diff --git a/malware-analysis_ref_and_memo.md b/malware-analysis_ref_and_memo.md
index e020a32..a7a9a9b 100644
--- a/malware-analysis_ref_and_memo.md
+++ b/malware-analysis_ref_and_memo.md
@@ -353,6 +353,10 @@ Injecition/Hollowingされたプロセスの自動検出<br>
     - SDBbotのアンパッカー
 - **[Malware Script](https://github.com/sysopfb/Malware_Scripts)**
     - Decoderやunpacker(複数種)
+- **[deICEr](https://github.com/f0wl/deICEr)**
+    - IcedIDのconfig extractor
+- **[CobaltStrikeParser](https://github.com/Sentinel-One/CobaltStrikeParser)**
+    - CobaltStrikeのconfig Parser
 
 
 # PDF Analysis