ESXi VIB Acceptance Level Tampering

This detection identifies changes to the VIB (vSphere Installation Bundle) acceptance level on an ESXi host. Modifying the acceptance level, such as setting it to CommunitySupported, lowers the system's integrity enforcement and may allow the installation of unsigned or unverified software. This action can be an indicator of an adversary attempting to install malicious VIBs for persistence or other malicious activities.