diff --git a/.obsidian/workspace.json b/.obsidian/workspace.json
index 7eb9f4c..77f6648 100644
--- a/.obsidian/workspace.json
+++ b/.obsidian/workspace.json
@@ -28,7 +28,7 @@
             "state": {
               "type": "markdown",
               "state": {
-                "file": "Linux Terminal.md",
+                "file": "Linux Admin/Linux Terminal.md",
                 "mode": "source",
                 "source": false
               },
@@ -42,16 +42,72 @@
             "state": {
               "type": "markdown",
               "state": {
-                "file": "Welcome.md",
+                "file": "Linux Admin/Абузы.md",
                 "mode": "source",
                 "source": false
               },
               "icon": "lucide-file",
-              "title": "Welcome"
+              "title": "Абузы"
+            }
+          },
+          {
+            "id": "0d2e07ac82ec6695",
+            "type": "leaf",
+            "state": {
+              "type": "markdown",
+              "state": {
+                "file": "Network.md",
+                "mode": "source",
+                "source": false
+              },
+              "icon": "lucide-file",
+              "title": "Network"
+            }
+          },
+          {
+            "id": "64438f04050c0437",
+            "type": "leaf",
+            "state": {
+              "type": "markdown",
+              "state": {
+                "file": "Forensic.md",
+                "mode": "source",
+                "source": false
+              },
+              "icon": "lucide-file",
+              "title": "Forensic"
+            }
+          },
+          {
+            "id": "3483d43f6e0761d0",
+            "type": "leaf",
+            "state": {
+              "type": "markdown",
+              "state": {
+                "file": "Forensic.md",
+                "mode": "source",
+                "source": false
+              },
+              "icon": "lucide-file",
+              "title": "Forensic"
+            }
+          },
+          {
+            "id": "f616323f043f6f43",
+            "type": "leaf",
+            "state": {
+              "type": "markdown",
+              "state": {
+                "file": "СЗИ.md",
+                "mode": "source",
+                "source": false
+              },
+              "icon": "lucide-file",
+              "title": "СЗИ"
             }
           }
         ],
-        "currentTab": 2
+        "currentTab": 6
       }
     ],
     "direction": "vertical"
@@ -124,7 +180,7 @@
             "state": {
               "type": "backlink",
               "state": {
-                "file": "Welcome.md",
+                "file": "СЗИ.md",
                 "collapseAll": false,
                 "extraContext": false,
                 "sortOrder": "alphabetical",
@@ -134,7 +190,7 @@
                 "unlinkedCollapsed": true
               },
               "icon": "links-coming-in",
-              "title": "Backlinks for Welcome"
+              "title": "Backlinks for СЗИ"
             }
           },
           {
@@ -143,12 +199,12 @@
             "state": {
               "type": "outgoing-link",
               "state": {
-                "file": "Welcome.md",
+                "file": "СЗИ.md",
                 "linksCollapsed": false,
                 "unlinkedCollapsed": true
               },
               "icon": "links-going-out",
-              "title": "Outgoing links from Welcome"
+              "title": "Outgoing links from СЗИ"
             }
           },
           {
@@ -172,13 +228,13 @@
             "state": {
               "type": "outline",
               "state": {
-                "file": "Welcome.md",
+                "file": "СЗИ.md",
                 "followCursor": false,
                 "showSearch": false,
                 "searchQuery": ""
               },
               "icon": "lucide-list",
-              "title": "Outline of Welcome"
+              "title": "Outline of СЗИ"
             }
           }
         ]
@@ -198,11 +254,16 @@
       "command-palette:Open command palette": false
     }
   },
-  "active": "3fbdec32d8680636",
+  "active": "f616323f043f6f43",
   "lastOpenFiles": [
-    "Linux Terminal.md",
-    "Абузы.md",
+    "Forensic.md",
+    "СЗИ.md",
+    "Network.md",
     "Welcome.md",
+    "Web.md",
+    "Linux Admin/Абузы.md",
+    "Network",
+    "Linux Admin/Linux Terminal.md",
     "Linux Admin",
     "create a link.md"
   ]
diff --git a/Forensic.md b/Forensic.md
new file mode 100644
index 0000000..a81c4a5
--- /dev/null
+++ b/Forensic.md
@@ -0,0 +1,22 @@
+### xxd
+`xxd [filename]` -> hexdump файла
+
+### binwalk
+`binwalk [filename]` -> считывает все сигнатуры файла и обнаруживает скрытые в нём друуугииие файлы. Флаг `-e` извлекает их
+
+### exiftool
+`exiftool [filename]` -> смотрит метадату файла
+
+### AUDACITY
+Прога для смотрения музики
+
+### Autopsy
+Прога для анализа образа диска
+
+### Volatility 
+Да поможет тебе Бог. (и HackTricks)
+- `volatility -h` 
+- `volatility imageinfo -f file.dmp` -> покажет инфу про образ
+- `volatility -f file.dmp --profile=Win7SP1x64 hivelist` -> инфа о юзерах
+- `volatility -f file.dmp --profile=Win7SP1x64 hashdump` -> хэши глупых паролей
+- `volatility -f file.dmp --profile=Win7SP1x64 clipboard` -> буфер глупого обмена
diff --git a/Linux Terminal.md b/Linux Admin/Linux Terminal.md
similarity index 100%
rename from Linux Terminal.md
rename to Linux Admin/Linux Terminal.md
diff --git a/Абузы.md b/Linux Admin/Абузы.md
similarity index 100%
rename from Абузы.md
rename to Linux Admin/Абузы.md
diff --git a/Network.md b/Network.md
new file mode 100644
index 0000000..1e1b599
--- /dev/null
+++ b/Network.md
@@ -0,0 +1,13 @@
+### Wireshark
+Эээээ... а что писать? Там всё есть
+- `Follow` для текста
+- `Export objects` для картинок
+- Фильтры на HackTricks
+- Статистика сверху в Wireshark
+### Протоколы
+- ICMP - ping (pong!)
+- TCP - скушный текст, файлы и следование
+- UDP - быстрые данные
+- HTTP - хипертекст но без защиты
+- FTP - файлыыыы
+- SMTP - письмы
\ No newline at end of file
diff --git a/Web.md b/Web.md
new file mode 100644
index 0000000..41305eb
--- /dev/null
+++ b/Web.md
@@ -0,0 +1,13 @@
+(памагити)
+Только HackTricks тебе в помощь.
+Помнить про IDOR и подобные смешные уязвы
+### SQLmap
+`sqlmap -u "http://example.com/?id=1"`
+а оcтальное на HackTricks
+
+### База для начала
+- /robots.txt 
+- /sitemap.xml 
+- /crossdomain.xml 
+- /clientaccesspolicy.xml 
+- /.well-known/
\ No newline at end of file
diff --git a/СЗИ.md b/СЗИ.md
new file mode 100644
index 0000000..01838c8
--- /dev/null
+++ b/СЗИ.md
@@ -0,0 +1,2 @@
+(пиздец.)
+ 
\ No newline at end of file