Taoth Vscode Cli Tunnel Creation
Detects the use of the Visual Studio Code (VSCode) command-line interface to create a tunnel. This technique was observed in the TAOTH campaign for post-exploitation persistence and command and control.
YARA-L

Detects the use of the Visual Studio Code (VSCode) command-line interface to create a tunnel. This technique was observed in the TAOTH campaign for post-exploitation persistence and command and control.

Already have an account?