diff --git a/hashes/readme.md b/hashes/readme.md
new file mode 100644
index 0000000..3f29992
--- /dev/null
+++ b/hashes/readme.md
@@ -0,0 +1 @@
+Placeholder for upcoming Virustotal submission script via Sysmon logs/hashes.