diff --git a/README.md b/README.md
index 0a436d6..bbad63d 100644
--- a/README.md
+++ b/README.md
@@ -569,6 +569,7 @@
 - [Android抓包—关于抓包的碎碎念-看雪论坛-Android板块ChenSem](./books/关于抓包的碎碎念.pdf)|[原文地址](https://bbs.pediy.com/thread-260965.htm)
 - [CVE-2020-15778-Openssh-SCP命令注入漏洞复现报告](./books/CVE-2020-15778-Openssh-SCP命令注入漏洞复现报告.pdf)
 - [bolt_cms_V3.7.0_xss和远程代码执行漏洞](./books/bolt_cms_V3.7.0_xss和远程代码执行漏洞.pdf)
+- [关于Cobalt_Strike检测方法与去特征的思考](./books/关于Cobalt_Strike检测方法与去特征的思考.pdf)
 
 ## <span id="head9"> 说明</span>
 
diff --git a/books/关于Cobalt_Strike检测方法与去特征的思考.pdf b/books/关于Cobalt_Strike检测方法与去特征的思考.pdf
new file mode 100644
index 0000000..cd83042
Binary files /dev/null and b/books/关于Cobalt_Strike检测方法与去特征的思考.pdf differ