diff --git a/README.md b/README.md
index 1a03636..4aa0ae8 100644
--- a/README.md
+++ b/README.md
@@ -16,10 +16,11 @@
     - [Poisoning CRT Library](https://github.com/mether049/malware/blob/master/malware-tech_ref_and_memo.md#poisoning-crt-library)
   - [Persistence](https://github.com/mether049/malware/blob/master/malware-tech_ref_and_memo.md#persistence-1)
     - [Registry](https://github.com/mether049/malware/blob/master/malware-tech_ref_and_memo.md#registry)
+    - [Startup Folder](https://github.com/mether049/malware/blob/master/malware-tech_ref_and_memo.md#starup-folder)
   - [Gathering Information](https://github.com/mether049/malware/blob/master/malware-tech_ref_and_memo.md#gathering-information)
     - [Public IP address](https://github.com/mether049/malware/blob/master/malware-tech_ref_and_memo.md#public-ip-address)
   - [Delete Data](https://github.com/mether049/malware/blob/master/malware-tech_ref_and_memo.md#delete-data)
-    - [Delete VolumeShadow](https://github.com/mether049/malware/blob/master/malware-tech_ref_and_memo.md#delete-volume-shadow)
+    - [Delete Volume Shadow](https://github.com/mether049/malware/blob/master/malware-tech_ref_and_memo.md#delete-volume-shadow)
   - [maldoc](https://github.com/mether049/malware/blob/master/malware-tech_ref_and_memo.md#maldoc)
     - [Obfuscation/Encryption](https://github.com/mether049/malware/blob/master/malware-tech_ref_and_memo.md#obfuscationencryption)
     - [VBA Stomping](https://github.com/mether049/malware/blob/master/malware-tech_ref_and_memo.md#vba-stomping)