Organization Information Harvesting via Web Scraping

Darshan Thummar@Mighty

•updated Jun 10, 2026•0•0•6

This rule detects potential organization information harvesting via web scraping. It triggers when a client makes 25 or more HTTP GET requests to URIs containing the string "about" (case-insensitive) within a 20-second window. This behavior could indicate an automated script or tool attempting to gather information from a website's 'about us' or similar pages.