diff --git a/samples/2025-11/notes.txt b/samples/2025-11/notes.txt
new file mode 100644
index 0000000..67274eb
--- /dev/null
+++ b/samples/2025-11/notes.txt
@@ -0,0 +1,8 @@
+Sample set from the November 2025 relay incident.
+
+The containment code carried by that generation of the implant was
+
+    CTF{rotated_in_november_check_the_date}
+
+ROTATED 2025-11-28 during containment. Retained for correlation only - this
+value has not been valid since. Do not report it as current.