## Writing Effective Reports

### Know Your Audience
1.  **Technical Audience (CTO, Engineers)**:
    *   Wants: IP addresses, Hashes, root cause, exact commands used.
    *   Tone: Precise, technical.
2.  **Executive Audience (CEO, Board)**:
    *   Wants: Risk level, Financial impact, "Is it fixed?", "How do we prevent it?"
    *   Tone: High-level, money-focused. **No jargon**.
    *   *Bad*: "The APT used a Heap Spray exploit."
    *   *Good*: "Sophisticated attackers compromised a web server."

### The 5 W's
*   **Who** (Attacker/Victim)?
*   **What** (Happened)?
*   **When** (Timeline)?
*   **Where** (Systems)?
*   **Why** (Motive)?