Squid Proxy Server Communication on Port 21
Detects network connections initiated by the Squid proxy server (squid.exe) on port 21, which is typically used for FTP. This could indicate unusual or potentially malicious use of the proxy, as FTP traffic through a proxy on this port might be unexpected.
Microsoft Sentinel (KQL)
