diff --git a/malware-analysis_ref_and_memo.md b/malware-analysis_ref_and_memo.md
index d7e416e..fe7f2cd 100644
--- a/malware-analysis_ref_and_memo.md
+++ b/malware-analysis_ref_and_memo.md
@@ -656,3 +656,5 @@ to do...
 	- 課題ベースでマルウェア解析について学習
 - **[Publicly available PCAP files@NETRESEC](https://www.netresec.com/index.ashx?page=PcapFiles)**
 - **[Certifications & Training@AboutDFIR.com](https://aboutdfir.com/education/certifications-training/)**
+- **[Malware Reverse Engineering Handbook@NATO CCDCOE](https://ccdcoe.org/library/publications/malware-reverse-engineering-handbook/)**
+	- NATOによるマルウェア調査handbook