Investigate Surrounding Firewall Traffic
This is for when we need to investigate user navigation through proxy logs to understand if visit was intentional or if it was a sideload (redirect/iframe/malvertising) causing the navigation.
Microsoft Sentinel (KQL)

