diff --git a/clusters/tool.json b/clusters/tool.json
index ba8c114..f4f34b9 100644
--- a/clusters/tool.json
+++ b/clusters/tool.json
@@ -11,7 +11,7 @@
   ],
   "description": "threat-actor-tools is an enumeration of tools used by adversaries. The list includes malware but also common software regularly used by the adversaries.",
   "uuid": "0d821b68-9d82-4c6d-86a6-1071a9e0f79f",
-  "version": 59,
+  "version": 60,
   "values": [
     {
       "meta": {
@@ -4080,6 +4080,15 @@
         ]
       },
       "uuid": "7b20b78a-df6e-40c7-9a3a-363f040cfad7"
+    },
+    {
+      "value": "SHARPKNOT",
+      "meta": {
+        "refs": [
+          "https://www.us-cert.gov/sites/default/files/publications/MAR-10135536.11.WHITE.pdf"
+        ]
+      },
+      "uuid": "3784c74-691a-4110-94f6-66e60224aa92"
     }
   ]
 }