diff --git a/src/primaite/notebooks/_package_data/uc2_attack.png b/src/primaite/notebooks/_package_data/uc2_attack.png
new file mode 100644
index 00000000..8b8df5ce
Binary files /dev/null and b/src/primaite/notebooks/_package_data/uc2_attack.png differ
diff --git a/src/primaite/notebooks/uc2_demo.ipynb b/src/primaite/notebooks/uc2_demo.ipynb
index 7bcfdd29..6a20e3e8 100644
--- a/src/primaite/notebooks/uc2_demo.ipynb
+++ b/src/primaite/notebooks/uc2_demo.ipynb
@@ -55,7 +55,11 @@
    "source": [
     "## Red agent\n",
     "\n",
-    "The red agent waits a bit then sends a DELETE query to the database from client 1. If the delete is successful, the database file is flagged as compromised to signal that data is not available."
+    "The red agent waits a bit then sends a DELETE query to the database from client 1. If the delete is successful, the database file is flagged as compromised to signal that data is not available.\n",
+    "\n",
+    "[<img src=\"_package_data/uc2_attack.png\" width=\"500\"/>](_package_data/uc2_attack.png)\n",
+    "\n",
+    "_(click image to enlarge)_"
    ]
   },
   {