Screaming Frog SEO Spider Execution Detected

Shadows VMB@Vemorian_Mort

•updated Jul 22, 2026•2•1•10

This rule detects the execution of the Screaming Frog SEO Spider application followed by outgoing network traffic to web ports (80/443). Screaming Frog is a legitimate web crawler often repurposed by adversaries for internal or external network reconnaissance and site scraping.