Bulk Enumeration of Installed VS Code/Open VSX Extensions (Extension Recon)
Detects a process rapidly accessing a large number of distinct files within VS Code or Open VSX extension directories in a short time window, consistent with reconnaissance of installed extensions such as that performed by malicious 'evil twin' extensions harvesting developer metadata.
Cortex XDR
