VMware ESXi: ASIM Authentication Parser for Host Access Monitoring
New ASIM parser normalizes VMware ESXi authentication events to enable centralized logon monitoring for hypervisor infrastructure. Read More →
VMware ESXi
VMware ESXi Solution: Broken Link Removed
Documentation maintenance removing broken link from VMware ESXi solution. Read More →
VMware ESXi SSH Brute Force Detection Plus Multi-Solution Updates
New VMware ESXi detection for multiple failed SSH login attempts, plus comprehensive solution updates across 15+ vendor solutions. Read More →
AWS and VMware ESXi: Three New Analytic Rules for Execution, Exfiltration, and Lateral Movement
Three new Analytic Rules added across AWS CloudTrail and VMware ESXi — detecting EC2 startup script tampering (T1059), anonymous S3 object exfiltration (T1530), and SSH enablement on ESXi hosts (T1021). Read More →