diff --git a/README.md b/README.md
new file mode 100644
index 0000000..e1aaa6e
--- /dev/null
+++ b/README.md
@@ -0,0 +1,31 @@
+# CobaltStrike-ToolKit
+
+## CheckDA - Command
+
+Currently uses a powershell based check, combined with a aggressor script to check for the intial agent user name.
+While using .NET 3.5 to perform Domain Group enumeration (powershell 2+ safe). This allows for alerting on Pentest of a DA level beacons. 
+### Usage
+Load up the Script:
+```
+aggressor> load /root/Tools/CobaltStrike-ToolKit/Initial-DACheck.cna
+[+] Load /root/Tools/CobaltStrike-ToolKit/Initial-DACheck.cna
+```
+When a intial beacon comes in you recive a pop up box and will see:
+```
+[*] Tasked beacon to import: /root/Tools/CobaltStrike-ToolKit/Invoke-DACheck.ps1
+[*] Tasked beacon to run: Invoke-DACheck -Initial True
+[+] host called home, sent: 2527 bytes
+[+] received output:
+Found-DA-User: admin
+```
+### Independent Command:
+```
+beacon> checkda
+[*] Tasked beacon to import: /root/Tools/CobaltStrike-ToolKit/Invoke-DACheck.ps1
+[*] Tasked beacon to run: Invoke-DACheck
+[+] host called home, sent: 2519 bytes
+[+] received output:
+[!] Currently DA Context
+```
+
+