IoT Device Firmware Disclosure Page Access

Darshan Thummar@Mighty

•updated Jun 10, 2026•0•0•1

This rule detects attempts to access a web page on an IoT device that contains both 'about' and 'firmware' in its URI, case-insensitively. This could indicate an attacker or researcher attempting to discover firmware details or disclosure pages on IoT devices, potentially as part of a reconnaissance effort.