diff --git a/README.md b/README.md
index 2557fb6..5fbc30f 100644
--- a/README.md
+++ b/README.md
@@ -18,6 +18,9 @@
     - [Registry](https://github.com/mether049/malware/blob/master/malware-tech_ref_and_memo.md#registry)
   - [Gathering Information](https://github.com/mether049/malware/blob/master/malware-tech_ref_and_memo.md#gathering-information)
     - [Public IP address](https://github.com/mether049/malware/blob/master/malware-tech_ref_and_memo.md#public-ip-address)
+  - [maldoc](https://github.com/mether049/malware/blob/master/malware-tech_ref_and_memo.md#maldoc)
+    - [Obfuscation/Encryption](https://github.com/mether049/malware/blob/master/malware-tech_ref_and_memo.md#obfuscationencryption)
+    - [VBA Stomping](https://github.com/mether049/malware/blob/master/malware-tech_ref_and_memo.md#vba-stomping)
   - [Shell Backdoor](https://github.com/mether049/malware/blob/master/malware-tech_ref_and_memo.md#shell-backdoor)
   - [rootkit](https://github.com/mether049/malware/blob/master/malware-tech_ref_and_memo.md#rootkit)
     - [LKM rootkit](https://github.com/mether049/malware/blob/master/malware-tech_ref_and_memo.md#lkm-rootkit)