diff --git a/WindowsServices/The_Defenders_Guide_to_Windows_Services.md b/WindowsServices/The_Defenders_Guide_to_Windows_Services.md
index 76670ca..5f94345 100644
--- a/WindowsServices/The_Defenders_Guide_to_Windows_Services.md
+++ b/WindowsServices/The_Defenders_Guide_to_Windows_Services.md
@@ -163,3 +163,4 @@ As seen above, many of the events are dependent on the RPC call RCreateService*
 * [QueryServiceObjectSecurity](https://learn.microsoft.com/en-us/windows/desktop/api/winsvc/nf-winsvc-queryserviceobjectsecurity)
 * [ProtectionChecks.ps1](https://gist.github.com/jsecurity101/6b9e87f5a428f31d41ffc8c1ee05a999)
 * [The Evolution of Protected Processes](https://www.crowdstrike.com/blog/evolution-protected-processes-part-1-pass-hash-mitigations-windows-81/)
+