Renamed Visual Studio Code Tunnel Execution

SigmaHQ Detections@sigmaHQ

•updated Sep 22, 2025•0•0•0

Detects renamed Visual Studio Code tunnel execution. Attackers can abuse this functionality to establish a C2 channel