ESXi Collections
ESXi Evidence List
Section titled “ESXi Evidence List”| # | Evidence (click for details) |
Category | Parsed | Sent to the Investigation Hub |
Raw Files Collected |
| 1 | Account Info | System | Yes | Yes | No |
| 2 | Active Connections | Network | Yes | Yes | No |
| 3 | Advanced Configuration | System | Yes | Yes | No |
| 4 | Advanced Settings | System | Yes | Yes | No |
| 5 | CPU Info | System | Yes | Yes | No |
| 6 | CollectInfo | System | Yes | Yes | No |
| 7 | Datastores | DiskFilesystem | Yes | Yes | No |
| 8 | Disk Usage | DiskFilesystem | Yes | Yes | No |
| 9 | Environment Variables | System | Yes | Yes | No |
| 10 | Filesystem Info | DiskFilesystem | Yes | Yes | No |
| 11 | Firewall Ruleset | Network | Yes | Yes | No |
| 12 | Hardware Clock Time | System | Yes | Yes | No |
| 13 | IP Interface Info | Network | Yes | Yes | No |
| 14 | Info | System | Yes | Yes | No |
| 15 | Kernel Info | System | Yes | Yes | No |
| 16 | Module List | System | Yes | Yes | No |
| 17 | Multipathing Info | DiskFilesystem | Yes | Yes | No |
| 18 | NIC List | Network | Yes | Yes | No |
| 19 | Networks | Network | Yes | Yes | No |
| 20 | Open Files | System | Yes | Yes | No |
| 21 | PCI Info | DiskFilesystem | Yes | Yes | No |
| 22 | Permission Info | System | Yes | Yes | No |
| 23 | Processes | System | Yes | Yes | No |
| 24 | Routes | Network | Yes | Yes | No |
| 25 | Routing Table Info | Network | Yes | Yes | No |
| 26 | SCSI Info | DiskFilesystem | Yes | Yes | No |
| 27 | Security Policy Domain | System | Yes | Yes | No |
| 28 | Syslog Config Info | System | Yes | Yes | No |
| 29 | Syslog Logger Info | System | Yes | Yes | No |
| 30 | System | System | Yes | Yes | No |
| 31 | User Info | System | Yes | Yes | No |
| 32 | VIB Info | System | Yes | Yes | No |
| 33 | VmkNicList | Network | Yes | Yes | No |
| 34 | Vswitch Standard Info | Network | Yes | Yes | No |
| 35 | WBEM Info | System | Yes | Yes | No |