EP.021 - ESXi Administration Command - MITRE ATT&CK
EP.021 covers ESXi Administration Command — Let's explore what ESXi hypervisors are, how enterprises use them, and how adversaries abuse ESXi management interfaces to execute commands against virtual machines below the guest security stack — including a full ransomware deployment kill chain walkthrough, and what defenders can do to limit their exposure.
Part of the Lost Probe MITRE ATT&CK series.
ESXi Admin Command | TA0002 Execution