diff --git a/2012/w32_flamer_newsforyou.pdf b/2012/2012.05.18.Flamer_CnC/w32_flamer_newsforyou.pdf
similarity index 100%
rename from 2012/w32_flamer_newsforyou.pdf
rename to 2012/2012.05.18.Flamer_CnC/w32_flamer_newsforyou.pdf
diff --git a/2012/wp_ixeshe.pdf b/2012/2012.05.22.IXESHE/wp_ixeshe.pdf
similarity index 100%
rename from 2012/wp_ixeshe.pdf
rename to 2012/2012.05.22.IXESHE/wp_ixeshe.pdf
diff --git a/2012/skywiper.pdf b/2012/2012.05.31.Flame_sKyWIper/skywiper.pdf
similarity index 100%
rename from 2012/skywiper.pdf
rename to 2012/2012.05.31.Flame_sKyWIper/skywiper.pdf
diff --git a/2012/Tibet_Lurk.pdf b/2012/2012.07.10.SE_LURK_Malware/Tibet_Lurk.pdf
similarity index 100%
rename from 2012/Tibet_Lurk.pdf
rename to 2012/2012.07.10.SE_LURK_Malware/Tibet_Lurk.pdf
diff --git a/2012/2012.07.11.DarkComet_Creator/dark-comet-syrian-spy-tool.pdf b/2012/2012.07.11.DarkComet_Creator/dark-comet-syrian-spy-tool.pdf
new file mode 100644
index 0000000..90692ec
Binary files /dev/null and b/2012/2012.07.11.DarkComet_Creator/dark-comet-syrian-spy-tool.pdf differ
diff --git a/2012/From-Bahrain-With-Love-FinFishers-Spy-Kit-Exposed.pdf b/2012/2012.07.25.FinFisher_Spy_Kit/From-Bahrain-With-Love-FinFishers-Spy-Kit-Exposed.pdf
similarity index 100%
rename from 2012/From-Bahrain-With-Love-FinFishers-Spy-Kit-Exposed.pdf
rename to 2012/2012.07.25.FinFisher_Spy_Kit/From-Bahrain-With-Love-FinFishers-Spy-Kit-Exposed.pdf
diff --git a/2012/The_Madi_Infostealers.pdf b/2012/2012.07.27.Madi_Campaign/The_Madi_Infostealers.pdf
similarity index 100%
rename from 2012/The_Madi_Infostealers.pdf
rename to 2012/2012.07.27.Madi_Campaign/The_Madi_Infostealers.pdf
diff --git a/2012/kaspersky-lab-gauss.pdf b/2012/2012.08.09.Gauss/kaspersky-lab-gauss.pdf
similarity index 100%
rename from 2012/kaspersky-lab-gauss.pdf
rename to 2012/2012.08.09.Gauss/kaspersky-lab-gauss.pdf
diff --git a/README.md b/README.md
index 4993700..086bfee 100644
--- a/README.md
+++ b/README.md
@@ -711,14 +711,14 @@ APT28 group](http://csecybsec.com/download/zlab/20180713_CSE_APT28_X-Agent_Op-Ro
 * Sep 07 - [[Citizenlab] IEXPLORE RAT](https://citizenlab.org/wp-content/uploads/2012/09/IEXPL0RE_RAT.pdf)
 * Sep 06 - [[Symantec] The Elderwood Project](http://www.symantec.com/content/en/us/enterprise/media/security_response/whitepapers/the-elderwood-project.pdf)
 * Aug 18 - [[Trend Micro] The Taidoor Campaign AN IN-DEPTH ANALYSIS ](http://www.trendmicro.com/cloud-content/us/pdfs/security-intelligence/white-papers/wp_the_taidoor_campaign.pdf) | [Local](../../blob/master//2012/2012.08.18.Taidoor_Campaign)
-* Aug 09 - [[Kaspersky] Gauss: Abnormal Distribution](http://kasperskycontenthub.com/wp-content/uploads/sites/43/vlpdfs/kaspersky-lab-gauss.pdf)
-* Jul 27 - [[Kaspersky] The Madi Campaign](https://securelist.com/analysis/36609/the-madi-infostealers-a-detailed-analysis/)
-* Jul 25 - [[Citizenlab] From Bahrain With Love: FinFisher’s Spy Kit Exposed?](https://citizenlab.org/2012/07/from-bahrain-with-love-finfishers-spy-kit-exposed/)
-* Jul 11 - [[Wired] Wired article on DarkComet creator](http://www.wired.com/2012/07/dark-comet-syrian-spy-tool/)
-* Jul 10 - [[Citizenlab] Advanced Social Engineering for the Distribution of LURK Malware](https://citizenlab.org/wp-content/uploads/2012/07/10-2012-recentobservationsintibet.pdf)
-* May 31 - [[Crysys] sKyWIper (Flame/Flamer)](http://www.crysys.hu/skywiper/skywiper.pdf)
-* May 22 - [[Trend Micro] IXESHE An APT Campaign](http://www.trendmicro.com/cloud-content/us/pdfs/security-intelligence/white-papers/wp_ixeshe.pdf)
-* May 18 - [[Symantec] Analysis of Flamer C&C Server](http://www.symantec.com/content/en/us/enterprise/media/security_response/whitepapers/w32_flamer_newsforyou.pdf)
+* Aug 09 - [[Kaspersky] Gauss: Abnormal Distribution](http://kasperskycontenthub.com/wp-content/uploads/sites/43/vlpdfs/kaspersky-lab-gauss.pdf) | [Local](../../blob/master/2012/2012.08.09.Gauss)
+* Jul 27 - [[Kaspersky] The Madi Campaign](https://securelist.com/analysis/36609/the-madi-infostealers-a-detailed-analysis/) | [Local](../../blob/master/2012/2012.07.27.Madi_Campaign)
+* Jul 25 - [[Citizenlab] From Bahrain With Love: FinFisher’s Spy Kit Exposed?](https://citizenlab.org/2012/07/from-bahrain-with-love-finfishers-spy-kit-exposed/) | [Local](../../blob/master/2012/2012.07.25.FinFisher_Spy_Kit)
+* Jul 11 - [[Wired] Wired article on DarkComet creator](http://www.wired.com/2012/07/dark-comet-syrian-spy-tool/) | [Local](../../blob/master/2012/2012.07.11.DarkComet_Creator)
+* Jul 10 - [[Citizenlab] Advanced Social Engineering for the Distribution of LURK Malware](https://citizenlab.org/wp-content/uploads/2012/07/10-2012-recentobservationsintibet.pdf) | [Local](../../blob/master/2012/2012.07.10.SE_LURK_Malware)
+* May 31 - [[Crysys] sKyWIper (Flame/Flamer)](http://www.crysys.hu/skywiper/skywiper.pdf) | [Local](../../blob/master/2012/2012.05.31.Flame_sKyWIper)
+* May 22 - [[Trend Micro] IXESHE An APT Campaign](http://www.trendmicro.com/cloud-content/us/pdfs/security-intelligence/white-papers/wp_ixeshe.pdf) | [Local](../../blob/master/2012/2012.05.22.IXESHE)
+* May 18 - [[Symantec] Analysis of Flamer C&C Server](http://www.symantec.com/content/en/us/enterprise/media/security_response/whitepapers/w32_flamer_newsforyou.pdf) | [Local](../../blob/master/2012/2012.05.18.Flamer_CnC)
 * Apr 16 - [[Kaspersky] OSX.SabPub & Confirmed Mac APT attacks](http://securelist.com/blog/incidents/33208/new-version-of-osx-sabpub-confirmed-mac-apt-attacks-19/) | [Local](../../blob/master/2012/2012.04.16.OSX.SabPub)
 * Apr 10 - [[McAfee] Anatomy of a Gh0st RAT](http://www.mcafee.com/us/resources/white-papers/foundstone/wp-know-your-digital-enemy.pdf) | [Local](../../blob/master/2012/2012.04.10.Gh0st_RAT)
 * Mar 26 - [[Trend Micro] Luckycat Redux](http://www.trendmicro.com/cloud-content/us/pdfs/security-intelligence/white-papers/wp_luckycat_redux.pdf) | [Local](../../blob/master/2012/2012.03.26.Luckycat_Redux)