Virtualization and Container Software Execution Monitoring

Vignesh S@vigneshh

•updated yesterday•2•0•2

Detects the execution of processes associated with virtualization platforms, hypervisors, virtual machine management utilities, and containerization technologies on Windows endpoints. The detection identifies executable names related to Microsoft Hyper-V, VMware, Oracle VirtualBox, QEMU, Xen, Parallels, WSL, and container runtimes such as Docker and containerd.