Confluence Wiki Bulk Export

This rule detects HTTP requests to the '/spaces/exportspace.action' URI, which is associated with bulk export functionality in Confluence Wiki. This activity could indicate an attempt to exfiltrate data from a Confluence instance.