diff --git a/blix.nix b/blix.nix
index abc8250..11caf01 100644
--- a/blix.nix
+++ b/blix.nix
@@ -73,7 +73,7 @@ with lib;
     theharvester tor
 
     # disk analysis
-    testdisk squashfs-tools-ng ddrescue yara # volatility
+    testdisk squashfs-tools-ng ddrescue yara yarGen yallback spyre # volatility
     stegseek apktool adbfs-rootless ursadb android-udev-rules
     valgrind dos2unix file exiftool foremost pngcheck ccrypt
     docker xcd trufflehog sleuthkit radare2 radare2-cutter
diff --git a/manuals/blix-applications.7 b/manuals/blix-applications.7
index a170366..0222bab 100644
--- a/manuals/blix-applications.7
+++ b/manuals/blix-applications.7
@@ -103,6 +103,8 @@ manipulate a squashfs
 copy data from dying disk
 .It yara
 identify and classify malware
+.It spyre
+IOC scanner
 .\".It volatility
 .\"memory forsenics framework
 .It stegseek