Exposing One of China’s Cyber Espionage Units
http://assets.sbnation.com/assets/2187805/Mandiant_APT1_Report.pdf
Xlog: in memory mmap log for fast logging and also supports encryption. Xlog log enables them to log everything fast and "safely" even in production build to quickly identify bugs.
STN: short and long TCP connection manager, which is optimized for various networks in China.
Plus other network utilities to make development easier.
Badly made Powerpoint is just useless while 6-page memo might be too time consuming and inconvenient. Capital letter approach could be a good compromise between those two.
http://assets.sbnation.com/assets/2187805/Mandiant_APT1_Report.pdf