diff --git a/README.md b/README.md
index d196e27..d20df4d 100644
--- a/README.md
+++ b/README.md
@@ -437,6 +437,10 @@ My curated list of awesome links, resources and tools
hasherezade/libpeconv/runpe |
RunPE (aka Process Hollowing) is a well known technique allowing to injecting a new PE into a remote processes, imprersonating this process. The given implementation works for PE 32bit as well as 64bit. |
+
+ hegusung/AVSignSeek |
+ Tool written in python3 to determine where the AV signature is located in a binary/payload |
+
IRIS-H |
IRIS-H is an online digital forensics tool that performs automated static analysis of files stored in a directory-based or strictly structured formats. |