diff --git a/Offensive.md b/Offensive.md
index f532c52..87cbc5e 100644
--- a/Offensive.md
+++ b/Offensive.md
@@ -1256,6 +1256,10 @@ Some tools can be categorized in more than one category. But because the current
OsandaMalith/PE2HTML |
Injects HTML/PHP/ASP to the PE |
+
+ outflanknl/TamperETW |
+ PoC to demonstrate how CLR ETW events can be tampered. |
+
peewpw/Invoke-PSImage |
Embeds a PowerShell script in the pixels of a PNG file and generates a oneliner to execute |