ESXi VM Enumeration Using VIM-CMD

Swachchhanda Shrawan Poudel (Nextron Systems)

Detects the use of vim-cmd to list all VMs on an ESXi host, which could be part of reconnaissance or preparation for malicious activities. The command provides information about the VMs, including their names, power states, and other details. This could be used by adversaries to identify potential targets for further exploitation.

2025-05-22 00:00:00

None

b8d0e41c-1634-4d9b-a4a8-f439745fd0c1

attack.discovery attack.t1082 attack.execution attack.t1675

Nextron Sigma feed only (private)