Local Virtual Machine and Hypervisor Discovery

Shadows VMB@Vemorian_Mort

•updated Sep 1, 2026•4•0•5

Detects the execution of common command-line utilities and tools used to enumerate virtual machines, hypervisors, and cloud instance information. Adversaries may perform this reconnaissance to identify virtualization environments, sandbox targets, or cloud infrastructure configurations.