T1591 LinkedIn Company Overview Recon Scraping
Detects anomalous, high-frequency access to LinkedIn 'about' pages, which may indicate reconnaissance activity or attempts to gather sensitive organizational information by an adversary. The rule uses threshold-based aggregation to filter out standard search engine crawlers and identify potentially malicious scanning behavior.
Microsoft Sentinel (KQL)
