diff --git a/datasets/attack_techniques/T1556.003/linux_auditd_pam_backdoor/linux_auditd_pam_backdoor.log b/datasets/attack_techniques/T1556.003/linux_auditd_pam_backdoor/linux_auditd_pam_backdoor.log
new file mode 100644
index 00000000..fd5619f7
--- /dev/null
+++ b/datasets/attack_techniques/T1556.003/linux_auditd_pam_backdoor/linux_auditd_pam_backdoor.log
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:6669405d524e34c20113d352ebb3e9266eacd9cd3a5d625d0f1c09ef97e5d3a4
+size 2541