Possible HTTP Data Exfiltration (Large POST)

Darshan Thummar@Mighty

•updated Jun 10, 2026•1•0•3

Detects unusually large HTTP POST requests which may indicate data exfiltration activity over web protocols. The rule specifically looks for HTTP POST methods and is designed for Suricata, a network intrusion detection system.