Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊
Identifies devices that currently have Tailscale SSH enabled. Tailscale SSH delivers SSH access over the tailnet using Tailscale identity and is governed by the SSH ACL block in the policy file.
| Attribute | Value |
|---|---|
| Type | Hunting Query |
| Solution | Tailscale (CCF) |
| ID | c3d4e5f6-7890-1234-5678-901234560044 |
| Tactics | LateralMovement, Persistence |
| Techniques | T1021 |
| Required Connectors | TailscaleCCF |
| Source | View on GitHub |
This content item queries data from the following tables:
| Table | Transformations | Ingestion API | Lake-Only |
|---|---|---|---|
Tailscale_Devices_CL |
? | ✓ | ? |
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊