ESXi VM Kill Via ESXCLI — Detection Rule

Detects execution of the "esxcli" command with the "vm" and "kill" flag in order to kill/shutdown a specific VM.

Read the full analysis on IntelFusions