Press Release Page Bulk Access for Business Intel

Darshan Thummar@Mighty

•updated Jun 10, 2026•0•0•1

This rule detects bulk access to web pages containing the term 'press' in their URI, indicating potential business intelligence gathering or reconnaissance activity. It triggers an alert if a single source IP makes 20 or more such requests within a 30-second window.