ESXi Syslog Configuration Change Via ESXCLI (38eb1dbb-011f-40b1-a126-cf03a0210563)

Detects changes to the ESXi syslog configuration via "esxcli"

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Disable or Modify Tools - T1685 (bbde9781-60aa-4b8a-a911-895b0c1b3872)	Attack Pattern	ESXi Syslog Configuration Change Via ESXCLI (38eb1dbb-011f-40b1-a126-cf03a0210563)	Sigma-Rules	1
ESXi Syslog Configuration Change Via ESXCLI (38eb1dbb-011f-40b1-a126-cf03a0210563)	Sigma-Rules	Prevent Command History Logging - T1690 (b831f51c-d22f-4724-bbab-60d056bd1150)	Attack Pattern	1
Hypervisor CLI - T1059.012 (d2d642da-61ff-4211-b4df-7923c9ca220c)	Attack Pattern	ESXi Syslog Configuration Change Via ESXCLI (38eb1dbb-011f-40b1-a126-cf03a0210563)	Sigma-Rules	1
Hypervisor CLI - T1059.012 (d2d642da-61ff-4211-b4df-7923c9ca220c)	Attack Pattern	Command and Scripting Interpreter - T1059 (7385dfaf-6886-4229-9ecd-6fd678040830)	Attack Pattern	2