Company Overview Page Bulk Enumeration

Darshan Thummar@Mighty

•updated Jun 10, 2026•0•0•1

This rule detects bulk enumeration of a company's overview page by monitoring HTTP requests. It triggers an alert if a source IP makes 20 or more requests containing 'company' in the URI within a 30-second window, indicating a potential network scan or reconnaissance activity.