Access to Temporary Cloudflare Tunnel Domain
Monitors for systems communicating with trycloudflare.com infrastructure, which may indicate creation or use of temporary Cloudflare tunnels capable of bypassing traditional remote access controls.
Microsoft Sentinel (KQL)

