fix external links

Author: colleenmcginnis

docs/reference/prebuilt-rules-downloadable-updates/prebuilt-rule-0-13-1-apple-script-execution-followed-by-network-connection.md

@@ -26,7 +26,7 @@ Detects execution via the Apple script interpreter (osascript) followed by a net
 
 **References**:
 
-* [https://developer.apple.com/library/archive/documentation/LanguagesUtilities/Conceptual/MacAutomationScriptingGuide/index.html](https://developer.apple.com/library/archive/documentation/LanguagesUtilities/Conceptual/MacAutomationScriptingGuide/index.md)
+* [https://developer.apple.com/library/archive/documentation/LanguagesUtilities/Conceptual/MacAutomationScriptingGuide/index.html](https://developer.apple.com/library/archive/documentation/LanguagesUtilities/Conceptual/MacAutomationScriptingGuide/index.html)
 * [https://www.iana.org/assignments/iana-ipv4-special-registry/iana-ipv4-special-registry.xhtml](https://www.iana.org/assignments/iana-ipv4-special-registry/iana-ipv4-special-registry.xhtml)
 
 **Tags**:

docs/reference/prebuilt-rules-downloadable-updates/prebuilt-rule-0-13-1-aws-ec2-vm-export-failure.md

@@ -26,7 +26,7 @@ Identifies an attempt to export an AWS EC2 instance. A virtual machine (VM) expo
 
 **References**:
 
-* [https://docs.aws.amazon.com/vm-import/latest/userguide/vmexport.html#export-instance](https://docs.aws.amazon.com/vm-import/latest/userguide/vmexport.md#export-instance)
+* [https://docs.aws.amazon.com/vm-import/latest/userguide/vmexport.html#export-instance](https://docs.aws.amazon.com/vm-import/latest/userguide/vmexport.html#export-instance)
 
 **Tags**:
 

docs/reference/prebuilt-rules-downloadable-updates/prebuilt-rule-0-13-1-roshal-archive-rar-or-powershell-file-downloaded-from-the-internet.md

@@ -25,7 +25,7 @@ Detects a Roshal Archive (RAR) file or PowerShell script downloaded from the int
 
 **References**:
 
-* [https://www.fireeye.com/blog/threat-research/2017/04/fin7-phishing-lnk.html](https://www.fireeye.com/blog/threat-research/2017/04/fin7-phishing-lnk.md)
+* [https://www.fireeye.com/blog/threat-research/2017/04/fin7-phishing-lnk.html](https://www.fireeye.com/blog/threat-research/2017/04/fin7-phishing-lnk.html)
 * [https://www.justice.gov/opa/press-release/file/1084361/download](https://www.justice.gov/opa/press-release/file/1084361/download)
 * [https://www.iana.org/assignments/iana-ipv4-special-registry/iana-ipv4-special-registry.xhtml](https://www.iana.org/assignments/iana-ipv4-special-registry/iana-ipv4-special-registry.xhtml)
 

docs/reference/prebuilt-rules-downloadable-updates/prebuilt-rule-0-13-2-aws-ec2-full-network-packet-capture-detected.md

@@ -26,7 +26,7 @@ Identifies potential Traffic Mirroring in an Amazon Elastic Compute Cloud (EC2)
 
 **References**:
 
-* [https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_TrafficMirrorFilter.html](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_TrafficMirrorFilter.md)
+* [https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_TrafficMirrorFilter.html](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_TrafficMirrorFilter.html)
 * [https://github.com/easttimor/aws-incident-response](https://github.com/easttimor/aws-incident-response)
 
 **Tags**:

docs/reference/prebuilt-rules-downloadable-updates/prebuilt-rule-0-13-2-aws-ec2-vm-export-failure.md

@@ -26,7 +26,7 @@ Identifies an attempt to export an AWS EC2 instance. A virtual machine (VM) expo
 
 **References**:
 
-* [https://docs.aws.amazon.com/vm-import/latest/userguide/vmexport.html#export-instance](https://docs.aws.amazon.com/vm-import/latest/userguide/vmexport.md#export-instance)
+* [https://docs.aws.amazon.com/vm-import/latest/userguide/vmexport.html#export-instance](https://docs.aws.amazon.com/vm-import/latest/userguide/vmexport.html#export-instance)
 
 **Tags**:
 

docs/reference/prebuilt-rules-downloadable-updates/prebuilt-rule-0-13-2-aws-rds-instance-creation.md

@@ -26,7 +26,7 @@ Identifies the creation of an Amazon Relational Database Service (RDS) Aurora da
 
 **References**:
 
-* [https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_CreateDBInstance.html](https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_CreateDBInstance.md)
+* [https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_CreateDBInstance.html](https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_CreateDBInstance.html)
 
 **Tags**:
 

docs/reference/prebuilt-rules-downloadable-updates/prebuilt-rule-0-13-2-aws-rds-security-group-creation.md

@@ -26,7 +26,7 @@ Identifies the creation of an Amazon Relational Database Service (RDS) Security
 
 **References**:
 
-* [https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_CreateDBSecurityGroup.html](https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_CreateDBSecurityGroup.md)
+* [https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_CreateDBSecurityGroup.html](https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_CreateDBSecurityGroup.html)
 
 **Tags**:
 

docs/reference/prebuilt-rules-downloadable-updates/prebuilt-rule-0-13-2-aws-rds-security-group-deletion.md

@@ -26,7 +26,7 @@ Identifies the deletion of an Amazon Relational Database Service (RDS) Security
 
 **References**:
 
-* [https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DeleteDBSecurityGroup.html](https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DeleteDBSecurityGroup.md)
+* [https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DeleteDBSecurityGroup.html](https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DeleteDBSecurityGroup.html)
 
 **Tags**:
 

docs/reference/prebuilt-rules-downloadable-updates/prebuilt-rule-0-13-2-aws-rds-snapshot-export.md

@@ -26,7 +26,7 @@ Identifies the export of an Amazon Relational Database Service (RDS) Aurora data
 
 **References**:
 
-* [https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_StartExportTask.html](https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_StartExportTask.md)
+* [https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_StartExportTask.html](https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_StartExportTask.html)
 
 **Tags**:
 

docs/reference/prebuilt-rules-downloadable-updates/prebuilt-rule-0-13-2-aws-route-53-domain-transfer-lock-disabled.md

@@ -26,8 +26,8 @@ Identifies when a transfer lock was removed from a Route 53 domain. It is recomm
 
 **References**:
 
-* [https://docs.aws.amazon.com/Route53/latest/APIReference/API_Operations_Amazon_Route_53.html](https://docs.aws.amazon.com/Route53/latest/APIReference/API_Operations_Amazon_Route_53.md)
-* [https://docs.aws.amazon.com/Route53/latest/APIReference/API_domains_DisableDomainTransferLock.html](https://docs.aws.amazon.com/Route53/latest/APIReference/API_domains_DisableDomainTransferLock.md)
+* [https://docs.aws.amazon.com/Route53/latest/APIReference/API_Operations_Amazon_Route_53.html](https://docs.aws.amazon.com/Route53/latest/APIReference/API_Operations_Amazon_Route_53.html)
+* [https://docs.aws.amazon.com/Route53/latest/APIReference/API_domains_DisableDomainTransferLock.html](https://docs.aws.amazon.com/Route53/latest/APIReference/API_domains_DisableDomainTransferLock.html)
 
 **Tags**: