Kaba virtual machine heuristic detection method