I want to be able to perform a search across a list of internal IPs making http/https GET and POST requests to external sources AFTER or at the SAME TIME a specific external IP is making inbound connection attempts of any kind to them.
Please can you share (anonymised) sample events of both outbound and inbound connection attempts?
