VMToolsd Suspicious Child Process

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•0•0

Detects suspicious child process creations of VMware Tools process which may indicate persistence setup