Annual Report or Financial Filing Page Access

Darshan Thummar@Mighty

•updated Jun 10, 2026•0•0•2

This rule detects repeated access attempts to web pages containing 'annual-report' in the URI. It triggers an alert if a single source IP makes 5 such requests within a 30-second window. This could indicate reconnaissance activity by an attacker looking for publicly available financial information.