diff --git a/README.md b/README.md
index 82bfad6..3383225 100644
--- a/README.md
+++ b/README.md
@@ -1131,6 +1131,7 @@
 -  [JDBC-Attack：当 JDBC Connection URL 可控的情况下，可以做那些攻击](https://github.com/su18/JDBC-Attack)
 -  [从ByteCTF到bypass_disable_function](./books/从ByteCTF到bypass_disable_function.pdf)
 -  [利用安全描述符隐藏服务后门进行权限维持](./books/利用安全描述符隐藏服务后门进行权限维持.pdf)
+-  [理解 Windows 域渗透-Understanding_Windows_Lateral_Movements](./books/理解%20Windows%20域渗透-Understanding_Windows_Lateral_Movements.pdf)
 
 ## <span id="head9"> 说明</span>
 
diff --git a/books/理解 Windows 域渗透-Understanding_Windows_Lateral_Movements.pdf b/books/理解 Windows 域渗透-Understanding_Windows_Lateral_Movements.pdf
new file mode 100644
index 0000000..ce429d0
Binary files /dev/null and b/books/理解 Windows 域渗透-Understanding_Windows_Lateral_Movements.pdf differ