diff --git a/yml/OSBinaries/WorkFolders.yml b/yml/OSBinaries/WorkFolders.yml index 414d2f7..0bdbb9f 100644 --- a/yml/OSBinaries/WorkFolders.yml +++ b/yml/OSBinaries/WorkFolders.yml @@ -17,8 +17,11 @@ Full_Path: Detection: - IOC: WorkFolders.exe should not be run on a normal workstation Resources: + - Link: https://www.ctus.io/2021/04/12/exploading/ - Link: https://twitter.com/ElliotKillick/status/1449812843772227588 Acknowledgement: + - Person: John Carroll + Handle: '@YoSignals' - Person: Elliot Killick Handle: '@elliotkillick' ---