diff --git a/B_Root_Anomalies/B_Root_Anomaly-20151130/README.md b/B_Root_Anomalies/B_Root_Anomaly-20151130/README.md
new file mode 100644
index 0000000..4ff4b0a
--- /dev/null
+++ b/B_Root_Anomalies/B_Root_Anomaly-20151130/README.md
@@ -0,0 +1,13 @@
+# How to run the tagging code
+
+## For 11/30 attack
+
+```
+tag -s 1448866200 -e 1448875160 -r <path-to-folder-w-traces> -q www.336901.com -q www.366901.com
+```
+
+## For 12/1 attack
+
+```
+tag -s 1448946569 -e 1448950480 -r <path-to-folder-w-traces> -q www.916yy.com
+```
\ No newline at end of file