diff --git a/docs/Threat Hunting via Windows Event Logs Secwest 2019.pdf b/docs/Threat Hunting via Windows Event Logs Secwest 2019.pdf
new file mode 100644
index 0000000..f2d02cb
Binary files /dev/null and b/docs/Threat Hunting via Windows Event Logs Secwest 2019.pdf differ