diff --git a/datasets/attack_techniques/T1580/aws_iam_assume_role_policy_brute_force/asl_ocsf_cloudtrail.json b/datasets/attack_techniques/T1580/aws_iam_assume_role_policy_brute_force/asl_ocsf_cloudtrail.json
new file mode 100644
index 00000000..b3e4707e
--- /dev/null
+++ b/datasets/attack_techniques/T1580/aws_iam_assume_role_policy_brute_force/asl_ocsf_cloudtrail.json
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:f952a5fa40a42fda285d6ac87fdad2e183174e39fc22886ca9df9ea62595f75d
+size 11010