diff --git a/README.md b/README.md
index 4afb841..72385f9 100644
--- a/README.md
+++ b/README.md
@@ -80,6 +80,10 @@ This repository is created as an online bookmark for useful links, resources and
fireeye/capa |
capa detects capabilities in executable files. You run it against a PE file or shellcode and it tells you what it thinks the program can do. For example, it might suggest that the file is a backdoor, is capable of installing services, or relies on HTTP to communicate. |
+
+ fireeye/capa-rules |
+ Standard collection of rules for capa: the tool for enumerating the capabilities of programs |
+
jymchoeng/AutoTTP |
Automated Tactics Techniques & Procedures |