ESXi VM Kill Via ESXCLI

SigmaHQ Detections@sigmaHQ

•updated May 21, 2025•0•0•1

Detects execution of the "esxcli" command with the "vm" and "kill" flag in order to kill/shutdown a specific VM.