This query could mean a few different things. Are you asking about:

that you found on your computer or downloaded, and you want to know if it is safe or what it contains?

Please clarify which one you are looking for before I provide a detailed guide.

within the government's "Authority to Operate" (ATO) cybersecurity process, used to document system risks?