diff --git a/Networking_Forensics/10_HTTP_tshark_Forensics_1_SYN_Flood.pptx b/Networking_Forensics/20_HTTP_tshark_Forensics_1_SYN_Flood.pptx
similarity index 100%
rename from Networking_Forensics/10_HTTP_tshark_Forensics_1_SYN_Flood.pptx
rename to Networking_Forensics/20_HTTP_tshark_Forensics_1_SYN_Flood.pptx
diff --git a/Networking_Forensics/30_SMTP_Email_Forensics.pptx b/Networking_Forensics/30_SMTP_Email_Forensics.pptx
index 079c261..0791da9 100644
Binary files a/Networking_Forensics/30_SMTP_Email_Forensics.pptx and b/Networking_Forensics/30_SMTP_Email_Forensics.pptx differ
diff --git a/Networking_Forensics/40_ARP_Poisoning_Forensics.pptx b/Networking_Forensics/40_ARP_Poisoning_Forensics.pptx
index 7846ee8..21ca7b4 100644
Binary files a/Networking_Forensics/40_ARP_Poisoning_Forensics.pptx and b/Networking_Forensics/40_ARP_Poisoning_Forensics.pptx differ
diff --git a/Networking_Forensics/70_DNS.pptx b/Networking_Forensics/70_DNS.pptx
index a1cc519..a304b01 100644
Binary files a/Networking_Forensics/70_DNS.pptx and b/Networking_Forensics/70_DNS.pptx differ
diff --git a/Networking_Forensics/20_Wireless_aircrack_WEP40_1.pptx b/Networking_Forensics/90_Wireless_aircrack_WEP40_1.pptx
similarity index 100%
rename from Networking_Forensics/20_Wireless_aircrack_WEP40_1.pptx
rename to Networking_Forensics/90_Wireless_aircrack_WEP40_1.pptx
diff --git a/Networking_Forensics/lab_files/smtp/smtp.pcap b/Networking_Forensics/lab_files/smtp/smtp.pcap
new file mode 100644
index 0000000..931b43b
Binary files /dev/null and b/Networking_Forensics/lab_files/smtp/smtp.pcap differ