diff --git a/Illegal_Possession_Images/HTTP_Wireshark_Forensics_2_image.pptx b/Illegal_Possession_Images/HTTP_Wireshark_Forensics_2_image.pptx
index e25085e..244693d 100644
Binary files a/Illegal_Possession_Images/HTTP_Wireshark_Forensics_2_image.pptx and b/Illegal_Possession_Images/HTTP_Wireshark_Forensics_2_image.pptx differ
diff --git a/Illegal_Possession_Images/Intro_1_USB_Image_Acquisition.pptx b/Illegal_Possession_Images/Intro_1_USB_Image_Acquisition.pptx
new file mode 100644
index 0000000..9a7ce6c
Binary files /dev/null and b/Illegal_Possession_Images/Intro_1_USB_Image_Acquisition.pptx differ
diff --git a/Illegal_Possession_Images/The_Sleuth_Kit_Tutorial.pptx b/Illegal_Possession_Images/Intro_2_The_Sleuth_Kit_Tutorial.pptx
similarity index 100%
rename from Illegal_Possession_Images/The_Sleuth_Kit_Tutorial.pptx
rename to Illegal_Possession_Images/Intro_2_The_Sleuth_Kit_Tutorial.pptx
diff --git a/Illegal_Possession_Images/Rhion_Possession_1_File_Recovering.pptx b/Illegal_Possession_Images/Rhion_Possession_1_File_Recovering.pptx
index 821a242..e07c443 100644
Binary files a/Illegal_Possession_Images/Rhion_Possession_1_File_Recovering.pptx and b/Illegal_Possession_Images/Rhion_Possession_1_File_Recovering.pptx differ
diff --git a/Illegal_Possession_Images/Rhion_Possession_2_Steganography.pptx b/Illegal_Possession_Images/Rhion_Possession_2_Steganography.pptx
index 5271a6f..b188080 100644
Binary files a/Illegal_Possession_Images/Rhion_Possession_2_Steganography.pptx and b/Illegal_Possession_Images/Rhion_Possession_2_Steganography.pptx differ
diff --git a/Illegal_Possession_Images/Rhion_Possession_3_FTP_Traffic_crackzip.pptx b/Illegal_Possession_Images/Rhion_Possession_3_FTP_Traffic_crackzip.pptx
index 77653f0..e42889c 100644
Binary files a/Illegal_Possession_Images/Rhion_Possession_3_FTP_Traffic_crackzip.pptx and b/Illegal_Possession_Images/Rhion_Possession_3_FTP_Traffic_crackzip.pptx differ
diff --git a/Illegal_Possession_Images/Rhion_Possession_4_HTTP_Traffic.pptx b/Illegal_Possession_Images/Rhion_Possession_4_HTTP_Traffic.pptx
index d5aca87..a410e4c 100644
Binary files a/Illegal_Possession_Images/Rhion_Possession_4_HTTP_Traffic.pptx and b/Illegal_Possession_Images/Rhion_Possession_4_HTTP_Traffic.pptx differ
diff --git a/README.md b/README.md
index 856e3c9..f7b237b 100644
--- a/README.md
+++ b/README.md
@@ -110,13 +110,14 @@ The [case study](https://github.com/frankwxu/digital-forensics-lab/tree/main/Ill
 
 | Labs  | Topics Covered                                                       | Size of PPTs |
 | ----- | -------------------------------------------------------------------- | ------------ |
-| Lab 0 | HTTP Analysis using Wireshark (text)                                 | 3M           |
-| Lab 1 | HTTP Analysis using Wireshark (image)                                | 6M           |
-| Lab 2 | The Sleuth Kid Tutorial                                              | 1M           |
-| Lab 3 | Rhion Possession Investigation 1: File recovering                    | 9M           |
-| Lab 4 | Rhion Possession Investigation 2: Steganography                      | 4M           |
-| Lab 5 | Rhion Possession Investigation 3: Extract Evidence from FTP Traffic  | 3M           |
-| Lab 6 | Rhion Possession Investigation 4: Extract Evidence from HTTP Traffic | 5M           |
+| Lab 0 | Intro USB_Image_Acquisition                                          | 2M           |
+| Lab 1 | Intro The Sleuth Kid Tutorial                                        | 1M           |
+| Lab 2 | HTTP Analysis using Wireshark (text)                                 | 3M           |
+| Lab 3 | HTTP Analysis using Wireshark (image)                                | 6M           |
+| Lab 5 | Rhion Possession Investigation 1: File recovering                    | 9M           |
+| Lab 6 | Rhion Possession Investigation 2: Steganography                      | 4M           |
+| Lab 7 | Rhion Possession Investigation 3: Extract Evidence from FTP Traffic  | 3M           |
+| Lab 8 | Rhion Possession Investigation 4: Extract Evidence from HTTP Traffic | 5M           |
 
 ### Investigating Email Harassment