add two behaviors

credential-access/README.md

@@ -10,6 +10,7 @@ Behaviors to obtain credential access, allowing it or its underlying threat acto
 * **Capture SMS Messages** [T1412](https://github.com/MBCProject/mbc-markdown/blob/master/collection/capture-sms.md)
 * **Credential Dumping** [T1003](https://github.com/MBCProject/mbc-markdown/blob/master/credential-access/credential-dump.md)
 * **Credentials in Files** [T1081](https://github.com/MBCProject/mbc-markdown/blob/master/credential-access/credentials-in-files.md)
+* **Credentials in Registry** [T1214](https://github.com/MBCProject/mbc-markdown/blob/master/credential-access/credentials-in-registry.md)
 * **Hooking** [E1179](https://github.com/MBCProject/mbc-markdown/blob/master/credential-access/hooking.md)
 * **Input Capture** [T1056](https://github.com/MBCProject/mbc-markdown/blob/master/collection/input-capture.md)
 * **LLMNR/NBT-NS Poisoning** [T1171](https://github.com/MBCProject/mbc-markdown/blob/master/credential-access/LLMNR-poison.md)

credential-access/credentials-in-registry.md

@@ -0,0 +1,11 @@
+|||
+|---------|------------------------|
+|**ID**|**T1214**|
+|**Objective(s)**|[Credential Access](https://github.com/MBCProject/mbc-markdown/tree/master/credential-access)|
+|**Related ATT&CK Technique(s)**|[Credentials in Registry](https://attack.mitre.org/techniques/T1214/)|
+
+Credentials in Registry
+=======================
+Malware may query the Registry looking for credentials and passwords.
+
+**See ATT&CK:** [**Credentials in Registry**](https://attack.mitre.org/techniques/T1214/).

discovery/README.md

@@ -11,6 +11,7 @@ Behaviors that aim to gain knowledge about the system and internal network.
 * **Application Window Discovery** [T1010](https://github.com/MBCProject/mbc-markdown/blob/master/discovery/app-window-discover.md)
 * **Device Type Discovery** [T1419](https://github.com/MBCProject/mbc-markdown/blob/master/discovery/device-type-discover.md)
 * **File and Directory Discovery** [T1083](https://github.com/MBCProject/mbc-markdown/blob/master/discovery/file-and-directory-discover.md)
+* **Domain Trust Discovery** [T1482](https://github.com/MBCProject/mbc-markdown/blob/master/discovery/domain-trust-discover.md)
 * **Local Network Configuration Discovery** [T1422](https://github.com/MBCProject/mbc-markdown/blob/master/discovery/local-network-configuration-discover.md)
 * **Network Sniffing** [T1040](https://github.com/MBCProject/mbc-markdown/blob/master/discovery/network-sniff.md)
 * **Network Service Scanning** [T1046](https://github.com/MBCProject/mbc-markdown/blob/master/discovery/network-service-scan.md)

discovery/domain-trust-discover.md

@@ -0,0 +1,12 @@
+|||
+|---------|------------------------|
+|**ID**|**T1482**|
+|**Objective(s)**|[Discovery](https://github.com/MBCProject/mbc-markdown/tree/master/discovery)|
+|**Related ATT&CK Technique(s)**|[Domain Trust Discovery](https://attack.mitre.org/techniques/T1482)|
+
+
+Domain Trust Discovery
+======================
+Malware may attempt to gather information on domain trust relationships that might be used to identify lateral movement opportunities. 
+
+See ATT&CK: [**Domain Trust Discovery**](https://attack.mitre.org/techniques/T1482).