ESXi System Clock Manipulation — Detection Rule

This detection identifies a significant change to the system clock on an ESXi host, which may indicate an attempt to manipulate timestamps and evade detection or forensic analysis

Read the full analysis on IntelFusions