MacOS.ParallelsVM.SuspendedMemory

Locates suspended Parallels VMs owned by any user on a macOS system and optionally uploads the virtual memory files to Velociraptor for analysis.