diff --git a/Offensive.md b/Offensive.md
index 1c3a9ea..c72b02f 100644
--- a/Offensive.md
+++ b/Offensive.md
@@ -658,6 +658,10 @@ Some tools can be categorized in more than one category. But because the current
jthuraisamy/TelemetrySourcerer |
Enumerate and disable common sources of telemetry used by AV/EDR. |
+
+ karttoon/trigen |
+ Trigen is a Python script which uses different combinations of Win32 function calls in generated VBA to execute shellcode. |
+
matterpreter/DefenderCheck |
Identifies the bytes that Microsoft Defender flags on. |