Malware may enumerate the hypervisor of the target machine. This can be for vetting target hosts, anti-analysis, anti-forensics, or payload selection purposes.
hypervisor enumeration
2026-09-25
Recent Posts
Linux Persistence: Modular Software
2025-04-17 DFIR CTF persistence linux persistence apache asterisk
Linux Persistence: Web Shells
2025-04-16 DFIR persistence webshell linux persistence webshell apache nginx PHP
Linux Persistence: Rootkits
2025-04-15 DFIR persistence rootkit LKM linux persistence LKM rootkit LD_PRELOAD kprobe ftrace ld.so hooking