Physical Office Location Lookup via Web

Darshan Thummar@Mighty

•updated Jun 10, 2026•0•0•1

This rule detects attempts to look up physical office locations via web requests. It specifically triggers on HTTP GET requests where the URI contains both 'office' and 'location' (case-insensitive). A threshold of 10 such requests from the same source within 30 seconds is set to reduce false positives.