diff --git a/README.md b/README.md
index e647b20..1a03636 100644
--- a/README.md
+++ b/README.md
@@ -18,6 +18,8 @@
     - [Registry](https://github.com/mether049/malware/blob/master/malware-tech_ref_and_memo.md#registry)
   - [Gathering Information](https://github.com/mether049/malware/blob/master/malware-tech_ref_and_memo.md#gathering-information)
     - [Public IP address](https://github.com/mether049/malware/blob/master/malware-tech_ref_and_memo.md#public-ip-address)
+  - [Delete Data](https://github.com/mether049/malware/blob/master/malware-tech_ref_and_memo.md#delete-data)
+    - [Delete VolumeShadow](https://github.com/mether049/malware/blob/master/malware-tech_ref_and_memo.md#delete-volume-shadow)
   - [maldoc](https://github.com/mether049/malware/blob/master/malware-tech_ref_and_memo.md#maldoc)
     - [Obfuscation/Encryption](https://github.com/mether049/malware/blob/master/malware-tech_ref_and_memo.md#obfuscationencryption)
     - [VBA Stomping](https://github.com/mether049/malware/blob/master/malware-tech_ref_and_memo.md#vba-stomping)