Executive Team Page Enumeration

Darshan Thummar@Mighty

•updated Jun 10, 2026•0•0•2

This rule detects repeated HTTP requests to URIs containing the word "executive" (case-insensitive) from a single source IP address within a 30-second window. This behavior could indicate an attempt to enumerate executive team pages, potentially for reconnaissance purposes.