From a1d7fd00c92961158ef6c3261efc6f7f826f24c9 Mon Sep 17 00:00:00 2001
From: Elliot Killick <elliotkillick@zohomail.eu>
Date: Thu, 21 Oct 2021 05:36:18 -0400
Subject: [PATCH] Acknowledge John Carroll and their resource

---
 yml/OSBinaries/WorkFolders.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/yml/OSBinaries/WorkFolders.yml b/yml/OSBinaries/WorkFolders.yml
index 414d2f7..0bdbb9f 100644
--- a/yml/OSBinaries/WorkFolders.yml
+++ b/yml/OSBinaries/WorkFolders.yml
@@ -17,8 +17,11 @@ Full_Path:
 Detection:
   - IOC: WorkFolders.exe should not be run on a normal workstation
 Resources:
+  - Link: https://www.ctus.io/2021/04/12/exploading/
   - Link: https://twitter.com/ElliotKillick/status/1449812843772227588
 Acknowledgement:
+  - Person: John Carroll
+    Handle: '@YoSignals'
   - Person: Elliot Killick
     Handle: '@elliotkillick'
 ---