DNS Query To Visual Studio Code Tunnels Domain

SigmaHQ Detections@sigmaHQ

•updated Nov 21, 2025•0•0•0

Detects DNS query requests to Visual Studio Code tunnel domains. Attackers can abuse that feature to establish a reverse shell or persistence on a machine.