diff --git a/datasets/attack_techniques/T1537/aws_snapshot_exfil/asl_ocsf_cloudtrail.json b/datasets/attack_techniques/T1537/aws_snapshot_exfil/asl_ocsf_cloudtrail.json
new file mode 100644
index 00000000..dae9f60e
--- /dev/null
+++ b/datasets/attack_techniques/T1537/aws_snapshot_exfil/asl_ocsf_cloudtrail.json
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:dec5e0ff02540423cc1e46df46277d4cc50102a174e7c01d8c148528e3aee7d6
+size 5126