Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
22 detections
Filters
Last updated
All Time
Detection languages
12
10
Contributors
10
8
4
Categories
21
11
8
4
4
Platforms
22
5
Products / Services
12
11
4
MITRE Techniques
18,116
15,636
12,583
8,393
6,223
IDS Classtypes
8
3
1
IDS Protocols
8
4
This rule detects bulk enumeration of a company's overview page by monitoring HTTP requests. It triggers an alert if a source IP makes 20 or more requests containing 'company' in the URI within a 30-second window, indicating a potential network scan or reconnaissance activity.
Page 2 of 2