Renamed Visual Studio Code Tunnel Execution — Detection Rule

Detects renamed Visual Studio Code tunnel execution. Attackers can abuse this functionality to establish a C2 channel

Read the full analysis on IntelFusions