From c3743266e81284f9783b82e7205dcf663ca2da1e Mon Sep 17 00:00:00 2001
From: pe3zx <pe3zx@users.noreply.github.com>
Date: Thu, 26 Jul 2018 10:02:39 +0000
Subject: [PATCH] Tools: Digital Forensics and Incident Response: bromiley/olaf

---
 README.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/README.md b/README.md
index 1e10f7d..86ea42e 100644
--- a/README.md
+++ b/README.md
@@ -1044,6 +1044,10 @@ _return-to-libc techniques_
         <td><a href="https://github.com/Broctets-and-Bytes/Darwin">Broctets-and-Bytes/Darwin</a></td>
         <td>This script is designed to be run against a mounted image, live system, or device in target disk mode. The script automates the collection of key files for MacOS investigations.</td>
     </tr>
+    <tr>
+        <td><a href="https://github.com/bromiley/olaf">bromiley/olaf</a></td>
+        <td>Office365 Log Analysis Framework: OLAF is a collection of tools, scripts, and analysis techniques dealing with O365 Investigations.</td>
+    </tr>
     <tr>
         <td><a href="https://github.com/carmaa/inception">carmaa/inception</a></td>
         <td>Inception is a physical memory manipulation and hacking tool exploiting PCI-based DMA. The tool can attack over FireWire, Thunderbolt, ExpressCard, PC Card and any other PCI/PCIe interfaces.</td>