diff --git a/docs/doxygen-user/ct_malware_scanner.dox b/docs/doxygen-user/ct_malware_scanner.dox
index 196a4d5b00ffbf4772cfb05a5b127bab65642b11..fa1dd6fb6bcd2407039b16730aba3f5e5a00e026 100644
--- a/docs/doxygen-user/ct_malware_scanner.dox
+++ b/docs/doxygen-user/ct_malware_scanner.dox
@@ -18,14 +18,14 @@ Configuration
 Once you have a license, you must add it on the Options panel.  Choose the 'Cyber Triage' tab and choose 'Add License'.
 
 
-IMAGE
+\image html Malware-scanner-global-options-panel-no-license.png
 
 After you enter the license number that you should have received from your email, you will then need to review and agree to the license terms. 
 
 
 The options panel should now display information about the lookup limits. You can always refer back to here about what your limits are and when they reset. 
 
-IMAGE
+\image html malware-scanner-global-options-panel.png
 
 
 
@@ -37,7 +37,7 @@ Ingest Settings
 
 For each data source, you select if you want files to be uploaded if they have not already been analyzed. By default, they are uploaded. You can choose to not upload them though. 
 
-IMAGE
+\image html malware-scanner-ingest-panel.png
 
 
 
@@ -52,6 +52,7 @@ Seeing Results
 
 Once ingest has completed, the files with malware will be listed in the Malware node in the tree. 
 
-IMAGE
+
+\image html malware-artifact-tree.png
 
 */
diff --git a/docs/doxygen-user/images/Malware-scanner-global-options-panel-no-license.png b/docs/doxygen-user/images/Malware-scanner-global-options-panel-no-license.png
new file mode 100644
index 0000000000000000000000000000000000000000..09bb7d8344de194cc29290d49f29d48eb60f446d
Binary files /dev/null and b/docs/doxygen-user/images/Malware-scanner-global-options-panel-no-license.png differ
diff --git a/docs/doxygen-user/images/ct_malware_license_agreement.png b/docs/doxygen-user/images/ct_malware_license_agreement.png
deleted file mode 100644
index 030a722e469c6ba1964a40fb9b5c3efcc99d11ce..0000000000000000000000000000000000000000
Binary files a/docs/doxygen-user/images/ct_malware_license_agreement.png and /dev/null differ
diff --git a/docs/doxygen-user/images/ct_malware_scanner_options_panel.png b/docs/doxygen-user/images/ct_malware_scanner_options_panel.png
deleted file mode 100644
index 1f45693d138a12a838aba40ab18a31f65c5f6d82..0000000000000000000000000000000000000000
Binary files a/docs/doxygen-user/images/ct_malware_scanner_options_panel.png and /dev/null differ
diff --git a/docs/doxygen-user/images/ct_upload_file.png b/docs/doxygen-user/images/ct_upload_file.png
deleted file mode 100644
index 38c595330d609bcf6ade1072a90a3e63f2eedc52..0000000000000000000000000000000000000000
Binary files a/docs/doxygen-user/images/ct_upload_file.png and /dev/null differ
diff --git a/docs/doxygen-user/images/malware-artifact-tree.png b/docs/doxygen-user/images/malware-artifact-tree.png
new file mode 100644
index 0000000000000000000000000000000000000000..53b229751ca4e7f8e89e214f175bf1176e6729e4
Binary files /dev/null and b/docs/doxygen-user/images/malware-artifact-tree.png differ
diff --git a/docs/doxygen-user/images/malware-scanner-global-options-panel.png b/docs/doxygen-user/images/malware-scanner-global-options-panel.png
new file mode 100644
index 0000000000000000000000000000000000000000..fd0b131832bfdf79e29ffae389b94f3f86f6b7a9
Binary files /dev/null and b/docs/doxygen-user/images/malware-scanner-global-options-panel.png differ
diff --git a/docs/doxygen-user/images/malware-scanner-ingest-panel.png b/docs/doxygen-user/images/malware-scanner-ingest-panel.png
new file mode 100644
index 0000000000000000000000000000000000000000..719768baaf9acc36c9f6ecda010d0ed877e45d31
Binary files /dev/null and b/docs/doxygen-user/images/malware-scanner-ingest-panel.png differ