Pattern 12 : General WMWare Messages | LogRhythm Documentation

Classification

Rule Name	Rule Type	Common Event	Classification
Pattern 12 : General WMWare Messages	Base Rule	General Operations	Other Operations
XINETD : Process Started	Sub Rule	Process/Service Started	Startup and Shutdown
SSHD : Built Connection	Sub Rule	Connection Built	Network Traffic
SSHD : Administrator Failed Password	Sub Rule	User Logon Failure : Bad Password	Authentication Failure
VMWARE-HOSTD : Redirection	Sub Rule	Redirection	Information
VMWARE-HOSTD : Process Found	Sub Rule	Process Found	Information
VMWARE-HOSTD : Administrator Password Accepted	Sub Rule	Authentication Activity	Authentication Success
VMWARE-HOSTD : Password Accepted	Sub Rule	Authentication Activity	Authentication Success
SSHD : Authentication Failure	Sub Rule	User Logon Failure	Authentication Failure
SSHD : Failed Password	Sub Rule	User Logon Failure	Authentication Failure
SSHD : Multiple Authentication Failures	Sub Rule	User Logon Failure	Authentication Failure