Detect Suspicious HTTP Requests

Igor Oliveira@Pr0fiLeRR

•updated Feb 22, 2026•5•0•166

This rule detects HTTPS requests that should have been blocked but are not, for example: Query Strings with malicious traits like 1=1, attempt to enter <script> in the URL, URL containing ../ indicating Directory Traversal attempt, and so on.