vmware
Login failure
B1-01 [PROD] vCenter: login failure detected (brute-force indicator)
soc_prod,b1,vcenter,auth,
T1110
vmware
SSH login is enabled
B1-02 [PROD] ESXi: SSH service enabled on host
soc_prod,b1,esxi,ssh,
T1021.004
vmware
sshd
B1-03 [PROD] ESXi: SSH authentication event detected
soc_prod,b1,esxi,ssh,
T1021.004