[mcflubbins]

> just look for specific programs using a lot of CPU via their command-line and program name from the hypervisor.

They would have to run this from within the guest, no? I don't like the thought of that.