VMware SD-WAN - Orchestrator Audit Event
This rule is searching for configuration changes. Configuration changes can override security measures and the overarching security design. Therefore audit events must be accurately tracked.
Detection logic
Detection requirements
- Log source product
- vmwaresdwan
- Log source service
- sdwan
MITRE ATT&CK mappings
Not mapped to ATT&CK.
No references are available for this detection.
From the source
- At source
- Open at source
- Upstream identifier
- 50c86f92-86b0-4ae3-bb94-698da076ca9e
Licence
- Published under
- MIT LicenseRead the licence
- Attribution
- Required
- Obtained under
- MITRead the origin licence
Authorship
- Published
- Sep 1, 2026
- Version
- 1