diff --git a/datasets/attack_techniques/T1486/aws_kms_key/asl_ocsf_cloudtrail.json b/datasets/attack_techniques/T1486/aws_kms_key/asl_ocsf_cloudtrail.json
new file mode 100644
index 00000000..0bd9ec40
--- /dev/null
+++ b/datasets/attack_techniques/T1486/aws_kms_key/asl_ocsf_cloudtrail.json
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:434647abfc8e32a81f53b03904f60cffbe8116b496a8bbf8e9d963c1228076d0
+size 8570