ESXi Syslog Configuration Change Via ESXCLI — Detection Rule

Detects changes to the ESXi syslog configuration via "esxcli"

Read the full analysis on IntelFusions