": "sparse", "densityScore": 7, "componentCount": 2, "textChars": 80, "nDataPoints": 0, "notes": "The slide uses a 2x3 grid of cards, each containing an icon, a category title, and supporting sub-text or logos.", "elementsJson": [ "icon_grid", "logo_grid" ], "confidence": 1, "extraction": { "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "at": "2026-05-02 16:34:46.815+00", "seconds": 2.422, "promptVersion": "v2-canon-conditioned" } }, "links": { "slide": "/slides/019dd923-5f69-752d-a9b7-1a6457da629a/11", "deck": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a", "deckAnchor": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a#slide-11", "deckJson": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a.json" }, "components": [ { "bbox": { "h": 0.58, "w": 0.86, "x": 0.07, "y": 0.31 }, "kind": "image", "text": "Grid of 6 use case cards", "attrs": null, "canon": { "kind": { "name": "Image", "slug": "image", "status": "active", "canonId": "019de52c-f978-701f-a720-51d029d769e7", "version": 1, "description": "Photo, illustration, screenshot or icon." }, "tool": null, "subkind": { "name": "Icon grid", "slug": "icon-grid", "status": "active", "canonId": "019de52c-fdfe-749d-9990-1db465a3eed4", "version": 1, "description": null }, "framework": null }, "subkind": "icon-grid", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:46.815+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "1652b6c4-cec8-49ca-afe4-481c5c84a3ed", "parentComponentId": null }, { "bbox": { "h": 0.05, "w": 0.78, "x": 0.07, "y": 0.19 }, "kind": "title", "text": "TrackerIQ Use Cases - Detection of Business Logic Breach", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:46.815+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "10f7ccb0-39d5-4935-87a2-ba873a9b4588", "parentComponentId": null } ], "metrics": [], "tools": [], "frameworks": [], "arcBeats": [ { "to": 14, "arc": { "name": "Problem-Agitate-Solution", "slug": "problem-agitate-solution", "status": "active", "bestFor": "Sales pitches, urgency-driven, competitive displacement", "canonId": "019dd956-5ec6-70f9-9fd8-fdbaaff39acf", "version": 1, "bodyDocId": "019df22a-2356-73eb-8061-d8c81dc0aa49", "structure": "Problem (Identify pain) -> Agitate (Make it worse) -> Solution (Provide relief)", "description": null, "familyLabel": null }, "from": 11, "name": "Agitate", "beatId": "21401159-1169-4bad-8944-de6a28c2046c", "matchId": "a20f9e35-108f-42d1-b072-600aef38185c", "beatType": { "name": "Agitate (Make it worse)", "slug": "problem-agitate-solution-agitate-make-it-worse", "status": "active", "canonId": "019dd9b8-0f5a-71dd-bae7-8fadb0d09456", "version": 1, "description": null }, "evidence": "Slides 11-14 agitate the problem by highlighting the consequences of not detecting insider threats and application breaches.", "position": 1, "isPrimaryArc": true, "parentBeatType": { "name": "Development", "slug": "development", "status": "active", "canonId": "019dd9b8-0332-7008-b3aa-11b0840a57b1", "version": 1, "description": "The middle stretch in arcs that have one. Often where length problems creep in." }, "alignedBlockIds": null, "matchConfidence": 0.9 } ], "loops": [], "locked": true }, { "page": 12, "type": "tension", "title": "The slide uses a table to map domains to technologies and a callout box to critique rule-based systems.", "function": "frame_problem", "rawType": "problem_statement", "block": null, "metadata": { "slideType": "problem_statement", "slideTypeCanon": { "name": "Problem statement", "slug": "problem_statement", "status": "active", "canonId": "019de52d-0879-768d-bba8-8da8a5a121d4", "version": 1, "description": null }, "function": "frame_problem", "functionCanon": { "name": "Frame problem", "slug": "frame_problem", "status": "active", "canonId": "019de52d-13db-753e-ad70-e9b2d0dab398", "version": 1, "description": null }, "density": "dense", "densityScore": 54, "componentCount": 5, "textChars": 578, "nDataPoints": 0, "notes": "The slide uses a table to map domains to technologies and a callout box to critique rule-based systems.", "elementsJson": [ "headline_text", "action_title", "data_table", "callout_box", "bullet_list" ], "confidence": 1, "extraction": { "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "at": "2026-05-02 16:34:47.173+00", "seconds": 2.538, "promptVersion": "v2-canon-conditioned" } }, "links": { "slide": "/slides/019dd923-5f69-752d-a9b7-1a6457da629a/12", "deck": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a", "deckAnchor": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a#slide-12", "deckJson": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a.json" }, "components": [ { "bbox": { "h": 0.55, "w": 0.35, "x": 0.58, "y": 0.3 }, "kind": "callout", "text": "Mainstream Detection: Rule-based. Detects only known malicious patterns. Rules are static > generating false positives. Requires consistent and costly maintenance. Difficult to scale.", "attrs": null, "canon": { "kind": { "name": "Callout", "slug": "callout", "status": "active", "canonId": "019de52c-f8d3-761a-8953-7d37080de5e2", "version": 1, "description": "Highlighted callout box." }, "tool": null, "subkind": { "name": "Primary callout", "slug": "primary", "status": "active", "canonId": "019de52c-fbd1-70eb-a9ce-8997f8674c1d", "version": 1, "description": null }, "framework": null }, "subkind": "primary", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:47.173+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "8052626e-8f5c-42ca-9cec-91ff605cb756", "parentComponentId": null }, { "bbox": null, "kind": "callout", "text": "Detects only known malicious patterns; Rules are static > generating false positives; Requires consistent and costly maintenance; Difficult to scale", "attrs": null, "canon": { "kind": { "name": "Callout", "slug": "callout", "status": "active", "canonId": "019de52c-f8d3-761a-8953-7d37080de5e2", "version": 1, "description": "Highlighted callout box." }, "tool": { "name": "Visual emphasis", "slug": "visual-emphasis", "status": "active", "bestFor": null, "canonId": "019dd9e1-474b-736b-a8eb-a794dd88241c", "version": 1, "bodyDocId": null, "description": "Drawing the eye to one element above the rest of the slide.", "familyLabel": null }, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-04-27 14:42:13+00", "model": "or:google/gemini-3.1-flash-lite-preview", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "019dd952-a28a-716a-b4ad-f786f8a92401", "parentComponentId": null }, { "bbox": { "h": 0.1, "w": 0.3, "x": 0.25, "y": 0.73 }, "kind": "legend", "text": "Pattern/Rule-based, Behavioral/Statistical-based, Model based (per domain)", "attrs": null, "canon": { "kind": { "name": "Legend", "slug": "legend", "status": "active", "canonId": "31361933-3d22-4c70-bbad-0801e9fffc0c", "version": 1, "description": "Color/symbol decoder placed adjacent to a chart or diagram." }, "tool": null, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:47.173+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "96eb264f-99ef-4f96-a52e-3fee66121419", "parentComponentId": null }, { "bbox": { "h": 0.55, "w": 0.55, "x": 0.08, "y": 0.3 }, "kind": "table", "text": "Domain, Examples of Logged Activity/Telemetry, Protection Technology, Detection and Response Technology", "attrs": null, "canon": { "kind": { "name": "Table", "slug": "table", "status": "active", "canonId": "019de52c-f9c8-7148-8119-eaac9594cd28", "version": 1, "description": "Tabular data layout." }, "tool": null, "subkind": { "name": "Data table", "slug": "data", "status": "active", "canonId": "019de52d-02d5-75b8-8abf-88e92bf63569", "version": 1, "description": null }, "framework": null }, "subkind": "data", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:47.173+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "cfa7644a-b5ec-4c96-a84e-ddc17a5b5f38", "parentComponentId": null }, { "bbox": { "h": 0.05, "w": 0.86, "x": 0.07, "y": 0.185 }, "kind": "title", "text": "Insider Threat Detection in Applications is a Major Security Challenge", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:47.173+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "bb55826b-0692-47be-82ba-2bff001c7682", "parentComponentId": null } ], "metrics": [], "tools": [ { "tool": { "name": "Table data", "slug": "table-data", "status": "active", "bestFor": null, "canonId": "019dd9e1-4fab-7168-a82f-b847350a006d", "version": 1, "bodyDocId": null, "description": "Tabular layouts of structured data.", "familyLabel": null, "categoryName": null, "categorySlug": null }, "agent": null, "layer": "slide", "agents": null, "matchId": "7cc66139-2bfc-4edd-96b5-7ca5ea5f8a6c", "evidence": "The slide includes a table with data on domain, examples of logged activity/telemetry, protection technology, and detection and response technology.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 0.7, "extraction": { "at": "2026-07-16 22:25:17.454183+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 12, "whyItWorks": null, "antipattern": null, "cardinality": "common", "narrativePurpose": null } ], "frameworks": [ { "matchId": "50ffa6c1-010b-4d95-a1bf-450b19943a38", "evidence": "The table attempts to categorize security domains into a mutually exclusive and collectively exhaustive set.", "framework": null, "confidence": 0.7, "extraction": { "at": "2026-05-02 16:34:47.173+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 12, "frameworkName": "mece-principle" } ], "arcBeats": [ { "to": 14, "arc": { "name": "Problem-Agitate-Solution", "slug": "problem-agitate-solution", "status": "active", "bestFor": "Sales pitches, urgency-driven, competitive displacement", "canonId": "019dd956-5ec6-70f9-9fd8-fdbaaff39acf", "version": 1, "bodyDocId": "019df22a-2356-73eb-8061-d8c81dc0aa49", "structure": "Problem (Identify pain) -> Agitate (Make it worse) -> Solution (Provide relief)", "description": null, "familyLabel": null }, "from": 11, "name": "Agitate", "beatId": "21401159-1169-4bad-8944-de6a28c2046c", "matchId": "a20f9e35-108f-42d1-b072-600aef38185c", "beatType": { "name": "Agitate (Make it worse)", "slug": "problem-agitate-solution-agitate-make-it-worse", "status": "active", "canonId": "019dd9b8-0f5a-71dd-bae7-8fadb0d09456", "version": 1, "description": null }, "evidence": "Slides 11-14 agitate the problem by highlighting the consequences of not detecting insider threats and application breaches.", "position": 1, "isPrimaryArc": true, "parentBeatType": { "name": "Development", "slug": "development", "status": "active", "canonId": "019dd9b8-0332-7008-b3aa-11b0840a57b1", "version": 1, "description": "The middle stretch in arcs that have one. Often where length problems creep in." }, "alignedBlockIds": null, "matchConfidence": 0.9 } ], "loops": [], "locked": true }, { "page": 13, "type": "setup", "function": "establish_context", "rawType": "why_now", "block": null, "metadata": { "slideType": "why_now", "slideTypeCanon": { "name": "Why now", "slug": "why_now", "status": "active", "canonId": "019de52d-0f2e-718d-b8ad-256dd87582d0", "version": 1, "description": null }, "function": "establish_context", "functionCanon": { "name": "Establish context", "slug": "establish_context", "status": "active", "canonId": "019de52d-1314-74e6-9074-d213dc0bdcdf", "version": 1, "description": null }, "density": "sparse", "densityScore": 9, "componentCount": 2, "textChars": 117, "nDataPoints": 0, "notes": null, "elementsJson": [ "headline_text" ], "confidence": 1, "extraction": { "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "at": "2026-05-02 16:35:35.069+00", "seconds": 49.823, "promptVersion": "v2-canon-conditioned" } }, "links": { "slide": "/slides/019dd923-5f69-752d-a9b7-1a6457da629a/13", "deck": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a", "deckAnchor": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a#slide-13", "deckJson": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a.json" }, "components": [ { "bbox": { "h": 0.05, "w": 0.2, "x": 0.07, "y": 0.9 }, "kind": "disclaimer", "text": "© June 2022, all rights reserved. Private and confidential", "attrs": null, "canon": { "kind": { "name": "Disclaimer", "slug": "disclaimer", "status": "active", "canonId": "91173477-d91f-4024-bbaf-d4f93e3f82dc", "version": 1, "description": "Legal/cautionary text that occupies most of the body of its slide." }, "tool": null, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:35:35.069+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "2b3aded4-27ae-4d73-a1ae-ac5aca4a25d3", "parentComponentId": null }, { "bbox": { "h": 0.2, "w": 0.5, "x": 0.1, "y": 0.28 }, "kind": "title", "text": "Business Operation Breach Detection Requires a New Approach", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:35:35.069+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "6d8bc395-ac4d-4e76-97eb-d7449c6d41b9", "parentComponentId": null } ], "metrics": [], "tools": [], "frameworks": [], "arcBeats": [ { "to": 14, "arc": { "name": "Problem-Agitate-Solution", "slug": "problem-agitate-solution", "status": "active", "bestFor": "Sales pitches, urgency-driven, competitive displacement", "canonId": "019dd956-5ec6-70f9-9fd8-fdbaaff39acf", "version": 1, "bodyDocId": "019df22a-2356-73eb-8061-d8c81dc0aa49", "structure": "Problem (Identify pain) -> Agitate (Make it worse) -> Solution (Provide relief)", "description": null, "familyLabel": null }, "from": 11, "name": "Agitate", "beatId": "21401159-1169-4bad-8944-de6a28c2046c", "matchId": "a20f9e35-108f-42d1-b072-600aef38185c", "beatType": { "name": "Agitate (Make it worse)", "slug": "problem-agitate-solution-agitate-make-it-worse", "status": "active", "canonId": "019dd9b8-0f5a-71dd-bae7-8fadb0d09456", "version": 1, "description": null }, "evidence": "Slides 11-14 agitate the problem by highlighting the consequences of not detecting insider threats and application breaches.", "position": 1, "isPrimaryArc": true, "parentBeatType": { "name": "Development", "slug": "development", "status": "active", "canonId": "019dd9b8-0332-7008-b3aa-11b0840a57b1", "version": 1, "description": "The middle stretch in arcs that have one. Often where length problems creep in." }, "alignedBlockIds": null, "matchConfidence": 0.9 } ], "loops": [ { "to": 14, "from": 13, "loop": { "name": "11_golden_circle", "slug": "11-golden-circle", "status": "active", "bestFor": "Visionary leadership, brand positioning, mission statements", "canonId": "019dd956-6a50-7202-882d-505fcb9922ed", "version": 1, "bodyDocId": "019df22a-2420-77be-bc41-ded96d08cb21", "structure": "The Why (Belief) -> The How (Process) -> The What (Result)", "description": "Invert the typical pitch by starting with why you exist, rather than what you do", "familyLabel": null }, "matchId": "f6acd24d-7018-475f-a96c-c5dea5061171", "evidence": "The deck provides context on why now is the time for a new approach, including Gartner's identification of application behavior monitoring as an emerging trend.", "position": 1, "objective": "Why now is the time for a new approach to detecting insider threats and application breaches?", "confidence": 0.7, "extraction": { "at": "2026-07-16 21:34:15.340181+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": "doc-narrative-v1" } } ], "locked": true }, { "page": 14, "type": "setup", "title": "The chart is a Gartner Impact Radar, which is a specific type of market visualization.", "function": "argue_timing", "rawType": "why_now", "block": null, "metadata": { "slideType": "why_now", "slideTypeCanon": { "name": "Why now", "slug": "why_now", "status": "active", "canonId": "019de52d-0f2e-718d-b8ad-256dd87582d0", "version": 1, "description": null }, "function": "argue_timing", "functionCanon": { "name": "Argue timing (why now)", "slug": "argue_timing", "status": "active", "canonId": "019de52d-16f8-74de-9ec2-900be07d90dd", "version": 1, "description": null }, "density": "balanced", "densityScore": 35, "componentCount": 4, "textChars": 323, "nDataPoints": 0, "notes": "The chart is a Gartner Impact Radar, which is a specific type of market visualization.", "elementsJson": [ "headline_text", "action_title", "other", "footnote" ], "confidence": 1, "extraction": { "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "at": "2026-05-02 16:34:50.562+00", "seconds": 5.179, "promptVersion": "v2-canon-conditioned" } }, "links": { "slide": "/slides/019dd923-5f69-752d-a9b7-1a6457da629a/14", "deck": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a", "deckAnchor": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a#slide-14", "deckJson": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a.json" }, "components": [ { "bbox": { "h": 0.5, "w": 0.48, "x": 0.44, "y": 0.31 }, "kind": "chart", "text": "Gartner Impact Radar chart showing various security technologies categorized by time range and mass.", "attrs": null, "canon": { "kind": { "name": "Chart", "slug": "chart", "status": "active", "canonId": "019de52c-f9a0-76ef-adc6-0b859109d1f8", "version": 1, "description": "Quantitative chart." }, "tool": null, "subkind": null, "framework": null }, "subkind": "other", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:50.562+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "aaac5558-892f-4045-a9fa-37e94ac7a16e", "parentComponentId": null }, { "bbox": { "h": 0.15, "w": 0.35, "x": 0.02, "y": 0.63 }, "kind": "image", "text": "Reveal Security logo", "attrs": null, "canon": { "kind": { "name": "Image", "slug": "image", "status": "active", "canonId": "019de52c-f978-701f-a720-51d029d769e7", "version": 1, "description": "Photo, illustration, screenshot or icon." }, "tool": null, "subkind": { "name": "Logo", "slug": "logo", "status": "active", "canonId": "019de52c-fdaf-743d-94c4-d7c6a0e55302", "version": 1, "description": null }, "framework": null }, "subkind": "logo", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:50.562+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "2e8b644b-d78f-4166-8f77-dac19d84ef1b", "parentComponentId": null }, { "bbox": { "h": 0.03, "w": 0.65, "x": 0.08, "y": 0.91 }, "kind": "source-note", "text": "Source: Gartner, Emerging Technologies and Trends Impact Radar for Security, September 2020, ID: G00724138", "attrs": null, "canon": { "kind": { "name": "Source note", "slug": "source-note", "status": "active", "canonId": "23484952-494b-4a5e-b1ad-550d0d70e948", "version": 1, "description": "Attribution / source / caveat placed at the slide footer. Numbered footnotes use attrs.numbered." }, "tool": null, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:50.562+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "241e7c88-9d08-462f-b4c8-c210c86b3f0e", "parentComponentId": null }, { "bbox": { "h": 0.1, "w": 0.85, "x": 0.06, "y": 0.19 }, "kind": "title", "text": "Application Behavior Monitoring Identified by Gartner as An Emerging Trend with High Adoption Now", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:50.562+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "047fa066-db54-4663-8a25-e1771a2f64d2", "parentComponentId": null } ], "metrics": [], "tools": [], "frameworks": [ { "matchId": "92e5d977-5f2c-4280-a611-b142523d9eb5", "evidence": "The chart visualizes technology trends by time range and mass.", "framework": null, "confidence": 1, "extraction": { "at": "2026-05-02 16:34:50.562+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 14, "frameworkName": "Gartner Impact Radar" } ], "arcBeats": [ { "to": 14, "arc": { "name": "Problem-Agitate-Solution", "slug": "problem-agitate-solution", "status": "active", "bestFor": "Sales pitches, urgency-driven, competitive displacement", "canonId": "019dd956-5ec6-70f9-9fd8-fdbaaff39acf", "version": 1, "bodyDocId": "019df22a-2356-73eb-8061-d8c81dc0aa49", "structure": "Problem (Identify pain) -> Agitate (Make it worse) -> Solution (Provide relief)", "description": null, "familyLabel": null }, "from": 11, "name": "Agitate", "beatId": "21401159-1169-4bad-8944-de6a28c2046c", "matchId": "a20f9e35-108f-42d1-b072-600aef38185c", "beatType": { "name": "Agitate (Make it worse)", "slug": "problem-agitate-solution-agitate-make-it-worse", "status": "active", "canonId": "019dd9b8-0f5a-71dd-bae7-8fadb0d09456", "version": 1, "description": null }, "evidence": "Slides 11-14 agitate the problem by highlighting the consequences of not detecting insider threats and application breaches.", "position": 1, "isPrimaryArc": true, "parentBeatType": { "name": "Development", "slug": "development", "status": "active", "canonId": "019dd9b8-0332-7008-b3aa-11b0840a57b1", "version": 1, "description": "The middle stretch in arcs that have one. Often where length problems creep in." }, "alignedBlockIds": null, "matchConfidence": 0.9 } ], "loops": [ { "to": 14, "from": 13, "loop": { "name": "11_golden_circle", "slug": "11-golden-circle", "status": "active", "bestFor": "Visionary leadership, brand positioning, mission statements", "canonId": "019dd956-6a50-7202-882d-505fcb9922ed", "version": 1, "bodyDocId": "019df22a-2420-77be-bc41-ded96d08cb21", "structure": "The Why (Belief) -> The How (Process) -> The What (Result)", "description": "Invert the typical pitch by starting with why you exist, rather than what you do", "familyLabel": null }, "matchId": "f6acd24d-7018-475f-a96c-c5dea5061171", "evidence": "The deck provides context on why now is the time for a new approach, including Gartner's identification of application behavior monitoring as an emerging trend.", "position": 1, "objective": "Why now is the time for a new approach to detecting insider threats and application breaches?", "confidence": 0.7, "extraction": { "at": "2026-07-16 21:34:15.340181+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": "doc-narrative-v1" } } ], "locked": true }, { "page": 15, "type": "setup", "title": "The slide uses a maturity model framework to position the company's '3rd Generation' technology as the superior approach.", "function": "compare_peers", "rawType": "comparison_table", "block": null, "metadata": { "slideType": "comparison_table", "slideTypeCanon": { "name": "Comparison table", "slug": "comparison_table", "status": "active", "canonId": "019de52d-0a06-73f8-8813-fe022fab1de2", "version": 1, "description": null }, "function": "compare_peers", "functionCanon": { "name": "Compare peers", "slug": "compare_peers", "status": "active", "canonId": "019de52d-1453-72ba-a367-9ba3d34c1630", "version": 1, "description": null }, "density": "balanced", "densityScore": 33, "componentCount": 4, "textChars": 298, "nDataPoints": 0, "notes": "The slide uses a maturity model framework to position the company's '3rd Generation' technology as the superior approach.", "elementsJson": [ "comparison_table", "icon_grid" ], "confidence": 1, "extraction": { "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "at": "2026-05-02 16:34:50.061+00", "seconds": 4.578, "promptVersion": "v2-canon-conditioned" } }, "links": { "slide": "/slides/019dd923-5f69-752d-a9b7-1a6457da629a/15", "deck": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a", "deckAnchor": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a#slide-15", "deckJson": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a.json" }, "components": [ { "bbox": null, "kind": "callout", "text": "3rd Generation User Journey-Based Anomaly Detection", "attrs": null, "canon": { "kind": { "name": "Callout", "slug": "callout", "status": "active", "canonId": "019de52c-f8d3-761a-8953-7d37080de5e2", "version": 1, "description": "Highlighted callout box." }, "tool": { "name": "Visual emphasis", "slug": "visual-emphasis", "status": "active", "bestFor": null, "canonId": "019dd9e1-474b-736b-a8eb-a794dd88241c", "version": 1, "bodyDocId": null, "description": "Drawing the eye to one element above the rest of the slide.", "familyLabel": null }, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-04-27 14:42:13+00", "model": "or:google/gemini-3.1-flash-lite-preview", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "019dd952-a28a-716a-b4ae-2f95937f853c", "parentComponentId": null }, { "bbox": null, "kind": "framework", "text": "Maturity model comparing generations of security detection", "attrs": null, "canon": { "kind": { "name": "Framework", "slug": "framework", "status": "active", "canonId": "019de52c-fa18-77c6-b10a-ccb8277ac0fa", "version": 1, "description": "Named conceptual framework instance." }, "tool": null, "subkind": { "name": "Framework instance", "slug": "instance", "status": "active", "canonId": "019de52d-05a2-72af-be0b-7edc60708a03", "version": 1, "description": null }, "framework": null }, "subkind": "instance", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:50.061+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "2b59a9fc-ed38-4a03-8851-0040f86c6c0a", "parentComponentId": null }, { "bbox": { "h": 0.5, "w": 0.85, "x": 0.07, "y": 0.35 }, "kind": "table", "text": "Comparison matrix of 1st, 2nd, and 3rd generation security detection methods across Network, End points, Authentication, and SaaS Applications.", "attrs": null, "canon": { "kind": { "name": "Table", "slug": "table", "status": "active", "canonId": "019de52c-f9c8-7148-8119-eaac9594cd28", "version": 1, "description": "Tabular data layout." }, "tool": null, "subkind": { "name": "Data table", "slug": "data", "status": "active", "canonId": "019de52d-02d5-75b8-8abf-88e92bf63569", "version": 1, "description": null }, "framework": null }, "subkind": "data", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:50.061+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "d6dd73f2-6b72-4ec3-a7fc-d7d5fbf3128e", "parentComponentId": null }, { "bbox": { "h": 0.05, "w": 0.6, "x": 0.07, "y": 0.19 }, "kind": "title", "text": "Better Context Enables More Accurate Detection", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:50.061+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "16e15a95-b74d-4ae1-9935-257b6480f1cb", "parentComponentId": null } ], "metrics": [], "tools": [ { "tool": { "name": "Maturity model", "slug": "maturity-model", "status": "active", "bestFor": null, "canonId": "019de52d-1923-75fc-9be0-131883ed3458", "version": 1, "bodyDocId": null, "description": null, "familyLabel": null, "categoryName": null, "categorySlug": null }, "agent": null, "layer": "slide", "agents": null, "matchId": "85e9f7f6-b10f-44ca-9579-b3e8337afd6a", "evidence": "The slide includes a maturity model comparing generations of security detection.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 0.7, "extraction": { "at": "2026-07-16 22:25:17.584579+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 15, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null } ], "frameworks": [ { "matchId": "70ed9f4d-4b33-49b2-955e-760e6194faf7", "evidence": "The slide explicitly categorizes security detection into 1st, 2nd, and 3rd generations, implying a progression of capability.", "framework": null, "confidence": 1, "extraction": { "at": "2026-05-02 16:34:50.061+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 15, "frameworkName": "maturity-model" } ], "arcBeats": [ { "to": 24, "arc": { "name": "Problem-Agitate-Solution", "slug": "problem-agitate-solution", "status": "active", "bestFor": "Sales pitches, urgency-driven, competitive displacement", "canonId": "019dd956-5ec6-70f9-9fd8-fdbaaff39acf", "version": 1, "bodyDocId": "019df22a-2356-73eb-8061-d8c81dc0aa49", "structure": "Problem (Identify pain) -> Agitate (Make it worse) -> Solution (Provide relief)", "description": null, "familyLabel": null }, "from": 15, "name": "Solution", "beatId": "2473b956-4123-4eb2-a1a6-cc81159dff24", "matchId": "a20f9e35-108f-42d1-b072-600aef38185c", "beatType": { "name": "Solution (Provide relief)", "slug": "problem-agitate-solution-solution-provide-relief", "status": "active", "canonId": "019dd9b8-0fee-73e9-9ae5-799c7f3895cd", "version": 1, "description": null }, "evidence": "Slides 15-24 provide relief by introducing TrackerIQ's ADR capabilities and value proposition.", "position": 2, "isPrimaryArc": true, "parentBeatType": { "name": "Resolution", "slug": "resolution", "status": "active", "canonId": "019dd9b8-045d-703b-8dd7-e92aba3ba91b", "version": 1, "description": "How the deck ends. Required in 19/20 arcs. The exception (Sparkline) ends with new bliss which is functionally a resolution." }, "alignedBlockIds": null, "matchConfidence": 0.9 } ], "loops": [], "locked": true }, { "page": 16, "type": "setup", "title": "The slide uses a maturity model framework to position the company's 3rd generation technology against legacy approaches.", "function": "compare_peers", "rawType": "comparison_table", "block": null, "metadata": { "slideType": "comparison_table", "slideTypeCanon": { "name": "Comparison table", "slug": "comparison_table", "status": "active", "canonId": "019de52d-0a06-73f8-8813-fe022fab1de2", "version": 1, "description": null }, "function": "compare_peers", "functionCanon": { "name": "Compare peers", "slug": "compare_peers", "status": "active", "canonId": "019de52d-1453-72ba-a367-9ba3d34c1630", "version": 1, "description": null }, "density": "balanced", "densityScore": 25, "componentCount": 3, "textChars": 297, "nDataPoints": 0, "notes": "The slide uses a maturity model framework to position the company's 3rd generation technology against legacy approaches.", "elementsJson": [ "action_title", "comparison_table" ], "confidence": 1, "extraction": { "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "at": "2026-05-02 16:34:51.462+00", "seconds": 5.726, "promptVersion": "v2-canon-conditioned" } }, "links": { "slide": "/slides/019dd923-5f69-752d-a9b7-1a6457da629a/16", "deck": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a", "deckAnchor": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a#slide-16", "deckJson": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a.json" }, "components": [ { "bbox": null, "kind": "framework", "text": "Maturity model showing evolution from Rules to Volumetric Analysis to Activity Flow Based Anomaly Detection.", "attrs": null, "canon": { "kind": { "name": "Framework", "slug": "framework", "status": "active", "canonId": "019de52c-fa18-77c6-b10a-ccb8277ac0fa", "version": 1, "description": "Named conceptual framework instance." }, "tool": null, "subkind": { "name": "Framework instance", "slug": "instance", "status": "active", "canonId": "019de52d-05a2-72af-be0b-7edc60708a03", "version": 1, "description": null }, "framework": null }, "subkind": "instance", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:51.462+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "dd94ff10-9b4d-4aa4-913c-7201fce941d3", "parentComponentId": null }, { "bbox": { "h": 0.55, "w": 0.84, "x": 0.08, "y": 0.33 }, "kind": "table", "text": "Comparison matrix of 1st, 2nd, and 3rd generation security detection methods across Network, End points, Authentication, and SaaS Applications.", "attrs": null, "canon": { "kind": { "name": "Table", "slug": "table", "status": "active", "canonId": "019de52c-f9c8-7148-8119-eaac9594cd28", "version": 1, "description": "Tabular data layout." }, "tool": null, "subkind": { "name": "Data table", "slug": "data", "status": "active", "canonId": "019de52d-02d5-75b8-8abf-88e92bf63569", "version": 1, "description": null }, "framework": null }, "subkind": "data", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:51.462+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "1d96f7e0-4c5f-4c8b-8dc2-1b36df26b0f6", "parentComponentId": null }, { "bbox": { "h": 0.05, "w": 0.63, "x": 0.068, "y": 0.195 }, "kind": "title", "text": "Better Context Enables More Accurate Detection", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:51.462+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "6b888f50-966f-49b8-956c-497789365f6c", "parentComponentId": null } ], "metrics": [], "tools": [ { "tool": { "name": "Maturity model", "slug": "maturity-model", "status": "active", "bestFor": null, "canonId": "019de52d-1923-75fc-9be0-131883ed3458", "version": 1, "bodyDocId": null, "description": null, "familyLabel": null, "categoryName": null, "categorySlug": null }, "agent": null, "layer": "slide", "agents": null, "matchId": "28643096-f520-423e-ab24-4ff92955d4f2", "evidence": "The slide includes a maturity model showing evolution from Rules to Volumetric Analysis to Activity Flow Based Anomaly Detection.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 0.7, "extraction": { "at": "2026-07-16 22:25:17.650188+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 16, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null } ], "frameworks": [ { "matchId": "5f5f4f62-47e0-414b-8ac9-5fc5ea47abf2", "evidence": "The slide explicitly categorizes security detection into 1st, 2nd, and 3rd generations, implying a progression of capability.", "framework": null, "confidence": 0.9, "extraction": { "at": "2026-05-02 16:34:51.462+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 16, "frameworkName": "maturity-model" } ], "arcBeats": [ { "to": 24, "arc": { "name": "Problem-Agitate-Solution", "slug": "problem-agitate-solution", "status": "active", "bestFor": "Sales pitches, urgency-driven, competitive displacement", "canonId": "019dd956-5ec6-70f9-9fd8-fdbaaff39acf", "version": 1, "bodyDocId": "019df22a-2356-73eb-8061-d8c81dc0aa49", "structure": "Problem (Identify pain) -> Agitate (Make it worse) -> Solution (Provide relief)", "description": null, "familyLabel": null }, "from": 15, "name": "Solution", "beatId": "2473b956-4123-4eb2-a1a6-cc81159dff24", "matchId": "a20f9e35-108f-42d1-b072-600aef38185c", "beatType": { "name": "Solution (Provide relief)", "slug": "problem-agitate-solution-solution-provide-relief", "status": "active", "canonId": "019dd9b8-0fee-73e9-9ae5-799c7f3895cd", "version": 1, "description": null }, "evidence": "Slides 15-24 provide relief by introducing TrackerIQ's ADR capabilities and value proposition.", "position": 2, "isPrimaryArc": true, "parentBeatType": { "name": "Resolution", "slug": "resolution", "status": "active", "canonId": "019dd9b8-045d-703b-8dd7-e92aba3ba91b", "version": 1, "description": "How the deck ends. Required in 19/20 arcs. The exception (Sparkline) ends with new bliss which is functionally a resolution." }, "alignedBlockIds": null, "matchConfidence": 0.9 } ], "loops": [], "locked": true }, { "page": 17, "type": "setup", "title": "Uses a visual metaphor of a shopper's path in a grocery store to explain 'Activity Flow Analytics'.", "function": "present_solution", "rawType": "analogy", "block": null, "metadata": { "slideType": "analogy", "slideTypeCanon": { "name": "Analogy", "slug": "analogy", "status": "active", "canonId": "019de52d-106d-73f9-b0a3-915949efd0b0", "version": 1, "description": null }, "function": "present_solution", "functionCanon": { "name": "Present solution", "slug": "present_solution", "status": "active", "canonId": "019de52d-15b8-71da-bd23-2b767850cbce", "version": 1, "description": null }, "density": "balanced", "densityScore": 27, "componentCount": 4, "textChars": 196, "nDataPoints": 0, "notes": "Uses a visual metaphor of a shopper's path in a grocery store to explain 'Activity Flow Analytics'.", "elementsJson": [ "headline_text", "action_title", "photo" ], "confidence": 1, "extraction": { "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "at": "2026-05-02 16:34:48.778+00", "seconds": 2.386, "promptVersion": "v2-canon-conditioned" } }, "links": { "slide": "/slides/019dd923-5f69-752d-a9b7-1a6457da629a/17", "deck": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a", "deckAnchor": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a#slide-17", "deckJson": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a.json" }, "components": [ { "bbox": null, "kind": "callout", "text": "It’s about the journey, not only the outcome...", "attrs": null, "canon": { "kind": { "name": "Callout", "slug": "callout", "status": "active", "canonId": "019de52c-f8d3-761a-8953-7d37080de5e2", "version": 1, "description": "Highlighted callout box." }, "tool": { "name": "Visual emphasis", "slug": "visual-emphasis", "status": "active", "bestFor": null, "canonId": "019dd9e1-474b-736b-a8eb-a794dd88241c", "version": 1, "bodyDocId": null, "description": "Drawing the eye to one element above the rest of the slide.", "familyLabel": null }, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-04-27 14:42:14+00", "model": "or:google/gemini-3.1-flash-lite-preview", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "019dd952-a28a-716a-b4ae-5753919e1422", "parentComponentId": null }, { "bbox": { "h": 0.46, "w": 0.46, "x": 0.49, "y": 0.38 }, "kind": "image", "text": "Grocery store overhead view with path arrows", "attrs": null, "canon": { "kind": { "name": "Image", "slug": "image", "status": "active", "canonId": "019de52c-f978-701f-a720-51d029d769e7", "version": 1, "description": "Photo, illustration, screenshot or icon." }, "tool": null, "subkind": { "name": "Illustration", "slug": "illustration", "status": "active", "canonId": "019de52c-fe76-7772-a5ac-c0b7294d7615", "version": 1, "description": null }, "framework": null }, "subkind": "illustration", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:48.778+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "20a9d61f-f239-42e4-a8c8-e63fda42526a", "parentComponentId": null }, { "bbox": { "h": 0.15, "w": 0.3, "x": 0.12, "y": 0.48 }, "kind": "title", "text": "It's about the journey, not only the outcome...", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Action title", "slug": "action-title", "status": "active", "canonId": "019de52c-fb31-734c-a0f5-a3935b73135d", "version": 1, "description": null }, "framework": null }, "subkind": "action-title", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:48.778+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "55b5ba73-ad88-42e8-8652-5017b0b01c16", "parentComponentId": null }, { "bbox": { "h": 0.05, "w": 0.6, "x": 0.07, "y": 0.2 }, "kind": "title", "text": "Activity Flow Analytics – Greater Accuracy through Context", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:48.778+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "4c337d2f-86c6-4520-b735-708473d84ea2", "parentComponentId": null } ], "metrics": [], "tools": [], "frameworks": [ { "matchId": "163f196f-7047-4d42-a50a-2b8eab0c23ec", "evidence": "Uses a grocery store shopper journey to explain software analytics", "framework": null, "confidence": 1, "extraction": { "at": "2026-05-02 16:34:48.778+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 17, "frameworkName": "metaphor-analogy" } ], "arcBeats": [ { "to": 24, "arc": { "name": "Problem-Agitate-Solution", "slug": "problem-agitate-solution", "status": "active", "bestFor": "Sales pitches, urgency-driven, competitive displacement", "canonId": "019dd956-5ec6-70f9-9fd8-fdbaaff39acf", "version": 1, "bodyDocId": "019df22a-2356-73eb-8061-d8c81dc0aa49", "structure": "Problem (Identify pain) -> Agitate (Make it worse) -> Solution (Provide relief)", "description": null, "familyLabel": null }, "from": 15, "name": "Solution", "beatId": "2473b956-4123-4eb2-a1a6-cc81159dff24", "matchId": "a20f9e35-108f-42d1-b072-600aef38185c", "beatType": { "name": "Solution (Provide relief)", "slug": "problem-agitate-solution-solution-provide-relief", "status": "active", "canonId": "019dd9b8-0fee-73e9-9ae5-799c7f3895cd", "version": 1, "description": null }, "evidence": "Slides 15-24 provide relief by introducing TrackerIQ's ADR capabilities and value proposition.", "position": 2, "isPrimaryArc": true, "parentBeatType": { "name": "Resolution", "slug": "resolution", "status": "active", "canonId": "019dd9b8-045d-703b-8dd7-e92aba3ba91b", "version": 1, "description": "How the deck ends. Required in 19/20 arcs. The exception (Sparkline) ends with new bliss which is functionally a resolution." }, "alignedBlockIds": null, "matchConfidence": 0.9 } ], "loops": [], "locked": true }, { "page": 18, "type": "resolution", "title": "The model is described as 'agnostic to the activity's meaning', emphasizing behavioral pattern analysis over content analysis.", "function": "present_framework", "rawType": "solution", "block": null, "metadata": { "slideType": "solution", "slideTypeCanon": { "name": "Solution", "slug": "solution", "status": "active", "canonId": "019de52d-0eb5-72ff-8b70-ba70a4199282", "version": 1, "description": null }, "function": "present_framework", "functionCanon": { "name": "Present framework", "slug": "present_framework", "status": "active", "canonId": "019de52d-1403-7667-9100-d2ac6709f750", "version": 1, "description": null }, "density": "dense", "densityScore": 61, "componentCount": 6, "textChars": 353, "nDataPoints": 14, "notes": "The model is described as 'agnostic to the activity's meaning', emphasizing behavioral pattern analysis over content analysis.", "elementsJson": [ "headline_text", "process_diagram", "callout_box" ], "confidence": 1, "extraction": { "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "at": "2026-05-02 16:34:53.307+00", "seconds": 6.894, "promptVersion": "v2-canon-conditioned" } }, "links": { "slide": "/slides/019dd923-5f69-752d-a9b7-1a6457da629a/18", "deck": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a", "deckAnchor": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a#slide-18", "deckJson": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a.json" }, "components": [ { "bbox": { "h": 0.15, "w": 0.2, "x": 0.06, "y": 0.5 }, "kind": "callout", "text": "TrackerIQ's user journey model is agnostic to the activity's meaning", "attrs": null, "canon": { "kind": { "name": "Callout", "slug": "callout", "status": "active", "canonId": "019de52c-f8d3-761a-8953-7d37080de5e2", "version": 1, "description": "Highlighted callout box." }, "tool": null, "subkind": { "name": "Primary callout", "slug": "primary", "status": "active", "canonId": "019de52c-fbd1-70eb-a9ce-8997f8674c1d", "version": 1, "description": null }, "framework": null }, "subkind": "primary", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:53.307+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "b62f7c12-a6bd-4d90-b602-ce2c4500d169", "parentComponentId": null }, { "bbox": { "h": 0.5, "w": 0.1, "x": 0.29, "y": 0.3 }, "kind": "diagram", "text": "4 -> 1 -> 7 -> 3 -> 9", "attrs": null, "canon": { "kind": { "name": "Diagram", "slug": "diagram", "status": "active", "canonId": "019de52c-f9f0-734a-81de-15382ff28c65", "version": 1, "description": "Schematic or relational diagram." }, "tool": null, "subkind": { "name": "Process flow", "slug": "process", "status": "active", "canonId": "019de52d-039c-718f-ad3a-efe9c4b3c838", "version": 1, "description": null }, "framework": null }, "subkind": "process", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:53.307+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "d42cdee7-90fa-4e34-ac11-ec45ee3989e9", "parentComponentId": null }, { "bbox": { "h": 0.15, "w": 0.5, "x": 0.45, "y": 0.65 }, "kind": "list", "text": "The time intervals between the operations: 4->1 (2 ms), 1->7 (5 ms), 7->3 (1 ms), 3->9 (3 ms)", "attrs": null, "canon": { "kind": { "name": "List", "slug": "list", "status": "active", "canonId": "019de52c-f94b-779b-a53b-fd4904a5f4d2", "version": 1, "description": "Bullet or numbered list." }, "tool": null, "subkind": { "name": "Bullet list", "slug": "bullet", "status": "active", "canonId": "019de52c-fc98-7169-a083-5cab805076ca", "version": 1, "description": null }, "framework": null }, "subkind": "bullet", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:53.307+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "673c8eef-269e-4bc3-b41b-11c92ef4bd86", "parentComponentId": null }, { "bbox": { "h": 0.1, "w": 0.5, "x": 0.45, "y": 0.36 }, "kind": "list", "text": "The operations performed by the User/Entity: 1, 3, 4, 7, 9", "attrs": null, "canon": { "kind": { "name": "List", "slug": "list", "status": "active", "canonId": "019de52c-f94b-779b-a53b-fd4904a5f4d2", "version": 1, "description": "Bullet or numbered list." }, "tool": null, "subkind": { "name": "Bullet list", "slug": "bullet", "status": "active", "canonId": "019de52c-fc98-7169-a083-5cab805076ca", "version": 1, "description": null }, "framework": null }, "subkind": "bullet", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:53.307+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "8ea471d8-44b1-4400-bd5b-b93c5e47cf0a", "parentComponentId": null }, { "bbox": { "h": 0.1, "w": 0.5, "x": 0.45, "y": 0.5 }, "kind": "list", "text": "The order in which the operations are performed: 4 -> 1 -> 7 -> 3 -> 9", "attrs": null, "canon": { "kind": { "name": "List", "slug": "list", "status": "active", "canonId": "019de52c-f94b-779b-a53b-fd4904a5f4d2", "version": 1, "description": "Bullet or numbered list." }, "tool": null, "subkind": { "name": "Bullet list", "slug": "bullet", "status": "active", "canonId": "019de52c-fc98-7169-a083-5cab805076ca", "version": 1, "description": null }, "framework": null }, "subkind": "bullet", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:53.307+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "b1195aee-5474-4968-9979-4af34fe10560", "parentComponentId": null }, { "bbox": { "h": 0.05, "w": 0.6, "x": 0.07, "y": 0.19 }, "kind": "title", "text": "The TrackerIQ Ubiquitous User Journey Model", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:53.307+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "a11cd660-11a9-4ebb-8fa5-9a314c6da552", "parentComponentId": null } ], "metrics": [], "tools": [], "frameworks": [ { "matchId": "eaa7215f-9aea-45d5-b99b-0d044b4c4582", "evidence": "The slide explicitly defines a 'Ubiquitous User Journey Model' based on behavioral sequences.", "framework": null, "confidence": 0.8, "extraction": { "at": "2026-05-02 16:34:53.307+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 18, "frameworkName": "customer-journey-map" } ], "arcBeats": [ { "to": 24, "arc": { "name": "Problem-Agitate-Solution", "slug": "problem-agitate-solution", "status": "active", "bestFor": "Sales pitches, urgency-driven, competitive displacement", "canonId": "019dd956-5ec6-70f9-9fd8-fdbaaff39acf", "version": 1, "bodyDocId": "019df22a-2356-73eb-8061-d8c81dc0aa49", "structure": "Problem (Identify pain) -> Agitate (Make it worse) -> Solution (Provide relief)", "description": null, "familyLabel": null }, "from": 15, "name": "Solution", "beatId": "2473b956-4123-4eb2-a1a6-cc81159dff24", "matchId": "a20f9e35-108f-42d1-b072-600aef38185c", "beatType": { "name": "Solution (Provide relief)", "slug": "problem-agitate-solution-solution-provide-relief", "status": "active", "canonId": "019dd9b8-0fee-73e9-9ae5-799c7f3895cd", "version": 1, "description": null }, "evidence": "Slides 15-24 provide relief by introducing TrackerIQ's ADR capabilities and value proposition.", "position": 2, "isPrimaryArc": true, "parentBeatType": { "name": "Resolution", "slug": "resolution", "status": "active", "canonId": "019dd9b8-045d-703b-8dd7-e92aba3ba91b", "version": 1, "description": "How the deck ends. Required in 19/20 arcs. The exception (Sparkline) ends with new bliss which is functionally a resolution." }, "alignedBlockIds": null, "matchConfidence": 0.9 } ], "loops": [], "locked": true }, { "page": 19, "type": "tension", "title": "The slide uses a visual metaphor to illustrate the challenge of detecting malicious behavior within standard user workflows.", "function": "frame_problem", "rawType": "problem_statement", "block": null, "metadata": { "slideType": "problem_statement", "slideTypeCanon": { "name": "Problem statement", "slug": "problem_statement", "status": "active", "canonId": "019de52d-0879-768d-bba8-8da8a5a121d4", "version": 1, "description": null }, "function": "frame_problem", "functionCanon": { "name": "Frame problem", "slug": "frame_problem", "status": "active", "canonId": "019de52d-13db-753e-ad70-e9b2d0dab398", "version": 1, "description": null }, "density": "sparse", "densityScore": 16, "componentCount": 3, "textChars": 150, "nDataPoints": 0, "notes": "The slide uses a visual metaphor to illustrate the challenge of detecting malicious behavior within standard user workflows.", "elementsJson": [ "process_diagram" ], "confidence": 0.95, "extraction": { "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "at": "2026-05-02 16:34:58.473+00", "seconds": 11.892, "promptVersion": "v2-canon-conditioned" } }, "links": { "slide": "/slides/019dd923-5f69-752d-a9b7-1a6457da629a/19", "deck": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a", "deckAnchor": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a#slide-19", "deckJson": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a.json" }, "components": [ { "bbox": { "h": 0.48, "w": 0.58, "x": 0.21, "y": 0.35 }, "kind": "diagram", "text": "Visual representation of 12 user journeys (A-L) as vertical sequences of numbered steps.", "attrs": null, "canon": { "kind": { "name": "Diagram", "slug": "diagram", "status": "active", "canonId": "019de52c-f9f0-734a-81de-15382ff28c65", "version": 1, "description": "Schematic or relational diagram." }, "tool": null, "subkind": { "name": "Process flow", "slug": "process", "status": "active", "canonId": "019de52d-039c-718f-ad3a-efe9c4b3c838", "version": 1, "description": null }, "framework": null }, "subkind": "process", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:58.473+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "78d18a35-070f-4a73-95da-bf902f9e6aae", "parentComponentId": null }, { "bbox": { "h": 0.03, "w": 0.3, "x": 0.35, "y": 0.88 }, "kind": "paragraph", "text": "User journeys per application", "attrs": null, "canon": { "kind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "5f2affc0-941d-4d07-959d-4bfc1930cea4", "version": 1, "description": "Single prose block in the body of a slide." }, "tool": null, "subkind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "019de52c-fb80-75af-aa5c-a7a4bfac2433", "version": 1, "description": null }, "framework": null }, "subkind": "paragraph", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:58.473+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "49280379-550d-4ae6-bac8-4a12de6e8a60", "parentComponentId": null }, { "bbox": { "h": 0.05, "w": 0.45, "x": 0.07, "y": 0.19 }, "kind": "title", "text": "Which User Journey is an Anomaly?", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:58.473+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "67b1d592-ec6f-4ab0-9ba5-b27d49b922b3", "parentComponentId": null } ], "metrics": [], "tools": [ { "tool": { "name": "Problem Statement Canvas", "slug": "problem-statement-canvas", "status": "active", "bestFor": null, "canonId": "019dd956-839d-744b-ad11-9bf3e3642a18", "version": 1, "bodyDocId": null, "description": "Structured definition of the problem: What? Who? Where? When? Scale?", "familyLabel": null, "categoryName": "Block", "categorySlug": "block" }, "agent": "Architect", "layer": "slide", "agents": [ "Architect" ], "matchId": "503757aa-bbb8-4d12-9406-00f4a25c9c20", "evidence": "Visual representation of 12 user journeys (A-L) as vertical sequences of numbered steps.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 0.7, "extraction": { "at": "2026-07-16 22:25:24.911245+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 19, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null } ], "frameworks": [ { "matchId": "2de55a4c-f9fe-4e64-87e7-b0b16f5a8fb1", "evidence": "Uses a visual puzzle to represent the abstract problem of anomaly detection.", "framework": null, "confidence": 0.9, "extraction": { "at": "2026-05-02 16:34:58.473+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 19, "frameworkName": "metaphor-analogy" } ], "arcBeats": [ { "to": 24, "arc": { "name": "Problem-Agitate-Solution", "slug": "problem-agitate-solution", "status": "active", "bestFor": "Sales pitches, urgency-driven, competitive displacement", "canonId": "019dd956-5ec6-70f9-9fd8-fdbaaff39acf", "version": 1, "bodyDocId": "019df22a-2356-73eb-8061-d8c81dc0aa49", "structure": "Problem (Identify pain) -> Agitate (Make it worse) -> Solution (Provide relief)", "description": null, "familyLabel": null }, "from": 15, "name": "Solution", "beatId": "2473b956-4123-4eb2-a1a6-cc81159dff24", "matchId": "a20f9e35-108f-42d1-b072-600aef38185c", "beatType": { "name": "Solution (Provide relief)", "slug": "problem-agitate-solution-solution-provide-relief", "status": "active", "canonId": "019dd9b8-0fee-73e9-9ae5-799c7f3895cd", "version": 1, "description": null }, "evidence": "Slides 15-24 provide relief by introducing TrackerIQ's ADR capabilities and value proposition.", "position": 2, "isPrimaryArc": true, "parentBeatType": { "name": "Resolution", "slug": "resolution", "status": "active", "canonId": "019dd9b8-045d-703b-8dd7-e92aba3ba91b", "version": 1, "description": "How the deck ends. Required in 19/20 arcs. The exception (Sparkline) ends with new bliss which is functionally a resolution." }, "alignedBlockIds": null, "matchConfidence": 0.9 } ], "loops": [], "locked": true }, { "page": 20, "type": "resolution", "title": "The diagram is a network graph showing clusters of data points.", "function": "present_solution", "rawType": "solution", "block": null, "metadata": { "slideType": "solution", "slideTypeCanon": { "name": "Solution", "slug": "solution", "status": "active", "canonId": "019de52d-0eb5-72ff-8b70-ba70a4199282", "version": 1, "description": null }, "function": "present_solution", "functionCanon": { "name": "Present solution", "slug": "present_solution", "status": "active", "canonId": "019de52d-15b8-71da-bd23-2b767850cbce", "version": 1, "description": null }, "density": "sparse", "densityScore": 24, "componentCount": 3, "textChars": 273, "nDataPoints": 0, "notes": "The diagram is a network graph showing clusters of data points.", "elementsJson": [ "headline_text", "bullet_list", "other" ], "confidence": 1, "extraction": { "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "at": "2026-05-02 16:34:49.024+00", "seconds": 2.356, "promptVersion": "v2-canon-conditioned" } }, "links": { "slide": "/slides/019dd923-5f69-752d-a9b7-1a6457da629a/20", "deck": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a", "deckAnchor": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a#slide-20", "deckJson": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a.json" }, "components": [ { "bbox": { "h": 0.6, "w": 0.35, "x": 0.58, "y": 0.25 }, "kind": "image", "text": "Network graph visualization of clustered user journeys", "attrs": null, "canon": { "kind": { "name": "Image", "slug": "image", "status": "active", "canonId": "019de52c-f978-701f-a720-51d029d769e7", "version": 1, "description": "Photo, illustration, screenshot or icon." }, "tool": null, "subkind": { "name": "Illustration", "slug": "illustration", "status": "active", "canonId": "019de52c-fe76-7772-a5ac-c0b7294d7615", "version": 1, "description": null }, "framework": null }, "subkind": "illustration", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:49.024+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "99d4b030-8af9-4766-b635-998382f11566", "parentComponentId": null }, { "bbox": { "h": 0.3, "w": 0.45, "x": 0.07, "y": 0.33 }, "kind": "list", "text": "\"Learns\" multiple user journey profiles per user/cohort\nAccurately groups large volumes of user journeys based on their similarities\nAutomatically remove outliers", "attrs": null, "canon": { "kind": { "name": "List", "slug": "list", "status": "active", "canonId": "019de52c-f94b-779b-a53b-fd4904a5f4d2", "version": 1, "description": "Bullet or numbered list." }, "tool": null, "subkind": { "name": "Bullet list", "slug": "bullet", "status": "active", "canonId": "019de52c-fc98-7169-a083-5cab805076ca", "version": 1, "description": null }, "framework": null }, "subkind": "bullet", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:49.024+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "4beed1bb-431a-4152-a395-fa5553acb5f5", "parentComponentId": null }, { "bbox": { "h": 0.05, "w": 0.75, "x": 0.07, "y": 0.195 }, "kind": "title", "text": "TrackerIQ's Patent Pending User Journey Clustering Engine", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:49.024+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "efd3af78-97a7-4f44-8561-2cd0f4290846", "parentComponentId": null } ], "metrics": [], "tools": [ { "tool": { "name": "Canvas framework", "slug": "canvas-framework", "status": "active", "bestFor": null, "canonId": "019dd9e1-5005-762c-82f8-265b08436ca1", "version": 1, "bodyDocId": null, "description": "Named canvas (business model canvas, value prop canvas, etc.).", "familyLabel": null, "categoryName": null, "categorySlug": null }, "agent": null, "layer": "slide", "agents": null, "matchId": "cf1b0e7e-5815-4299-bf0c-e2c061b269dd", "evidence": "Network graph visualization of clustered user journeys", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 0.7, "extraction": { "at": "2026-07-16 22:25:24.977244+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 20, "whyItWorks": null, "antipattern": null, "cardinality": "optional", "narrativePurpose": null } ], "frameworks": [], "arcBeats": [ { "to": 24, "arc": { "name": "Problem-Agitate-Solution", "slug": "problem-agitate-solution", "status": "active", "bestFor": "Sales pitches, urgency-driven, competitive displacement", "canonId": "019dd956-5ec6-70f9-9fd8-fdbaaff39acf", "version": 1, "bodyDocId": "019df22a-2356-73eb-8061-d8c81dc0aa49", "structure": "Problem (Identify pain) -> Agitate (Make it worse) -> Solution (Provide relief)", "description": null, "familyLabel": null }, "from": 15, "name": "Solution", "beatId": "2473b956-4123-4eb2-a1a6-cc81159dff24", "matchId": "a20f9e35-108f-42d1-b072-600aef38185c", "beatType": { "name": "Solution (Provide relief)", "slug": "problem-agitate-solution-solution-provide-relief", "status": "active", "canonId": "019dd9b8-0fee-73e9-9ae5-799c7f3895cd", "version": 1, "description": null }, "evidence": "Slides 15-24 provide relief by introducing TrackerIQ's ADR capabilities and value proposition.", "position": 2, "isPrimaryArc": true, "parentBeatType": { "name": "Resolution", "slug": "resolution", "status": "active", "canonId": "019dd9b8-045d-703b-8dd7-e92aba3ba91b", "version": 1, "description": "How the deck ends. Required in 19/20 arcs. The exception (Sparkline) ends with new bliss which is functionally a resolution." }, "alignedBlockIds": null, "matchConfidence": 0.9 } ], "loops": [], "locked": true }, { "page": 21, "type": "resolution", "title": "Uses a visual representation of sequential user actions (A, B, C, etc.) mapped to numerical steps to demonstrate pattern recognition.", "function": "present_solution", "rawType": "solution", "block": null, "metadata": { "slideType": "solution", "slideTypeCanon": { "name": "Solution", "slug": "solution", "status": "active", "canonId": "019de52d-0eb5-72ff-8b70-ba70a4199282", "version": 1, "description": null }, "function": "present_solution", "functionCanon": { "name": "Present solution", "slug": "present_solution", "status": "active", "canonId": "019de52d-15b8-71da-bd23-2b767850cbce", "version": 1, "description": null }, "density": "balanced", "densityScore": 42, "componentCount": 5, "textChars": 307, "nDataPoints": 0, "notes": "Uses a visual representation of sequential user actions (A, B, C, etc.) mapped to numerical steps to demonstrate pattern recognition.", "elementsJson": [ "process_diagram", "icon_grid" ], "confidence": 1, "extraction": { "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "at": "2026-05-02 16:34:49.71+00", "seconds": 2.707, "promptVersion": "v2-canon-conditioned" } }, "links": { "slide": "/slides/019dd923-5f69-752d-a9b7-1a6457da629a/21", "deck": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a", "deckAnchor": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a#slide-21", "deckJson": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a.json" }, "components": [ { "bbox": null, "kind": "callout", "text": "TrackerIQ detects anomalous user journeys which deviate from the user's profiles", "attrs": null, "canon": { "kind": { "name": "Callout", "slug": "callout", "status": "active", "canonId": "019de52c-f8d3-761a-8953-7d37080de5e2", "version": 1, "description": "Highlighted callout box." }, "tool": { "name": "Visual emphasis", "slug": "visual-emphasis", "status": "active", "bestFor": null, "canonId": "019dd9e1-474b-736b-a8eb-a794dd88241c", "version": 1, "bodyDocId": null, "description": "Drawing the eye to one element above the rest of the slide.", "familyLabel": null }, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-04-27 14:42:15+00", "model": "or:google/gemini-3.1-flash-lite-preview", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "019dd952-a28a-716a-b4af-8e02dbd6fbef", "parentComponentId": null }, { "bbox": { "h": 0.5, "w": 0.84, "x": 0.08, "y": 0.3 }, "kind": "diagram", "text": "User Flow Profiles 1-3 and Anomalous Session comparison", "attrs": null, "canon": { "kind": { "name": "Diagram", "slug": "diagram", "status": "active", "canonId": "019de52c-f9f0-734a-81de-15382ff28c65", "version": 1, "description": "Schematic or relational diagram." }, "tool": null, "subkind": { "name": "Process flow", "slug": "process", "status": "active", "canonId": "019de52d-039c-718f-ad3a-efe9c4b3c838", "version": 1, "description": null }, "framework": null }, "subkind": "process", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:49.71+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "aa9dfb46-4bb9-42f8-aaf7-4d8dacf4772e", "parentComponentId": null }, { "bbox": { "h": 0.12, "w": 0.12, "x": 0.82, "y": 0.45 }, "kind": "image", "text": "Peer Grouping", "attrs": null, "canon": { "kind": { "name": "Image", "slug": "image", "status": "active", "canonId": "019de52c-f978-701f-a720-51d029d769e7", "version": 1, "description": "Photo, illustration, screenshot or icon." }, "tool": null, "subkind": { "name": "Icon grid", "slug": "icon-grid", "status": "active", "canonId": "019de52c-fdfe-749d-9990-1db465a3eed4", "version": 1, "description": null }, "framework": null }, "subkind": "icon-grid", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:49.71+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "403aaef3-f65f-46bc-ba59-abebbc434171", "parentComponentId": null }, { "bbox": { "h": 0.08, "w": 0.4, "x": 0.14, "y": 0.84 }, "kind": "paragraph", "text": "TrackerIQ detects anomalous user journeys which deviate from the user's profiles", "attrs": null, "canon": { "kind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "5f2affc0-941d-4d07-959d-4bfc1930cea4", "version": 1, "description": "Single prose block in the body of a slide." }, "tool": null, "subkind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "019de52c-fb80-75af-aa5c-a7a4bfac2433", "version": 1, "description": null }, "framework": null }, "subkind": "paragraph", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:49.71+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "dbce0c0a-c643-44dc-95a4-c0c026197f0a", "parentComponentId": null }, { "bbox": { "h": 0.05, "w": 0.86, "x": 0.07, "y": 0.2 }, "kind": "title", "text": "Learned User Journey Profiles Enable Accurate Detection of an Anomalous Session", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:49.71+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "ed6309d7-7d1a-437d-9bef-7e99a9a61827", "parentComponentId": null } ], "metrics": [], "tools": [ { "tool": { "name": "Before-After-Bridge", "slug": "before-after-bridge", "status": "active", "bestFor": null, "canonId": "019dd956-8604-7188-883f-42370288ad05", "version": 1, "bodyDocId": null, "description": "Narrative structure: Paint the before, show the after, explain the bridge", "familyLabel": null, "categoryName": "Block", "categorySlug": "block" }, "agent": "Storyteller", "layer": "slide", "agents": [ "Storyteller" ], "matchId": "75515a5e-f5cf-4579-af23-8b8a0f60c50f", "evidence": "Learned User Journey Profiles Enable Accurate Detection of an Anomalous Session", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 0.6, "extraction": { "at": "2026-07-16 22:25:25.045267+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 21, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null } ], "frameworks": [ { "matchId": "ed27955b-c817-4d6f-b1e3-bcd0af9e634e", "evidence": "Visualizes user flow profiles as sequences of actions", "framework": null, "confidence": 0.8, "extraction": { "at": "2026-05-02 16:34:49.71+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 21, "frameworkName": "customer-journey-map" } ], "arcBeats": [ { "to": 24, "arc": { "name": "Problem-Agitate-Solution", "slug": "problem-agitate-solution", "status": "active", "bestFor": "Sales pitches, urgency-driven, competitive displacement", "canonId": "019dd956-5ec6-70f9-9fd8-fdbaaff39acf", "version": 1, "bodyDocId": "019df22a-2356-73eb-8061-d8c81dc0aa49", "structure": "Problem (Identify pain) -> Agitate (Make it worse) -> Solution (Provide relief)", "description": null, "familyLabel": null }, "from": 15, "name": "Solution", "beatId": "2473b956-4123-4eb2-a1a6-cc81159dff24", "matchId": "a20f9e35-108f-42d1-b072-600aef38185c", "beatType": { "name": "Solution (Provide relief)", "slug": "problem-agitate-solution-solution-provide-relief", "status": "active", "canonId": "019dd9b8-0fee-73e9-9ae5-799c7f3895cd", "version": 1, "description": null }, "evidence": "Slides 15-24 provide relief by introducing TrackerIQ's ADR capabilities and value proposition.", "position": 2, "isPrimaryArc": true, "parentBeatType": { "name": "Resolution", "slug": "resolution", "status": "active", "canonId": "019dd9b8-045d-703b-8dd7-e92aba3ba91b", "version": 1, "description": "How the deck ends. Required in 19/20 arcs. The exception (Sparkline) ends with new bliss which is functionally a resolution." }, "alignedBlockIds": null, "matchConfidence": 0.9 } ], "loops": [], "locked": true }, { "page": 22, "type": "resolution", "title": "The slide uses a visual representation of user activity sequences (A-L) mapped to numerical sensitivity scores, highlighting how specific activities (orange cir", "function": "present_solution", "rawType": "solution", "block": null, "metadata": { "slideType": "solution", "slideTypeCanon": { "name": "Solution", "slug": "solution", "status": "active", "canonId": "019de52d-0eb5-72ff-8b70-ba70a4199282", "version": 1, "description": null }, "function": "present_solution", "functionCanon": { "name": "Present solution", "slug": "present_solution", "status": "active", "canonId": "019de52d-15b8-71da-bd23-2b767850cbce", "version": 1, "description": null }, "density": "dense", "densityScore": 50, "componentCount": 5, "textChars": 278, "nDataPoints": 48, "notes": "The slide uses a visual representation of user activity sequences (A-L) mapped to numerical sensitivity scores, highlighting how specific activities (orange circles) contribute to the overall risk score.", "elementsJson": [ "headline_text", "icon_grid", "callout_box", "paragraph" ], "confidence": 1, "extraction": { "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "at": "2026-05-02 16:34:49.829+00", "seconds": 2.788, "promptVersion": "v2-canon-conditioned" } }, "links": { "slide": "/slides/019dd923-5f69-752d-a9b7-1a6457da629a/22", "deck": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a", "deckAnchor": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a#slide-22", "deckJson": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a.json" }, "components": [ { "bbox": { "h": 0.06, "w": 0.2, "x": 0.78, "y": 0.42 }, "kind": "callout", "text": "Sensitivity value can be assigned per activity", "attrs": null, "canon": { "kind": { "name": "Callout", "slug": "callout", "status": "active", "canonId": "019de52c-f8d3-761a-8953-7d37080de5e2", "version": 1, "description": "Highlighted callout box." }, "tool": null, "subkind": { "name": "Primary callout", "slug": "primary", "status": "active", "canonId": "019de52c-fbd1-70eb-a9ce-8997f8674c1d", "version": 1, "description": null }, "framework": null }, "subkind": "primary", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:49.829+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "0e250def-7e70-48f2-8c22-1880b7f0d93f", "parentComponentId": null }, { "bbox": { "h": 0.5, "w": 0.1, "x": 0.68, "y": 0.3 }, "kind": "chart", "text": "Anomalous session risk score calculation", "attrs": null, "canon": { "kind": { "name": "Chart", "slug": "chart", "status": "active", "canonId": "019de52c-f9a0-76ef-adc6-0b859109d1f8", "version": 1, "description": "Quantitative chart." }, "tool": null, "subkind": { "name": "Vertical bar chart", "slug": "bar-vertical", "status": "active", "canonId": "019de52c-fe9d-70f2-b3b7-a9ae294f5917", "version": 1, "description": null }, "framework": null }, "subkind": "bar-vertical", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:49.829+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "96b223b1-e23d-4530-ae03-83077f277025", "parentComponentId": null }, { "bbox": { "h": 0.5, "w": 0.58, "x": 0.06, "y": 0.3 }, "kind": "diagram", "text": "User Flow Profiles 1, 2, and 3 showing activity sequences with sensitivity scores", "attrs": null, "canon": { "kind": { "name": "Diagram", "slug": "diagram", "status": "active", "canonId": "019de52c-f9f0-734a-81de-15382ff28c65", "version": 1, "description": "Schematic or relational diagram." }, "tool": null, "subkind": { "name": "Process flow", "slug": "process", "status": "active", "canonId": "019de52d-039c-718f-ad3a-efe9c4b3c838", "version": 1, "description": null }, "framework": null }, "subkind": "process", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:49.829+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "8e17e64d-c179-47db-869f-ede59615de87", "parentComponentId": null }, { "bbox": { "h": 0.05, "w": 0.17, "x": 0.81, "y": 0.7 }, "kind": "paragraph", "text": "Risk score is computed according to the sensitivity of the activities performed", "attrs": null, "canon": { "kind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "5f2affc0-941d-4d07-959d-4bfc1930cea4", "version": 1, "description": "Single prose block in the body of a slide." }, "tool": null, "subkind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "019de52c-fb80-75af-aa5c-a7a4bfac2433", "version": 1, "description": null }, "framework": null }, "subkind": "paragraph", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:49.829+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "a5405d36-65bf-4544-8b6e-208fb9d4f5ff", "parentComponentId": null }, { "bbox": { "h": 0.03, "w": 0.38, "x": 0.07, "y": 0.205 }, "kind": "title", "text": "Risk Score per Anomalous Session", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:49.829+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "ce6dce3b-fdef-4032-a955-2e8622791612", "parentComponentId": null } ], "metrics": [], "tools": [ { "tool": { "name": "Waterfall chart", "slug": "waterfall-chart", "status": "active", "bestFor": null, "canonId": "e2799da3-725f-44a9-a093-570f1f388e64", "version": 1, "bodyDocId": null, "description": null, "familyLabel": null, "categoryName": null, "categorySlug": null }, "agent": null, "layer": "slide", "agents": null, "matchId": "3c2d3036-a6f3-44de-abdf-bc7e2d41805b", "evidence": "Risk score is computed according to the sensitivity of the activities performed", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 0.8, "extraction": { "at": "2026-07-16 22:25:25.11006+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 22, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null } ], "frameworks": [], "arcBeats": [ { "to": 24, "arc": { "name": "Problem-Agitate-Solution", "slug": "problem-agitate-solution", "status": "active", "bestFor": "Sales pitches, urgency-driven, competitive displacement", "canonId": "019dd956-5ec6-70f9-9fd8-fdbaaff39acf", "version": 1, "bodyDocId": "019df22a-2356-73eb-8061-d8c81dc0aa49", "structure": "Problem (Identify pain) -> Agitate (Make it worse) -> Solution (Provide relief)", "description": null, "familyLabel": null }, "from": 15, "name": "Solution", "beatId": "2473b956-4123-4eb2-a1a6-cc81159dff24", "matchId": "a20f9e35-108f-42d1-b072-600aef38185c", "beatType": { "name": "Solution (Provide relief)", "slug": "problem-agitate-solution-solution-provide-relief", "status": "active", "canonId": "019dd9b8-0fee-73e9-9ae5-799c7f3895cd", "version": 1, "description": null }, "evidence": "Slides 15-24 provide relief by introducing TrackerIQ's ADR capabilities and value proposition.", "position": 2, "isPrimaryArc": true, "parentBeatType": { "name": "Resolution", "slug": "resolution", "status": "active", "canonId": "019dd9b8-045d-703b-8dd7-e92aba3ba91b", "version": 1, "description": "How the deck ends. Required in 19/20 arcs. The exception (Sparkline) ends with new bliss which is functionally a resolution." }, "alignedBlockIds": null, "matchConfidence": 0.9 } ], "loops": [], "locked": true }, { "page": 23, "type": "setup", "function": "transition", "rawType": "section_divider", "block": null, "metadata": { "slideType": "section_divider", "slideTypeCanon": { "name": "Section divider", "slug": "section_divider", "status": "active", "canonId": "019de52d-066a-7402-9554-6ae504999041", "version": 1, "description": null }, "function": "transition", "functionCanon": { "name": "Transition", "slug": "transition", "status": "active", "canonId": "019de52d-1365-7149-92aa-66df859e75fd", "version": 1, "description": null }, "density": "balanced", "densityScore": 46, "componentCount": 5, "textChars": 293, "nDataPoints": 1, "notes": null, "elementsJson": [ "headline_text" ], "confidence": 1, "extraction": { "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "at": "2026-05-02 16:34:49.809+00", "seconds": 2.672, "promptVersion": "v2-canon-conditioned" } }, "links": { "slide": "/slides/019dd923-5f69-752d-a9b7-1a6457da629a/23", "deck": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a", "deckAnchor": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a#slide-23", "deckJson": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a.json" }, "components": [ { "bbox": null, "kind": "callout", "text": "Significantly reducing the meantime to respond by over 75% and improving operational efficiency", "attrs": null, "canon": { "kind": { "name": "Callout", "slug": "callout", "status": "active", "canonId": "019de52c-f8d3-761a-8953-7d37080de5e2", "version": 1, "description": "Highlighted callout box." }, "tool": { "name": "Visual emphasis", "slug": "visual-emphasis", "status": "active", "bestFor": null, "canonId": "019dd9e1-474b-736b-a8eb-a794dd88241c", "version": 1, "bodyDocId": null, "description": "Drawing the eye to one element above the rest of the slide.", "familyLabel": null }, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-04-27 14:42:15+00", "model": "or:google/gemini-3.1-flash-lite-preview", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "019dd952-a28a-716a-b4af-02d0ad1d33a5", "parentComponentId": null }, { "bbox": { "h": 0.035, "w": 0.195, "x": 0.073, "y": 0.938 }, "kind": "disclaimer", "text": "© June 2022, all rights reserved. Private and confidential", "attrs": null, "canon": { "kind": { "name": "Disclaimer", "slug": "disclaimer", "status": "active", "canonId": "91173477-d91f-4024-bbaf-d4f93e3f82dc", "version": 1, "description": "Legal/cautionary text that occupies most of the body of its slide." }, "tool": null, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:49.809+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "bac4ca35-b151-4ef2-8a16-f8f1c6b0cc20", "parentComponentId": null }, { "bbox": null, "kind": "metric", "text": "MTTR reduction: 75%", "attrs": null, "canon": { "kind": { "name": "Metric", "slug": "metric", "status": "active", "canonId": "019de52c-f923-73bf-8081-d0b1a8c5264d", "version": 1, "description": "Big-number or KPI value." }, "tool": { "name": "Quantification", "slug": "quantification", "status": "active", "bestFor": null, "canonId": "019dd9e1-47ab-72ce-a079-aab1f5299e88", "version": 1, "bodyDocId": null, "description": "Translating a claim into numbers, charts, or tables.", "familyLabel": null }, "subkind": null, "framework": null }, "subkind": "primary", "groupRole": null, "confidence": null, "extraction": { "at": "2026-04-27 14:42:15+00", "model": "or:google/gemini-3.1-flash-lite-preview", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "019dd952-a28a-716a-b4af-055d1c7202e0", "parentComponentId": null }, { "bbox": { "h": 0.1, "w": 0.495, "x": 0.102, "y": 0.55 }, "kind": "title", "text": "Significantly reducing the meantime to respond by over 75% and improving operational efficiency", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Action title", "slug": "action-title", "status": "active", "canonId": "019de52c-fb31-734c-a0f5-a3935b73135d", "version": 1, "description": null }, "framework": null }, "subkind": "action-title", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:49.809+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "b8ee69f8-395d-4609-b9bf-40f4daf20174", "parentComponentId": null }, { "bbox": { "h": 0.115, "w": 0.463, "x": 0.102, "y": 0.305 }, "kind": "title", "text": "Response and Investigation", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:49.809+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "7ac578a8-256b-4ef7-9b42-9944ba5f5fca", "parentComponentId": null } ], "metrics": [], "tools": [ { "tool": { "name": "Action Titles", "slug": "action-titles", "status": "active", "bestFor": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "canonId": "019dd956-ac70-700b-a608-ba58e78f5dcc", "version": 1, "bodyDocId": "816dad3c-9983-41c1-a86e-978ebd582841", "description": "The McKinsey-bred discipline of writing every slide title as a complete declarative sentence with a verb and an insight, not a topic label. Each title is a sub-claim that ladders up to the deck's governing thought; read in sequence, the titles reconstruct the executive summary.", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Architect", "layer": "slide", "agents": [ "Architect" ], "matchId": "7fd08fc0-31b4-422e-a2ac-796dcf525abd", "evidence": "Significantly reducing the meantime to respond by over 75% and improving operational efficiency", "pageRefs": null, "priority": "Core", "whenToUse": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "confidence": 0.9, "extraction": { "at": "2026-07-16 22:25:25.177201+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 23, "whyItWorks": "Solves two failure modes at once. (1) The buried claim: action titles place the conclusion on the page before any analysis is read, so a busy reader doesn't reverse-engineer it from the chart. (2) The spineless deck: because each title is a claim, slides have to ladder up to the governing thought; logical gaps become visible as topic-shaped titles in a sequence that no longer reads as a story.", "antipattern": "Topic labels disguised as titles — Volume by quarter, Key findings, Pricing strategy, Margins have been impacted. No verb, or a passive verb with no agent, or a fact (Revenue grew 12%) without the so-what. Also: titles that overreach the chart's evidence, multi-claim X-grew-but-Y-fell welded titles, and mechanical repetition of the same X-drove-Y template across the deck.", "cardinality": null, "narrativePurpose": "Forces the deck to carry its argument in the title bar so a senior reader can extract the recommendation without opening a single slide; converts a binder of topics into a navigable pyramid where every slide is a node defending the apex." } ], "frameworks": [], "arcBeats": [ { "to": 24, "arc": { "name": "Problem-Agitate-Solution", "slug": "problem-agitate-solution", "status": "active", "bestFor": "Sales pitches, urgency-driven, competitive displacement", "canonId": "019dd956-5ec6-70f9-9fd8-fdbaaff39acf", "version": 1, "bodyDocId": "019df22a-2356-73eb-8061-d8c81dc0aa49", "structure": "Problem (Identify pain) -> Agitate (Make it worse) -> Solution (Provide relief)", "description": null, "familyLabel": null }, "from": 15, "name": "Solution", "beatId": "2473b956-4123-4eb2-a1a6-cc81159dff24", "matchId": "a20f9e35-108f-42d1-b072-600aef38185c", "beatType": { "name": "Solution (Provide relief)", "slug": "problem-agitate-solution-solution-provide-relief", "status": "active", "canonId": "019dd9b8-0fee-73e9-9ae5-799c7f3895cd", "version": 1, "description": null }, "evidence": "Slides 15-24 provide relief by introducing TrackerIQ's ADR capabilities and value proposition.", "position": 2, "isPrimaryArc": true, "parentBeatType": { "name": "Resolution", "slug": "resolution", "status": "active", "canonId": "019dd9b8-045d-703b-8dd7-e92aba3ba91b", "version": 1, "description": "How the deck ends. Required in 19/20 arcs. The exception (Sparkline) ends with new bliss which is functionally a resolution." }, "alignedBlockIds": null, "matchConfidence": 0.9 } ], "loops": [], "locked": true }, { "page": 24, "type": "resolution", "title": "The slide uses a stepped visual layout to present the value pillars.", "function": "present_solution", "rawType": "solution", "block": null, "metadata": { "slideType": "solution", "slideTypeCanon": { "name": "Solution", "slug": "solution", "status": "active", "canonId": "019de52d-0eb5-72ff-8b70-ba70a4199282", "version": 1, "description": null }, "function": "present_solution", "functionCanon": { "name": "Present solution", "slug": "present_solution", "status": "active", "canonId": "019de52d-15b8-71da-bd23-2b767850cbce", "version": 1, "description": null }, "density": "sparse", "densityScore": 15, "componentCount": 3, "textChars": 136, "nDataPoints": 0, "notes": "The slide uses a stepped visual layout to present the value pillars.", "elementsJson": [ "icon_grid" ], "confidence": 1, "extraction": { "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "at": "2026-05-02 16:34:49.656+00", "seconds": 2.5, "promptVersion": "v2-canon-conditioned" } }, "links": { "slide": "/slides/019dd923-5f69-752d-a9b7-1a6457da629a/24", "deck": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a", "deckAnchor": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a#slide-24", "deckJson": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a.json" }, "components": [ { "bbox": { "h": 0.3, "w": 0.9, "x": 0.05, "y": 0.45 }, "kind": "image", "text": null, "attrs": null, "canon": { "kind": { "name": "Image", "slug": "image", "status": "active", "canonId": "019de52c-f978-701f-a720-51d029d769e7", "version": 1, "description": "Photo, illustration, screenshot or icon." }, "tool": null, "subkind": { "name": "Icon grid", "slug": "icon-grid", "status": "active", "canonId": "019de52c-fdfe-749d-9990-1db465a3eed4", "version": 1, "description": null }, "framework": null }, "subkind": "icon-grid", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:49.656+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "c8576d2a-ffcc-4c55-9777-9bfe0dc09122", "parentComponentId": null }, { "bbox": { "h": 0.3, "w": 0.9, "x": 0.05, "y": 0.45 }, "kind": "list", "text": "Detect the unknown; Highly accurate; Generic Solution across any Application; Faster incident investigation", "attrs": null, "canon": { "kind": { "name": "List", "slug": "list", "status": "active", "canonId": "019de52c-f94b-779b-a53b-fd4904a5f4d2", "version": 1, "description": "Bullet or numbered list." }, "tool": null, "subkind": { "name": "Bullet list", "slug": "bullet", "status": "active", "canonId": "019de52c-fc98-7169-a083-5cab805076ca", "version": 1, "description": null }, "framework": null }, "subkind": "bullet", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:49.656+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "bca1bf52-24b9-41ba-bed7-ef19f0c1acd8", "parentComponentId": null }, { "bbox": { "h": 0.05, "w": 0.4, "x": 0.07, "y": 0.2 }, "kind": "title", "text": "TrackerIQ – Value Proposition", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:49.656+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "859b2436-e2e0-4913-b95e-48f8a9a85624", "parentComponentId": null } ], "metrics": [], "tools": [ { "tool": { "name": "Value Proposition Canvas", "slug": "value-proposition-canvas", "status": "active", "bestFor": null, "canonId": "019dd956-85a9-713f-8a1c-b6e5af5cc6cd", "version": 1, "bodyDocId": null, "description": "Mapping customer jobs/pains/gains to your value proposition", "familyLabel": null, "categoryName": "Block", "categorySlug": "block" }, "agent": "Storyteller", "layer": "slide", "agents": [ "Storyteller" ], "matchId": "d1ffa99d-ff11-4c31-b335-2b2321bac47b", "evidence": "Detect the unknown; Highly accurate; Generic Solution across any Application; Faster incident investigation", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 0.7, "extraction": { "at": "2026-07-16 22:25:25.248194+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 24, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null } ], "frameworks": [], "arcBeats": [ { "to": 24, "arc": { "name": "Problem-Agitate-Solution", "slug": "problem-agitate-solution", "status": "active", "bestFor": "Sales pitches, urgency-driven, competitive displacement", "canonId": "019dd956-5ec6-70f9-9fd8-fdbaaff39acf", "version": 1, "bodyDocId": "019df22a-2356-73eb-8061-d8c81dc0aa49", "structure": "Problem (Identify pain) -> Agitate (Make it worse) -> Solution (Provide relief)", "description": null, "familyLabel": null }, "from": 15, "name": "Solution", "beatId": "2473b956-4123-4eb2-a1a6-cc81159dff24", "matchId": "a20f9e35-108f-42d1-b072-600aef38185c", "beatType": { "name": "Solution (Provide relief)", "slug": "problem-agitate-solution-solution-provide-relief", "status": "active", "canonId": "019dd9b8-0fee-73e9-9ae5-799c7f3895cd", "version": 1, "description": null }, "evidence": "Slides 15-24 provide relief by introducing TrackerIQ's ADR capabilities and value proposition.", "position": 2, "isPrimaryArc": true, "parentBeatType": { "name": "Resolution", "slug": "resolution", "status": "active", "canonId": "019dd9b8-045d-703b-8dd7-e92aba3ba91b", "version": 1, "description": "How the deck ends. Required in 19/20 arcs. The exception (Sparkline) ends with new bliss which is functionally a resolution." }, "alignedBlockIds": null, "matchConfidence": 0.9 } ], "loops": [], "locked": true }, { "page": 25, "type": "setup", "title": "Includes a sidebar of company logos representing the team's past experience.", "function": "other", "rawType": "team_bio", "block": null, "metadata": { "slideType": "team_bio", "slideTypeCanon": { "name": "Team bio", "slug": "team_bio", "status": "active", "canonId": "019de52d-0a7d-7394-ae5b-037478e71f1e", "version": 1, "description": null }, "function": "other", "functionCanon": { "name": "Other (fallback)", "slug": "other", "status": "active", "canonId": "019de52d-15e1-75bc-99dc-07732380e2ce", "version": 1, "description": null }, "density": "dense", "densityScore": 68, "componentCount": 8, "textChars": 451, "nDataPoints": 0, "notes": "Includes a sidebar of company logos representing the team's past experience.", "elementsJson": [ "headshot", "logo_grid" ], "confidence": 1, "extraction": { "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "at": "2026-05-02 16:34:53.775+00", "seconds": 6.57, "promptVersion": "v2-canon-conditioned" } }, "links": { "slide": "/slides/019dd923-5f69-752d-a9b7-1a6457da629a/25", "deck": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a", "deckAnchor": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a#slide-25", "deckJson": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a.json" }, "components": [ { "bbox": { "h": 0.15, "w": 0.14, "x": 0.05, "y": 0.49 }, "kind": "image", "text": "David Movshovitz", "attrs": null, "canon": { "kind": { "name": "Image", "slug": "image", "status": "active", "canonId": "019de52c-f978-701f-a720-51d029d769e7", "version": 1, "description": "Photo, illustration, screenshot or icon." }, "tool": null, "subkind": { "name": "Headshot", "slug": "headshot", "status": "active", "canonId": "019de52c-fd5f-765c-9282-38b54f61bbbf", "version": 1, "description": null }, "framework": null }, "subkind": "headshot", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:53.775+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "18822acd-afc6-4d8b-b3a4-d0c16dcb9387", "parentComponentId": null }, { "bbox": { "h": 0.15, "w": 0.14, "x": 0.05, "y": 0.3 }, "kind": "image", "text": "Doron Hendler", "attrs": null, "canon": { "kind": { "name": "Image", "slug": "image", "status": "active", "canonId": "019de52c-f978-701f-a720-51d029d769e7", "version": 1, "description": "Photo, illustration, screenshot or icon." }, "tool": null, "subkind": { "name": "Headshot", "slug": "headshot", "status": "active", "canonId": "019de52c-fd5f-765c-9282-38b54f61bbbf", "version": 1, "description": null }, "framework": null }, "subkind": "headshot", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:53.775+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "e33563e8-a0fd-49ba-8eb4-381f9f00fc1c", "parentComponentId": null }, { "bbox": { "h": 0.15, "w": 0.14, "x": 0.05, "y": 0.68 }, "kind": "image", "text": "Adi Degani", "attrs": null, "canon": { "kind": { "name": "Image", "slug": "image", "status": "active", "canonId": "019de52c-f978-701f-a720-51d029d769e7", "version": 1, "description": "Photo, illustration, screenshot or icon." }, "tool": null, "subkind": { "name": "Headshot", "slug": "headshot", "status": "active", "canonId": "019de52c-fd5f-765c-9282-38b54f61bbbf", "version": 1, "description": null }, "framework": null }, "subkind": "headshot", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:53.775+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "f047fcf8-bb95-4410-8bc0-329cb011cbd7", "parentComponentId": null }, { "bbox": { "h": 0.55, "w": 0.18, "x": 0.76, "y": 0.3 }, "kind": "image", "text": "The Team Experience Logos", "attrs": null, "canon": { "kind": { "name": "Image", "slug": "image", "status": "active", "canonId": "019de52c-f978-701f-a720-51d029d769e7", "version": 1, "description": "Photo, illustration, screenshot or icon." }, "tool": null, "subkind": { "name": "Logo grid", "slug": "logo-grid", "status": "active", "canonId": "019de52c-fdd7-7409-93e5-81280a8ca215", "version": 1, "description": null }, "framework": null }, "subkind": "logo-grid", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:53.775+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "602755cf-2f00-4b98-ad1a-58c15f5bd9a8", "parentComponentId": null }, { "bbox": { "h": 0.15, "w": 0.35, "x": 0.2, "y": 0.68 }, "kind": "list", "text": "Adi Degani, Chief Architect & Co-founder: Lead Developer, Salesforce; Sr. Developer, Navajo Systems; Lead Developer, Microsoft", "attrs": null, "canon": { "kind": { "name": "List", "slug": "list", "status": "active", "canonId": "019de52c-f94b-779b-a53b-fd4904a5f4d2", "version": 1, "description": "Bullet or numbered list." }, "tool": null, "subkind": { "name": "Bullet list", "slug": "bullet", "status": "active", "canonId": "019de52c-fc98-7169-a083-5cab805076ca", "version": 1, "description": null }, "framework": null }, "subkind": "bullet", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:53.775+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "007a7d4c-e7bf-44d6-8092-5fc2d5d7cd60", "parentComponentId": null }, { "bbox": { "h": 0.15, "w": 0.35, "x": 0.2, "y": 0.3 }, "kind": "list", "text": "Doron Hendler, CEO & Co-founder: VP Sales, mPrest; VP Sales, Surf Communication; VP Sales, Trivnet; Sales Director, Global Accounts (NICE)", "attrs": null, "canon": { "kind": { "name": "List", "slug": "list", "status": "active", "canonId": "019de52c-f94b-779b-a53b-fd4904a5f4d2", "version": 1, "description": "Bullet or numbered list." }, "tool": null, "subkind": { "name": "Bullet list", "slug": "bullet", "status": "active", "canonId": "019de52c-fc98-7169-a083-5cab805076ca", "version": 1, "description": null }, "framework": null }, "subkind": "bullet", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:53.775+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "126b41f0-72e0-4455-b50a-ef2ee61aacff", "parentComponentId": null }, { "bbox": { "h": 0.15, "w": 0.35, "x": 0.2, "y": 0.49 }, "kind": "list", "text": "David Movshovitz, CTO & Co-founder: VP Technology, Salesforce; Co-founder and CTO, Navajo Systems; CTO, Magnifire", "attrs": null, "canon": { "kind": { "name": "List", "slug": "list", "status": "active", "canonId": "019de52c-f94b-779b-a53b-fd4904a5f4d2", "version": 1, "description": "Bullet or numbered list." }, "tool": null, "subkind": { "name": "Bullet list", "slug": "bullet", "status": "active", "canonId": "019de52c-fc98-7169-a083-5cab805076ca", "version": 1, "description": null }, "framework": null }, "subkind": "bullet", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:53.775+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "54d15501-61d8-403a-89f6-7abf47a3ef57", "parentComponentId": null }, { "bbox": { "h": 0.04, "w": 0.15, "x": 0.07, "y": 0.2 }, "kind": "title", "text": "Who We Are", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:53.775+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "8cdda3ce-0b15-4073-a0a6-e4e9aed553ad", "parentComponentId": null } ], "metrics": [], "tools": [], "frameworks": [], "arcBeats": [], "loops": [], "locked": true }, { "page": 26, "type": "setup", "function": "other", "rawType": "team_bio", "block": null, "metadata": { "slideType": "team_bio", "slideTypeCanon": { "name": "Team bio", "slug": "team_bio", "status": "active", "canonId": "019de52d-0a7d-7394-ae5b-037478e71f1e", "version": 1, "description": null }, "function": "other", "functionCanon": { "name": "Other (fallback)", "slug": "other", "status": "active", "canonId": "019de52d-15e1-75bc-99dc-07732380e2ce", "version": 1, "description": null }, "density": "dense", "densityScore": 74, "componentCount": 11, "textChars": 442, "nDataPoints": 0, "notes": null, "elementsJson": [ "headshot" ], "confidence": 1, "extraction": { "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "at": "2026-05-02 16:35:13.771+00", "seconds": 26.29, "promptVersion": "v2-canon-conditioned" } }, "links": { "slide": "/slides/019dd923-5f69-752d-a9b7-1a6457da629a/26", "deck": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a", "deckAnchor": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a#slide-26", "deckJson": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a.json" }, "components": [ { "bbox": { "h": 0.18, "w": 0.12, "x": 0.78, "y": 0.195 }, "kind": "image", "text": "James Routh", "attrs": null, "canon": { "kind": { "name": "Image", "slug": "image", "status": "active", "canonId": "019de52c-f978-701f-a720-51d029d769e7", "version": 1, "description": "Photo, illustration, screenshot or icon." }, "tool": null, "subkind": { "name": "Headshot", "slug": "headshot", "status": "active", "canonId": "019de52c-fd5f-765c-9282-38b54f61bbbf", "version": 1, "description": null }, "framework": null }, "subkind": "headshot", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:35:13.771+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "14373565-f10b-4a10-8e5f-89f09cb0bea5", "parentComponentId": null }, { "bbox": { "h": 0.18, "w": 0.12, "x": 0.44, "y": 0.575 }, "kind": "image", "text": "Ronit Gindes", "attrs": null, "canon": { "kind": { "name": "Image", "slug": "image", "status": "active", "canonId": "019de52c-f978-701f-a720-51d029d769e7", "version": 1, "description": "Photo, illustration, screenshot or icon." }, "tool": null, "subkind": { "name": "Headshot", "slug": "headshot", "status": "active", "canonId": "019de52c-fd5f-765c-9282-38b54f61bbbf", "version": 1, "description": null }, "framework": null }, "subkind": "headshot", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:35:13.771+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "1a103971-c573-499f-8be3-707e93a572b3", "parentComponentId": null }, { "bbox": { "h": 0.18, "w": 0.12, "x": 0.31, "y": 0.195 }, "kind": "image", "text": "Charles Blauner", "attrs": null, "canon": { "kind": { "name": "Image", "slug": "image", "status": "active", "canonId": "019de52c-f978-701f-a720-51d029d769e7", "version": 1, "description": "Photo, illustration, screenshot or icon." }, "tool": null, "subkind": { "name": "Headshot", "slug": "headshot", "status": "active", "canonId": "019de52c-fd5f-765c-9282-38b54f61bbbf", "version": 1, "description": null }, "framework": null }, "subkind": "headshot", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:35:13.771+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "4ffa12b9-479d-46e5-9a6a-cf27857ba5f8", "parentComponentId": null }, { "bbox": { "h": 0.18, "w": 0.12, "x": 0.56, "y": 0.195 }, "kind": "image", "text": "Sounil Yu", "attrs": null, "canon": { "kind": { "name": "Image", "slug": "image", "status": "active", "canonId": "019de52c-f978-701f-a720-51d029d769e7", "version": 1, "description": "Photo, illustration, screenshot or icon." }, "tool": null, "subkind": { "name": "Headshot", "slug": "headshot", "status": "active", "canonId": "019de52c-fd5f-765c-9282-38b54f61bbbf", "version": 1, "description": null }, "framework": null }, "subkind": "headshot", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:35:13.771+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "ac5bb3da-d474-4591-8d05-45ccd25074c3", "parentComponentId": null }, { "bbox": { "h": 0.18, "w": 0.12, "x": 0.66, "y": 0.575 }, "kind": "image", "text": "Bonnie Stith", "attrs": null, "canon": { "kind": { "name": "Image", "slug": "image", "status": "active", "canonId": "019de52c-f978-701f-a720-51d029d769e7", "version": 1, "description": "Photo, illustration, screenshot or icon." }, "tool": null, "subkind": { "name": "Headshot", "slug": "headshot", "status": "active", "canonId": "019de52c-fd5f-765c-9282-38b54f61bbbf", "version": 1, "description": null }, "framework": null }, "subkind": "headshot", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:35:13.771+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "dc93a989-e357-42d2-ba92-adddb6bc26f6", "parentComponentId": null }, { "bbox": { "h": 0.1, "w": 0.2, "x": 0.31, "y": 0.4 }, "kind": "paragraph", "text": "Charles Blauner: Former Global Head of Information Security for Citi bank for 13+ years, CISO at Deutsche bank and JP Morgan", "attrs": null, "canon": { "kind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "5f2affc0-941d-4d07-959d-4bfc1930cea4", "version": 1, "description": "Single prose block in the body of a slide." }, "tool": null, "subkind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "019de52c-fb80-75af-aa5c-a7a4bfac2433", "version": 1, "description": null }, "framework": null }, "subkind": "paragraph", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:35:13.771+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "6c98dad9-354d-4a5d-b8a7-f1992015e143", "parentComponentId": null }, { "bbox": { "h": 0.05, "w": 0.2, "x": 0.78, "y": 0.4 }, "kind": "paragraph", "text": "James Routh: Former CISO at MassMutual, CVS, AETNA, JP Morgan Chase", "attrs": null, "canon": { "kind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "5f2affc0-941d-4d07-959d-4bfc1930cea4", "version": 1, "description": "Single prose block in the body of a slide." }, "tool": null, "subkind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "019de52c-fb80-75af-aa5c-a7a4bfac2433", "version": 1, "description": null }, "framework": null }, "subkind": "paragraph", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:35:13.771+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "720cca14-b96c-43b9-8247-d96e62c823f0", "parentComponentId": null }, { "bbox": { "h": 0.05, "w": 0.2, "x": 0.44, "y": 0.78 }, "kind": "paragraph", "text": "Ronit Gindes: Former CISO: Migdal Insurance", "attrs": null, "canon": { "kind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "5f2affc0-941d-4d07-959d-4bfc1930cea4", "version": 1, "description": "Single prose block in the body of a slide." }, "tool": null, "subkind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "019de52c-fb80-75af-aa5c-a7a4bfac2433", "version": 1, "description": null }, "framework": null }, "subkind": "paragraph", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:35:13.771+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "83551aba-e398-48be-83aa-689cd330eafc", "parentComponentId": null }, { "bbox": { "h": 0.05, "w": 0.2, "x": 0.56, "y": 0.4 }, "kind": "paragraph", "text": "Sounil Yu: Former Chief Security Scientist, Bank of America", "attrs": null, "canon": { "kind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "5f2affc0-941d-4d07-959d-4bfc1930cea4", "version": 1, "description": "Single prose block in the body of a slide." }, "tool": null, "subkind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "019de52c-fb80-75af-aa5c-a7a4bfac2433", "version": 1, "description": null }, "framework": null }, "subkind": "paragraph", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:35:13.771+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "8881fb1e-bc8c-4d80-8974-5347ba143bb1", "parentComponentId": null }, { "bbox": { "h": 0.05, "w": 0.2, "x": 0.66, "y": 0.78 }, "kind": "paragraph", "text": "Bonnie Stith: Former Director of the Center for Cyber Intelligence in the CIA", "attrs": null, "canon": { "kind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "5f2affc0-941d-4d07-959d-4bfc1930cea4", "version": 1, "description": "Single prose block in the body of a slide." }, "tool": null, "subkind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "019de52c-fb80-75af-aa5c-a7a4bfac2433", "version": 1, "description": null }, "framework": null }, "subkind": "paragraph", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:35:13.771+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "a6b37476-3444-4afa-b639-c29b307d6109", "parentComponentId": null }, { "bbox": { "h": 0.05, "w": 0.17, "x": 0.07, "y": 0.195 }, "kind": "title", "text": "Advisory Team", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:35:13.771+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "bba7db40-312b-49bf-8458-430306a227ee", "parentComponentId": null } ], "metrics": [], "tools": [], "frameworks": [], "arcBeats": [], "loops": [], "locked": true }, { "page": 27, "type": "setup", "function": "state_next_steps", "rawType": "closing_ask", "block": null, "metadata": { "slideType": "closing_ask", "slideTypeCanon": { "name": "Closing ask", "slug": "closing_ask", "status": "active", "canonId": "019de52d-0aa4-750f-8aa1-8d622dd99f5c", "version": 1, "description": null }, "function": "state_next_steps", "functionCanon": { "name": "State next steps", "slug": "state_next_steps", "status": "active", "canonId": "019de52d-14ca-70ac-b534-971f458cdf29", "version": 1, "description": null }, "density": "sparse", "densityScore": 11, "componentCount": 3, "textChars": 61, "nDataPoints": 0, "notes": null, "elementsJson": [ "headline_text" ], "confidence": 1, "extraction": { "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "at": "2026-05-02 16:34:52.124+00", "seconds": 4.303, "promptVersion": "v2-canon-conditioned" } }, "links": { "slide": "/slides/019dd923-5f69-752d-a9b7-1a6457da629a/27", "deck": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a", "deckAnchor": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a#slide-27", "deckJson": "/decks/019dd923-5f69-752d-a9b7-1a6457da629a.json" }, "components": [ { "bbox": { "h": 0.125, "w": 0.195, "x": 0.025, "y": 0.025 }, "kind": "image", "text": "Reveal Security", "attrs": null, "canon": { "kind": { "name": "Image", "slug": "image", "status": "active", "canonId": "019de52c-f978-701f-a720-51d029d769e7", "version": 1, "description": "Photo, illustration, screenshot or icon." }, "tool": null, "subkind": { "name": "Logo", "slug": "logo", "status": "active", "canonId": "019de52c-fdaf-743d-94c4-d7c6a0e55302", "version": 1, "description": null }, "framework": null }, "subkind": "logo", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:52.124+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "9ce6eac0-af02-45cb-b8c9-c36210770d9d", "parentComponentId": null }, { "bbox": { "h": 0.065, "w": 0.21, "x": 0.145, "y": 0.405 }, "kind": "paragraph", "text": "Doron Hendler\ndoron@trackerdetect.com", "attrs": null, "canon": { "kind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "5f2affc0-941d-4d07-959d-4bfc1930cea4", "version": 1, "description": "Single prose block in the body of a slide." }, "tool": null, "subkind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "019de52c-fb80-75af-aa5c-a7a4bfac2433", "version": 1, "description": null }, "framework": null }, "subkind": "paragraph", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:52.124+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "a53b116b-ed0c-4913-80a8-d73a6126611b", "parentComponentId": null }, { "bbox": { "h": 0.075, "w": 0.255, "x": 0.118, "y": 0.285 }, "kind": "title", "text": "Thank You", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 16:34:52.124+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "bb9a34e8-f6e6-4600-8626-264ffc7f687f", "parentComponentId": null } ], "metrics": [], "tools": [ { "tool": { "name": "Storytelling: the closing ask", "slug": "closing-ask", "status": "active", "bestFor": null, "canonId": "019df269-24e0-70ab-8dd9-983832c1c665", "version": 1, "bodyDocId": "019df269-24bc-7554-b88d-245127606b8d", "description": "The single most important slide in the deck — after the cover. The final", "familyLabel": "narrative-block", "categoryName": "Narrative & Transformation", "categorySlug": "narrative-transformation" }, "agent": "storyteller", "layer": "slide", "agents": [ "storyteller" ], "matchId": "f90dbbc4-fc0e-4553-b1ad-6b1170eb6206", "evidence": "doron@trackerdetect.com", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 0.9, "extraction": { "at": "2026-07-16 22:25:25.379124+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 27, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null } ], "frameworks": [], "arcBeats": [], "loops": [], "locked": true } ], "arcBeats": [ { "from": 3, "to": 10, "label": "Problem", "description": "Slides 3-10 focus on identifying the pain points and challenges of insider threats and application breaches." }, { "from": 11, "to": 14, "label": "Agitate", "description": "Slides 11-14 agitate the problem by highlighting the consequences of not detecting insider threats and application breaches." }, { "from": 15, "to": 24, "label": "Solution", "description": "Slides 15-24 provide relief by introducing TrackerIQ's ADR capabilities and value proposition." } ], "loops": [ { "from": 4, "to": 10, "label": "Cost Of Inaction", "description": "What is the cost of inaction in detecting insider threats and application breaches?" }, { "from": 13, "to": 14, "label": "Golden Circle", "description": "Why now is the time for a new approach to detecting insider threats and application breaches?" } ] }