vCenter is a huge target. VMware docs differ from the the Crowdstrike recommendations, with security vendors saying basically to lock it down to the 9th degree or suffer the consequences.