Staff Directory Scraping Detected

Darshan Thummar@Mighty

•updated Jun 10, 2026•0•0•2

This rule detects potential staff directory scraping by monitoring HTTP GET requests to URIs containing the word "staff". It triggers an alert if more than 20 such requests are observed from a single source IP within a 30-second window, indicating automated or rapid enumeration attempts.