Suspicious Vsls-Agent Command With AgentExtensionPath Load
Detects Microsoft Visual Studio vsls-agent.exe execution with a suspicious library load using the --agentExtensionPath parameter. This technique can be used to proxy execution of malicious code by abusing a legitimate signed binary.
Sigma
