Switch User Command (VMWare vSphere 8.0, formerly ESX/ESXi Server)

Classification

Rule Name	Rule Type	Common Event	Classification
Switch User Command	Base Rule	Authentication Activity	Authentication Success
Switch User To Superuser	Sub Rule	Authentication Activity	Authentication Success
Switch User	Sub Rule	Authentication Activity	Authentication Success
Failed Switch User To Superuser	Sub Rule	User Logon Failure	Authentication Failure
Failed Switch User	Sub Rule	User Logon Failure	Authentication Failure