like if I wanted to add the osx-attacks.conf

Assuming you’re using kolide fleet, you would use fleetctl to convert the pack to yaml then apply it