{
  "docId": "019dd923-5eff-723e-9be5-94b010d7889b",
  "docSlug": "d014079089cef381",
  "documentTitle": "2023 conf SEC1402A",
  "authorId": "Splunk",
  "authorName": "Splunk",
  "documentKindSlug": "consulting-deck",
  "documentKindLabel": "Consulting deck",
  "sourceTypeSlug": "strategy_consulting",
  "sourceTypeLabel": "Strategy consulting",
  "presentationDate": null,
  "orientation": "landscape",
  "aspectRatio": 1.778,
  "pageNumber": 16,
  "pageCount": 22,
  "prevPage": 15,
  "nextPage": 17,
  "slideType": "other",
  "function": "present_solution",
  "density": "dense",
  "nDataPoints": 0,
  "notes": "This appears to be a configuration screen from Splunk's Risk-Based Alerting (RBA) feature.",
  "elementsJson": [
    "screenshot"
  ],
  "metadataConfidence": 0.9,
  "imagePath": null,
  "slideHref": "/slides/019dd923-5eff-723e-9be5-94b010d7889b/16",
  "deckHref": "/decks/019dd923-5eff-723e-9be5-94b010d7889b",
  "deckJsonHref": "/decks/019dd923-5eff-723e-9be5-94b010d7889b.json",
  "deckAnchorHref": "/decks/019dd923-5eff-723e-9be5-94b010d7889b#slide-16",
  "components": [
    {
      "bbox": {
        "h": 0.03,
        "w": 0.15,
        "x": 0.15,
        "y": 0.88
      },
      "kind": "list",
      "text": "+ Add Risk Modifier",
      "attrs": null,
      "subkind": "bullet",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "f7afa621-2a96-4daa-822c-8525f561fcc1",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.06,
        "w": 0.85,
        "x": 0.13,
        "y": 0.09
      },
      "kind": "other",
      "text": "User: $user$ Found Doing Something Bad on $src$",
      "attrs": null,
      "subkind": "unclassified",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "3dd73896-57fa-4560-b4a1-9dab7ec62ced",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.08,
        "w": 0.75,
        "x": 0.19,
        "y": 0.188
      },
      "kind": "other",
      "text": "Risk Score 0",
      "attrs": null,
      "subkind": "unclassified",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "41255bbe-2504-414d-84c9-47e0d16caff3",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.06,
        "w": 0.75,
        "x": 0.19,
        "y": 0.765
      },
      "kind": "other",
      "text": "Risk Object Type system",
      "attrs": null,
      "subkind": "unclassified",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "76800118-9013-4481-b38a-50241c8a051e",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.06,
        "w": 0.75,
        "x": 0.19,
        "y": 0.65
      },
      "kind": "other",
      "text": "Risk Object Field src",
      "attrs": null,
      "subkind": "unclassified",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "d1ba75bf-650b-4a11-a4c9-235efa3d05c8",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.08,
        "w": 0.75,
        "x": 0.19,
        "y": 0.53
      },
      "kind": "other",
      "text": "Risk Score 0",
      "attrs": null,
      "subkind": "unclassified",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "d3909b62-a311-47e2-ae0d-ec605e298781",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.06,
        "w": 0.75,
        "x": 0.19,
        "y": 0.31
      },
      "kind": "other",
      "text": "Risk Object Field user",
      "attrs": null,
      "subkind": "unclassified",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "d8d49472-0902-4656-87b1-7004d3fd407e",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.06,
        "w": 0.75,
        "x": 0.19,
        "y": 0.425
      },
      "kind": "other",
      "text": "Risk Object Type user",
      "attrs": null,
      "subkind": "unclassified",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "f2a75267-6f14-42c9-bce1-4f43e8694030",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.03,
        "w": 0.11,
        "x": 0.02,
        "y": 0.11
      },
      "kind": "paragraph",
      "text": "Risk Message",
      "attrs": null,
      "subkind": "paragraph",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "138da8d0-9818-4e8c-8a5f-d25f3058cb04",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.03,
        "w": 0.11,
        "x": 0.02,
        "y": 0.215
      },
      "kind": "paragraph",
      "text": "Risk Modifiers",
      "attrs": null,
      "subkind": "paragraph",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "b3bd101f-3a30-40d9-a398-40ffb3af1b2e",
      "frameworkName": null,
      "frameworkSlug": null
    }
  ],
  "metrics": [],
  "tools": [],
  "frameworks": [],
  "arcBeats": [
    {
      "to": 19,
      "from": 14,
      "beatId": "ff966912-487e-4b37-b06e-6bdc4bc071f2",
      "arcName": "The Consultant's Gambit",
      "arcSlug": "consultants-gambit",
      "beatName": "Impact & Next Steps",
      "beatSlug": "consultants-gambit-impact-next-steps",
      "evidence": "The document discusses the benefits and key takeaways of using Analytic Stories and RBA.",
      "position": 3,
      "confidence": 0.8,
      "parentBeatName": "Resolution",
      "parentBeatSlug": "resolution"
    }
  ],
  "loops": [],
  "imagePathAlt": null,
  "thumbSrc": null,
  "thumbSrcAlt": null,
  "locked": true
}