This article was published on the 17th of December 2019.

Documentation is important to keep track of progress, regardless of the project that is being worked on. When analysing malware, documentation is also important. This could be to later look back into notes that were made during the initial analysis, or because the outcome of the analysis is publicly posted. In either case, the structure of the documentation is of vital importance, aside from the content.

In this chapter, possible structures for articles are explained to aid in the improvement of any documentation that is written.

To contact me, you can e-mail me at [info][at][maxkersten][dot][nl], send me a PM on Reddit, or DM me on Twitter @Libranalysis.