From 00ce690e45853831db936d87caae608e717a91ac Mon Sep 17 00:00:00 2001
From: Ming Di Leom <2809763-curben@users.noreply.gitlab.com>
Date: Sun, 21 Dec 2025 00:26:53 +0000
Subject: [PATCH] docs(unusual-ua): add more references

---
 source/threat-hunting/unusual-user-agent.md | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/source/threat-hunting/unusual-user-agent.md b/source/threat-hunting/unusual-user-agent.md
index fa1277a..6e08872 100644
--- a/source/threat-hunting/unusual-user-agent.md
+++ b/source/threat-hunting/unusual-user-agent.md
@@ -2,9 +2,10 @@
 title: Unusual User Agent
 layout: page
 date: 2025-07-27
+updated: 2025-12-21
 ---
 
-References: [1](https://www.security.com/threat-intelligence/shuckworm-ukraine-gammasteel)
+References: [1](https://www.security.com/threat-intelligence/shuckworm-ukraine-gammasteel), [2](https://blog.talosintelligence.com/new-persistent-attacks-japan/#initial-access), [NanoRemote](https://www.elastic.co/security-labs/nanoremote#network-communication)
 SPL:
 
 ```spl