ESXi System Information Discovery Via ESXCLI

SigmaHQ Detections@sigmaHQ

•updated May 21, 2025•0•0•0

Detects execution of the "esxcli" command with the "system" flag in order to retrieve information about the different component of the system. Such as accounts, modules, NTP, etc.