diff --git a/datasets/attack_techniques/T1620/linux_auditd_memfd_create/linux_auditd_memfd_create.log b/datasets/attack_techniques/T1620/linux_auditd_memfd_create/linux_auditd_memfd_create.log
new file mode 100644
index 000000000..40837dbec
--- /dev/null
+++ b/datasets/attack_techniques/T1620/linux_auditd_memfd_create/linux_auditd_memfd_create.log
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:6790dd7818d82787a9031450ca4126a84be6e4b55cdbd98e76da477a50a25e5d
+size 1349