diff --git a/Windows Logon Sessions/README.md b/Windows Logon Sessions/README.md
index 4b8dbf3..060dd80 100644
--- a/Windows Logon Sessions/README.md
+++ b/Windows Logon Sessions/README.md
@@ -1,8 +1,19 @@
-### Sysinternals - Logonsessions [](https://myservice.socfortress.co/explore?left=%7B%22datasource%22:%22WAZUH%22,%22queries%22:%5B%7B%22refId%22:%22A%22,%22query%22:%22_id:$get_alert_id.hits.hits.#._id%22,%22alias%22:%22%22,%22metrics%22:%5B%7B%22id%22:%221%22,%22type%22:%22logs%22,%22settings%22:%7B%22limit%22:%22500%22%7D%7D%5D,%22bucketAggs%22:%5B%5D,%22timeField%22:%22timestamp%22%7D%5D,%22range%22:%7B%22from%22:%22now-6h%22,%22to%22:%22now%22%7D%7D) [](https://hunt.socfortress.co) [](https://servicedesk.socfortress.co/help/2979687893)
-### Description
-## Sysinternals Logonsessions - Official documentation.
+[](https://www.socfortress.co/)
+
+# Sysinternals - Logonsessions [](https://www.socfortress.co/trial.html)
+> If you think that when you logon to a system there's only one active logon session, this utility will surprise you. It lists the currently active logon sessions and, if you specify the -p option, the processes running in each session.
+
+[![MIT License][license-shield]][license-url]
+[![LinkedIn][linkedin-shield]][linkedin-url]
+[](https://www.socfortress.co/trial.html)
+
+
+## Description
+
+[Sysinternals Logonsessions - Official documentation.](https://docs.microsoft.com/en-us/sysinternals/downloads/logonsessions)
+
+## Wazuh Integration
-Wazuh Integration
Wazuh Capability: Wodles Command
Log Output: Active Response Log
@@ -40,10 +51,34 @@ Foreach ($item in $Sessions_Output_Array) {
echo $item | ConvertTo-Json -Compress | Out-File -width 2000 C:\"Program Files (x86)"\ossec-agent\active-response\active-responses.log -Append -Encoding ascii
}
```
-----------------------------------------------------------------------------------
-
-
-
+
+## Need Help?
+
+SOCFortress - [![LinkedIn][linkedin-shield]][linkedin-url] - info@socfortress.co
+
+
Let SOCFortress Professional Services Take Your Open Source SIEM to the Next Level
+
+
-
+
+
+