diff --git a/CHANGELOG.md b/CHANGELOG.md
index df95209..4b240a3 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,7 @@
+- remote dll support
+- remove unnecessary lines - little changes
+- little changes
+- v0.1 - major changes, firex, code improvement and more
 - halo's gate, uuidfromstring injection, more CLI flags and more
 - stable amsi patch, more functions and other improvements
 - new example images added
diff --git a/README.md b/README.md
index 2bb7e60..98678f7 100644
--- a/README.md
+++ b/README.md
@@ -179,6 +179,10 @@ As you can see Hooka provides a lot of CLI flags to help you in all kind of situ
 
 :black_square_button: `--pid` flag to handle process injection
 
+:black_square_button: Sandboxing functions
+
+:black_square_button: Native golang [Phant0m](https://github.com/hlldz/Phant0m) to suspend EventLog threads
+
 :black_square_button: Integrated Seatbelt.exe using CLR
 
 :black_square_button: Test unhooking functions against EDRs
diff --git a/core/phant0m.go b/core/phant0m.go
new file mode 100644
index 0000000..9a8bc95
--- /dev/null
+++ b/core/phant0m.go
@@ -0,0 +1 @@
+package core
diff --git a/core/sandbox.go b/core/sandbox.go
new file mode 100644
index 0000000..9a8bc95
--- /dev/null
+++ b/core/sandbox.go
@@ -0,0 +1 @@
+package core