Drupal CMS Version Fingerprinting

Darshan Thummar@Mighty

•updated Jun 10, 2026•0•0•5

This rule detects attempts to fingerprint the version of a Drupal Content Management System (CMS) by requesting the 'CHANGELOG.txt' file. This file often contains version information and is a common target for attackers performing reconnaissance to identify potential vulnerabilities.