Non-Private GRE Protocol Network Traffic
Detects network traffic using the Generic Routing Encapsulation (GRE) protocol originating from or destined to external (non-private) IP addresses. GRE is often used for tunneling and can be abused to bypass network security controls.
Microsoft Sentinel (KQL)

