Source Code Enumeration Detection by Keyword

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•20

This rule detects attempts to enumerate source code repositories, specifically Git repositories, by looking for '.git/' in the URL of GET requests. This activity often indicates an attacker attempting to discover exposed source code.