I dont even know pt final

Author: sd9777

rules/linux/file_event/file_event_lnx_new_suid_file.yml

@@ -3,13 +3,12 @@ title: Linux New SUID/SGID File Creation
 id: b6f8d3a2-4c9e-4f1e-9a2b-6e7d8c9f0a1b
 status: experimental
 description: Detects creation or permission changes that set the SUID (set-user-ID) or SGID (set-group-ID) bits on files — commonly used by attackers for privilege escalation or persistence.
-references:
-    - https://attack.mitre.org/techniques/T1548/004/
 author: Sesha Duraiarasan
 date: 2025-10-09
 tags:
     - attack.privilege-escalation
     - attack.t1548
+    - mitre.t1548
 logsource:
     product: linux
     category: file_event