diff --git a/README.md b/README.md
index 6942a39..d0e1e01 100644
--- a/README.md
+++ b/README.md
@@ -16,6 +16,8 @@
     - [Poisoning CRT Library](https://github.com/mether049/malware/blob/master/malware-tech_ref_and_memo.md#poisoning-crt-library)
   - [Persistence](https://github.com/mether049/malware/blob/master/malware-tech_ref_and_memo.md#persistence-1)
     - [Registry](https://github.com/mether049/malware/blob/master/malware-tech_ref_and_memo.md#registry)
+  - [Gathering Information](https://github.com/mether049/malware/blob/master/malware-tech_ref_and_memo.md#gathering-information)
+    - [Public IP address](https://github.com/mether049/malware/blob/master/malware-tech_ref_and_memo.md#public-ip-address)
   - [Shell Backdoor](https://github.com/mether049/malware/blob/master/malware-tech_ref_and_memo.md#shell-backdoor)
   - [rootkit](https://github.com/mether049/malware/blob/master/malware-tech_ref_and_memo.md#rootkit)
     - [LKM rootkit](https://github.com/mether049/malware/blob/master/malware-tech_ref_and_memo.md#lkm-rootkit)