diff --git a/atomics/T1110.003/T1110.003.yaml b/atomics/T1110.003/T1110.003.yaml
index c5bf14eb..7f44dbdb 100644
--- a/atomics/T1110.003/T1110.003.yaml
+++ b/atomics/T1110.003/T1110.003.yaml
@@ -10,6 +10,8 @@ atomic_tests:
     authentications occur. Use the input arguments to specify your own password to use for the password spray.
 
     Use the get_prereq_command's to create a list of all domain users in the temp directory called users.txt.
+
+    See the "Windows FOR Loop Password Spraying Made Easy" by @OrEqualsOne for more details on how these spray commands work. https://medium.com/walmartlabs/windows-for-loop-password-spraying-made-easy-c8cd4ebb86b5
   supported_platforms:
   - windows
   input_arguments: