Security

execInstalledOnly

execInstalledOnly is an ESXi setting that only lets the host run binaries installed through VIB packages, which blocks dropped implants and scripts from executing.

Deep dive

Learn Article

Why Hypervisor Log Retention Must Live Off the Host

Hypervisor log retention fails if logs stay on the host an attacker controls. How to plan off-host storage, retention length and a safe collector.

intermediate 4 min read

Back to glossary