- Guest Introspection uses a thin agent to intercept file events on the guest. The thin agent is required for Guest Introspection services but not required for Network Introspection Services. The thin agent is installed as part of the Full VMware Tools setup type or under VMCI Driver on the Custom VMware Tools Setup:
In the older ESXi versions, the thin agent driver is called vShield endpoint thin agent or Guest Introspection thin agent. In newer ESXi versions, the name of the driver is NSX File Introspection Driver.