diff --git a/datasets/attack_techniques/T1059.002/osascript_long_lived_connection_to_remote_host/osascript_long_lived_connection_to_remote_host.log b/datasets/attack_techniques/T1059.002/osascript_long_lived_connection_to_remote_host/osascript_long_lived_connection_to_remote_host.log
new file mode 100644
index 00000000..6aba8958
--- /dev/null
+++ b/datasets/attack_techniques/T1059.002/osascript_long_lived_connection_to_remote_host/osascript_long_lived_connection_to_remote_host.log
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:855769d585314fd41fddb16c7bb702b8036727185c478b1d2b38149f61b57d71
+size 1111
diff --git a/datasets/attack_techniques/T1059.002/osascript_long_lived_connection_to_remote_host/osascript_long_lived_connection_to_remote_host.yml b/datasets/attack_techniques/T1059.002/osascript_long_lived_connection_to_remote_host/osascript_long_lived_connection_to_remote_host.yml
new file mode 100644
index 00000000..efb752db
--- /dev/null
+++ b/datasets/attack_techniques/T1059.002/osascript_long_lived_connection_to_remote_host/osascript_long_lived_connection_to_remote_host.yml
@@ -0,0 +1,14 @@
+author: Radka Viskova
+id: 044b6a5e-e4a4-4d3d-a550-cc9c8c819e63
+date: '2026-09-18'
+description: Generated dataset for long lived connection to remote host initiated by the utility osascript, with Cisco Network Visibility Module Flow Data.
+environment: TalosOffensiveLab
+directory: osascript_long_lived_connection_to_remote_host
+mitre_technique:
+- T1059.002
+- T1059.004
+datasets:
+- name: osascript_long_lived_connection_to_remote_host
+  path: /datasets/attack_techniques/T1059.002/osascript_long_lived_connection_to_remote_host/osascript_long_lived_connection_to_remote_host.log
+  sourcetype: cisco:nvm:flowdata:v2
+  source: not_applicable
\ No newline at end of file