Tailscale serve TCP forward to tailscaled Unix socket with socket swap flag

ills3c Intel&Coffee@Ills3C

•updated 4 days ago•0•0•1

Detects Tailscale serve commands setting up a TCP forward to a Unix socket (such as tailscaled.sock), correlated with recent file creation, modification, or renaming events involving the socket file by a non-standard process within a 1-hour window.