diff --git a/command-and-control/command-control-comm.md b/command-and-control/command-control-comm.md
index e36f09c..be46257 100644
--- a/command-and-control/command-control-comm.md
+++ b/command-and-control/command-control-comm.md
@@ -6,7 +6,7 @@
 
 C2 Communication
 ================
-All command and control malware uses client/server communication. The methods listed below can be used to capture explicit communication details. 
+All command and control malware uses client/server communication. The methods listed below can be used to capture explicit communication details. Remote file copy behavior is captured separately, as is done in ATT&CK - see [Remote File Copy](https://github.com/MBCProject/mbc-markdown/blob/master/command-and-control/remote-file-copy.md).
 
 Command and Control Communication relates to *autonomous* client/server communications, not commands that are provided to an adversary. Commands provided to an attacker should be captured under [Remote Commands](https://github.com/MBCProject/mbc-markdown/blob/master/execution/remote-commands.md) under the Execution objective.
 
diff --git a/exfiltration/data-obfuscate.md b/exfiltration/data-obfuscate.md
index 65f4389..b1805bc 100644
--- a/exfiltration/data-obfuscate.md
+++ b/exfiltration/data-obfuscate.md
@@ -7,7 +7,7 @@
 
 Data Obfuscated
 ===============
-Malware may obfuscate data before exfiltration. This behavior is more 
+Malware may obfuscate data before exfiltration.
 
 **See ATT&CK Technique:** [**Data Encrypted**](https://attack.mitre.org/techniques/T1022/).