Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
2 detections
Filters
Last updated
All Time
Detection languages
1
1
Contributors
1
1
Categories
1
1
1
1
Platforms
1
1
Products / Services
2
MITRE Techniques
18,079
15,542
12,519
8,344
6,154
The following analytic identifies the use of the esxcli system auditrecords commands, which can be used to tamper with logging on an ESXi host.
This action may indicate an attempt to evade detection or hinder forensic analysis by preventing the recording of system-level audit events.
This action may indicate an attempt to evade detection or hinder forensic analysis by preventing the recording of system-level audit events.
Detects changes to the ESXi syslog configuration via "esxcli"
