Protocol Tunneling and Remote Exposure Tools
Detects execution of tunneling, proxy, and remote exposure tools associated with unauthorized access and protocol tunneling and web sockets.
Microsoft Sentinel (KQL)

Detects execution of tunneling, proxy, and remote exposure tools associated with unauthorized access and protocol tunneling and web sockets.

Already have an account?