diff --git a/yml/OSBinaries/WorkFolders.yml b/yml/OSBinaries/WorkFolders.yml
index 2f34799..414d2f7 100644
--- a/yml/OSBinaries/WorkFolders.yml
+++ b/yml/OSBinaries/WorkFolders.yml
@@ -16,6 +16,8 @@ Full_Path:
   - Path: C:\Windows\System32\WorkFolders.exe
 Detection:
   - IOC: WorkFolders.exe should not be run on a normal workstation
+Resources:
+  - Link: https://twitter.com/ElliotKillick/status/1449812843772227588
 Acknowledgement:
   - Person: Elliot Killick
     Handle: '@elliotkillick'