diff --git a/detections/container_implant_aws_detection.yml b/detections/container_implant_aws_detection.yml
index 5ab2ab5fba..7ea1f96ac0 100644
--- a/detections/container_implant_aws_detection.yml
+++ b/detections/container_implant_aws_detection.yml
@@ -57,8 +57,7 @@ original_authors:
   - company: Splunk
     email: rsoto@splunk.com, rvaldez@splunk.com
     name: Rod Soto, Rico Valdez
-references:
-  - https://github.com/splunk/cloud-datamodel-security-research
+references: [] 
 security_domain: threat
 spec_version: 2
 type: splunk
diff --git a/detections/container_implant_gcp_detection.yml b/detections/container_implant_gcp_detection.yml
index dcf932a968..0d99b5b5c7 100644
--- a/detections/container_implant_gcp_detection.yml
+++ b/detections/container_implant_gcp_detection.yml
@@ -53,8 +53,7 @@ original_authors:
   - company: Splunk
     email: rsoto@splunk.com, rvaldez@splunk.com
     name: Rod Soto, Rico Valdez
-references:
-  - https://github.com/splunk/cloud-datamodel-security-research
+references: []
 security_domain: threat
 spec_version: 2
 type: splunk
diff --git a/stories/container_implant_story.yml b/stories/container_implant_story.yml
index aa5d0bfa04..fd3d2badae 100644
--- a/stories/container_implant_story.yml
+++ b/stories/container_implant_story.yml
@@ -33,3 +33,5 @@ original_authors:
 spec_version: 2
 usecase: Security Monitoring
 version: '1.0' 
+references:
+  - https://github.com/splunk/cloud-datamodel-security-research