VMware on sentinelchangelog.nethttp://sentinelchangelog.net/tags/vmware/Recent content in VMware on sentinelchangelog.netHugo -- 0.157.0enWed, 27 May 2026 15:42:07 +0000VMware Workspace ONE: New CCF Connector for UEM Device and Application Visibilityhttp://sentinelchangelog.net/posts/2026-05-27-pr-14258/Wed, 27 May 2026 15:42:07 +0000http://sentinelchangelog.net/posts/2026-05-27-pr-14258/VMware Workspace ONE Unified Endpoint Management platform now available in Microsoft Sentinel via CCF connector for device compliance monitoring and shadow IT detection.VMware ESXi: ASIM Authentication Parser for Host Access Monitoringhttp://sentinelchangelog.net/posts/2026-05-13-pr-13989/Wed, 13 May 2026 20:30:09 +0000http://sentinelchangelog.net/posts/2026-05-13-pr-13989/New ASIM parser normalizes VMware ESXi authentication events to enable centralized logon monitoring for hypervisor infrastructure.VMware vCenter ASIM Parser: DvcId Type Correction Prevents Query Failureshttp://sentinelchangelog.net/posts/2026-05-05-pr-14182/Tue, 05 May 2026 23:34:50 +0000http://sentinelchangelog.net/posts/2026-05-05-pr-14182/Fixed critical data type mismatch in VMware vCenter authentication parser that caused DvcId field queries to fail.Four Legacy Azure Function Connectors Marked for Deprecation - Migration to CCF Requiredhttp://sentinelchangelog.net/posts/2026-04-14-pr-14073/Tue, 14 Apr 2026 21:01:38 +0000http://sentinelchangelog.net/posts/2026-04-14-pr-14073/Microsoft has deprecated Azure Function-based connectors for Okta SSO, SentinelOne, Sophos Endpoint Protection, and VMware Carbon Black Cloud in favor of CCF alternatives.ASIM Authentication Schema: VMware vCenter Parser Enables Authentication Monitoring for On-Premises and Azure VMware Environmentshttp://sentinelchangelog.net/posts/2026-04-07-pr-13929/Tue, 07 Apr 2026 16:22:05 +0000http://sentinelchangelog.net/posts/2026-04-07-pr-13929/New ASIM parser normalizes VMware vCenter authentication events from syslog streams to enable detection coverage across vSphere environments.VMware Carbon Black Cloud Connector: Title Update to Clarify CCF Usagehttp://sentinelchangelog.net/posts/2026-03-25-pr-13901/Wed, 25 Mar 2026 16:08:07 +0000http://sentinelchangelog.net/posts/2026-03-25-pr-13901/Cosmetic title change to clarify the connector uses Codeless Connector Framework for AWS S3 ingestion.VMware ESXi Solution: Broken Link Removedhttp://sentinelchangelog.net/posts/2026-01-05-pr-13379/Mon, 05 Jan 2026 21:31:58 +0000http://sentinelchangelog.net/posts/2026-01-05-pr-13379/Documentation maintenance removing broken link from VMware ESXi solution.AWS and VMware ESXi: Three New Analytic Rules for Execution, Exfiltration, and Lateral Movementhttp://sentinelchangelog.net/posts/2025-10-09-pr-12696/Thu, 09 Oct 2025 12:07:12 +0000http://sentinelchangelog.net/posts/2025-10-09-pr-12696/Three new Analytic Rules added across AWS CloudTrail and VMware ESXi — detecting EC2 startup script tampering (T1059), anonymous S3 object exfiltration (T1530), and SSH enablement on ESXi hosts (T1021).