Team and Roles Page Bulk Scraping

Darshan Thummar@Mighty

•updated Jun 10, 2026•0•0•2

This rule detects bulk scraping of 'team' or 'roles' pages on a web server. It triggers an alert if a client makes 15 or more HTTP requests containing 'team' (case-insensitive) in the URI within a 30-second window. This behavior is indicative of reconnaissance activities, specifically collecting information about an organization's structure or personnel.