LinkedIn Company Overview Recon Scraping

Darshan Thummar@Mighty

•updated Jun 10, 2026•0•0•2

This rule detects potential reconnaissance activity involving scraping LinkedIn company overview pages. It triggers when a client makes 10 or more HTTP requests to 'linkedin.com' with a URI containing '/about/' within a 60-second window. This pattern suggests automated or rapid collection of public company information from LinkedIn.