Tailscale: Device key expiring within 7 days

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Content Index

---

Identifies tailnet devices whose machine key expires within the next 7 days and where key expiry is not disabled. Surface proactively so renewal can be scheduled rather than forced during an outage.

Attribute	Value
Type	Analytic Rule
Solution	Tailscale (CCF)
ID	b1a2c3d4-1234-5678-90ab-cdef12345001
Severity	Medium
Status	Available
Kind	Scheduled
Tactics	InitialAccess
Techniques	T1078
Required Connectors	TailscaleCCF
Source	View on GitHub

Tables Used

This content item queries data from the following tables:

Table	Transformations	Ingestion API	Lake-Only
Tailscale_Devices_CL	?	✓	?

---

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Analytic Rules · Back to Tailscale (CCF)