Supplier Chain Page Enumeration

Darshan Thummar@Mighty

•updated Jun 10, 2026•0•0•2

This rule detects potential enumeration of supplier-related pages on a web server. It triggers when a client makes 15 or more HTTP requests containing the case-insensitive string "supplier" in the URI within a 30-second window. This behavior could indicate an attacker attempting to discover sensitive information or entry points related to an organization's supply chain.