{
  "docId": "019dd923-5eff-723e-9be5-94b010d7889b",
  "docSlug": "d014079089cef381",
  "documentTitle": "2023 conf SEC1402A",
  "authorId": "Splunk",
  "authorName": "Splunk",
  "documentKindSlug": "consulting-deck",
  "documentKindLabel": "Consulting deck",
  "sourceTypeSlug": "strategy_consulting",
  "sourceTypeLabel": "Strategy consulting",
  "presentationDate": null,
  "orientation": "landscape",
  "aspectRatio": 1.778,
  "pageNumber": 21,
  "pageCount": 22,
  "prevPage": 20,
  "nextPage": 22,
  "slideType": "appendix",
  "function": "summarize",
  "density": "sparse",
  "nDataPoints": 0,
  "notes": null,
  "elementsJson": [
    "headline_text",
    "bullet_list"
  ],
  "metadataConfidence": 1,
  "imagePath": null,
  "slideHref": "/slides/019dd923-5eff-723e-9be5-94b010d7889b/21",
  "deckHref": "/decks/019dd923-5eff-723e-9be5-94b010d7889b",
  "deckJsonHref": "/decks/019dd923-5eff-723e-9be5-94b010d7889b.json",
  "deckAnchorHref": "/decks/019dd923-5eff-723e-9be5-94b010d7889b#slide-21",
  "components": [
    {
      "bbox": {
        "h": 0.3,
        "w": 0.9,
        "x": 0.05,
        "y": 0.35
      },
      "kind": "list",
      "text": "Splunk Lantern Article: Implementing risk-based alerting\n.Conf 2022 Talk: Curating Your Risk Ecology: Making Risk Based Alerting Magick\n.Conf 2021 Talk: Supercharge your risk-based alerting (RBA) implementation\n.Conf 2020 Talk: Full speed ahead with risk-based alerting (RBA)\n.Conf 2019 Talk: Getting started with risk-based alerting and MITRE",
      "attrs": null,
      "subkind": "bullet",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "20f87b01-1ed0-42a7-8d32-618af8fb8765",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.08,
        "w": 0.35,
        "x": 0.05,
        "y": 0.14
      },
      "kind": "title",
      "text": "What is RBA?",
      "attrs": null,
      "subkind": "headline",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "9236db5b-8a29-4d80-87a3-b6311237e31d",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.04,
        "w": 0.35,
        "x": 0.05,
        "y": 0.23
      },
      "kind": "title",
      "text": "Excellent Resources on RBA",
      "attrs": null,
      "subkind": "subtitle",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "37ffa08f-5e42-41d3-8834-44cadc18e107",
      "frameworkName": null,
      "frameworkSlug": null
    }
  ],
  "metrics": [],
  "tools": [
    {
      "name": "List presentation",
      "slug": "list-presentation",
      "agent": null,
      "layer": "slide",
      "matchId": "f5913e6c-0592-4346-bc0d-8fab6cc1f513",
      "evidence": "list/bullet: Splunk Lantern Article: Implementing risk-based alerting",
      "confidence": 0.7
    }
  ],
  "frameworks": [],
  "arcBeats": [],
  "loops": [],
  "imagePathAlt": null,
  "thumbSrc": null,
  "thumbSrcAlt": null,
  "locked": true
}