Tailscale Premium: New posture integration added

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Content Index

---

Identifies when a new device-posture integration is added to the tailnet (Jamf, Kandji, Intune, Kolide, Defender for Endpoint, CrowdStrike, SentinelOne). Verify the addition was sanctioned.

Attribute	Value
Type	Analytic Rule
Solution	Tailscale (CCF)
ID	b2c3d4e5-6789-0123-45ab-cdef12345031
Severity	Medium
Status	Available
Kind	Scheduled
Tactics	Persistence
Techniques	T1098
Required Connectors	TailscalePremiumCCF
Source	View on GitHub

Tables Used

This content item queries data from the following tables:

Table	Transformations	Ingestion API	Lake-Only
Tailscale_Audit_CL	?	✓	?

---

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Analytic Rules · Back to Tailscale (CCF)