Career Page Scraping for Role Identification

Darshan Thummar@Mighty

•updated Jun 10, 2026•0•0•1

This rule detects potential career page scraping activity, which could be an indicator of reconnaissance by an attacker. It triggers when a client makes 15 or more HTTP requests containing 'careers' in the URI within a 30-second window, suggesting automated or rapid browsing of career-related pages.