diff --git a/datasets/attack_techniques/T1562.001/linux_auditd_rules_removed/linux_auditd_rules_removed.log b/datasets/attack_techniques/T1562.001/linux_auditd_rules_removed/linux_auditd_rules_removed.log
new file mode 100644
index 00000000..8b66eb3a
--- /dev/null
+++ b/datasets/attack_techniques/T1562.001/linux_auditd_rules_removed/linux_auditd_rules_removed.log
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:3e40a3f70437392b7e721d9afd7f0df6add931aacc5d330c712ae4cffef24022
+size 1156