Potential Sensitive File Access on IIS Web Server

Ankit Mehta@Secvyn

•updated Jun 13, 2026•0•0•4

This rule detects attempts to access sensitive configuration or backup files on an IIS web server. It looks for requests where the URI stem contains keywords like '.env', 'config', or 'backup', which are commonly associated with files that may contain sensitive information.