← Back to Explore
T1505.006
vSphere Installation Bundles
Adversaries may abuse vSphere Installation Bundles (VIBs) to establish persistent access to ESXi hypervisors. VIBs are collections of files used for software distribution and virtual system management in VMware environments. Since ESXi uses an in-memory filesystem where changes made to most files are stored in RAM rather than in persistent storage, these modifications are lost after a reboot. However, VIBs can be used to create startup tasks, apply custom firewall rules, or deploy binaries that ...
ESXi
1
Detections
1
Sources
1
Threat Actors
BY SOURCE
1splunk_escu
PROCEDURES (1)
Kernel Monitoring1 detections
Auto-extracted: 1 detections for kernel monitoring