diff --git a/datasets/attack_techniques/T1059.002/osascript/osascript_prompts_user.log b/datasets/attack_techniques/T1059.002/osascript/osascript_prompts_user.log
new file mode 100644
index 000000000..cd62a206e
--- /dev/null
+++ b/datasets/attack_techniques/T1059.002/osascript/osascript_prompts_user.log
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:8d9a4664b4659024da715b6686e50c86cfd95ca6f6616f1652ade5134cb4aaa2
+size 2853
diff --git a/datasets/attack_techniques/T1059.002/osascript/osascript_prompts_user.yml b/datasets/attack_techniques/T1059.002/osascript/osascript_prompts_user.yml
new file mode 100644
index 000000000..41d395248
--- /dev/null
+++ b/datasets/attack_techniques/T1059.002/osascript/osascript_prompts_user.yml
@@ -0,0 +1,13 @@
+author: Radka Viskova
+id: 67d286c1-1f42-47c1-806a-eb976bb9c542
+date: '2026-08-07'
+description: Generated dataset for osascript execution prompting for user interaction with osquery and endpoint security
+environment: TalosOffensiveLab
+directory: osascript
+mitre_technique: 
+- T1059.002
+datasets:
+- name: osascript_prompts_user
+  path: /datasets/attack_techniques/T1059.002/osascript/osascript_prompts_user.log
+  sourcetype: osquery:results
+  source: osquery